last executing test programs: 13m54.893954889s ago: executing program 3 (id=116): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x8, 0x3, 0x8000) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000123c25d165544d3e16560cc562ce0a09030000000000000000020000000900020073797a3100000000080004400000000009000100737d7a300000000008000340002000011400210e65d101"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a042, 0x41c23}}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x2004c0d0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="e4e6f59598f2c89b0c00be8e175c864f14f283461938f0c2dfd5c8a2f0b450126b0b31219a484679aa7c0d11be0c988ce47f8c5c35295e274e5793", @ANYRES16=r7, @ANYRES8, @ANYRES64=r3], 0x1e4}, 0x1, 0x0, 0x0, 0x8}, 0x8054) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff020701010009050102"], 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r9 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r9, 0x40045731, &(0x7f0000000300)) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="3289deaf48b37ae85f5515fc89c39eb9dd288f0d86bad98b68631b3b25ba7c579c43b0ac5506a4d3d7d8a3df6f2d1fc2d8d70739dc0b2d6b3aa591a352795cbbfc208cb77262d6b71a3e3d5ddf34adbab6dba3c2852797e1d4bddc2e7386e3d8989d2163c03cb07fe4341ca81c6183073eafcfd688181cfe7b737916", @ANYRES16=r8, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x801}, 0x4000040) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000c40)={0x264, r8, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x168, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xba9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}}}}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x2004c041}, 0x8800) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="0380c2000003bbbbbbbbbbbb08004500003800000004000000000000b902000014bb030490781200183f2500000000680200000100007f000001ac329422e57da0bb4114140e00016337fe9b18039636fdcf6f4d0d3c821cfe8cb6c5664935198b493c320179f1fc61b333ba75e5783be2dd361e434e7132f13395b5d1e79ec3c78a38d47487dc656f0d48b7fc06ea538333f644005ea443"], 0x0) 13m51.749982492s ago: executing program 3 (id=128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001080)="659900c3f7c8e544e1abc41796cae4c9908368acb3abdb908ada84b1c98b91c34352f80ed64e4606a25bcbab94869ac816a7fb9c29a8c768fbffb21ad7f6013ff676da589c2e0865cfd321543070c3dd36bf94deb1d137c220d9c559dd61", 0x5e}], 0x1}}], 0x1, 0x24044015) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) kcmp(r4, r5, 0x1, r6, r2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="baf80c66b8ec75e08c66efbafc0cb80c00eff30f090f06f3e1090f01c90fc72cbad10466ed66b96e09000066b8532cda5a66ba144b183b0f30660fd1f266b9800000c00f326635000800000f30", 0x4d}], 0x1, 0x14, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) syz_emit_vhci(0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 13m50.872434242s ago: executing program 4 (id=131): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x2) sendto(0xffffffffffffffff, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) listen(0xffffffffffffffff, 0x9) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 13m49.960812244s ago: executing program 4 (id=133): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x5492, 0xc000, 0xc, 0x77}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@fallback, 0xffffffffffffffff, 0x31}, 0x20) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xf5, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/4104, 0x440000}], 0x1f77) 13m49.866225488s ago: executing program 4 (id=134): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, 0x0, 0x2, {0x1, 0x1, 0x3}, 0xff}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) close(0x3) r4 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x100) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x3, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x0, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x316, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x3, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x3, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0xb, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51c2, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xfe, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x20000, 0x6c0a, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) read$FUSE(r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x519401, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000009c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[@ANYBLOB="c40000000906010300000000000000000300000150000880100007800c001b400000000000000005100007800c0019400000000000000004100007800c00184000000000000000070c00078005000300ff000000100007800c00168008000140ac1414120900020073797a310000000048000880100007800900122073797a3000000000100007800900120073797a30000000000c00078008000640000001ff0c000780060004404e2400000c000780060004404e2300000900020073797a3000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x401, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x94) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f00000001c0)=0x5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BLKRASET(0xffffffffffffffff, 0x1262, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 13m49.481253874s ago: executing program 4 (id=136): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xc0002009}) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1, @ANYBLOB="570da800a65a0200"], 0x20}}, 0x2000e844) syz_open_dev$tty1(0xc, 0x4, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00', 0x4}, 0x18) 13m49.396735334s ago: executing program 4 (id=138): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xa0, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r4, 0x32dc, 0x0, 0xe, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r6 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000040), 0x0, 0x0, 0x2) fgetxattr(r7, &(0x7f0000000000)=@known='trusted.overlay.impure\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090269000301f81005080b224001052008090410000001012000092401fdff080900470904010000010220000904010101010220000905010940000104443e9394eb880f480009040200000102200009040201010102200067f7620905820900040d8700082501010f041000"], 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r8 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r8, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) read$FUSE(r8, &(0x7f0000002540)={0x2020}, 0xfdef) 13m49.394543299s ago: executing program 3 (id=139): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000340)='\',\x17[*\x00', 0x200080, &(0x7f0000000380)={@align=0x6, {0x7, 0x5, 0x1000, 0x5}}, 0x5, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x4}) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x44}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x5, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x1ff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r5) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0xa00, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$nl_generic(r5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000040000701feffffff00000000027c0000040042800c00018006000600800a030004000280"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) syz_usb_connect(0x1, 0x36, &(0x7f0000000740)=ANY=[@ANYRES64], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 13m46.93904497s ago: executing program 4 (id=143): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x2) sendto(0xffffffffffffffff, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) listen(0xffffffffffffffff, 0x9) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 13m46.226496419s ago: executing program 32 (id=143): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x2) sendto(0xffffffffffffffff, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) listen(0xffffffffffffffff, 0x9) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 13m45.370156852s ago: executing program 3 (id=152): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) read$FUSE(r5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0xf) 13m41.383452552s ago: executing program 3 (id=160): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0xffff, 0x0, 0x0, 0xf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"8604a0a71359a294b7585622d5b25618", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x2, 0x6}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xd72d90ea783d63d2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f00000003c0)="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", &(0x7f0000000500)=""/142, &(0x7f00000005c0)="f77cbb0b6b02942ad3c7bb8f7d292878db81a1dabf46a828a56dc278ab5d1598fe0cf3476a21a5c30dac7ed375b489678055b31658f285fd9b31ff79281484140488dfa3a23715d373b282f3b2bd462e24749c0199d82bda35e27c91478a3b8144b9f321dca26501e5d54f3f890e20", &(0x7f0000000640)="e2caeb9f1800c7afc0b81b8d01c91337da254b1ab1f446471afc0e5eb80faeba62f1ebcc9c8252482a437131297ee204235cdf75232048dcfdfdd7270b63aba562103f7d20692472ad529304716757b0d1e3f1e0abe4cf7018f4b2a7b7bdd4685bd0d35c7fe27eeb378a819a82aa269107847984f000646e9b5cc94f22e6937f72dd6cb0bc526ef27e7ac339528cc9af98df450b220b40a0e28eda8c7d29e9c873526a1da4c9301601c3a469a66657f07e49693326f68e9c2467889b1bd539af68b631fa68b241d08d4c6877ddf71676661f0ff4c60d9e4fd8229f549cd7a16020b58e125f03ea6b72", 0x9}, 0x38) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x6, 0xf, 0x80000006}, 0x0, 0x0) socket(0x10, 0x3, 0x0) 13m40.105794506s ago: executing program 3 (id=163): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="00a00000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001800"/28], 0x48) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa01) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x132}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fcntl$setown(0xffffffffffffffff, 0x8, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0xf, 0x0) mkdir(0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000640)='\xcd\xff\xea\x1f\x02\x00E\x88-\xb0\xbc`(\xe8\x92\xe9\xf9\xd0\x803\x05\x00R\xac\x15\xfb\x8e\x7fx,\x9c\x00\x00\x00\x90\xc7\x11U\xdcd\\\xdc\x1b+\tq\xf4\xbe\x99\xd6\x11;\x9b\xc4\xad\xf73|J\x96\xf4L\xfb\xf2\xba\xe5\xdd0 }\x9bdq\xa9X\xed\xef\xf2\t\xafN\x80\xe2\x14\xbc\xc3Le\xe2p.&\x00\x10N\xe6\xd5\xfb]\xe4\x9a\x83FS\xc4&\xf3T\xa8\x8b\xb5L\xafx\x9cco&?\xb1\x95?z\xd3\xdb.7\xc1\xc8b\xe9|\xaaM\x04+*\x18\x86!:\x7fp\xf1\xacsPxx \xf3\x14w\xb6\x8e\xae\xa3\x11\x02\xd0N\xfcu\xc7\xb0\nr\x95l\xc7\xbc\x0e;\xcb\xfbn\x03\x935\xfb\xf8Z\xd0V-,\xf1\xea\r\xef\xfe_\xee\xb1\xc0\x06\xbegmU_*\xd7\x1f\x00'/219, 0x2) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x3, 0x0) sendmsg$inet(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)='\n', 0x1}], 0x1}, 0x800) sendfile(r4, r5, 0x0, 0x8000fb00) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, 0x0) 13m24.662587983s ago: executing program 33 (id=163): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="00a00000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001800"/28], 0x48) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa01) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x132}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fcntl$setown(0xffffffffffffffff, 0x8, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0xf, 0x0) mkdir(0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000640)='\xcd\xff\xea\x1f\x02\x00E\x88-\xb0\xbc`(\xe8\x92\xe9\xf9\xd0\x803\x05\x00R\xac\x15\xfb\x8e\x7fx,\x9c\x00\x00\x00\x90\xc7\x11U\xdcd\\\xdc\x1b+\tq\xf4\xbe\x99\xd6\x11;\x9b\xc4\xad\xf73|J\x96\xf4L\xfb\xf2\xba\xe5\xdd0 }\x9bdq\xa9X\xed\xef\xf2\t\xafN\x80\xe2\x14\xbc\xc3Le\xe2p.&\x00\x10N\xe6\xd5\xfb]\xe4\x9a\x83FS\xc4&\xf3T\xa8\x8b\xb5L\xafx\x9cco&?\xb1\x95?z\xd3\xdb.7\xc1\xc8b\xe9|\xaaM\x04+*\x18\x86!:\x7fp\xf1\xacsPxx \xf3\x14w\xb6\x8e\xae\xa3\x11\x02\xd0N\xfcu\xc7\xb0\nr\x95l\xc7\xbc\x0e;\xcb\xfbn\x03\x935\xfb\xf8Z\xd0V-,\xf1\xea\r\xef\xfe_\xee\xb1\xc0\x06\xbegmU_*\xd7\x1f\x00'/219, 0x2) pwritev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x3, 0x0) sendmsg$inet(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)='\n', 0x1}], 0x1}, 0x800) sendfile(r4, r5, 0x0, 0x8000fb00) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, 0x0) 1m13.168558695s ago: executing program 6 (id=2580): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x32}, 0x94) (async) socket$rxrpc(0x21, 0x2, 0x2) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)=@multiplanar_userptr={0x0, 0x8, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, "dd4291c0"}, 0x20000, 0x2, {0x0}}) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x10) (async) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) r7 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001f000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m11.649647876s ago: executing program 6 (id=2582): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x101800, 0x0, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) process_vm_writev(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RREADLINK(r6, &(0x7f0000000340)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000ab3000/0x400000)=nil) move_pages(r3, 0x2, &(0x7f0000000040)=[&(0x7f000047e000/0x1000)=nil, &(0x7f0000b1a000/0x2000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0], 0x2) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x4e20, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000100)=r1) preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x5b, 0x100) 1m10.709923724s ago: executing program 6 (id=2585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x47d, 0x2041, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0xac, 0x2, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x529}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x2, 0xf}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x2, 0x80, 0x9}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x5, 0x7f, 0xb, 0x20, 0x9}, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x0, 0x7, 0x8}]}, 0x6, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2832}}, {0x65, &(0x7f0000000580)=@string={0x65, 0x3, "f86607cb1dfe95ac3dde6c7a0347af98fae279bb5be06ad99d082364340eff6faa246ce27d3d5d34e5bb3ab3cbc9c427d214e3533a0cf3256e8d5baa7e51ef9d4a6e4fe498335eb7e0714e84100442647527d671daf35730caa2bb0a5568dea03fd1b3"}}, {0xc2, &(0x7f0000000600)=@string={0xc2, 0x3, "9cad4859d121ba3e3e441d6c3e61e5e40895fd9daab9784738ddedebd32fe6fb24b700e0382bc65f8cc2325c125b08ec9ab781ab82783024d53051f71bbd9b8f762151e10b21623d803fdd687332935334edad92b7e3ab347ca9988d61e1d35f1a53d5b1568905c19a7dd2fe9f8bc6d5766ab6974c9724436dabe0a4a0f43939a6ee715b5c7f066782918bbb4e26871e139dbdaa95660d82f9658fd3c28097663185a3c40339d943403519c2205247165a444fe0017654814cf806e105984bcd"}}, {0xd3, &(0x7f0000000700)=@string={0xd3, 0x3, "806da2bd1dc0af017fc59cf06f431369f6eb42808092d1eb3470eff36b0d8464a3c32feba9c35444b9261275652785c7ec97b2b3e97f1a47faa9364519df41890020ebb7e7fd0d8297517ec946effa4d6200e3f0f52422dc745b3d823f9af23c7f44b1d103fb052d57d96d8cb8b78597ad6051b9f92ae972c2d2b2754cd6a85058ac0473f83d0b6ff0f4637f03818e4328cb1ef950ef1c8b76b1a17dbcda42f780b66f7be0b20d58efda6d0898159f25368b4bd363e918d00d1946cf08c76b4ea43a1c730e62812f086b89d8196390ce33"}}, {0xac, &(0x7f0000000800)=@string={0xac, 0x3, "082c56bab10e30f05b03ff237b635ec174cc845ba99b036251994230941a3bec99ad33fcff04e51cc783eb572b9efb4b47ff701373e5e9d71604e11a139f18a896977b55774d49fded4ab67933d881a785d4bc2a5d28192ae84bfa0fbb95f274e053da6564f0e2e02bcc768491952ca5dafab1d4473e687e134f886fcb0f24c97a4be0cc363904f9bac3128ad3f7d3485f2ecf9ac9cbddea19432b1c8e1f21e793388c0ebadedb3dc889"}}]}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000040), 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x8000, 0x101, 0x3, 0x18000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0xa}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1f, &(0x7f0000000340)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1763cb27}}, @map_fd={0x18, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @exit, @btf_id={0x18, 0xd, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xba}, @jmp={0x5, 0x1, 0x5, 0xb, 0x7, 0xfffffffffffffff4, 0x4}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) pipe(&(0x7f0000000000)) splice(r6, 0x0, r2, 0x0, 0xf38, 0x9) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r8, 0x11, 0x66, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1m6.94738993s ago: executing program 6 (id=2598): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) chroot(&(0x7f0000001140)='./file0\x00') (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') (async) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000003940)=[{{&(0x7f0000000000)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000180)=""/100, 0x64}, {&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f0000000480)=""/25, 0x19}, {&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/166, 0xa6}], 0x7}, 0x8}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000780)=""/214, 0xd6}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x2}, 0x7}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000018c0)=""/55, 0x37}, {&(0x7f0000001900)=""/212, 0xd4}], 0xffffffffffffca8}, 0x9}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000001a40)=""/164, 0xa4}, {&(0x7f0000001b00)=""/80, 0x50}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/244, 0xf4}], 0x4, &(0x7f0000003580)=""/190, 0xbe}, 0xffffffff}, {{&(0x7f0000003640)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000003800)=[{&(0x7f00000036c0)=""/175, 0xaf}, {&(0x7f0000001b80)=""/107, 0x6b}], 0x2, &(0x7f0000003840)=""/247, 0xf7}, 0x2}], 0x5, 0x10080, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom0\x00', 0x2, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x1000, 0x800000000000000) (async) splice(r4, 0x0, r8, 0x0, 0x80, 0x8) write$tun(r5, &(0x7f00000033c0)=ANY=[], 0x107c) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x8, 0x1, 0xc, 0xa51f, 0x4, r0}) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000600)={r9, 0x0, 0xffffffff}) (async) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) 1m6.434282368s ago: executing program 6 (id=2600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x2, 0x1, 0x416a, 0x10001, r1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x17, 0x0, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000891}, 0x4006804) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x4d0, 0x0, 0x5}]}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x47f, 0x0, 0x2}]}) 1m4.265512004s ago: executing program 6 (id=2608): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000000080)={0x58, 0x0, r1, [{0x1400000000000007, 0x0, 0x8, 0x0, '@-/\\&\r\x80-'}, {0x0, 0x0, 0xa, 0x0, '/>\rv/cuse\x00'}]}, 0x58) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80000001900010027b970000008000000000000000000000000000000000000fe8000000000000000000000000000bbb62f92f632437e8e0200000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000200000000000000000000000000000000000000000000000014000000d8090000000000000000000000000000000000000000000001"], 0xb8}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) (async) write$FUSE_DIRENT(r0, &(0x7f0000000080)={0x58, 0x0, r1, [{0x1400000000000007, 0x0, 0x8, 0x0, '@-/\\&\r\x80-'}, {0x0, 0x0, 0xa, 0x0, '/>\rv/cuse\x00'}]}, 0x58) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80000001900010027b970000008000000000000000000000000000000000000fe8000000000000000000000000000bbb62f92f632437e8e0200000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000200000000000000000000000000000000000000000000000014000000d8090000000000000000000000000000000000000000000001"], 0xb8}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) (async) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 1m3.738048487s ago: executing program 34 (id=2608): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000000080)={0x58, 0x0, r1, [{0x1400000000000007, 0x0, 0x8, 0x0, '@-/\\&\r\x80-'}, {0x0, 0x0, 0xa, 0x0, '/>\rv/cuse\x00'}]}, 0x58) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80000001900010027b970000008000000000000000000000000000000000000fe8000000000000000000000000000bbb62f92f632437e8e0200000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000200000000000000000000000000000000000000000000000014000000d8090000000000000000000000000000000000000000000001"], 0xb8}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) (async) write$FUSE_DIRENT(r0, &(0x7f0000000080)={0x58, 0x0, r1, [{0x1400000000000007, 0x0, 0x8, 0x0, '@-/\\&\r\x80-'}, {0x0, 0x0, 0xa, 0x0, '/>\rv/cuse\x00'}]}, 0x58) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80000001900010027b970000008000000000000000000000000000000000000fe8000000000000000000000000000bbb62f92f632437e8e0200000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000200000000000000000000000000000000000000000000000014000000d8090000000000000000000000000000000000000000000001"], 0xb8}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) (async) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 13.40230484s ago: executing program 2 (id=2739): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000780)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x41}, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r6 = dup(r5) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, 0x2, @in=@empty, 0x3504, 0x4, 0x3, 0x0, 0x0, 0xfffffffe, 0x20000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b03, 0x0) 13.241069151s ago: executing program 1 (id=2740): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x527901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000500), 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0xffffffff9673e35d]}}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r9, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000380)={0x1f00, 0x1, &(0x7f0000000440)=[r9], &(0x7f0000000200), &(0x7f00000000c0)=[r10], &(0x7f0000000040), 0x0, 0x300}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x19, 0x4) r11 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000280)={0x0, &(0x7f0000000140)=[@nested_vmlaunch={0x12f, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0x633}}, @cpuid={0x64, 0x18, {0x0, 0x75f8e3b2}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x80, 0x3, 0x9}}], 0x88}) ioctl$KVM_RUN(r11, 0xae80, 0x0) 12.685098536s ago: executing program 5 (id=2741): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)=r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x3, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mkdir(&(0x7f00000020c0)='./file0\x00', 0x12) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file2\x00', 0x0, 0xe34a9, &(0x7f0000000140)=ANY=[@ANYBLOB='usrquota_inode_hardlimit=', @ANYRESOCT]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000280)=0xf, 0x4) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$dmmidi(0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0245720, &(0x7f0000000040)={0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2041, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000040)='./file2\x00', 0x1, 0x104) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000014c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r7, @ANYBLOB="010000000000fcdbdf250104000008000100000000000400048008000c00000300000000001c00078008000500000000000800000500000000080005000000000024000780080005000000000008000500000000000800050000000000080005000000000004000780800007800800060000000000080005000000000008000000000000000000"], 0x150}}, 0x4001) syz_open_dev$MSR(&(0x7f0000000180), 0x200, 0x0) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000, 0x40000000}], 0x0) 12.026393854s ago: executing program 1 (id=2743): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140001007465616d300000000000000000000000080007"], 0xd8}, 0x1, 0x0, 0x0, 0x4008005}, 0x8d4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x9, 0x400, 0x2, 0x7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_ENABLE(0x1e, r3, 0x1, 0x5001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x9d) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa84000001"], 0x0) 10.422065187s ago: executing program 7 (id=2745): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) fsmount(r0, 0x0, 0x1) (async, rerun: 64) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10005, 0x5, r1}) (rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xd, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r4 = open(0x0, 0x84242, 0x1df2a23c5997fa5f) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @private2}, 0x1c) (async, rerun: 32) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r7, 0x108000) (async) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) (async) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@empty, @dev={0xac, 0x14, 0x14, 0x2d}}, 0xc) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/137, 0x0) 9.335000584s ago: executing program 7 (id=2746): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000000002058041150000000020001090224000100000000090400000503000000092100000001229703090581038c7fff327b5fba683fb38b28ae808d02c36e7bf0cba3f15e234d249187730fc8741d37b54a7545446a222676dab8a813bc7ce8a2f57c82a7c8443c070cfcbbc3"], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000002c0)={0x2b, 0xe, 0x2, 0xa, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, @empty, @loopback, @remote, @mcast1]}, 0x78) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0xfffffde5, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x6597ff2602cb09ce}, 0x24000800) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, 0x0) 9.315873699s ago: executing program 5 (id=2747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000100)=""/2, &(0x7f0000000140)=0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/64, 0x40}, {0x0}], 0x2, 0x9, 0x1) 9.188847946s ago: executing program 2 (id=2748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'veth1_to_team\x00', 0x10}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}}, 0x24040084) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32=0xffffffffffffffff, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r6, &(0x7f00000000c0)=0xa7, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r3, @ANYRES64=r2, @ANYBLOB="77cb792ae6f4063325c9c9d75ae1566d6b49aab980f85f7cff2668162f1f1b48b1a1da787a0ba4896aa433d59a1935d46e45301e429d4430d82ce528092567571047a8e10563f9b12e79b4e5e8714013033472623c019eb2e26ec7fb3ef0a47ae1e30c067b103199e8c343860aca53d059c6a77c44c6160efbbdc69ee4ab90fdc3d5f5e02053a3ac8a0d996b3addc8d418032bb4b7ed548af56150fb94ab4f8882ac29fe20e601127b1cc2ee1e4137f4881c71cc06fc7b43e895276613d7d7c05d1fd5738f8d6f339506cf920f9d14e58d2ec0beb7eb9e99d0b077", @ANYRES64, @ANYRES8=r5], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x38a9, 0x8, 0xffffffb9, 0xb111, {{0x57, 0x4, 0x2, 0x8, 0x15c, 0x64, 0x0, 0x4f, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0xdf, 0x3, 0x7, [{@remote}, {@rand_addr=0x64010102, 0x5}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0x2}]}, @ssrr={0x89, 0xb, 0xc9, [@empty, @broadcast]}, @cipso={0x86, 0x68, 0x3, [{0x2, 0xc, "20f779d630e04f69ebef"}, {0x2, 0x8, "364829bfc26c"}, {0x1, 0xc, "0d06a64426273fa1cd80"}, {0x5, 0x4, "0b8a"}, {0x6, 0xc, "1006522d5c0eaae0a8ee"}, {0x6, 0x10, "c08c02000000000400006b40f9ce"}, {0x0, 0x12, "7f628b6fdb2c58467b70b86c20775e4c"}, {0x1, 0x10, "83520cdb9ae9946a91853f606d8f"}]}, @rr={0x7, 0x23, 0xbb, [@rand_addr=0x64010102, @local, @empty, @loopback, @private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x40}, @empty]}, @generic={0x44, 0x5, "d9f0d5"}, @generic={0x86, 0x5, "a2e1b4"}, @noop, @timestamp_prespec={0x44, 0x3c, 0x6a, 0x3, 0x0, [{@loopback, 0x1ff}, {@multicast1, 0x8}, {@remote, 0x8000}, {@remote, 0x4}, {@empty, 0x10000}, {@multicast1, 0x30000}, {@rand_addr=0x64010101}]}, @cipso={0x86, 0x6}, @generic={0x44, 0x8, "b40f4d6068f6"}, @rr={0x7, 0x1b, 0x73, [@loopback, @loopback, @rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x3e}]}, @lsrr={0x83, 0x1b, 0x54, [@remote, @private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) socket(0x28, 0x3, 0x3a) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) 8.841830341s ago: executing program 5 (id=2749): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000240)={r4, 0xfffa}, &(0x7f0000000300)=0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r7, 0x9, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0xffffffff, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x403}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffe, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f00000000000000000000006a3f7860d3ee6eb4b2c5f9c5d04b88356fa0a922c422cc23ac16635b1024517a42fc1dd3ece66beee92cf5132e4b382ddcd6244bcc7ba5f912ac24968ee3031f62673a49be5669c781fc1c8cd4a7ad3bed45bcfcc321b4d085566dfb44", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r2, r5, 0x25, 0x11, @val=@tcx={@void, @value=r2, @void, @void, r8}}, 0x1c) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 8.41689681s ago: executing program 1 (id=2750): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(0x0, 0x0, 0x2, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x3, 0x1) fstat(r3, &(0x7f0000000300)) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x6, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x4, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x20001, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0x2, 0x3, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0xb, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0xb, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0xa, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x1, 0x52c, 0x4, 0x10001, 0xfffffffa, 0x2, 0x5, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x5000, 0x1], [0x28, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x4, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x1, 0x9, 0x1, 0xc, 0xffff6f9e, 0x7ff, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0xffffffff, 0x4, 0xffffff00, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x4, 0x7fffffff, 0xd, 0x40, 0x3, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0xc880}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, '\x00', 0xd}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x80}, {}, {}, {0x20}, {0x9}, {0xb}, {0x3}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x43}]}}) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000080)) 7.25188575s ago: executing program 1 (id=2752): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f0000003b80)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) gettid() r3 = gettid() ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) process_vm_readv(r3, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$can_raw(0xffffffffffffffff, &(0x7f0000000200), 0x10) 6.410421789s ago: executing program 5 (id=2753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000100)=""/2, &(0x7f0000000140)=0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) writev(r2, &(0x7f0000000400)=[{&(0x7f00000001c0)}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier') 5.87279004s ago: executing program 7 (id=2755): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) geteuid() r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 5.805738644s ago: executing program 2 (id=2756): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$isdn(0x22, 0x2, 0x10) r2 = socket$isdn(0x22, 0x2, 0x26) r3 = dup3(r2, r1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x280240, 0x1d5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280), 0x111, 0x1}}, 0x2) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@local, @in=@local, 0x4e1e, 0x3, 0x4e1e, 0x0, 0x565e196a2b5cf539, 0x20, 0x20, 0x33}, {0x6, 0x1, 0x400006, 0x8, 0xffff, 0x8, 0xfffffffd, 0x7}, {0x80000000, 0x8000000000000001, 0x1ff, 0x6}, 0x1000, 0x6e6bbd, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0xff}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3504, 0x1, 0x0, 0x8, 0x9d, 0x9, 0xc1}}, 0xe8) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x40050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000002b40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a60010000090a01020000000000000000070000050c000b400000000000000002c4000d40a0cd47c963b1343ca959417173676dd1aba9e391ad90a24deb4099798002760a9e425cb2a49043fa8a80b321b8a2d39e22194ccb450b2cd1536dfd8e77fffbaecd745102c87dcf37948c24e4440112f51461400eab369bc2d527791fe49b6c96cc51236834479960b72ffcc8b086e3dec2156b3a044f363eb81d9b8c7c7a2b7c650bd26fa50fa9acf639a55cd0fe2a04b7d1143931a95817cb16d253e8457b564ac1d750471ca07d39ef83623b607e58c50122032e8224b8f94f9d0ea857a4af08000c40000000065c0012804800018008000100666962003c0002800800024000000001080002400000000208000240000000020800034000000000080003400000002608000140000000090800034000000008100001800a00010072616e6765000000080004400000000008000640ffffff0008000640ffffff0054010000050a030000000000000000000a0000051f000c00d912f0af915cad0e8b947bd92e652eb0d8eb928a965c71fd73b67900600004800800014000000003080002400000800008000140000000000800014000000004140003006361696630000000000000000000000008000240588238ea0800024022c55de608000240256a0423080002403993abe6080002400dadae5c98000c003681352af38e9d5469c97aa5e0cda2e69a980bdaf2acfed89cd9a3c255052a2fa363290b7dc1582cad0f916ad87421a1855c0c009bbaba851c41256b4dcd0eea45eabaae9cae8d91d402d1983cd8d296c4fcdf19bfe8669eaef93cd3bd1077a5d08592935d4a5a06d4e3b9dc174430b73151043cc2bc7c512c7ca328e810f5d0eda85ee5af67c4528a29125f241829d7d78bd3f608000540ffffff1f2d000700726f75746500000008000b40000000040900010073797a310000000020000000120a01010000000000000000000000010900020073797a32000000001c000000090a01020000000000000000000000060800064000000000001f00000e0a030000000000000000001f0000070900020073797a31000000000900010073797a3000000000300a0380500200800c00044000000000000000060800034000000002d400064081dc3ff7a4df5c2c4db4a185c703f378ba39e08a2524fe18aeed5bbba1432a6e7be81cd914810bd520ec414bc3808cdc5df32efa643c33842c6ec80e9354ea44049220d7139306689840a47b944a3a533e2bc6c54712b518b08804be090195e3868d844daf810779e4ec6fb341fea2a189c6a7b496e380f86ea2e2426a14f528f65d1975db8296ccf9ad28cd82e424db79b659221ace97c82e1b84408ed2952dd24b93b91726163de8d6486244eb6b193b79a76f00bbbf863bc2d2debd39ade51d7f09e7ac903948fed2c4305b4cb98654010b80380001800a00010071756f7461000000280002800c00014000000000000000040c00044000000000000000090c0001400000000000000003380001800e000100696d6d656469617465000000240002801800028014000280080003400000000108000340000000010800014000000017280001800e000100627974656f7264657200000014000280080001400000000908000540000000ba340001800a00010072656469720000002400028008000140000000150800024000000009080002400000001008000140000000140c0001800800010066696200140001800c0001006e6f747261636b00040002801c0001800c0001007061796c6f6164000c00028008000340000000001c0001800900010068617368000000000c0002800800034000000016100001800b00010074617267657400001c0001800a00010072656469720000000c000280080001400000001108000340000000020800034000000000a80000809c0002805c00028008000340000000010900020073797a320000000008000340000000010900020073797a300000000008000180fffffffc080003400000000108000180ffffffff08000180fffffffe08000340000000020800034000000003100002800900020073797a32000000002c0002800900020073797a30000000000900020073797a310000000008000180fffffffe0800034000000001080003400000000114000080100007800c000100636f756e74657200800400800c000540000000000000296fe40202800e0001008192aa904e96cd4043780000440002800900020073797a310000000008000180fffffffc0900020073797a30000000000900020073797a310000000008000340000000020900020073797a32000000001c00028008000180fffffffc08000180fffffffe080003400000000b02010100bf36a99cceed9960d18f0f98404b272c3c995439fbe8d14ffd42266f7e75f19ef751b0c2e377f17d898fcf73754ca6208fa20767456585a69fbd673cc49cb697e4389b59788a9727a45ae2afabcb89b53ff2c2f91cbd920e38ed43f2d242ef8e88cfed936827fb8d554cc2c77241e202dd4cdf7cf544e1ecd38f2f105407821423ce3ef0432301b7c8cd9ab06eab368067e37180288b6024baf79d96d01d0627b868516a10cf13edf239c1df6c6cfd6758480d4aa58bcd007e7f93c028ec3f65f4d2ecf034880686752ed8aa6dc57a43e2010a5dc692025791b1b3cac444bc9ae9582de790a95e29b724364d829eb1ceba4c9e11e5d8267094de259b51240000810001001dbfca79d4683b259f6b9e15219edfdcfb08077df15750cd42a2096dc023d823e16d12a784f51f6c1037410f66e311e7d2e6d2cb4d7f9bd06dffa04aa99017fed892d889e856989226ca3f484a9e251190080bddda27e7040574107a44b81d7101d17d207ac6b7de7ab25e803c12a12d5d54cd7a7233305c9eea55da650000000c00028008000180fffffffc380002800900020073797a300000000008000340000000010900020073797a32000000000900020073797a300000000008000180fffffffba1000100d531f57b02c9a99f131e50500853e312ab52bc644c6e2241907fd7b7be5aebe43d9026de47e4f9d96f31ee09f57f6f51be63d3b1e7ae0c9ef0e75b11a0837f408d0d158b36bc504cf62e607ca666b30d0bb14e9b5528dc78ee01b137358d7b44ce932a554d8f1363fd92f808d35aa97fb0d6bc47517f3a554d5af47dcbe98a4bfef9a98a322eb0e34942e33ceb5aae98cb7baf6237788661961cc4d6320000000900090073797a3000000000600107800c0001006269747769736500500102800800014000000000140104801800028008000180fffffffb0900020073797a32000000000e00010042a6a5a8440ae57d6d0600008a0001006b864a588fd8b5ce639cd877265694a9533761628a1631cd974a0c097405bb24b29c8309d7b75e0ea2a07220e15f4db435654872d87ddf15891b0963323cdbe31223ff5a3f78703c6132d3a3d96f87278595ab3c5d5faec86b5997bd4f2daf760ce78f81d9d9a0165e0800b76eff92bc4020f97913f38f055d979bba2e7c24e646ce339e8e000000180002800900020073797a3200000000080001800000000741000100dd0452a7830ec09881975b58ec7a4ef52f1b09ac8038d3331da0fd3ff11f52dfb4dc8f4f07077a0a9dc68b39ea9d5ed036fc05a75a35bdb801cb599a6100000008000140000000040800064000000002080001406b182ccb0800024000000016080002400000000f0800034000000002140006405beaeb094bde87948082dc90173667570900090073797a3100000000a00200800c010280e70001007eca23a63c5cfb40256acffc412bd440b39d4ec1029228e010dd1d960c2e3833ffb8b73c8e40869c5a27d3d0b857178dac2057eed2aed77130927215747cdd9d2e197ce7ebc282603791998a98eafd238b8b4741da4812a98ff9e4151aa08993080050afcd1a79cfb5cac11d260227eed9c84f99efa5d626c39bceae0cce17a839707d56acc270608e448482b8f5261b690e5390eb111cca4bd50d35f3131b4c4d9bf0c83ed05f51d9e69374491cd9d5b7bc47b052525503f06f7bb7d1a0c22c9c8226b8e457d2c8b8a220c276dcc215160cb130b5bf76d9a8ed7beacfdd9755168ee8001f0001007bb9a96a77bf19f3dd04621efe03f722b813e48387bd29e1463474007801018014000280080003400000000208000180fffffffe3400028008000180fffffffe0900020073797a32000000000900020073797a310000000008000340000000010800034000000003100002800900020073797a3000000000100002800900020073797a3200000000d40001003a2f25a42072794e51fe62980dfffbcaefdc9d5942f6ffa23d4ce2c90708ee379367e39547c2ff5d1c06d00c378428e756a75c772311b93f21e3d331dd49a9bcd81e3a1165db8d43ac6b0e5f15c29e346bae245bafed2a57b23df59a4c03f9d563c489f01312298d3d7b91b242c190d80b9cebbfc0c0b6cee167f5c08dbf04c67d54b38b427608c734b3e6c5e578fea4962cd37d840305d92e06b0b28bce97a474792fff8179ff3ff50cb6eda0ec66b91b0b283b3083d6f123c3bc6551fa52d9e4a1a957cac0633c3496197d5749ea892400028008000180fffffffe0900020073797a31000000000900020073797a320000000014000280080003400000000408000180fffffffe0c00054000000000000000000c0004407fffffffffffffff0900020073797a300000000084140380c01300800c000540000000000000361cfc0002800c00028008000180ffffffffeb0001000f0d0eddcaad2b140c255c524cd2034f2b0564214cadbbbe2c2f3b6eea356f4182b21419317a8d8e89f1da2099ff9238fde129d2c7aef8e85e0431f1664f206e78b6e6d137f0bb86ab9fdccf125361e87e56915515d0a4af04b5d84f7e7cc048c6a0ddda90eb4d6104dd239b94e3f5e7d0223b2bdb78326fd1f7bf2e72bd2cebb20c46ec082f74ec1a10702c81d21d9427a857b852c37f8cd4a1aa59a45e1c36ef8db13f7128f537b4a24c3d37369ac491680229466c097397f3ab9118a3fa72e04b5acf2660826ca7763197136e866ae3ec0141f55f4d9865baa5155f2858ccdcd3afb27898cf000900090073797a310000000008000340000000020c00054000000000000003ff7c120a809c0001006cfc797a35b120684861870c162e55f69682727623c2a554b620af46c9bd28fa2b4a888fb237815552661343949677286d877c94dafafd3f46d897ba306d87eb8898c3c7437f31f507b40b2198d0545cb5ee4c64c7c40c993ec12430b971a3ea44fda2d86f36f1f88f1786869965feb3875f1ed408f9faaf79a76d2a753062d0caca5d7cedab68da2854fdef02ac1fd7ed80355d5f0a307009000100d246408678000000041001004622da80054c46c0b667351c3d90a8f736fd5aa960feadc69d41de2af6b73c7d93e3c5d366f9501639bcc5502a462835d80edda4e24f438878ecad6ebe0251fba44d2f72c195d1c7b9c829a3d116e87608bce84b82cbd12eda3f950e6a87d2fb4f0ec5b79de7895a3d3ed04d554f71771f34056e947180d6afce2d27726d52a3bfd64d6d1643c01e42faf6a14d450fa4b00ae4df4a75d7909260759e9e9a9acb7c5a50b32a73100a71d9aad7518d0ebfb5e01f2dbe2ca7a987f19c90cd282de6eb7de35de9ad11d5796de35a214b0b2a09a4140f8a3f1e4c86f156d1e923060000000000000053371aebccf4a4913912180f849ba289efea40e11edcb59b85865c10e88c1ade21c4bd46c1a34116cff8cb9383df5e29e7dba3ab4e063e79bc8470696c2ca11f2d1f84ca2c90373ca344ad08d0e0e3d625d2e85650ecf882ff7bf8579ab2458ca9e7e694229dfc6f42c3239985e3140dd209fd548dbb0cd4402fe21230803f2d5dead1d5b27559c456f95cd17b6c2dcf7f9dc9c3a9b33a569066d76ccd6b283987dffe079a09fb221fcb3c8f4f9d2a6074a73a03870c249d79cc42a22684adfce0de8d931e5c9abf2c5ea0d4bc22d5c2e00c83eb0e5cf7bad67047c2f74e83b4c2291bfe145e3521df4e953146a185e3d85c5d08201bdb769d713e4d38aa87b3aca5c91acc51ce2969a40ee2cfc31065eaecfae22f4b269999ee1d3aa854f0fe3edd37a5a9e2e84fd947aa8cca5a2f05221f6795b6f7943aa5e77e512de8de12b147f977b34700eef263f19bde9d8e72eaf87d01b8d7f91264f8429c0a7c00bbc4a50745b65b1c690e6bb480bca0848bcd3060c3355c92634f88e6fe1a8a305bce88703370ca4cb4cb762c3cbc907eecf4fb2bb0ffa82c9642e9dc21a4e2667ee5b85a8e14d4f9628c6975b510b0bb6cc1ffcbac75590c4d1dc4196b011032fb272e7064a759220c1382882aeda84f7f2aba1e23a288e46dbb7b6d668b590a5e1d1e4b543863ab6932f5a54d308cbf038a72f8482687cc87c59e25e39f5de445021a5653a96d61eb1b4e7b222d831f5f443f063fb96aeb68f4e5ff5e96fa37206f5bc5a5b981d935594ecf3d68668097a7c6cfd336760b1636c5c48eeab30740da9b8c4aefd8439f65af8b9261b828fc5e37394f499d6acd641a03472457ffe2a905e449f65c6832247d08c738ac06f0a5048725226cf7a2ef6b7c9d0dd77ea6508a7721667672615b1b1c6ade79b418367134be3aae4408383cdf99685db0ab0b78c5574137e5d0dbeff1ac0288b98b50ce0faa7a0c56f8de84c01067563c6553a893ed4971c94e11415d9e4f161e04042482fd1fb32d633bf694b9aa2cd6ad69fc90d098fc4d3a66174ce8d2b92989fce6e1f50773ba3cd00a6273b859c547e38979935222a9ec53012e7481c9bd59ed3c1ede5fcd0adab75df0a2a7da7f003ed1d2249c532a18c795babb816bbc172df346d301b13cafa5a110c68beb1a43c1c2c4e4316b98ea64cbf70a2f6f97e09c37a4ad66cb4fe011a3fcc43de86bd4a2285205a117c7d47273fcd30a35bde9cea4e714951cf6022142b7b01b28ab44ceddaa30070abcd1e99af847f73cdca0c6b7202d19fbb11848da6d4952bc8b655f30e9e8063a9c376c2ad7be37f7d09ba388797e2e3a494ac91e8cfc2903447d315714c5069776656493057db0ece10a95b46bc84adbd419d7f74078297f72ec8d7558f2c86b67f9d96832504a2819caa895ac8f79c5928f244339f1ca38370f425674f5c901d646a545bf732374c58746ae35efec5f70c7b06c6d2f84b3c5e4875da0c53782da1e5c4088de4af75aa9bb5cf474ac80c0e59334fb46158bcada3678477f37ad1b6fa54bee41524befa5b5b90bea6bfef35d8989af976714b499fbf38a4e1ac7b66b2e8dc62a475d48af13a9670b708c80bbba71d292cd41552d44934aa1966e515050f07f1f179cc0520a9db0e0a71221f296ad28e2faff7db63c530210065c9a16c7d46dcf017ab9ea9d99803386710801517072fb1636d979a188d270da976d6ec7d1e5c4a92ff3e981b97c3632fd3965d1e13012542e9232940cd6d23fbc3d3034f3611ef2dd97a95ec13492a10c74a035b9019baefad424426eedeec75e966e7e16f03c7983c488dd5201ef0220fab4ca665526c960d91930da9c7f60b6ae81080e0abc46a2b8ca09095ac07965e51514f1fa320b20a4c4a54b2c8d70f9bb27fce01ccdff3e15c6c0176e4ff2f1e9eb7908bea79a1892d22f2f4c5e0d15ea465eb7fe3061256da2d61ad1e91c25a26ec91f2f6d05c75d8681e5cd045f9aa44750742c53fd8a5983218b674c52d21ef7f161b60b0b31df8115cf81e24c3ffc86be8eb8585192df1aede00068db553dacb9c498aab86d4f5c12ef9e214a4d457a754e437d30d320a81e889c678cd0998eb17e8101ec5474c1c72ce98441eece22ffc928284f30cf59e9b53aefcdf0d5850ba23db4db7d42f7d947aa3acd3e44e1cb0c7738927e9678adbced1c2810a85f8d0a12193fbd00f5dff218078678865f47d0e30612ab6a6ecd9ca3e65b35cf85794886333cb98e453f62fc222be05ebf7d4741445b24eb4d5952dba5530388df6a36d1e706374e581c350d3751c8378f31397be21b60a0d881651f39bd7ddc9ab3cbe782e4260af4ff77df096cf644ffaf51fd7a645f7018e2765a7a842080387b4bba42dfc7648ffc680b9ff96e42c443e0a20856fbd7953b20baede03f9c85106d261f6c062cdb0d782f1a3092c16c3980efe007001d62057afb0faeca08ffeb47e011bf8601653c682932d6de21ea7e319e989eada77e5e770c909762e065d027ab2327cce70bacebc5414c68069d5978713e2f9567e0905a7a30abd53f96513d088d6f6cf73700802cc7b3957e6f3073cebc4932a782af5c284a04c0dd574078e33834a5ddff7ba46ee2a398660379db677911d462ed0773f49d2f9f8194787fe2f03f30482ebc4740a204e97207f55a724b6bcbc02caa1e2410584b7d02f586604542f579d0b21ee47fef6bfee5a8bd882d259cf114fe5a37586e520b59f0a984089a092316630f03cb7440477c199819ba81f58e24a76ab7fe90e359bccc02873d20e8ce06c5887ec702ca86fb3d0e9e8744d9a902f5df624b40d3018a8b68eef4a764869e48d37e5ba953125974189bde9c180922f0a4b57c05f4d6124b343caaca7e2fbd4de05a58d093e89ef3887ffdb507e6d5ecac54a0978914c062f22229ac7ef27ad02f7bc57df150b5e495bb38618f1516c09ce7b9984d2330eeb274bb11bdf46eaf99e16a38d2e3dd2068a0326804fec7b4b5933bd3781e71a6b69043f654cb3c34b1aec2db73814da0f0b8756ed5a8f6eaa96369b2ac49ff110874b1096cc19f1ec325ab88deabc4d3d98d73f0ad63476d56043fb5bef0782d2ff1c4e6b4e23076fa7c6339cd1189a032eee02c86577d693eb557cffd1fb2b3eb7f20f2cf4eab5ab4a209c7c8728af547e4a39dc0c04f6be4c23c44df6539c7249082ae4fcea87ad5e8ce4284d2b1dc89e25253187c6914a34e037b298b8da52e5b7aa600a8058afc43aeea47b819f3ed3c92a5a2136bde08cd3b986c19f80c19a8ec04e1e2f44d1bc6843358f54d4151d32929c9e1f8f4cb3e299086f13bfcc5a77abf62f4517feacfbd98b937a1618c4b1269b83c53e6bb2a78cc1837b305cc8cc7fe500faab27af7e0a3da1578ea17f5c0d85e345c96afe25a981b09d28ba97d27e1660da876177017fe311c7a72e0c4bee4b0ef70fc470d2a6b6636eb3db611c118ceacdfecdb39a8d81cc26a5495a8029949a1eaa46b98ac03bb618a0883222d1075b413c4aae0b9404204150d2536ebebb2fbf9c97ec4fa5445cb6811558c27981791736d5064b1a743c40df74f52b61f9f63cc03b22d57214dddc35b61917d5c772fe078186ec243c3a6a526bee8dc7034254f7042fbd4924404841b7a2a5d7a73a9d9f35dcfd0061f675706aba1edc5ade4d7d3af66075735e381b52f467b8eb0672acb7326e87da2df655497a34393c984e5f53467d4b26ecc83d69d37169098758a334113fa0cb5b72b3c84ca41cee425fb56061b8e6ab89b786a0c41a13fcad8048c11755f4be8d0ee6846e2deb6f67ccd455ed1096522610a2ce79bd67bd81f9e09ddb146fd4e435754dde87ac61795619580170c20f68e6921e4d89e566485d69b522d741f8408027ac0f89103b96c9ebc281393658a41151e82d73f57ac521abcef2a4dd9ff099e429fc97dd4fc5ffec972901a7098bbf13ce814386a02cfd9c78015672432d77ef64941be03b3f4991f2e6f3ebf63765990a6dedaacbee07f04124bc29c05cff9cc001ec81e3bc215beb59913af6b592f7b972e4f3c93565eacbb7ea88c2ae6bf0a988299930b197ccd1977a21209308593af124a443bce0fe239e2511b6a88bf70132fdcb8a4035492017dac6626aec445e471ce22b1d872171d8b4ee65f05dcc93e366a6b20c3cdd0ca3b05e63c23cdb310c0a141ab48fbb7141b69c39cc4c39778fa048eb82b065933567e5e35024823e0a4e6cad5c247db8c60bbe7366e788017a4b1fc8ac11b867eadc590295793abf8e8d9f71062e2b62d3f11c58104b4f6e340bcf0461c4e61ca1995b40feb47545360e14b80db4bda021a683633021087e4eaad820cec7445602c192385bddf0118775234b7c6b94300e7b080c478837fc691c98ca8b8a9fec90ca008686ee14f5927b7dfafaf3065226740577379507fcd4d4dee9f605910da129ff66aed41219c15de11c3eb92943cdcbb66b9ae56437c8c827e698b3e52dd0d74961fefa43a9b70aa4f617ef7b161d183cbce7db46fe6d1367b0788ac227d25e383c9e1bb0b0fb9c51bd34a8e40f7b3b9a8c6a178645653536ac5903e2f1ee9cdd88f1f9a60ce8e8b9d04435f486d2d623316603ecded2273cbf0d1194ef61aca7382aed985c2b9e47cd58f4d2dfbdef8ae6018c0da8dd79fd074dea7408737a434278c319c91b9bc9410e5252c121016e3f76640243cce26f9e1e171cbf10f3b5ec49c23f46083411207e288c672d44c9d2b8737a0f9aa7a0ba05683e156934d3ac2da97055706e976dfc274982816e6a01106b08018d6fbb33eae79a2f53cd8d81265b5399306b850be7928d9264237d1cde8e38a625b1992065c0ac1047a9c1edc133efc225738415fe98f519ea0aa7a6519bca458638fe512763cad4a7580ef24fdf84c9d350dcad1653567a026b10d6989ec538ea94dd0354f18a8b899c6c2d84b352777a1978f39d5737712700538604f90ad90aa4630a158d560c5199489e1daa6223ebb4524a462e837da45002a795e7817bc2d24053fa25f186901c435d12ecbd09b2e184a187096bc5cf1fa41f8ea23a997964774c0163e5983916e4be5408a20c82399fcbb29bdfd2badf671cd3c1d3a991180ccd322680674386476f5bf323088d3a28b6d830db1206859cf3f77d07a4613f62f922d233eb2bdcaf58c595a04e1fa227b8f8a897cbd5e720cdb22ec99234188c43c32be88053f65bc8fadeafc01b590d059bfa00aa8b4fb60976092048dece4e1f908e8585d3ea812e8476915cc10433f9543dc5e158accf468757cc699eb24ac2b2a760f7a3f1d1bfbabaa88696cbb11bcc8e4548573007f702e8fb1b4fa1f011a782750858707252804892b1e3afaa8ae9809373249e56306964a8cf375374cad5084665cbdc8ca0b346a88d08148f750cee357cb22a98bd74a932223ee99dddb569fb5a52ac98961924af23762000100ac86e6c585ac240e77433cee89ced577b317f6207820a6c2dff37e8d555b205064e46ce6c58eb599bf0727a3166915c494e8c59c805b7113613302a80715b85a364ec8a1c25ccc7d97d208f4035d00557a8bf8bd37a9ff174c1c65538fa60000e10001009044c74de3a77cc03127dca1f69ef6efbd3a2e66ea0b7662c3a36ea1106f43dfba1898c782ecc7c482ed0ee5d29bee63df591eae10cc513be22553049d51b111eb04df360de483ffc16dc789e8cf2192dc92ae2bb108ed3b7febaac9c5f12f016d3ee4a9e28fad200c1feb4554adb2380961ffe2e7c2013f09b1e2b8258c0eca3254f788f8321e517e4768779bf191e482d60c710ac3bb7ed2b24eceb226ab6229d9f23fdb9d7e53d5a58d8024c61a6fa66052464d33886092ebb60c51f8182099d799bd7e0c1883cdf8bb39b965a9a2b8f3598534ee1f71bc8600d221000000830001001aabf87b77681d5411ddc8bd148703e6ed46ba6b05b02c1afe8128826a8a74c739b15e9c3127b20fca6d69c1c8d25076f7d5b749072eb4348dc25ff7c62f340aa8acfd02a6f4f0c7ac53ce3a396b13739ca97d0e43540c768aa3300efa3e0246b7d25254167714e4dc0addb76ea098eedb38c2745358810ed1329dca81293c000900090073797a32000000000c00054000000000000000073c00008035000640df7aa7a17fdec57cd2e6ad6b3328f23364aa2ac5defe80f265ed2f0d462bbcfc0ff11155b065be2604e3bd994bda9f5339000000840000806800028044000280080003400000000308000340000000040900020073797a3100000000080003400000000308000180fffffffd0900020073797a300000000008000180fffffff92000028008000180ffffffff0900020073797a310000000008000340000000040900090073797a30000000000c00054000000000000000020900010073797a3000000000080004400000000134020000020a0104000000000000000002000002b90006003c0e15395cba48b267e6d183b483a57b34220570298d88bc58a30fbe2fffb071a329e4736be3545b827c2ae63db754dac335cee549425901bf2dee91ce0ec8d3bf38c644e576952ea4140c647564af9dd5d0148c1ea1cda403db17c7134062a943149f90833b9a0f6fd844ad0b35a346eeb3037365a6b5df742091a03b027386f09b95a977d9f33724563a54ac51d3563b13770396c0910a8774913f65a25aaf9be1d8db23ae78455a66910fd121016dbd09a0c6b20000006b000600b8e23ce08992f6c62e99e2d224eeb5b345b2b9ea4881bcd9587d0979b00e1f251d6e17e671169a4f588e90e3a1bbf36457250e270fbe29c6b830f8017c25d6c5dab6213fbb53e419980677b96b77cbf17168cd96cc067b7ffa258d98295fbb89ccbcb25aafc2e4000900010073797a31000000000900010073797a310000000008000240000000009900060025a7f5800b61514ed9fef444815c4777ff40e6e485ddb79b42a3fb53162e1c804ccfd8c9bc30aba602b257a0cb0ac9b794b4b4e175ea7c473ca429c5244eb7684e3780f8ebf342380ee2ed0d4834bd399d6487e96da7aee2cefa54a19fd236a549a042dc5f1982f81087f4a7154270459a9523233ba6893b341208f338a7a878c4a6a6f9246e1c83bc0e7131a8714df12c22fc8cf000000007000600c6b015000900010073797a3100000000280006008cf70b002db743ad1abb2a0d268ee59ec4f7b799140ec1901f5596a41056ec53fbf1a41320000000120a050000000000000000000200000a0900020073797a30000000002c000000160a01040000000000000000010000080c00054000000000000000040900020073797a320000000084000000030a03000000000000000000000000066e000c00ec39e8bf76da4c36e6caa1c1ebccd49f5e43067e14ee0301527e44f152b0172b3fdf5c23add976c4b46453191361baa7887d20a6cbe24f8beed4d3ae29101e5824460e0761accb6b724fbc2de07526b370e9d044e64209be04f17934e997852e28c24b191e870dadd685000034000000140a05000000000000000000070000000900010073797a30000000000c0006400000000000000002080003400000000a140000001100010000000000000000000000000a"], 0x2550}, 0x1, 0x0, 0x0, 0x40000}, 0x80) prlimit64(r4, 0xd, &(0x7f0000000140)={0x80000000000000c, 0x8}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)=0xa) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'pcm3724\x00', [0x8, 0x401, 0xe2, 0x5, 0x7, 0x80000001, 0x100b, 0x800101, 0x201002, 0xffffffff, 0x200, 0x87, 0x10000004, 0x1, 0x1, 0x6, 0xffff, 0x40, 0x1, 0x9, 0x10c, 0x40004002, 0x2, 0x2000000a, 0x85, 0x1, 0xb0c0, 0xe, 0x400000ff, 0x400008, 0x4000004]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r8, &(0x7f000001a440)=""/102400, 0x19000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) pipe2$watch_queue(0x0, 0x80) 5.790527529s ago: executing program 0 (id=2757): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="20110406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x50, 0xe, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x5, 0x7, 0xd2}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0xb, 0x2}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0xdf, 0xff, 0x6, 0x40, 0x40}, 0x9e, &(0x7f0000000100)={0x5, 0xf, 0x9e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "c2fa43fdc814f7833534b4298d24cde8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x9, 0x3, 0x401}, @generic={0x71, 0x10, 0xa, "a8c9ff5b63b64f7bfa2b3f35631d2f528202f1c6f06ed8bad62ace55b08f02d9c1778a6b4f1b046ac0cf2d914002308a940988e473826496247bf143d54e8077bbb177b2317f7b2ed9c050df9e8f2eb77490f836207f0028bcc688b6d0f97eef168415d89b4debbb2a634a67bd95"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x2, 0xd2, 0x200}]}, 0x1, [{0x8e, &(0x7f00000001c0)=@string={0x8e, 0x3, "258fe788ad75cb527236243a548620b2188a728c6c49d6e193dcd3b68f9cc127a7f8219e4fb2af55be07957a94c9ce8d27556f0ecb3b58e55083db540eb1866621af059b9954a3917c6f27c5c6a89184066b57aaabce0276b194b6b3880957b8b1da4db258548a43c41b638bbe92007cf0e1448f6a9f9681c77409b17cc15e8687e3d949911082d940c6d32c"}}]}) 4.890322971s ago: executing program 7 (id=2758): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x8000000}]}]}}, 0x0, 0x42}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast2, @multicast2}, &(0x7f0000000200)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x8, 0x7, 0x8, 0x41, r2, 0x1, '\x00', r3, r1, 0x0, 0x3, 0x3, 0xf}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) getdents64(r4, 0xfffffffffffffffe, 0x26) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000200)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xff, 0x3a, '', 0x3a, '', 0x3a, './file0'}, 0x27) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x1b) sched_setscheduler(0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) r9 = creat(&(0x7f00000001c0)='./file0\x00', 0x102) setsockopt$MRT6_DEL_MFC(r9, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e22, 0x983c, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, {0xa, 0x4e22, 0x3, @mcast2, 0x888}, 0xffffffffffffffff, {[0x9b59, 0x8, 0x6a, 0x6, 0x2ecb, 0x4, 0x9, 0xfffffe8e]}}, 0x5c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000980)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 4.606023682s ago: executing program 1 (id=2759): timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4}, &(0x7f0000000080)=0x0) timer_delete(r0) eventfd2(0x8, 0x1) syz_clone3(&(0x7f0000000280)={0x290084000, &(0x7f0000000040), 0x0, &(0x7f00000000c0), {0x41}, &(0x7f0000000100)=""/7, 0x7, &(0x7f0000000180)=""/163, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x7, 0x2, 0x7fffffffffffffff, 0x7, 0x7fffffffffffffff, 0x2, 0x2, 0x6dd, 0xfffffffffffffff9, 0xb482, 0x9, 0xfffffffffffffffc, 0x7ff, 0xa, 0x0, 0x9], 0x80a0000, 0x148800}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@rand_addr=0x64010102, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e, 0x0, 0xffffffffffffffff}, {0x0, 0x9f, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x3, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) 3.992372457s ago: executing program 2 (id=2760): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x482) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0x0) write$UHID_INPUT(r5, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) 3.197699992s ago: executing program 5 (id=2761): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newtaction={0x15c, 0x30, 0x1, 0x70bd29, 0x25dfdbfa, {}, [{0x148, 0x1, [@m_ipt={0x144, 0x1, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x91, 0x6, {0x9, 'mangle\x00', 0x4, 0x2, "f7c4bff37abfa63a3a3edf469d1925b8e2ab784e2c2becee1b6f4227dcdf72168f469984d47495bb9ed686a9d772222d5d47ddef541bb77a958d5e5ec0793163795735b05a96550578e77cc26c9c8c389f308782112130c0714002a493a6bd27546a20ea4d66ab"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x53, 0x6, "c4c834e98c6449b68e05f93c4ae46d2b050a0d50c33fb1821fe82fd0b4cc9beef29c877c394fade8aa8dfa4b3fa7b600116572355c84a37e9c3bd5471be8f16c12977a3b1172884bc6f82e72da08da"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x1ff, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x8, 0xf6, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x2, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x4, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x2], [0x8, 0x7, 0xffffffff, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a0, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x8, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gre0\x00'}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x810, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r3, 0x90004) syz_emit_vhci(&(0x7f0000001180)=ANY=[@ANYBLOB="043e130100c90001", @ANYRESHEX, @ANYBLOB="28cbc43f3f9e4a0769ec04073d62d51a0a9ffe243f458bb7dc848aaceb8f256ce2b527df3d43625c4ef8b15be1946bf4a508d0d908ba1df7496fe969c539c5c888ae168d511659d874a4e64ed181ac4f8da0b7675da9c17b8f6cdbd603374a68cc0cf5ea03f85b6784c65024615db48740a51ebd6a70dde488ff41852b64c96e60496fe858d0af72a248d1e55d983663b53f3eecf48fa06f62ed0d8997cf20482e661e801102d55d3a4ec2a49912daf708c23f7efb0a60"], 0x16) ppoll(&(0x7f00000000c0)=[{r3, 0x60}], 0x1, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000018c0)={0x24, &(0x7f00000016c0)={0x40, 0x0, 0xca, {0xca, 0xd, "26fb23aa25a7a19a1979672b63493a5e68aca90d18a9c10d00fa25c6b12dfb45421e9b0f351d763809b3aa3de55d78fb28c1cd26f1bced8a4a6ee64812f0cb0196be5bca86d4b29d4494b9e62d9cf7c64948b5badbe91fc42167ca33034e3ffde8e6c11cc9054e394c697bc8eb66194a6bddc1d49cc11f34d66950c781fec67c722fd406369e0c1ccf31dd237929e69ebcd2108266cd381ab812eafef299ef90b195417d93a66812d7b3d779e205691b8a5d7a00407c3fef8669261d83d19a4708f651866ad44266"}}, &(0x7f00000017c0)={0x0, 0x3, 0x5b, @string={0x5b, 0x3, "079ab86d8f4beee463bd7a5aef2042d64def9ebfe689e847f87ef58081e2929c6c5f1672039f0c02b95acbf14dee543ee266c1dcad93ab789130bf4436177f298ab804cc72a83b199117c6a7abda540431e4302fc43742c20d"}}, &(0x7f0000001840)={0x0, 0x22, 0x9, {[@main=@item_4={0x3, 0x0, 0x8, "13594ab3"}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_012={0x1, 0x0, 0xc, '0'}, @global]}}, &(0x7f0000001880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0xc3e}}}}, &(0x7f0000001a80)={0x2c, &(0x7f0000001900)={0x0, 0x16, 0x70, "75a45c3b262040c8ac63047d87a0907efdea23c5d5593b4f5d2cce669001f098540d5054169989497293ebc389351b27010d7932cbab6860dd2c7e4b5f28a0ce2dfe32922ae75c882d66be0f3fa412d24ce9e17769b913954a76aaa335058f05204684bebcda31cab40cb9aea36a2e49"}, &(0x7f0000001980)={0x0, 0xa, 0x1, 0x88}, &(0x7f00000019c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001a00)={0x20, 0x1, 0x10, "2b097626155b0dca398dc157293208ea"}, &(0x7f0000001a40)={0x20, 0x3, 0x1, 0xc1}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000140)=""/4101, 0xffffffffffffffd6) 3.110397703s ago: executing program 2 (id=2762): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(0x0, 0x0, 0x2, 0x0, 0x0, 0x2) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r4, 0x3, 0x1) fstat(r3, &(0x7f0000000300)) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x6, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x4, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x20001, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0x2, 0x3, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0xb, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0xb, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0xa, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x1, 0x52c, 0x4, 0x10001, 0xfffffffa, 0x2, 0x5, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x5000, 0x1], [0x28, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x4, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x1, 0x9, 0x1, 0xc, 0xffff6f9e, 0x7ff, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0xffffffff, 0x4, 0xffffff00, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x4, 0x7fffffff, 0xd, 0x40, 0x3, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0xc880}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, '\x00', 0xd}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x80}, {}, {}, {0x20}, {0x9}, {0xb}, {0x3}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x43}]}}) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000080)) 2.161716531s ago: executing program 0 (id=2763): exit_group(0x8) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r0, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) 2.027314155s ago: executing program 7 (id=2764): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000bc0)={0x0, [{0x2, 0x10, 0x805, &(0x7f0000000000)="6caf"}, {0x2, 0x8, 0x1, &(0x7f0000000040)='\f'}, {0x0, 0x0, 0x80, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x7ff, 0x0}, {0x2, 0x0, 0xc, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x200, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x1, 0x0, 0xf, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x70a, 0x0}, {0x3, 0x0, 0x1cf9571d, 0x0}, {0x2, 0x0, 0xe16, 0x0}, {0x4, 0x0, 0x9, 0x0}]}) r3 = syz_open_dev$vbi(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000a00)={0x63a8, [0x6, 0xc00, 0x7, 0x3ff, 0x3fc, 0xf, 0x9, 0x9, 0xc, 0x3c, 0x6, 0x5, 0xf9, 0xfe00, 0x2, 0x7f, 0x35d8, 0x10, 0xffff, 0x4002, 0x8, 0x4, 0x200, 0x100, 0x3, 0xfff9, 0xc, 0x6e, 0x2, 0x4, 0xa250, 0x1, 0xfb6, 0x8844, 0x8d8, 0x7ffe, 0x0, 0x6, 0x5, 0x7, 0x4, 0x100, 0xd, 0x4a, 0x5, 0x3ff, 0x7, 0x4], 0x5}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000002e000900a7bd70000000000004000000460018004fbb52fa25a3b6668c2659071fb4dfcd54f6e857bbb92493a9b51bff3c6200da53426b3b7edc4c09d66183806bcb707bfbb5a55b957cff434fa924becf80d7e3d16d5317"], 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000019c0)) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@empty, @broadcast, 0x0}, &(0x7f0000000140)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000001980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001940)={&(0x7f00000002c0)={0x480, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x20c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4612}, @ETHTOOL_A_BITSET_MASK={0xb4, 0x5, "59d073fc50b9e0369b37f39e49244266178a5f1f5e33e37abda5de7bb5f7c79205a40053be48b89b6429fc04a53eda82bd8e08260cdbe3a6f2e77deffbbef93fa807223ed845e0ff733369c1a20356c1e10f7d45f660ada9611fb9301b691f1d7a71281a9cbee05ae4b1f74f937b0bd0b757941b0a1e74016c10fe72e4b8a7fa2257d92338eea93626789238b75b7bc0ab8829b44a85476761ae797c691725ab44d1771971d1880d944ca23342ee686a"}, @ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ',+-,-\x1b[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+*+{\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{-\x00'}]}, {0x4}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x1ec, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "60e6d16c208c297f6125ff467c77fb2d95763d9d42d194ac27c47e544364f018be9a93eb1d60bfa386cc022bfc6ab8075c853674d81e2d6dd9053811bc700891df746dcdf66030256dccf1f3460ed6e43e6b2a091021"}, @ETHTOOL_A_BITSET_MASK={0xac, 0x5, "c56b94a26c6ddf5c1c6f2f7977fea74ac2873c0190e605907013c1b30ee324f73376b189e031acbcd11386e9f4b1409e9f8479cd0a52b5685ba0125d994696a6554e0a65110c7d5c66420e7b0a5b168f1d0b67e30c5e268872a36427069dc5e66a97bca18369757d836ef0a37ee5d66ffc49a632a945057914bdff211af6cb70233f8db4d2e126faa08947bf9a032422856c3bbf04a86c44a26e9ff4392468f369a5a6e0e2941ddb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xda, 0x5, "96f64b6965be7e3c18c4e8b6f8835d08e7a114c9fb1e9ccf60703a4a35dc5575f03be50dc1c43cf07e156aa737103178112b7dfbc912cc2e38b350cdc7a0d47cf7bc6c49e4d61d95e19003c3f9a47f871f26313c33e89d6b8b311f25199975bf42c7ebf05389c13f7af763632d17d22f36ae36629fa99b229a670a0023195e3782bf6286e90ef055cb06a0c73595333dc23ba9572d5852683df82b62ae674bcf96c06233fd9ff5786d319c75a76ca83c67168f6a194612c4f4cdb3bb74c82110c9aef49b9bf0dc8da287a3e8a21aa6f3f4d2fc9cc455"}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x480}}, 0xc0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009) 1.282819593s ago: executing program 0 (id=2765): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x102) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x8, @loopback, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x1}) close_range(r5, 0xffffffffffffffff, 0x2000000) 569.599273ms ago: executing program 0 (id=2766): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) r2 = socket$alg(0x26, 0x5, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x53a8, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) (async) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) (async) io_setup(0x1, &(0x7f0000002500)=0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, 0x0, 0x0) (async) io_submit(r7, 0x0, 0x0) madvise(&(0x7f000021a000/0x2000)=nil, 0x2000, 0x16) (async) r9 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, 0x0) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) 569.16697ms ago: executing program 2 (id=2767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'veth1_to_team\x00', 0x10}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}}, 0x24040084) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32=0xffffffffffffffff, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b23080032", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r6, &(0x7f00000000c0)=0xa7, 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r3, @ANYRES64=r2, @ANYBLOB="77cb792ae6f4063325c9c9d75ae1566d6b49aab980f85f7cff2668162f1f1b48b1a1da787a0ba4896aa433d59a1935d46e45301e429d4430d82ce528092567571047a8e10563f9b12e79b4e5e8714013033472623c019eb2e26ec7fb3ef0a47ae1e30c067b103199e8c343860aca53d059c6a77c44c6160efbbdc69ee4ab90fdc3d5f5e02053a3ac8a0d996b3addc8d418032bb4b7ed548af56150fb94ab4f8882ac29fe20e601127b1cc2ee1e4137f4881c71cc06fc7b43e895276613d7d7c05d1fd5738f8d6f339506cf920f9d14e58d2ec0beb7eb9e99d0b077", @ANYRES64, @ANYRES8=r5], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000010c0)={'syztnl2\x00', 0x0, 0x38a9, 0x8, 0xffffffb9, 0xb111, {{0x57, 0x4, 0x2, 0x8, 0x15c, 0x64, 0x0, 0x4f, 0x29, 0x0, @broadcast, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0xdf, 0x3, 0x7, [{@remote}, {@rand_addr=0x64010102, 0x5}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0x2}]}, @ssrr={0x89, 0xb, 0xc9, [@empty, @broadcast]}, @cipso={0x86, 0x68, 0x3, [{0x2, 0xc, "20f779d630e04f69ebef"}, {0x2, 0x8, "364829bfc26c"}, {0x1, 0xc, "0d06a64426273fa1cd80"}, {0x5, 0x4, "0b8a"}, {0x6, 0xc, "1006522d5c0eaae0a8ee"}, {0x6, 0x10, "c08c02000000000400006b40f9ce"}, {0x0, 0x12, "7f628b6fdb2c58467b70b86c20775e4c"}, {0x1, 0x10, "83520cdb9ae9946a91853f606d8f"}]}, @rr={0x7, 0x23, 0xbb, [@rand_addr=0x64010102, @local, @empty, @loopback, @private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x40}, @empty]}, @generic={0x44, 0x5, "d9f0d5"}, @generic={0x86, 0x5, "a2e1b4"}, @noop, @timestamp_prespec={0x44, 0x3c, 0x6a, 0x3, 0x0, [{@loopback, 0x1ff}, {@multicast1, 0x8}, {@remote, 0x8000}, {@remote, 0x4}, {@empty, 0x10000}, {@multicast1, 0x30000}, {@rand_addr=0x64010101}]}, @cipso={0x86, 0x6}, @generic={0x44, 0x8, "b40f4d6068f6"}, @rr={0x7, 0x1b, 0x73, [@loopback, @loopback, @rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x27}, @dev={0xac, 0x14, 0x14, 0x3e}]}, @lsrr={0x83, 0x1b, 0x54, [@remote, @private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x10}, @empty, @remote]}]}}}}}) socket(0x28, 0x3, 0x3a) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) 311.799701ms ago: executing program 1 (id=2768): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x41) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x15) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x8010, r3, 0x28791000) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1fb, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0xa, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) io_uring_setup(0x9, 0x0) 250.119558ms ago: executing program 7 (id=2769): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'sit0\x00', &(0x7f00000016c0)={'ip_vti0\x00', 0x0, 0x780, 0x1, 0x8, 0x3, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x66, 0x0, 0x1, 0x2f, 0x0, @multicast2, @multicast1, {[@generic={0x94, 0xd, "21a15c1e392fa973cbcf2d"}]}}}}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201e8d8c44e5a10450c0a"], 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000193c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) ioctl(0xffffffffffffffff, 0x8b27, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) renameat(r3, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r3, &(0x7f0000000380)='./cgroup.net/cgroup.procs\x00') r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x4}}, 0x10) 66.176636ms ago: executing program 0 (id=2770): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000540)={0x4c, 0x14, 0xff01, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e24, 0x4e22, [0x3, 0x5b, 0xf, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) 21.864199ms ago: executing program 0 (id=2771): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r3 = syz_open_dev$vim2m(0x0, 0x10003, 0x2) pwritev(r3, &(0x7f00000002c0), 0x0, 0x5, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r8 = fanotify_init(0xf00, 0x1000) fanotify_mark(r8, 0x105, 0x5000003a, r7, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r9, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect$llc(r9, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYBLOB="1db6e277744b4cbc92a1ce4df152b9c15bcdd74d0e9ef7f931f2a475a6dbfbe07bb62961a896fc5ad00069c1cf8842ceefb00fdec3c7e56d858174333a6f1f54d959721b2970e5011197dbf696087301c4572577ad8496311cc728d00827eb8cf0ac67782b2851783cc70202"], 0x18}, 0x1, 0x0, 0x0, 0x8811}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='7\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32=r11, @ANYBLOB, @ANYRES64=r10], 0x20) 0s ago: executing program 5 (id=2772): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) socket$inet6(0xa, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) mkdir(&(0x7f0000000200)='./file0\x00', 0x56) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x10, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6d", 0x9) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x50}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)}, {&(0x7f0000000340)="94883d530dc9a529bf56f8e1a7adecc8a4bde4931af40292396042ed39a2e67a8d7fda16fa7b45aeb7a83f", 0x2b}, {&(0x7f00000003c0)="ffb1e319b04a2105c5e37cbae7c99843e712fd1bae5d4165c7ff302c13bca854e0783e3d63da7f0d8c30ec542e2bfbc01da466e32b61f28565", 0x39}, {&(0x7f0000000400)="2c3c22dbdc873fe59320a9f8d67a586faef43345b41d8122fc0049edadfc7b768f68c2170387e0", 0x27}], 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/703], 0x2c0, 0x404d1b0}], 0x2, 0x4085) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)}, 0x40010126) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r6, &(0x7f0000002440)=""/4100, 0x1004) ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f0000000280)) kernel console output (not intermixed with test programs): ed { connect } for pid=15435 comm="syz.5.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 824.694796][ T30] audit: type=1400 audit(1775620553.225:1948): avc: denied { accept } for pid=15443 comm="syz.2.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 824.811592][ T7250] net_ratelimit: 28 callbacks suppressed [ 824.811608][ T7250] bond2: (slave macvlan2): failed to get link speed/duplex [ 824.836801][ T7250] bond1: (slave macvlan2): failed to get link speed/duplex [ 824.845511][T15442] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 824.853386][T15442] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 824.862694][T15442] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 824.870572][T15442] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 824.919990][T15456] fuse: Bad value for 'fd' [ 824.934761][T15458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2448'. [ 824.947280][ T7250] bond2: (slave macvlan2): failed to get link speed/duplex [ 824.987562][ T7250] bond1: (slave macvlan2): failed to get link speed/duplex [ 825.022768][T15463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2448'. [ 825.069723][ T795] bond2: (slave macvlan2): failed to get link speed/duplex [ 825.100519][T15465] overlayfs: failed to resolve './file1': -2 [ 825.118097][ T795] bond1: (slave macvlan2): failed to get link speed/duplex [ 825.207271][ T5945] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 825.216572][ T7250] bond2: (slave macvlan2): failed to get link speed/duplex [ 825.275691][ T30] audit: type=1326 audit(1775620554.505:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15459 comm="syz.6.2450" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25e9d9c819 code=0x0 [ 825.298742][ T7250] bond1: (slave macvlan2): failed to get link speed/duplex [ 825.318531][T15465] netlink: 'syz.5.2451': attribute type 25 has an invalid length. [ 825.328998][ T24] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 825.376975][T15465] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2451'. [ 825.496815][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 825.502423][T14189] bond2: (slave macvlan2): failed to get link speed/duplex [ 825.506954][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2451'. [ 825.511631][ T5945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.540054][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 825.556868][ T24] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 825.567329][ T5945] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 825.579891][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 825.593198][ T5945] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 825.603059][T14189] bond1: (slave macvlan2): failed to get link speed/duplex [ 825.610401][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.619147][ T5945] usb 3-1: Product: syz [ 825.624332][ T5945] usb 3-1: Manufacturer: syz [ 825.630014][ T24] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 825.641389][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.651831][ T24] usb 1-1: Product: syz [ 825.656112][ T24] usb 1-1: Manufacturer: syz [ 825.663850][ T5945] usb 3-1: SerialNumber: syz [ 825.668666][ T24] usb 1-1: SerialNumber: syz [ 825.711136][ T5945] usb 3-1: config 0 descriptor?? [ 825.738365][ T24] usb 1-1: config 0 descriptor?? [ 825.932168][ T5945] usb 3-1: USB disconnect, device number 91 [ 826.026795][ T10] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 826.146850][ T24] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 826.199598][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 826.216604][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.235174][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 826.269027][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 826.280582][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.307841][ T10] usb 6-1: config 0 descriptor?? [ 826.568489][ T24] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 826.581663][ T24] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 826.599851][ T24] usb 1-1: USB disconnect, device number 82 [ 826.764820][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 826.780352][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0012/input/input37 [ 826.984773][ T10] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 827.262271][ T30] audit: type=1400 audit(1775620556.555:1950): avc: denied { getattr } for pid=15490 comm="syz.0.2458" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=68141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 827.351529][T15494] fuse: Bad value for 'user_id' [ 827.356548][T15494] fuse: Bad value for 'user_id' [ 827.649549][ T10] usb 6-1: USB disconnect, device number 73 [ 828.550247][T15508] netlink: 'syz.5.2462': attribute type 10 has an invalid length. [ 828.558574][T15508] bond2: option mode: unable to set because the bond device has slaves [ 828.562858][T15508] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 828.690921][ T30] audit: type=1326 audit(1775620557.965:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15509 comm="syz.1.2463" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8b559c819 code=0x0 [ 829.675531][T15529] FAULT_INJECTION: forcing a failure. [ 829.675531][T15529] name failslab, interval 1, probability 0, space 0, times 0 [ 829.692577][T15529] CPU: 1 UID: 0 PID: 15529 Comm: syz.0.2466 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.692605][T15529] Tainted: [L]=SOFTLOCKUP [ 829.692611][T15529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 829.692621][T15529] Call Trace: [ 829.692627][T15529] [ 829.692633][T15529] dump_stack_lvl+0x100/0x190 [ 829.692668][T15529] should_fail_ex.cold+0x5/0xa [ 829.692693][T15529] should_failslab+0xc2/0x120 [ 829.692712][T15529] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 829.692738][T15529] ? skb_clone+0x190/0x400 [ 829.692768][T15529] skb_clone+0x190/0x400 [ 829.692793][T15529] netlink_deliver_tap+0xaed/0xcc0 [ 829.692835][T15529] netlink_unicast+0x650/0x870 [ 829.692856][T15529] ? __pfx_netlink_unicast+0x10/0x10 [ 829.692883][T15529] netlink_sendmsg+0x8b0/0xda0 [ 829.692905][T15529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.692921][T15529] ? __might_fault+0x90/0x140 [ 829.692955][T15529] ____sys_sendmsg+0x9e1/0xb70 [ 829.692973][T15529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 829.692992][T15529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 829.693024][T15529] ___sys_sendmsg+0x190/0x1e0 [ 829.693046][T15529] ? __pfx____sys_sendmsg+0x10/0x10 [ 829.693096][T15529] __sys_sendmsg+0x170/0x220 [ 829.693123][T15529] ? __pfx___sys_sendmsg+0x10/0x10 [ 829.693165][T15529] do_syscall_64+0x106/0xf80 [ 829.693182][T15529] ? clear_bhb_loop+0x40/0x90 [ 829.693205][T15529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.693224][T15529] RIP: 0033:0x7f34ea59c819 [ 829.693240][T15529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.693257][T15529] RSP: 002b:00007f34eb3f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.693275][T15529] RAX: ffffffffffffffda RBX: 00007f34ea815fa0 RCX: 00007f34ea59c819 [ 829.693287][T15529] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000006 [ 829.693297][T15529] RBP: 00007f34eb3f4090 R08: 0000000000000000 R09: 0000000000000000 [ 829.693308][T15529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.693318][T15529] R13: 00007f34ea816038 R14: 00007f34ea815fa0 R15: 00007ffc7f0c53e8 [ 829.693344][T15529] [ 829.928603][ T7250] net_ratelimit: 59 callbacks suppressed [ 829.928622][ T7250] bond1: (slave macvlan2): failed to get link speed/duplex [ 830.121876][ T7250] bond2: (slave macvlan2): failed to get link speed/duplex [ 830.189720][ T5814] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 830.263434][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2469'. [ 830.430374][T15540] nbd: socks must be embedded in a SOCK_ITEM attr [ 830.476808][T15544] FAULT_INJECTION: forcing a failure. [ 830.476808][T15544] name failslab, interval 1, probability 0, space 0, times 0 [ 830.549366][T15544] CPU: 1 UID: 0 PID: 15544 Comm: syz.2.2471 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.549394][T15544] Tainted: [L]=SOFTLOCKUP [ 830.549401][T15544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 830.549410][T15544] Call Trace: [ 830.549416][T15544] [ 830.549423][T15544] dump_stack_lvl+0x100/0x190 [ 830.549455][T15544] should_fail_ex.cold+0x5/0xa [ 830.549478][T15544] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 830.549497][T15544] should_failslab+0xc2/0x120 [ 830.549515][T15544] __kmalloc_noprof+0xe0/0x850 [ 830.549545][T15544] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 830.549568][T15544] ? cred_has_capability.isra.0+0x186/0x300 [ 830.549600][T15544] genl_family_rcv_msg_doit+0xc7/0x300 [ 830.549623][T15544] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 830.549654][T15544] ? bpf_lsm_capable+0x9/0x10 [ 830.549673][T15544] ? security_capable+0x80/0x260 [ 830.549697][T15544] ? ns_capable+0xd2/0xf0 [ 830.549721][T15544] genl_rcv_msg+0x560/0x800 [ 830.549746][T15544] ? __pfx_genl_rcv_msg+0x10/0x10 [ 830.549766][T15544] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 830.549790][T15544] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 830.549816][T15544] ? __pfx_nl80211_post_doit+0x10/0x10 [ 830.549851][T15544] netlink_rcv_skb+0x159/0x420 [ 830.549870][T15544] ? __pfx_genl_rcv_msg+0x10/0x10 [ 830.549892][T15544] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 830.549925][T15544] ? netlink_deliver_tap+0x1ae/0xcc0 [ 830.549957][T15544] genl_rcv+0x28/0x40 [ 830.549975][T15544] netlink_unicast+0x5aa/0x870 [ 830.549996][T15544] ? __pfx_netlink_unicast+0x10/0x10 [ 830.550024][T15544] netlink_sendmsg+0x8b0/0xda0 [ 830.550047][T15544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.550063][T15544] ? __might_fault+0x90/0x140 [ 830.550098][T15544] ____sys_sendmsg+0x9e1/0xb70 [ 830.550117][T15544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 830.550137][T15544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 830.550169][T15544] ___sys_sendmsg+0x190/0x1e0 [ 830.550193][T15544] ? __pfx____sys_sendmsg+0x10/0x10 [ 830.550246][T15544] __sys_sendmsg+0x170/0x220 [ 830.550273][T15544] ? __pfx___sys_sendmsg+0x10/0x10 [ 830.550316][T15544] do_syscall_64+0x106/0xf80 [ 830.550334][T15544] ? clear_bhb_loop+0x40/0x90 [ 830.550357][T15544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.550376][T15544] RIP: 0033:0x7f1d4659c819 [ 830.550392][T15544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.550409][T15544] RSP: 002b:00007f1d473f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.550427][T15544] RAX: ffffffffffffffda RBX: 00007f1d46815fa0 RCX: 00007f1d4659c819 [ 830.550439][T15544] RDX: 0000000000044004 RSI: 0000200000000340 RDI: 0000000000000003 [ 830.550450][T15544] RBP: 00007f1d473f3090 R08: 0000000000000000 R09: 0000000000000000 [ 830.550461][T15544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.550472][T15544] R13: 00007f1d46816038 R14: 00007f1d46815fa0 R15: 00007ffcf070ed78 [ 830.550498][T15544] [ 831.228632][T15280] bond1: (slave macvlan2): failed to get link speed/duplex [ 831.319163][T15280] bond2: (slave macvlan2): failed to get link speed/duplex [ 831.367334][T15280] bond1: (slave macvlan2): failed to get link speed/duplex [ 831.438882][T15280] bond2: (slave macvlan2): failed to get link speed/duplex [ 831.506805][T15280] bond1: (slave macvlan2): failed to get link speed/duplex [ 831.567153][T15280] bond2: (slave macvlan2): failed to get link speed/duplex [ 831.646931][T15280] bond1: (slave macvlan2): failed to get link speed/duplex [ 831.697556][T15280] bond2: (slave macvlan2): failed to get link speed/duplex [ 832.415339][ T5798] udevd[5798]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 832.457538][ T7717] udevd[7717]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 833.679834][T15580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2479'. [ 833.697083][T15579] lo: entered allmulticast mode [ 833.830632][T15584] binder: 15583:15584 ioctl c0306201 200000000080 returned -14 [ 833.934837][T15586] binder: BINDER_SET_CONTEXT_MGR already set [ 833.970874][T15586] binder: 15583:15586 ioctl 4018620d 200000000040 returned -16 [ 834.027275][T15585] binder: 15583:15585 ioctl c0306201 2000000003c0 returned -14 [ 834.228349][T15591] FAULT_INJECTION: forcing a failure. [ 834.228349][T15591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.242669][T15591] CPU: 1 UID: 0 PID: 15591 Comm: syz.1.2484 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.242699][T15591] Tainted: [L]=SOFTLOCKUP [ 834.242703][T15591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 834.242710][T15591] Call Trace: [ 834.242714][T15591] [ 834.242719][T15591] dump_stack_lvl+0x100/0x190 [ 834.242741][T15591] should_fail_ex.cold+0x5/0xa [ 834.242756][T15591] _copy_from_iter+0x1f4/0x1690 [ 834.242770][T15591] ? __lock_acquire+0x4a5/0x2630 [ 834.242782][T15591] ? __pfx__copy_from_iter+0x10/0x10 [ 834.242794][T15591] ? __lock_acquire+0x4a5/0x2630 [ 834.242810][T15591] copy_page_from_iter+0xde/0x180 [ 834.242825][T15591] tun_build_skb.constprop.0+0x2ea/0x15d0 [ 834.242842][T15591] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 834.242853][T15591] ? unwind_get_return_address+0x59/0xa0 [ 834.242871][T15591] ? find_held_lock+0x2b/0x80 [ 834.242893][T15591] tun_get_user+0x16d0/0x3e10 [ 834.242911][T15591] ? __pfx_tun_get_user+0x10/0x10 [ 834.242923][T15591] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 834.242942][T15591] ? find_held_lock+0x2b/0x80 [ 834.242957][T15591] ? tun_get+0x191/0x370 [ 834.242971][T15591] ? tun_get+0x191/0x370 [ 834.242984][T15591] tun_chr_write_iter+0xdc/0x200 [ 834.242997][T15591] vfs_write+0x6ac/0x1070 [ 834.243008][T15591] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 834.243028][T15591] ? __pfx_vfs_write+0x10/0x10 [ 834.243042][T15591] ? find_held_lock+0x2b/0x80 [ 834.243073][T15591] ksys_write+0x12a/0x250 [ 834.243083][T15591] ? __pfx_ksys_write+0x10/0x10 [ 834.243098][T15591] do_syscall_64+0x106/0xf80 [ 834.243109][T15591] ? clear_bhb_loop+0x40/0x90 [ 834.243122][T15591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.243134][T15591] RIP: 0033:0x7fc8b555d04e [ 834.243143][T15591] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 834.243153][T15591] RSP: 002b:00007fc8b6539fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 834.243164][T15591] RAX: ffffffffffffffda RBX: 00007fc8b653a6c0 RCX: 00007fc8b555d04e [ 834.243171][T15591] RDX: 0000000000000031 RSI: 00002000000000c0 RDI: 00000000000000c8 [ 834.243177][T15591] RBP: 00007fc8b653a090 R08: 0000000000000000 R09: 0000000000000000 [ 834.243184][T15591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.243190][T15591] R13: 00007fc8b5816038 R14: 00007fc8b5815fa0 R15: 00007ffe8228fd68 [ 834.243204][T15591] [ 834.486778][ T10] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 834.896991][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 834.997898][T15280] net_ratelimit: 47 callbacks suppressed [ 834.997917][T15280] bond1: (slave macvlan2): failed to get link speed/duplex [ 835.036929][ T7051] bond2: (slave macvlan2): failed to get link speed/duplex [ 835.094624][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.157427][T15280] bond2: (slave macvlan2): failed to get link speed/duplex [ 835.165882][ T10] usb 6-1: config 0 has no interfaces? [ 835.176299][ T10] usb 6-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 835.184984][T15280] bond1: (slave macvlan2): failed to get link speed/duplex [ 835.205716][ T10] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 835.255861][ T10] usb 6-1: Manufacturer: syz [ 835.261562][ T10] usb 6-1: SerialNumber: syz [ 835.267469][T15280] bond2: (slave macvlan2): failed to get link speed/duplex [ 835.306920][T15280] bond1: (slave macvlan2): failed to get link speed/duplex [ 835.377502][ T795] bond2: (slave macvlan2): failed to get link speed/duplex [ 835.416935][ T795] bond1: (slave macvlan2): failed to get link speed/duplex [ 835.486988][T15280] bond2: (slave macvlan2): failed to get link speed/duplex [ 835.559314][ T3541] bond1: (slave macvlan2): failed to get link speed/duplex [ 835.602248][ T10] usb 6-1: config 0 descriptor?? [ 836.360363][T15618] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2482'. [ 837.442346][ T10] usb 6-1: USB disconnect, device number 74 [ 837.886951][ T10] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 838.116791][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 838.142666][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 838.162403][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 838.178697][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.219942][ T10] usb 6-1: config 0 descriptor?? [ 838.982771][ T10] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 839.007377][ T10] usb 6-1: USB disconnect, device number 75 [ 839.032288][T15651] FAULT_INJECTION: forcing a failure. [ 839.032288][T15651] name failslab, interval 1, probability 0, space 0, times 0 [ 839.045683][T15651] CPU: 0 UID: 0 PID: 15651 Comm: syz.6.2500 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.045707][T15651] Tainted: [L]=SOFTLOCKUP [ 839.045710][T15651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 839.045717][T15651] Call Trace: [ 839.045721][T15651] [ 839.045726][T15651] dump_stack_lvl+0x100/0x190 [ 839.045747][T15651] should_fail_ex.cold+0x5/0xa [ 839.045763][T15651] should_failslab+0xc2/0x120 [ 839.045776][T15651] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 839.045792][T15651] ? security_inode_alloc+0x3b/0x2c0 [ 839.045808][T15651] ? lockdep_init_map_type+0x5c/0x250 [ 839.045822][T15651] security_inode_alloc+0x3b/0x2c0 [ 839.045838][T15651] inode_init_always_gfp+0xced/0x1040 [ 839.045854][T15651] alloc_inode+0x8e/0x250 [ 839.045870][T15651] new_inode+0x22/0x1c0 [ 839.045888][T15651] __debugfs_create_file+0x105/0x4f0 [ 839.045905][T15651] debugfs_create_file_full+0x41/0x60 [ 839.045922][T15651] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 839.045936][T15651] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 839.045961][T15651] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 839.045978][T15651] ? alloc_netdev_mqs+0xd7/0x14f0 [ 839.045995][T15651] ? lockdep_init_map_type+0x5c/0x250 [ 839.046008][T15651] ? __pfx_caifdev_setup+0x10/0x10 [ 839.046020][T15651] alloc_netdev_mqs+0x314/0x14f0 [ 839.046040][T15651] ? bpf_lsm_capable+0x9/0x10 [ 839.046055][T15651] ldisc_open+0x158/0xaa0 [ 839.046067][T15651] ? __pfx_ldisc_open+0x10/0x10 [ 839.046078][T15651] ? __pfx___might_resched+0x10/0x10 [ 839.046097][T15651] ? __pfx_ldisc_open+0x10/0x10 [ 839.046108][T15651] tty_ldisc_open+0xa2/0x120 [ 839.046123][T15651] tty_set_ldisc+0x325/0x740 [ 839.046139][T15651] tty_ioctl+0x695/0x1690 [ 839.046155][T15651] ? __pfx_tty_ioctl+0x10/0x10 [ 839.046170][T15651] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 839.046192][T15651] ? __fget_files+0x215/0x3d0 [ 839.046204][T15651] ? hook_file_ioctl_common+0x146/0x410 [ 839.046219][T15651] ? selinux_file_ioctl+0x139/0x290 [ 839.046235][T15651] ? selinux_file_ioctl+0xb4/0x290 [ 839.046253][T15651] ? __pfx_tty_ioctl+0x10/0x10 [ 839.046269][T15651] __x64_sys_ioctl+0x18e/0x210 [ 839.046287][T15651] do_syscall_64+0x106/0xf80 [ 839.046297][T15651] ? clear_bhb_loop+0x40/0x90 [ 839.046311][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.046322][T15651] RIP: 0033:0x7f25e9d9c819 [ 839.046332][T15651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.046342][T15651] RSP: 002b:00007f25eab82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 839.046353][T15651] RAX: ffffffffffffffda RBX: 00007f25ea015fa0 RCX: 00007f25e9d9c819 [ 839.046360][T15651] RDX: 00002000000003c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 839.046367][T15651] RBP: 00007f25eab82090 R08: 0000000000000000 R09: 0000000000000000 [ 839.046373][T15651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.046379][T15651] R13: 00007f25ea016038 R14: 00007f25ea015fa0 R15: 00007ffeb0885198 [ 839.046393][T15651] [ 839.046426][T15651] debugfs: out of free dentries, can not create file 'netdev@ffff88802ba7c620' [ 840.463206][ T795] net_ratelimit: 49 callbacks suppressed [ 840.463221][ T795] bond1: (slave macvlan2): failed to get link speed/duplex [ 840.489751][ T7051] bond2: (slave macvlan2): failed to get link speed/duplex [ 840.593276][ T7051] bond1: (slave macvlan2): failed to get link speed/duplex [ 840.653598][T15667] openvswitch: netlink: ct_state flags ffffffff unsupported [ 840.676839][ T7051] bond2: (slave macvlan2): failed to get link speed/duplex [ 840.717230][ T3541] bond1: (slave macvlan2): failed to get link speed/duplex [ 840.810463][ T3541] bond2: (slave macvlan2): failed to get link speed/duplex [ 840.837566][ T7051] bond1: (slave macvlan2): failed to get link speed/duplex [ 841.070176][ T7051] bond2: (slave macvlan2): failed to get link speed/duplex [ 841.116783][ T7051] bond1: (slave macvlan2): failed to get link speed/duplex [ 841.141151][ T30] audit: type=1804 audit(1775620570.435:1952): pid=15674 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2509" name="bus" dev="ramfs" ino=69336 res=1 errno=0 [ 841.206210][ T30] audit: type=1804 audit(1775620570.435:1953): pid=15674 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.2509" name="bus" dev="ramfs" ino=69336 res=1 errno=0 [ 842.254753][T15686] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 842.262680][T15686] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 842.272816][T15686] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 842.280719][T15686] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 842.296870][ T5945] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 842.471231][ T5945] usb 6-1: config 127 has an invalid interface number: 48 but max is 0 [ 842.481697][ T5945] usb 6-1: config 127 has no interface number 0 [ 842.719732][ T5945] usb 6-1: too many endpoints for config 127 interface 48 altsetting 49: 55, using maximum allowed: 30 [ 842.741687][ T5945] usb 6-1: config 127 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 842.775327][ T5945] usb 6-1: config 127 interface 48 has no altsetting 0 [ 842.783277][ T5945] usb 6-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=ca.8e [ 842.793501][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.319613][ T5945] usb 6-1: string descriptor 0 read error: -71 [ 845.488661][ T5945] usb 6-1: USB disconnect, device number 76 [ 845.553765][T15280] net_ratelimit: 54 callbacks suppressed [ 845.553783][T15280] bond2: (slave macvlan2): failed to get link speed/duplex [ 845.596947][ T795] bond1: (slave macvlan2): failed to get link speed/duplex [ 845.618461][ T30] audit: type=1400 audit(1775620574.905:1954): avc: denied { read } for pid=15708 comm="syz.1.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 845.866822][ T795] bond2: (slave macvlan2): failed to get link speed/duplex [ 845.995603][ T795] bond2: (slave macvlan2): failed to get link speed/duplex [ 846.016775][ T795] bond1: (slave macvlan2): failed to get link speed/duplex [ 846.156975][ T7250] bond2: (slave macvlan2): failed to get link speed/duplex [ 846.164222][ T7250] bond1: (slave macvlan2): failed to get link speed/duplex [ 846.267513][ T6561] bond2: (slave macvlan2): failed to get link speed/duplex [ 846.327722][ T7250] bond1: (slave macvlan2): failed to get link speed/duplex [ 846.376943][ T7250] bond2: (slave macvlan2): failed to get link speed/duplex [ 846.930174][T15741] netlink: 'syz.5.2526': attribute type 1 has an invalid length. [ 846.943915][T15741] netlink: 760 bytes leftover after parsing attributes in process `syz.5.2526'. [ 846.953104][T15741] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2526'. [ 847.018929][ T5945] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 847.197316][ T5945] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 847.218987][ T5945] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 847.229254][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.249430][ T5945] usb 2-1: Product: syz [ 847.253623][ T5945] usb 2-1: Manufacturer: syz [ 847.267450][ T5945] usb 2-1: SerialNumber: syz [ 847.313056][ T5945] usb 2-1: config 0 descriptor?? [ 847.341655][ T5945] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 847.387523][ T5945] usb 2-1: setting power ON [ 847.409373][ T5945] dvb-usb: bulk message failed: -22 (2/0) [ 847.522131][ T5945] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 847.551401][ T5945] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 847.566632][ T5945] dvb_usb_cxusb 2-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 849.304030][T15758] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2530'. [ 849.677346][T15762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2531'. [ 849.901680][ T5945] usb 2-1: USB disconnect, device number 53 [ 850.578896][ T10] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 850.946806][ T6561] net_ratelimit: 14 callbacks suppressed [ 850.946827][ T6561] bond1: (slave macvlan2): failed to get link speed/duplex [ 850.976838][ T8125] bond2: (slave macvlan2): failed to get link speed/duplex [ 851.001235][T15773] netlink: 'syz.0.2534': attribute type 10 has an invalid length. [ 851.009537][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 851.021347][T15773] syz_tun: entered promiscuous mode [ 851.026791][ T5934] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 851.030641][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 851.051251][ T10] usb 3-1: config 0 has no interface number 0 [ 851.064330][T15773] bond2: option mode: unable to set because the bond device has slaves [ 851.088510][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 851.097618][ T8125] bond1: (slave macvlan2): failed to get link speed/duplex [ 851.097663][ T8125] bond2: (slave macvlan2): failed to get link speed/duplex [ 851.136720][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.145310][ T10] usb 3-1: Product: syz [ 851.167236][ T10] usb 3-1: Manufacturer: syz [ 851.171859][ T10] usb 3-1: SerialNumber: syz [ 851.178312][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 851.188838][ T10] usb 3-1: config 0 descriptor?? [ 851.206791][ T6561] bond2: (slave macvlan2): failed to get link speed/duplex [ 851.218761][ T5934] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 851.228203][ T6561] bond1: (slave macvlan2): failed to get link speed/duplex [ 851.254939][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.278199][ T5934] usb 2-1: config 0 descriptor?? [ 851.324006][ T8125] bond2: (slave macvlan2): failed to get link speed/duplex [ 851.367554][ T8125] bond1: (slave macvlan2): failed to get link speed/duplex [ 851.377623][T15782] fuse: Unknown parameter 'r­ãöºQNÀ ‘' [ 851.460223][ T8125] bond2: (slave macvlan2): failed to get link speed/duplex [ 851.527252][ T8125] bond1: (slave macvlan2): failed to get link speed/duplex [ 852.134311][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 852.318307][ T5934] ath6kl: Failed to submit usb control message: -110 [ 852.340586][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 852.694311][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 853.079683][ T5934] ath6kl: unable to send the bmi data to the device: -110 [ 853.087052][ T5934] ath6kl: Unable to send get target info: -110 [ 853.096113][ T5934] ath6kl: Failed to init ath6kl core: -110 [ 853.115514][ T5934] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 853.179773][ T5934] usb 2-1: USB disconnect, device number 54 [ 853.220945][ T10] usb 3-1: USB disconnect, device number 92 [ 853.302090][T15796] netlink: 'syz.1.2540': attribute type 10 has an invalid length. [ 853.374400][T15798] bond2: option mode: unable to set because the bond device has slaves [ 853.390143][T15798] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 853.505553][T15801] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 853.513565][T15801] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 853.523691][T15801] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 853.531717][T15801] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 853.677199][ T5934] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 853.924575][ T5934] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 854.027922][ T5934] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 854.037560][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.045581][ T5934] usb 6-1: Product: syz [ 854.082582][ T5934] usb 6-1: Manufacturer: syz [ 854.175759][ T5934] usb 6-1: SerialNumber: syz [ 854.722071][ T5934] usb 6-1: config 0 descriptor?? [ 854.803365][T15814] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2546'. [ 854.825107][ T5934] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 855.639400][ T5934] usb 6-1: setting power ON [ 855.643962][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 855.665347][ T5934] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 855.697780][ T5934] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 855.719958][ T5934] dvb_usb_cxusb 6-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 855.783609][T15822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2548'. [ 855.872975][T15824] netlink: 'syz.0.2549': attribute type 10 has an invalid length. [ 855.911362][T15824] 8021q: adding VLAN 0 to HW filter on device bond3 [ 855.932370][T15824] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 855.977406][ T145] net_ratelimit: 57 callbacks suppressed [ 855.977425][ T145] bond1: (slave macvlan2): failed to get link speed/duplex [ 855.996981][ T145] bond2: (slave macvlan2): failed to get link speed/duplex [ 856.093143][T15827] tipc: New replicast peer: 255.255.255.255 [ 856.100574][T15827] tipc: Enabled bearer , priority 10 [ 856.116771][ T62] bond2: (slave macvlan2): failed to get link speed/duplex [ 856.126959][ T62] bond1: (slave macvlan2): failed to get link speed/duplex [ 856.177921][ T30] audit: type=1804 audit(1775620585.475:1955): pid=15829 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2551" name="bus" dev="ramfs" ino=70391 res=1 errno=0 [ 856.226810][ T62] bond2: (slave macvlan2): failed to get link speed/duplex [ 856.253102][ T145] bond1: (slave macvlan2): failed to get link speed/duplex [ 856.291377][ T30] audit: type=1804 audit(1775620585.495:1956): pid=15829 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.2551" name="bus" dev="ramfs" ino=70391 res=1 errno=0 [ 856.324913][T15832] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2547'. [ 856.356948][ T145] bond2: (slave macvlan2): failed to get link speed/duplex [ 856.369225][T15834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2552'. [ 856.466809][ T6561] bond2: (slave macvlan2): failed to get link speed/duplex [ 856.484435][ T145] bond1: (slave macvlan2): failed to get link speed/duplex [ 856.615235][ T145] bond2: (slave macvlan2): failed to get link speed/duplex [ 857.060718][ T5912] usb 6-1: USB disconnect, device number 77 [ 857.106507][T15841] FAULT_INJECTION: forcing a failure. [ 857.106507][T15841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.120459][ T5934] tipc: Node number set to 408862546 [ 857.128135][T15841] CPU: 1 UID: 0 PID: 15841 Comm: syz.5.2553 Tainted: G L syzkaller #0 PREEMPT(full) [ 857.128163][T15841] Tainted: [L]=SOFTLOCKUP [ 857.128169][T15841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 857.128184][T15841] Call Trace: [ 857.128189][T15841] [ 857.128195][T15841] dump_stack_lvl+0x100/0x190 [ 857.128226][T15841] should_fail_ex.cold+0x5/0xa [ 857.128247][T15841] _copy_from_user+0x2e/0xd0 [ 857.128266][T15841] copy_msghdr_from_user+0x9f/0x4f0 [ 857.128286][T15841] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 857.128311][T15841] ? __pfx__kstrtoull+0x10/0x10 [ 857.128337][T15841] ___sys_sendmsg+0x106/0x1e0 [ 857.128357][T15841] ? __pfx____sys_sendmsg+0x10/0x10 [ 857.128385][T15841] ? find_held_lock+0x2b/0x80 [ 857.128422][T15841] __sys_sendmmsg+0x205/0x430 [ 857.128448][T15841] ? __pfx___sys_sendmmsg+0x10/0x10 [ 857.128479][T15841] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 857.128507][T15841] ? fput+0x79/0x100 [ 857.128527][T15841] ? ksys_write+0x1ac/0x250 [ 857.128543][T15841] ? __pfx_ksys_write+0x10/0x10 [ 857.128563][T15841] __x64_sys_sendmmsg+0x9c/0x100 [ 857.128585][T15841] ? lockdep_hardirqs_on+0x78/0x100 [ 857.128622][T15841] do_syscall_64+0x106/0xf80 [ 857.128637][T15841] ? clear_bhb_loop+0x40/0x90 [ 857.128660][T15841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.128678][T15841] RIP: 0033:0x7f9a5bb9c819 [ 857.128694][T15841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.128710][T15841] RSP: 002b:00007f9a59df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 857.128728][T15841] RAX: ffffffffffffffda RBX: 00007f9a5be15fa0 RCX: 00007f9a5bb9c819 [ 857.128741][T15841] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 857.128752][T15841] RBP: 00007f9a59df6090 R08: 0000000000000000 R09: 0000000000000000 [ 857.128763][T15841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.128774][T15841] R13: 00007f9a5be16038 R14: 00007f9a5be15fa0 R15: 00007ffd38818628 [ 857.128799][T15841] [ 857.403106][ T30] audit: type=1400 audit(1775620586.695:1957): avc: denied { ioctl } for pid=15842 comm="syz.1.2554" path="socket:[70599]" dev="sockfs" ino=70599 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 857.564977][T15845] QAT: failed to copy from user. [ 859.325709][ T30] audit: type=1804 audit(1775620588.615:1958): pid=15875 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2562" name="bus" dev="ramfs" ino=71745 res=1 errno=0 [ 859.362064][ T30] audit: type=1804 audit(1775620588.645:1959): pid=15875 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2562" name="bus" dev="ramfs" ino=71745 res=1 errno=0 [ 860.311128][T15883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.324563][T15883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.533287][ T6561] net_ratelimit: 39 callbacks suppressed [ 861.533300][ T6561] bond2: (slave macvlan2): failed to get link speed/duplex [ 861.619354][ T6561] bond1: (slave macvlan2): failed to get link speed/duplex [ 861.684177][ T62] bond2: (slave macvlan2): failed to get link speed/duplex [ 861.736824][ T62] bond1: (slave macvlan2): failed to get link speed/duplex [ 861.758856][ T30] audit: type=1326 audit(1775620591.055:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15885 comm="syz.2.2565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d4659c819 code=0x0 [ 861.806957][ T62] bond2: (slave macvlan2): failed to get link speed/duplex [ 861.896131][ T62] bond1: (slave macvlan2): failed to get link speed/duplex [ 861.926766][ T62] bond2: (slave macvlan2): failed to get link speed/duplex [ 862.048898][ T3541] bond1: (slave macvlan2): failed to get link speed/duplex [ 862.077431][ T3541] bond2: (slave macvlan2): failed to get link speed/duplex [ 862.406812][ T3541] bond1: (slave macvlan2): failed to get link speed/duplex [ 862.937260][ T5912] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 863.336734][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 863.363126][ T5912] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 863.373109][ T5912] usb 1-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 863.446812][ T5912] usb 1-1: config 1 interface 0 has no altsetting 0 [ 863.471293][ T30] audit: type=1804 audit(1775620592.765:1961): pid=15920 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2574" name="bus" dev="ramfs" ino=71922 res=1 errno=0 [ 863.511162][ T5912] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 863.524907][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.553446][ T5912] usb 1-1: Product: syz [ 863.563785][ T30] audit: type=1804 audit(1775620592.765:1962): pid=15920 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.2574" name="bus" dev="ramfs" ino=71922 res=1 errno=0 [ 863.570511][ T5912] usb 1-1: Manufacturer: syz [ 863.667534][ T5912] usb 1-1: SerialNumber: syz [ 863.708620][T15912] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 863.716201][T15912] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 863.797351][ T30] audit: type=1326 audit(1775620593.075:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15925 comm="syz.6.2576" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25e9d9c819 code=0x0 [ 864.157743][T15937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2577'. [ 864.221114][ T5814] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 864.354786][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2578'. [ 864.471283][ T5912] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 83 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 864.485436][ T5912] usb 1-1: USB disconnect, device number 83 [ 864.493978][ T5912] usblp0: removed [ 864.567317][ T30] audit: type=1400 audit(1775620593.865:1964): avc: denied { append } for pid=15942 comm="syz.0.2579" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 864.672197][T15940] nbd: socks must be embedded in a SOCK_ITEM attr [ 865.589570][ T30] audit: type=1400 audit(1775620594.875:1965): avc: denied { append } for pid=15950 comm="syz.6.2580" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 865.601599][ T5798] udevd[5798]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 865.687320][ T7717] udevd[7717]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 865.746760][ T5912] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 865.759158][T15957] QAT: failed to copy from user cfg_data. [ 865.918280][ T5912] usb 2-1: config 120 has an invalid interface number: 138 but max is 0 [ 865.945255][ T5912] usb 2-1: config 120 has an invalid descriptor of length 0, skipping remainder of the config [ 865.979341][ T5912] usb 2-1: config 120 has no interface number 0 [ 865.995224][ T5912] usb 2-1: config 120 interface 138 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 866.022266][ T5912] usb 2-1: config 120 interface 138 has no altsetting 0 [ 866.039110][ T5912] usb 2-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 866.057343][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.072844][ T5912] usb 2-1: Product: syz [ 866.081206][ T5912] usb 2-1: Manufacturer: syz [ 866.091582][ T5912] usb 2-1: SerialNumber: syz [ 866.558389][ T7051] net_ratelimit: 60 callbacks suppressed [ 866.558424][ T7051] bond2: (slave macvlan2): failed to get link speed/duplex [ 866.987544][ T5912] ums-usbat 2-1:120.138: USB Mass Storage device detected [ 867.037644][ T8125] bond1: (slave macvlan2): failed to get link speed/duplex [ 867.049283][ T5912] ums-usbat 2-1:120.138: This device (03f0,0307,0001 S ee P 80) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 867.049283][ T5912] Please send a copy of this message to and [ 867.137761][ T7051] bond2: (slave macvlan2): failed to get link speed/duplex [ 867.150087][ T5912] usb 2-1: USB disconnect, device number 55 [ 867.169206][ T30] audit: type=1400 audit(1775620596.465:1966): avc: denied { bind } for pid=15968 comm="syz.1.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 867.204758][ T7051] bond1: (slave macvlan2): failed to get link speed/duplex [ 867.264693][ T8125] bond2: (slave macvlan2): failed to get link speed/duplex [ 867.317439][ T8125] bond1: (slave macvlan2): failed to get link speed/duplex [ 867.378650][ T3541] bond2: (slave macvlan2): failed to get link speed/duplex [ 867.437405][ T3541] bond1: (slave macvlan2): failed to get link speed/duplex [ 867.537349][ T8125] bond2: (slave macvlan2): failed to get link speed/duplex [ 867.636835][ T30] audit: type=1804 audit(1775620596.925:1967): pid=15976 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2586" name="bus" dev="ramfs" ino=72077 res=1 errno=0 [ 867.697583][ T8125] bond1: (slave macvlan2): failed to get link speed/duplex [ 867.702363][ T30] audit: type=1804 audit(1775620596.935:1968): pid=15976 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.2586" name="bus" dev="ramfs" ino=72077 res=1 errno=0 [ 867.837463][ T5810] Bluetooth: hci2: command 0x1003 tx timeout [ 867.837767][ T5814] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 868.146788][ T5912] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 868.740529][ T5912] usb 6-1: Using ep0 maxpacket: 16 [ 868.755062][ T5912] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 868.763413][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.808726][ T5912] usb 6-1: config 0 has no interface number 0 [ 868.823850][ T5912] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 868.841731][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.858250][ T5912] usb 6-1: Product: syz [ 868.864998][ T5912] usb 6-1: Manufacturer: syz [ 868.883810][ T5912] usb 6-1: SerialNumber: syz [ 868.900909][ T5912] usb 6-1: config 0 descriptor?? [ 868.922086][ T5912] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 868.952495][ T5912] uvcvideo 6-1:0.105: No valid video chain found. [ 869.046479][T15989] netlink: 'syz.1.2589': attribute type 10 has an invalid length. [ 869.057232][T15989] bond2: option mode: unable to set because the bond device has slaves [ 869.074321][T15989] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 869.346998][ T24] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 869.603760][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.612911][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.657808][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 869.746004][ T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 869.761090][ T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 869.782895][ T5934] usb 6-1: USB disconnect, device number 79 [ 869.808952][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 869.837468][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.857458][ T24] usb 1-1: Product: á Š [ 869.861852][ T24] usb 1-1: Manufacturer: Ñ [ 869.879052][ T24] usb 1-1: SerialNumber: syz [ 870.319979][ T24] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 870.370754][T16013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2595'. [ 870.396070][ T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 870.526886][ T24] usb 1-1: USB disconnect, device number 84 [ 870.562565][ T7717] udevd[7717]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 871.295840][ T30] audit: type=1400 audit(1775620600.585:1969): avc: denied { name_bind } for pid=16010 comm="syz.5.2597" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 871.343286][ T30] audit: type=1804 audit(1775620600.635:1970): pid=16023 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2599" name="bus" dev="ramfs" ino=72204 res=1 errno=0 [ 871.417918][ T30] audit: type=1804 audit(1775620600.635:1971): pid=16023 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.2599" name="bus" dev="ramfs" ino=72204 res=1 errno=0 [ 871.627698][ T3541] net_ratelimit: 54 callbacks suppressed [ 871.627717][ T3541] bond1: (slave macvlan2): failed to get link speed/duplex [ 871.663276][T16026] netlink: 'syz.0.2601': attribute type 11 has an invalid length. [ 871.678197][ T3541] bond2: (slave macvlan2): failed to get link speed/duplex [ 871.817294][T13463] tipc: Disabling bearer [ 871.886879][ T8125] bond2: (slave macvlan2): failed to get link speed/duplex [ 871.906841][ T8125] bond1: (slave macvlan2): failed to get link speed/duplex [ 871.996793][ T8125] bond2: (slave macvlan2): failed to get link speed/duplex [ 872.056782][ T8125] bond1: (slave macvlan2): failed to get link speed/duplex [ 872.146792][ T7250] bond2: (slave macvlan2): failed to get link speed/duplex [ 872.166889][ T3541] bond1: (slave macvlan2): failed to get link speed/duplex [ 872.325694][ T8125] bond2: (slave macvlan2): failed to get link speed/duplex [ 872.338433][T16018] team0: entered promiscuous mode [ 872.351746][T16018] team_slave_0: entered promiscuous mode [ 872.364092][T16018] team_slave_1: entered promiscuous mode [ 872.406844][ T7250] bond1: (slave macvlan2): failed to get link speed/duplex [ 872.833151][T16010] team0: left promiscuous mode [ 872.848471][T16010] team_slave_0: left promiscuous mode [ 872.859050][T16010] team_slave_1: left promiscuous mode [ 873.285181][T12598] .`: (slave syz_tun): Releasing backup interface [ 873.380124][T16046] FAULT_INJECTION: forcing a failure. [ 873.380124][T16046] name failslab, interval 1, probability 0, space 0, times 0 [ 873.393372][T16046] CPU: 1 UID: 0 PID: 16046 Comm: syz.5.2605 Tainted: G L syzkaller #0 PREEMPT(full) [ 873.393398][T16046] Tainted: [L]=SOFTLOCKUP [ 873.393405][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 873.393416][T16046] Call Trace: [ 873.393423][T16046] [ 873.393430][T16046] dump_stack_lvl+0x100/0x190 [ 873.393464][T16046] should_fail_ex.cold+0x5/0xa [ 873.393489][T16046] ? tomoyo_encode2+0xfb/0x3c0 [ 873.393515][T16046] should_failslab+0xc2/0x120 [ 873.393536][T16046] __kmalloc_noprof+0xe0/0x850 [ 873.393568][T16046] tomoyo_encode2+0xfb/0x3c0 [ 873.393595][T16046] ? strlen+0x60/0xa0 [ 873.393616][T16046] tomoyo_encode+0x29/0x50 [ 873.393648][T16046] tomoyo_realpath_from_path+0x18c/0x690 [ 873.393682][T16046] tomoyo_path_number_perm+0x23c/0x580 [ 873.393705][T16046] ? tomoyo_path_number_perm+0x22e/0x580 [ 873.393730][T16046] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 873.393783][T16046] ? hook_file_ioctl_common+0x146/0x410 [ 873.393807][T16046] ? __x64_sys_ioctl+0x94/0x210 [ 873.393832][T16046] ? __sanitizer_cov_trace_pc+0xb/0x70 [ 873.393862][T16046] security_file_ioctl+0xd3/0x230 [ 873.393890][T16046] __x64_sys_ioctl+0xb7/0x210 [ 873.393920][T16046] do_syscall_64+0x106/0xf80 [ 873.393935][T16046] ? clear_bhb_loop+0x40/0x90 [ 873.393959][T16046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.393977][T16046] RIP: 0033:0x7f9a5bb9c819 [ 873.393992][T16046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.394009][T16046] RSP: 002b:00007f9a59db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 873.394027][T16046] RAX: ffffffffffffffda RBX: 00007f9a5be16180 RCX: 00007f9a5bb9c819 [ 873.394039][T16046] RDX: 00002000000000c0 RSI: 00000000c0045627 RDI: 0000000000000003 [ 873.394049][T16046] RBP: 00007f9a59db4090 R08: 0000000000000000 R09: 0000000000000000 [ 873.394060][T16046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.394071][T16046] R13: 00007f9a5be16218 R14: 00007f9a5be16180 R15: 00007ffd38818628 [ 873.394096][T16046] [ 873.394165][T16046] ERROR: Out of memory at tomoyo_realpath_from_path. [ 874.516545][T16069] FAULT_INJECTION: forcing a failure. [ 874.516545][T16069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.529871][T16069] CPU: 0 UID: 0 PID: 16069 Comm: syz.5.2612 Tainted: G L syzkaller #0 PREEMPT(full) [ 874.529900][T16069] Tainted: [L]=SOFTLOCKUP [ 874.529907][T16069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 874.529916][T16069] Call Trace: [ 874.529923][T16069] [ 874.529929][T16069] dump_stack_lvl+0x100/0x190 [ 874.529965][T16069] should_fail_ex.cold+0x5/0xa [ 874.529989][T16069] strncpy_from_user+0x3b/0x2d0 [ 874.530012][T16069] do_getname+0x78/0x390 [ 874.530036][T16069] user_path_at+0x26/0x60 [ 874.530055][T16069] __x64_sys_mount+0x1fb/0x310 [ 874.530078][T16069] ? __pfx___x64_sys_mount+0x10/0x10 [ 874.530108][T16069] do_syscall_64+0x106/0xf80 [ 874.530123][T16069] ? clear_bhb_loop+0x40/0x90 [ 874.530144][T16069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.530161][T16069] RIP: 0033:0x7f9a5bb9c819 [ 874.530178][T16069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.530195][T16069] RSP: 002b:00007f9a59dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 874.530214][T16069] RAX: ffffffffffffffda RBX: 00007f9a5be16090 RCX: 00007f9a5bb9c819 [ 874.530226][T16069] RDX: 0000200000003c80 RSI: 0000200000000140 RDI: 0000000000000000 [ 874.530235][T16069] RBP: 00007f9a59dd5090 R08: 0000200000003cc0 R09: 0000000000000000 [ 874.530244][T16069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.530253][T16069] R13: 00007f9a5be16128 R14: 00007f9a5be16090 R15: 00007ffd38818628 [ 874.530277][T16069] [ 875.330971][ T30] audit: type=1400 audit(1775620604.615:1972): avc: denied { create } for pid=16074 comm="syz.2.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 875.374578][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 875.459011][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 875.493553][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 875.666805][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 875.672235][T16082] IPv6: NLM_F_CREATE should be specified when creating new route [ 875.689280][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 875.744640][ T30] audit: type=1400 audit(1775620605.035:1973): avc: denied { mounton } for pid=16077 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 875.818299][T16082] netlink: 'syz.5.2617': attribute type 1 has an invalid length. [ 875.950933][ T30] audit: type=1400 audit(1775620605.245:1974): avc: denied { map } for pid=16084 comm="syz.2.2618" path="/dev/radio1" dev="devtmpfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 876.916957][ T30] audit: type=1400 audit(1775620605.555:1975): avc: denied { bind } for pid=16084 comm="syz.2.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 876.944549][ T62] net_ratelimit: 44 callbacks suppressed [ 876.944566][ T62] bond2: (slave macvlan2): failed to get link speed/duplex [ 876.999569][T16089] FAULT_INJECTION: forcing a failure. [ 876.999569][T16089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.015197][ T62] bond1: (slave macvlan2): failed to get link speed/duplex [ 877.016071][T16089] CPU: 0 UID: 0 PID: 16089 Comm: syz.0.2619 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.016094][T16089] Tainted: [L]=SOFTLOCKUP [ 877.016100][T16089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 877.016109][T16089] Call Trace: [ 877.016114][T16089] [ 877.016121][T16089] dump_stack_lvl+0x100/0x190 [ 877.016151][T16089] should_fail_ex.cold+0x5/0xa [ 877.016172][T16089] _copy_to_user+0x32/0xd0 [ 877.016191][T16089] simple_read_from_buffer+0xcb/0x170 [ 877.016210][T16089] proc_fail_nth_read+0x1af/0x230 [ 877.016233][T16089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 877.016257][T16089] ? rw_verify_area+0xce/0x6d0 [ 877.016278][T16089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 877.016305][T16089] vfs_read+0x1e4/0xb30 [ 877.016323][T16089] ? __pfx_vfs_read+0x10/0x10 [ 877.016337][T16089] ? __fget_files+0x215/0x3d0 [ 877.016359][T16089] ? __fget_files+0x21f/0x3d0 [ 877.016381][T16089] ksys_read+0x12a/0x250 [ 877.016396][T16089] ? __pfx_ksys_read+0x10/0x10 [ 877.016417][T16089] do_syscall_64+0x106/0xf80 [ 877.016432][T16089] ? clear_bhb_loop+0x40/0x90 [ 877.016451][T16089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.016467][T16089] RIP: 0033:0x7f34ea55d04e [ 877.016481][T16089] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 877.016495][T16089] RSP: 002b:00007f34eb3f3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 877.016511][T16089] RAX: ffffffffffffffda RBX: 00007f34eb3f46c0 RCX: 00007f34ea55d04e [ 877.016521][T16089] RDX: 000000000000000f RSI: 00007f34eb3f40a0 RDI: 000000000000000a [ 877.016530][T16089] RBP: 00007f34eb3f4090 R08: 0000000000000000 R09: 0000000000000000 [ 877.016540][T16089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 877.016549][T16089] R13: 00007f34ea816038 R14: 00007f34ea815fa0 R15: 00007ffc7f0c53e8 [ 877.016571][T16089] [ 877.046891][ T10] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 877.223156][ T3541] bond2: (slave macvlan2): failed to get link speed/duplex [ 877.336737][ T3541] bond1: (slave macvlan2): failed to get link speed/duplex [ 877.357225][T16077] wlan1 speed is unknown, defaulting to 1000 [ 877.427443][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2621'. [ 877.436318][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2621'. [ 877.446483][ T62] bond2: (slave macvlan2): failed to get link speed/duplex [ 877.481213][T14189] bond1: (slave macvlan2): failed to get link speed/duplex [ 877.567152][T14189] bond2: (slave macvlan2): failed to get link speed/duplex [ 877.608942][ T62] bond1: (slave macvlan2): failed to get link speed/duplex [ 877.673255][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 877.684929][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 877.703568][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 877.713470][ T3541] bond2: (slave macvlan2): failed to get link speed/duplex [ 877.727138][ T3541] bond1: (slave macvlan2): failed to get link speed/duplex [ 877.753590][ T30] audit: type=1400 audit(1775620607.025:1976): avc: denied { lock } for pid=16093 comm="syz.0.2622" path="socket:[72527]" dev="sockfs" ino=72527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 877.778670][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 877.804279][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 877.821462][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 877.836889][ T5810] Bluetooth: hci2: command tx timeout [ 877.865617][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 877.885807][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.264982][T16101] input: syz1 as /devices/virtual/input/input39 [ 878.437686][ T10] usb 6-1: usb_control_msg returned -32 [ 878.443301][ T10] usbtmc 6-1:16.0: can't read capabilities [ 878.516151][T16077] chnl_net:caif_netlink_parms(): no params data found [ 878.833130][T16107] random: crng reseeded on system resumption [ 879.402316][ T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 879.414247][T16077] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.849441][T16114] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 879.850161][T16077] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.872191][T16077] bridge_slave_0: entered allmulticast mode [ 879.880803][T16077] bridge_slave_0: entered promiscuous mode [ 879.890128][T16077] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.917241][ T5810] Bluetooth: hci2: command tx timeout [ 879.926473][T16077] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.942127][T16077] bridge_slave_1: entered allmulticast mode [ 879.960318][T16077] bridge_slave_1: entered promiscuous mode [ 879.977225][ T10] usb 2-1: device descriptor read/64, error -71 [ 880.048910][T16077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.073053][T16077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.151308][T16077] team0: Port device team_slave_0 added [ 880.172863][T16077] team0: Port device team_slave_1 added [ 880.216856][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 880.224797][T16077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.242228][T16077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.293432][T16077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.321365][T16077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.330714][T16077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.358226][T16077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 880.369127][ T30] audit: type=1804 audit(1775620609.655:1977): pid=16116 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2625" name="bus" dev="ramfs" ino=72667 res=1 errno=0 [ 880.395973][ T30] audit: type=1804 audit(1775620609.655:1978): pid=16116 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.2625" name="bus" dev="ramfs" ino=72667 res=1 errno=0 [ 880.417171][ T10] usb 2-1: device descriptor read/64, error -71 [ 880.527092][ T10] usb usb2-port1: attempt power cycle [ 880.614957][T16077] hsr_slave_0: entered promiscuous mode [ 880.739076][T16077] hsr_slave_1: entered promiscuous mode [ 880.746922][ T5912] usb 6-1: USB disconnect, device number 80 [ 880.866791][ T10] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 880.898668][ T10] usb 2-1: device descriptor read/8, error -71 [ 881.146827][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 881.172603][ T10] usb 2-1: device descriptor read/8, error -71 [ 881.292408][ T10] usb usb2-port1: unable to enumerate USB device [ 881.891639][T16077] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 881.942903][T16077] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 882.040911][ T5810] Bluetooth: hci2: command tx timeout [ 882.084183][T16132] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 882.093003][T16132] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 882.105354][T16132] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 882.113295][T16132] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 882.115554][T16077] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 882.336765][ T5857] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 882.368389][T16077] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 882.487426][ T7250] net_ratelimit: 16 callbacks suppressed [ 882.487444][ T7250] bond2: (slave macvlan2): failed to get link speed/duplex [ 882.488731][ T5857] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 882.511059][ T7051] bond1: (slave macvlan2): failed to get link speed/duplex [ 882.737107][ T7051] bond2: (slave macvlan2): failed to get link speed/duplex [ 882.745759][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.780724][ T5857] usb 2-1: config 0 descriptor?? [ 882.792096][T16077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.809330][ T5857] cp210x 2-1:0.0: cp210x converter detected [ 882.947660][ T3541] bond1: (slave macvlan2): failed to get link speed/duplex [ 882.958306][T16077] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.171625][T14189] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.178924][T14189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.267659][ T7051] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.274802][ T7051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.317285][ T7250] bond2: (slave macvlan2): failed to get link speed/duplex [ 883.361129][ T7051] bond1: (slave macvlan2): failed to get link speed/duplex [ 883.500989][T14189] bond1: (slave macvlan2): failed to get link speed/duplex [ 883.617105][ T795] bond2: (slave macvlan2): failed to get link speed/duplex [ 883.701731][T14189] bond1: (slave macvlan2): failed to get link speed/duplex [ 883.730711][T16157] netlink: 'syz.5.2636': attribute type 10 has an invalid length. [ 883.751674][T16157] bond2: option mode: unable to set because the bond device has slaves [ 883.798454][T16157] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 883.817465][ T7051] bond2: (slave macvlan2): failed to get link speed/duplex [ 883.940824][T16077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.048169][ T30] audit: type=1326 audit(1775620613.335:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16159 comm="syz.2.2638" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d4659c819 code=0x0 [ 884.048484][ T5857] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 884.110439][ T5810] Bluetooth: hci2: command tx timeout [ 884.329951][ T5857] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 884.416822][ T5857] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 884.438311][ T5857] usb 2-1: cp210x converter now attached to ttyUSB0 [ 884.470897][ T5857] usb 2-1: USB disconnect, device number 60 [ 884.492593][ T5857] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 884.513755][ T5857] cp210x 2-1:0.0: device disconnected [ 884.552826][ T30] audit: type=1804 audit(1775620613.845:1980): pid=16176 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2639" name="bus" dev="ramfs" ino=73240 res=1 errno=0 [ 884.617514][ T30] audit: type=1804 audit(1775620613.875:1981): pid=16176 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.2639" name="bus" dev="ramfs" ino=73240 res=1 errno=0 [ 884.747323][ T24] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 884.821029][T16187] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 884.828939][T16187] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 884.837590][T16187] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 884.845400][T16187] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 885.048562][T16077] veth0_vlan: entered promiscuous mode [ 885.079231][T16077] veth1_vlan: entered promiscuous mode [ 885.128604][T16077] veth0_macvtap: entered promiscuous mode [ 885.144873][T16077] veth1_macvtap: entered promiscuous mode [ 885.172417][T16077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.187758][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 885.203179][ T24] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.231258][T16077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.256115][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 885.285013][ T795] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.298210][ T24] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 885.323216][ T795] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.337255][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.353447][ T24] usb 6-1: config 0 descriptor?? [ 885.360423][ T795] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.640354][ T795] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.763679][ T7250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.786063][ T7250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.953690][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 886.137057][ T7051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.147974][ T30] audit: type=1326 audit(1775620615.435:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16195 comm="syz.1.2644" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8b559c819 code=0x0 [ 886.150885][ T24] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 886.171194][ T7051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.179408][ T30] audit: type=1400 audit(1775620615.475:1983): avc: denied { mounton } for pid=16077 comm="syz-executor" path="/root/syzkaller.1kpWka/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 886.300262][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.318815][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.333879][ T30] audit: type=1400 audit(1775620615.515:1984): avc: denied { connect } for pid=16200 comm="syz.0.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 886.365681][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 886.382866][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.411404][ T30] audit: type=1400 audit(1775620615.515:1985): avc: denied { shutdown } for pid=16200 comm="syz.0.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 886.441161][ T30] audit: type=1400 audit(1775620615.535:1986): avc: denied { mounton } for pid=16077 comm="syz-executor" path="/root/syzkaller.1kpWka/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 886.470822][ T10] usb 3-1: config 0 descriptor?? [ 886.496820][ T30] audit: type=1400 audit(1775620615.535:1987): avc: denied { mounton } for pid=16077 comm="syz-executor" path="/root/syzkaller.1kpWka/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=73655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 886.619370][ T30] audit: type=1400 audit(1775620615.535:1988): avc: denied { mounton } for pid=16077 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 886.667154][ T30] audit: type=1400 audit(1775620615.545:1989): avc: denied { mounton } for pid=16077 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 886.793961][T16211] FAULT_INJECTION: forcing a failure. [ 886.793961][T16211] name failslab, interval 1, probability 0, space 0, times 0 [ 886.798840][ T30] audit: type=1400 audit(1775620616.025:1990): avc: denied { create } for pid=16192 comm="syz.2.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 886.883444][ T30] audit: type=1400 audit(1775620616.035:1991): avc: denied { write } for pid=16192 comm="syz.2.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 886.896699][T16211] CPU: 1 UID: 0 PID: 16211 Comm: syz.0.2646 Tainted: G L syzkaller #0 PREEMPT(full) [ 886.896726][T16211] Tainted: [L]=SOFTLOCKUP [ 886.896732][T16211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 886.896742][T16211] Call Trace: [ 886.896747][T16211] [ 886.896754][T16211] dump_stack_lvl+0x100/0x190 [ 886.896786][T16211] should_fail_ex.cold+0x5/0xa [ 886.896808][T16211] should_failslab+0xc2/0x120 [ 886.896825][T16211] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 886.896850][T16211] ? __alloc_skb+0x140/0x710 [ 886.896875][T16211] __alloc_skb+0x140/0x710 [ 886.896895][T16211] ? __alloc_skb+0x5b7/0x710 [ 886.896914][T16211] ? __pfx___alloc_skb+0x10/0x10 [ 886.896936][T16211] ? find_held_lock+0x2b/0x80 [ 886.896960][T16211] netlink_dump+0x19b/0xd30 [ 886.896993][T16211] ? __pfx_netlink_dump+0x10/0x10 [ 886.897014][T16211] ? ip_set_dump_start+0x2e9/0x460 [ 886.897034][T16211] ? __pfx_ip_set_dump_start+0x10/0x10 [ 886.897069][T16211] __netlink_dump_start+0x6d6/0x990 [ 886.897096][T16211] ip_set_dump+0x1c2/0x200 [ 886.897115][T16211] ? __pfx_ip_set_dump+0x10/0x10 [ 886.897131][T16211] ? __pfx_ip_set_dump_start+0x10/0x10 [ 886.897155][T16211] ? __pfx_ip_set_dump_do+0x10/0x10 [ 886.897174][T16211] ? __pfx_ip_set_dump_done+0x10/0x10 [ 886.897201][T16211] nfnetlink_rcv_msg+0x9f4/0x1200 [ 886.897228][T16211] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 886.897251][T16211] ? __lock_acquire+0x4a5/0x2630 [ 886.897291][T16211] ? avc_has_perm_noaudit+0x145/0x3b0 [ 886.897316][T16211] netlink_rcv_skb+0x159/0x420 [ 886.897331][T16211] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 886.897352][T16211] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 886.897377][T16211] ? ns_capable+0xd2/0xf0 [ 886.897398][T16211] nfnetlink_rcv+0x1b3/0x440 [ 886.897418][T16211] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 886.897436][T16211] ? netlink_deliver_tap+0x1ae/0xcc0 [ 886.897463][T16211] netlink_unicast+0x5aa/0x870 [ 886.897481][T16211] ? __pfx_netlink_unicast+0x10/0x10 [ 886.897505][T16211] netlink_sendmsg+0x8b0/0xda0 [ 886.897528][T16211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.897543][T16211] ? __might_fault+0x90/0x140 [ 886.897572][T16211] ____sys_sendmsg+0x9e1/0xb70 [ 886.897588][T16211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.897605][T16211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 886.897632][T16211] ___sys_sendmsg+0x190/0x1e0 [ 886.897651][T16211] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.897696][T16211] __sys_sendmsg+0x170/0x220 [ 886.897718][T16211] ? __pfx___sys_sendmsg+0x10/0x10 [ 886.897754][T16211] do_syscall_64+0x106/0xf80 [ 886.897768][T16211] ? clear_bhb_loop+0x40/0x90 [ 886.897788][T16211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.897803][T16211] RIP: 0033:0x7f34ea59c819 [ 886.897817][T16211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.897831][T16211] RSP: 002b:00007f34eb3f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.897846][T16211] RAX: ffffffffffffffda RBX: 00007f34ea815fa0 RCX: 00007f34ea59c819 [ 886.897857][T16211] RDX: 0000000000040000 RSI: 0000200000002300 RDI: 0000000000000003 [ 886.897866][T16211] RBP: 00007f34eb3f4090 R08: 0000000000000000 R09: 0000000000000000 [ 886.897875][T16211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.897885][T16211] R13: 00007f34ea816038 R14: 00007f34ea815fa0 R15: 00007ffc7f0c53e8 [ 886.897907][T16211] [ 887.409673][ T10] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 887.429212][ T10] cp2112 0003:10C4:EA90.0014: item fetching failed at offset 5/7 [ 887.908235][T16178] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16178 comm=syz.5.2640 [ 887.979668][ T10] cp2112 0003:10C4:EA90.0014: parse failed [ 888.131894][T15280] net_ratelimit: 39 callbacks suppressed [ 888.131913][T15280] bond1: (slave macvlan2): failed to get link speed/duplex [ 888.184726][ T10] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -22 [ 888.301454][ T7250] bond2: (slave macvlan2): failed to get link speed/duplex [ 888.326785][ T7250] bond1: (slave macvlan2): failed to get link speed/duplex [ 888.412703][T16226] FAULT_INJECTION: forcing a failure. [ 888.412703][T16226] name failslab, interval 1, probability 0, space 0, times 0 [ 888.426919][T16226] CPU: 1 UID: 0 PID: 16226 Comm: syz.1.2649 Tainted: G L syzkaller #0 PREEMPT(full) [ 888.426948][T16226] Tainted: [L]=SOFTLOCKUP [ 888.426955][T16226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 888.426966][T16226] Call Trace: [ 888.426973][T16226] [ 888.426980][T16226] dump_stack_lvl+0x100/0x190 [ 888.427017][T16226] should_fail_ex.cold+0x5/0xa [ 888.427042][T16226] should_failslab+0xc2/0x120 [ 888.427062][T16226] __kmalloc_cache_noprof+0x7a/0x6f0 [ 888.427085][T16226] ? snd_mixer_oss_put_volume1_sw.isra.0+0x15d/0x520 [ 888.427120][T16226] snd_mixer_oss_put_volume1_sw.isra.0+0x15d/0x520 [ 888.427144][T16226] snd_mixer_oss_put_recsrc1_sw+0x87/0xc0 [ 888.427165][T16226] snd_mixer_oss_ioctl1+0x10ec/0x1e40 [ 888.427182][T16226] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 888.427210][T16226] ? __pfx_snd_mixer_oss_put_recsrc1_sw+0x10/0x10 [ 888.427237][T16226] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 888.427254][T16226] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 888.427291][T16226] ? __fget_files+0x215/0x3d0 [ 888.427310][T16226] ? hook_file_ioctl_common+0x146/0x410 [ 888.427337][T16226] ? selinux_file_ioctl+0x139/0x290 [ 888.427368][T16226] snd_mixer_oss_ioctl+0x3e/0x50 [ 888.427385][T16226] ? __pfx_snd_mixer_oss_ioctl+0x10/0x10 [ 888.427403][T16226] __x64_sys_ioctl+0x18e/0x210 [ 888.427433][T16226] do_syscall_64+0x106/0xf80 [ 888.427450][T16226] ? clear_bhb_loop+0x40/0x90 [ 888.427472][T16226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.427490][T16226] RIP: 0033:0x7fc8b559c819 [ 888.427506][T16226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.427523][T16226] RSP: 002b:00007fc8b64f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 888.427541][T16226] RAX: ffffffffffffffda RBX: 00007fc8b5816180 RCX: 00007fc8b559c819 [ 888.427553][T16226] RDX: 0000200000004000 RSI: 00000000c0044dff RDI: 0000000000000005 [ 888.427564][T16226] RBP: 00007fc8b64f8090 R08: 0000000000000000 R09: 0000000000000000 [ 888.427574][T16226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.427585][T16226] R13: 00007fc8b5816218 R14: 00007fc8b5816180 R15: 00007ffe8228fd68 [ 888.427611][T16226] [ 888.659869][ T795] bond1: (slave macvlan2): failed to get link speed/duplex [ 888.676789][ T7250] bond2: (slave macvlan2): failed to get link speed/duplex [ 888.776917][T15280] bond1: (slave macvlan2): failed to get link speed/duplex [ 888.786747][T15280] bond2: (slave macvlan2): failed to get link speed/duplex [ 888.796774][ T10] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 888.886817][T15280] bond1: (slave macvlan2): failed to get link speed/duplex [ 888.896792][T15280] bond2: (slave macvlan2): failed to get link speed/duplex [ 888.948935][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 888.972543][ T10] usb 1-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 888.985452][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.995554][ T10] usb 1-1: Product: syz [ 888.999988][ T7051] bond1: (slave macvlan2): failed to get link speed/duplex [ 889.008213][ T10] usb 1-1: Manufacturer: syz [ 889.012881][ T10] usb 1-1: SerialNumber: syz [ 889.175973][T16236] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2652'. [ 889.185699][T16236] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2652'. [ 889.215644][ T7051] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.282070][ T7051] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.328112][ T7051] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.379317][ T7051] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.650474][T16223] tunl0: Caught tx_queue_len zero misconfig [ 889.660700][T16223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.669426][T16223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.696740][T16196] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 889.846747][T16196] usb 8-1: Using ep0 maxpacket: 8 [ 889.854084][T16196] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 889.867879][T16196] usb 8-1: config 179 has no interface number 0 [ 889.875100][T16196] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 889.886364][T16196] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 889.897869][T16196] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 889.909183][T16196] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 889.920823][T16196] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 889.934909][T16196] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 889.944089][T16196] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.958429][T16236] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 890.175250][T16246] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 890.183634][T16246] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 890.193234][T16246] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 890.201420][T16246] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 890.779663][ T792] usb 8-1: USB disconnect, device number 2 [ 890.779673][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 890.779713][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 891.322766][ T10] usb 1-1: Can't get UAC3 power state for id 10 [ 891.341953][ T10] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 891.382100][ T10] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 891.565518][T16254] netlink: 320 bytes leftover after parsing attributes in process `syz.7.2656'. [ 891.575405][T16254] FAULT_INJECTION: forcing a failure. [ 891.575405][T16254] name failslab, interval 1, probability 0, space 0, times 0 [ 891.590397][T16254] CPU: 0 UID: 0 PID: 16254 Comm: syz.7.2656 Tainted: G L syzkaller #0 PREEMPT(full) [ 891.590427][T16254] Tainted: [L]=SOFTLOCKUP [ 891.590434][T16254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 891.590443][T16254] Call Trace: [ 891.590448][T16254] [ 891.590461][T16254] dump_stack_lvl+0x100/0x190 [ 891.590491][T16254] should_fail_ex.cold+0x5/0xa [ 891.590514][T16254] should_failslab+0xc2/0x120 [ 891.590533][T16254] __kmalloc_cache_noprof+0x7a/0x6f0 [ 891.590555][T16254] ? ctnetlink_alloc_filter+0x9f/0xab0 [ 891.590575][T16254] ? mark_held_locks+0x40/0x70 [ 891.590596][T16254] ctnetlink_alloc_filter+0x9f/0xab0 [ 891.590615][T16254] ? __pfx_ctnetlink_alloc_filter+0x10/0x10 [ 891.590645][T16254] ctnetlink_start+0xd4/0x200 [ 891.590665][T16254] __netlink_dump_start+0x60e/0x990 [ 891.590696][T16254] ctnetlink_get_conntrack+0x608/0x7d0 [ 891.590718][T16254] ? __pfx_ctnetlink_get_conntrack+0x10/0x10 [ 891.590738][T16254] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 891.590757][T16254] ? __pfx_ctnetlink_start+0x10/0x10 [ 891.590774][T16254] ? __pfx_ctnetlink_dump_table+0x10/0x10 [ 891.590793][T16254] ? __pfx_ctnetlink_done+0x10/0x10 [ 891.590820][T16254] ? __rcu_read_unlock+0x27f/0x5e0 [ 891.590841][T16254] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 891.590874][T16254] nfnetlink_rcv_msg+0x9f4/0x1200 [ 891.590903][T16254] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 891.590928][T16254] ? __lock_acquire+0x4a5/0x2630 [ 891.590945][T16254] ? sched_clock+0x38/0x60 [ 891.590991][T16254] ? avc_has_perm_noaudit+0x145/0x3b0 [ 891.591017][T16254] netlink_rcv_skb+0x159/0x420 [ 891.591034][T16254] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 891.591058][T16254] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 891.591086][T16254] ? ns_capable+0xd2/0xf0 [ 891.591111][T16254] nfnetlink_rcv+0x1b3/0x440 [ 891.591132][T16254] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 891.591154][T16254] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 891.591174][T16254] ? netlink_unicast+0x580/0x870 [ 891.591194][T16254] netlink_unicast+0x5aa/0x870 [ 891.591214][T16254] ? __pfx_netlink_unicast+0x10/0x10 [ 891.591240][T16254] netlink_sendmsg+0x8b0/0xda0 [ 891.591262][T16254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 891.591278][T16254] ? __might_fault+0x90/0x140 [ 891.591310][T16254] ____sys_sendmsg+0x9e1/0xb70 [ 891.591329][T16254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 891.591348][T16254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 891.591370][T16254] ? kvm_sched_clock_read+0x11/0x20 [ 891.591395][T16254] ? sched_clock+0x38/0x60 [ 891.591420][T16254] ? sched_clock_cpu+0x6c/0x570 [ 891.591439][T16254] ___sys_sendmsg+0x190/0x1e0 [ 891.591466][T16254] ? __pfx____sys_sendmsg+0x10/0x10 [ 891.591486][T16254] ? trace_sched_set_need_resched_tp+0x14d/0x190 [ 891.591542][T16254] __sys_sendmsg+0x170/0x220 [ 891.591568][T16254] ? __pfx___sys_sendmsg+0x10/0x10 [ 891.591609][T16254] do_syscall_64+0x106/0xf80 [ 891.591625][T16254] ? clear_bhb_loop+0x40/0x90 [ 891.591645][T16254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.591663][T16254] RIP: 0033:0x7ff146f9c819 [ 891.591679][T16254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.591695][T16254] RSP: 002b:00007ff147d75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 891.591712][T16254] RAX: ffffffffffffffda RBX: 00007ff147216090 RCX: 00007ff146f9c819 [ 891.591723][T16254] RDX: 0000000000000880 RSI: 0000200000000080 RDI: 0000000000000004 [ 891.591733][T16254] RBP: 00007ff147d75090 R08: 0000000000000000 R09: 0000000000000000 [ 891.591743][T16254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.591753][T16254] R13: 00007ff147216128 R14: 00007ff147216090 R15: 00007ffea4f1c3e8 [ 891.591777][T16254] [ 892.273091][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 892.301040][ T10] usb 1-1: USB disconnect, device number 85 [ 892.352734][ T7719] udevd[7719]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.370499][T16256] macvtap1: entered promiscuous mode [ 892.376396][T16256] macvtap1: entered allmulticast mode [ 892.387646][T16256] syz_tun: entered promiscuous mode [ 892.399534][T16256] syz_tun: entered allmulticast mode [ 892.410490][T16256] team0: Device macvtap1 failed to register rx_handler [ 892.538767][T16256] syz_tun: left allmulticast mode [ 892.544020][T16256] syz_tun: left promiscuous mode [ 893.022983][ T10] usb 6-1: USB disconnect, device number 81 [ 893.137610][ T62] net_ratelimit: 43 callbacks suppressed [ 893.137628][ T62] bond2: (slave macvlan2): failed to get link speed/duplex [ 893.148448][ T9] usb 3-1: USB disconnect, device number 93 [ 893.236850][ T8125] bond1: (slave macvlan2): failed to get link speed/duplex [ 893.321891][ T62] bond2: (slave macvlan2): failed to get link speed/duplex [ 893.438933][ T62] bond1: (slave macvlan2): failed to get link speed/duplex [ 893.506896][ T62] bond2: (slave macvlan2): failed to get link speed/duplex [ 894.496866][ T7051] bond1: (slave macvlan2): failed to get link speed/duplex [ 894.860847][ T7051] bond1: (slave macvlan2): failed to get link speed/duplex [ 895.003671][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 895.003688][ T30] audit: type=1326 audit(1775620624.295:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16274 comm="syz.1.2664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8b559c819 code=0x0 [ 895.107060][ T7051] bond2: (slave macvlan2): failed to get link speed/duplex [ 895.196973][ T62] bond1: (slave macvlan2): failed to get link speed/duplex [ 895.465313][ T30] audit: type=1400 audit(1775620624.545:1998): avc: denied { map } for pid=16290 comm="syz.5.2666" path="socket:[74936]" dev="sockfs" ino=74936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 895.498955][ T62] bond2: (slave macvlan2): failed to get link speed/duplex [ 895.568957][ T10] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 895.824634][ T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 895.834215][ T10] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 895.852214][ T10] usb 3-1: Product: syz [ 895.861484][ T10] usb 3-1: Manufacturer: syz [ 895.866576][ T10] usb 3-1: SerialNumber: syz [ 895.927768][ T10] usb 3-1: config 0 descriptor?? [ 896.087399][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 896.247532][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 896.675335][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.687753][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 896.694746][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 896.705067][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.729060][ T9] usb 2-1: config 0 descriptor?? [ 896.761177][ T10] usb 3-1: USB disconnect, device number 94 [ 897.359401][ T9] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 897.522673][T16320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 897.760845][ T9] usb 2-1: USB disconnect, device number 61 [ 897.817248][ T24] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 898.136688][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 898.220510][ T8125] net_ratelimit: 34 callbacks suppressed [ 898.220530][ T8125] bond2: (slave macvlan2): failed to get link speed/duplex [ 898.220910][ T30] audit: type=1400 audit(1775620627.495:1999): avc: denied { setattr } for pid=16319 comm="syz.0.2674" name="NETLINK" dev="sockfs" ino=74340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 898.460869][ T24] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 898.516798][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.545138][ T8125] bond1: (slave macvlan2): failed to get link speed/duplex [ 898.557326][ T24] usb 6-1: Product: syz [ 898.563968][ T24] usb 6-1: Manufacturer: syz [ 898.592151][ T24] usb 6-1: SerialNumber: syz [ 898.629703][ T1720] bond2: (slave macvlan2): failed to get link speed/duplex [ 898.763532][ T8125] bond1: (slave macvlan2): failed to get link speed/duplex [ 899.146794][ T8125] bond2: (slave macvlan2): failed to get link speed/duplex [ 899.293478][ T30] audit: type=1326 audit(1775620628.575:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16335 comm="syz.2.2678" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d4659c819 code=0x0 [ 899.293967][ T7051] bond2: (slave macvlan2): failed to get link speed/duplex [ 900.232243][ T7051] bond1: (slave macvlan2): failed to get link speed/duplex [ 900.326757][ T3541] bond2: (slave macvlan2): failed to get link speed/duplex [ 900.356772][ T3541] bond1: (slave macvlan2): failed to get link speed/duplex [ 900.456838][ T62] bond2: (slave macvlan2): failed to get link speed/duplex [ 900.697727][T16352] netlink: 'syz.7.2679': attribute type 1 has an invalid length. [ 900.710850][T16352] netlink: 760 bytes leftover after parsing attributes in process `syz.7.2679'. [ 900.735913][T16352] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2679'. [ 900.930349][T16359] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 900.938213][T16359] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 900.947495][T16359] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 900.955282][T16359] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 901.246751][ T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 901.432874][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 901.446315][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 901.495891][ T10] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 901.515815][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.529039][ T10] usb 3-1: Product: syz [ 901.557601][ T10] usb 3-1: Manufacturer: syz [ 901.566992][ T10] usb 3-1: SerialNumber: syz [ 901.581809][ T10] usb 3-1: config 0 descriptor?? [ 901.600837][T16358] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 901.609804][T16358] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 901.729531][ T24] mxuport 6-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 901.750910][ T24] mxuport 6-1:254.0: probe with driver mxuport failed with error -5 [ 901.790911][ T5912] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 901.809106][ T24] usb 6-1: USB disconnect, device number 82 [ 901.933286][T16358] 9p: Bad value for 'rfdno' [ 902.027157][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 902.033925][ T5912] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 902.044135][ T5912] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 902.055625][ T5912] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 902.066568][ T5912] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 902.076731][ T5912] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 902.120615][ T5912] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 902.167758][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.437451][ T5912] usb 2-1: usb_control_msg returned -32 [ 902.444222][ T5912] usbtmc 2-1:16.0: can't read capabilities [ 903.764677][ T10] dm9601 3-1:0.0: probe with driver dm9601 failed with error -71 [ 903.778137][ T30] audit: type=1326 audit(1775620633.045:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16354 comm="syz.2.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4659c819 code=0x7fc00000 [ 903.803652][ T10] usb 3-1: USB disconnect, device number 95 [ 904.507337][ T5912] usb 2-1: USB disconnect, device number 62 [ 904.977557][T16388] dlm: no local IP address has been set [ 904.983370][T16388] dlm: cannot start dlm midcomms -107 [ 905.061992][ T30] audit: type=1400 audit(1775620634.355:2002): avc: denied { connect } for pid=16387 comm="syz.5.2686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 905.865435][T16393] trusted_key: encrypted_key: insufficient parameters specified [ 906.580942][ T5934] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 906.742727][ T5934] usb 2-1: unable to get BOS descriptor or descriptor too short [ 906.767373][ T5934] usb 2-1: config 3 has an invalid interface number: 128 but max is 0 [ 906.781747][ T5934] usb 2-1: config 3 has no interface number 0 [ 906.793457][ T5934] usb 2-1: config 3 interface 128 has no altsetting 0 [ 906.817786][ T5934] usb 2-1: New USB device found, idVendor=17ef, idProduct=a387, bcdDevice=59.78 [ 906.832335][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.840632][ T5934] usb 2-1: Product: syz [ 906.844776][ T5934] usb 2-1: Manufacturer: syz [ 906.856580][ T5934] usb 2-1: SerialNumber: syz [ 906.871431][ T5934] r8152-cfgselector 2-1: Unknown version 0x0000 [ 907.336828][T15280] net_ratelimit: 7 callbacks suppressed [ 907.336845][T15280] bond1: (slave macvlan2): failed to get link speed/duplex [ 907.366499][T16382] macvtap2: entered promiscuous mode [ 907.376771][T16382] macvtap2: entered allmulticast mode [ 907.382897][T16382] syz_tun: entered promiscuous mode [ 907.398856][T16382] team0: Device macvtap2 failed to register rx_handler [ 907.434521][T16382] syz_tun: left promiscuous mode [ 907.474813][T16396] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2691'. [ 907.496761][ T8125] bond1: (slave macvlan2): failed to get link speed/duplex [ 907.509872][ T5934] r8152-cfgselector 2-1: USB disconnect, device number 63 [ 907.587270][ T1720] bond2: (slave macvlan2): failed to get link speed/duplex [ 907.664967][T16400] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 907.717292][ T7250] bond1: (slave macvlan2): failed to get link speed/duplex [ 907.787023][ T7250] bond2: (slave macvlan2): failed to get link speed/duplex [ 907.897509][ T7051] bond1: (slave macvlan2): failed to get link speed/duplex [ 907.946717][ T7051] bond2: (slave macvlan2): failed to get link speed/duplex [ 907.976730][ T5857] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 908.007363][ T8125] bond1: (slave macvlan2): failed to get link speed/duplex [ 908.059316][ T7250] bond2: (slave macvlan2): failed to get link speed/duplex [ 908.097129][T16414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=16414 comm=syz.1.2697 [ 908.140694][ T5857] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 908.150751][ T5857] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 908.160196][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.169332][ T5857] usb 6-1: Product: syz [ 908.173651][ T5857] usb 6-1: Manufacturer: syz [ 908.178542][ T5857] usb 6-1: SerialNumber: syz [ 908.201743][ T5857] usb 6-1: config 0 descriptor?? [ 908.210576][ T5857] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 908.214680][ T30] audit: type=1804 audit(1775620637.505:2003): pid=16419 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2698" name="bus" dev="ramfs" ino=75331 res=1 errno=0 [ 908.240664][ T5912] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 908.255373][ T30] audit: type=1804 audit(1775620637.545:2004): pid=16419 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.2698" name="bus" dev="ramfs" ino=75331 res=1 errno=0 [ 908.281757][ T5857] usb 6-1: setting power ON [ 908.286327][ T5857] dvb-usb: bulk message failed: -22 (2/0) [ 908.321154][ T5857] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 908.365173][ T5857] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 908.387153][ T5857] dvb_usb_cxusb 6-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 908.400478][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.537511][ T5912] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 908.559347][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.009948][ T5912] usb 3-1: config 0 descriptor?? [ 909.018116][ T5912] pwc: Askey VC010 type 2 USB webcam detected. [ 909.161319][T16425] IPv6: NLM_F_CREATE should be specified when creating new route [ 909.169369][T16425] netlink: 'syz.7.2699': attribute type 1 has an invalid length. [ 909.227121][ T5912] pwc: send_video_command error -71 [ 909.232433][ T5912] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 909.240502][ T5912] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 909.258639][ T5912] usb 3-1: USB disconnect, device number 96 [ 909.446417][T16196] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 909.562313][T16434] netlink: 'syz.1.2703': attribute type 1 has an invalid length. [ 909.570153][T16434] netlink: 760 bytes leftover after parsing attributes in process `syz.1.2703'. [ 909.580287][T16434] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2703'. [ 909.616755][T16196] usb 8-1: Using ep0 maxpacket: 8 [ 909.624252][T16196] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 909.630226][T16438] netlink: 'syz.0.2704': attribute type 10 has an invalid length. [ 909.633640][T16196] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 909.650795][T16196] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 909.661373][T16196] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 909.671611][T16196] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 909.685003][T16196] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 909.694138][T16196] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.777892][ T5912] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 909.909016][T16196] usb 8-1: usb_control_msg returned -32 [ 909.914787][T16196] usbtmc 8-1:16.0: can't read capabilities [ 909.932900][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.943378][ T5912] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 909.952618][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.964126][ T5912] usb 3-1: config 0 descriptor?? [ 909.977606][ T5912] pwc: Askey VC010 type 2 USB webcam detected. [ 910.396170][ T5912] pwc: recv_control_msg error -32 req 02 val 2b00 [ 910.412513][ T5912] pwc: recv_control_msg error -32 req 02 val 2700 [ 910.425694][ T5912] pwc: recv_control_msg error -32 req 02 val 2c00 [ 910.433224][ T5912] pwc: recv_control_msg error -32 req 04 val 1000 [ 910.440792][ T5912] pwc: recv_control_msg error -32 req 04 val 1300 [ 910.448158][ T5912] pwc: recv_control_msg error -32 req 04 val 1400 [ 910.455456][T16412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.492120][T16412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.509343][ T5912] pwc: recv_control_msg error -32 req 02 val 2000 [ 910.904600][ T5912] pwc: recv_control_msg error -32 req 02 val 2100 [ 910.914980][ T5912] pwc: recv_control_msg error -32 req 04 val 1500 [ 910.923424][ T5912] pwc: recv_control_msg error -32 req 02 val 2500 [ 910.937895][ T5912] pwc: recv_control_msg error -32 req 02 val 2400 [ 910.944942][ T5912] pwc: recv_control_msg error -32 req 02 val 2600 [ 911.017150][ T5857] usb 6-1: USB disconnect, device number 83 [ 911.154397][ T5912] pwc: recv_control_msg error -71 req 02 val 2800 [ 911.162248][ T5912] pwc: recv_control_msg error -71 req 04 val 1100 [ 911.169037][ T5912] pwc: recv_control_msg error -71 req 04 val 1200 [ 911.177702][ T5912] pwc: Registered as video103. [ 911.190974][ T5912] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 911.233908][ T5912] usb 3-1: USB disconnect, device number 97 [ 911.781664][T16438] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 911.785962][T16439] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 912.276217][ T9] usb 8-1: USB disconnect, device number 3 [ 912.326629][ T30] audit: type=1400 audit(1775620641.615:2005): avc: denied { connect } for pid=16457 comm="syz.1.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 912.367867][ T3541] net_ratelimit: 28 callbacks suppressed [ 912.367884][ T3541] bond2: (slave macvlan2): failed to get link speed/duplex [ 912.426839][ T3541] bond1: (slave macvlan2): failed to get link speed/duplex [ 912.516773][ T5857] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 912.524410][ T7250] bond2: (slave macvlan2): failed to get link speed/duplex [ 912.547234][ T7250] bond1: (slave macvlan2): failed to get link speed/duplex [ 912.637555][ T5934] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 912.650952][ T3541] bond2: (slave macvlan2): failed to get link speed/duplex [ 912.686738][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 912.696774][ T1720] bond1: (slave macvlan2): failed to get link speed/duplex [ 912.710245][ T5857] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 912.777294][ T1720] bond2: (slave macvlan2): failed to get link speed/duplex [ 912.790169][ T5857] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 912.816272][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.825627][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 912.851616][ T62] bond1: (slave macvlan2): failed to get link speed/duplex [ 912.894729][ T5857] usb 1-1: Product: syz [ 912.904224][ T5857] usb 1-1: Manufacturer: syz [ 912.910128][ T7250] bond2: (slave macvlan2): failed to get link speed/duplex [ 913.046909][ T7250] bond1: (slave macvlan2): failed to get link speed/duplex [ 913.049207][T16469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.061624][ T5857] usb 1-1: SerialNumber: syz [ 913.062895][T16469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.484238][ T5857] usb 1-1: config 0 descriptor?? [ 913.499984][ T5857] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 913.526742][ T5857] usb 1-1: setting power ON [ 913.544650][ T5857] dvb-usb: bulk message failed: -22 (2/0) [ 913.580565][ T5857] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 913.667580][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 913.769500][ T9] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 913.803076][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.814335][ T9] usb 8-1: config 0 descriptor?? [ 913.859875][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 913.957020][ T5857] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 914.426722][ T9] gspca_vc032x: reg_r err -110 [ 914.533582][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.548488][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.560168][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.565702][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.566267][ T5857] dvb_usb_cxusb 1-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 914.583382][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.606927][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.612539][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.621524][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.627889][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.633372][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.641898][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.666746][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.704312][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.716690][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.724170][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.730282][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.746832][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.756208][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 914.779761][ T9] gspca_vc032x: Unknown sensor... [ 914.789407][ T9] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 915.535388][ T30] audit: type=1326 audit(1775620644.825:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16483 comm="syz.2.2714" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d4659c819 code=0x0 [ 915.698483][ T9] usb 8-1: USB disconnect, device number 4 [ 915.781925][ T5912] usb 1-1: USB disconnect, device number 86 [ 915.846919][ T5934] usb 2-1: unable to get BOS descriptor or descriptor too short [ 915.854689][ T5934] usb 2-1: no configurations [ 915.858045][T16496] xt_hashlimit: size too large, truncated to 1048576 [ 915.890637][ T5934] usb 2-1: can't read configurations, error -22 [ 915.978697][T16500] netlink: 'syz.1.2717': attribute type 10 has an invalid length. [ 916.004028][T16499] trusted_key: encrypted_key: insufficient parameters specified [ 916.032892][T16500] 8021q: adding VLAN 0 to HW filter on device bond3 [ 916.049142][T16500] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 916.219866][T16507] macvtap2: entered promiscuous mode [ 916.240780][T16507] macvtap2: entered allmulticast mode [ 916.246527][T16507] syz_tun: entered promiscuous mode [ 916.254534][T16507] team0: Device macvtap2 failed to register rx_handler [ 916.262868][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 916.270848][T16507] syz_tun: left promiscuous mode [ 916.292437][ T30] audit: type=1804 audit(1775620645.575:2007): pid=16511 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2720" name="bus" dev="ramfs" ino=75510 res=1 errno=0 [ 916.316032][ T30] audit: type=1804 audit(1775620645.575:2008): pid=16511 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.2720" name="bus" dev="ramfs" ino=75510 res=1 errno=0 [ 916.775171][T16514] netlink: 'syz.1.2719': attribute type 1 has an invalid length. [ 917.020554][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 917.029375][ T9] usb 8-1: config 73 has an invalid interface number: 118 but max is 0 [ 917.085673][T16514] netlink: 760 bytes leftover after parsing attributes in process `syz.1.2719'. [ 917.107850][ T9] usb 8-1: config 73 has no interface number 0 [ 917.114012][ T9] usb 8-1: config 73 interface 118 has no altsetting 0 [ 917.148337][T16514] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2719'. [ 917.167671][ T9] usb 8-1: New USB device found, idVendor=1608, idProduct=021a, bcdDevice=d8.ac [ 917.180607][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.196791][ T9] usb 8-1: Product: syz [ 917.205401][ T9] usb 8-1: Manufacturer: syz [ 917.220350][ T9] usb 8-1: SerialNumber: syz [ 917.417977][T15280] net_ratelimit: 42 callbacks suppressed [ 917.417996][T15280] bond1: (slave macvlan2): failed to get link speed/duplex [ 918.806432][ T5810] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 918.871489][T16535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2725'. [ 919.384071][T16535] nbd: socks must be embedded in a SOCK_ITEM attr [ 919.608108][ T792] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 919.658955][ T9] io_ti 8-1:73.118: required endpoints missing [ 919.801715][ T5798] udevd[5798]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 919.829209][ T792] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 919.998585][ T792] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 920.112768][ T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.130118][ T5798] udevd[5798]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 920.165718][ T792] usb 6-1: Product: syz [ 920.180580][T16541] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2727'. [ 920.208601][ T792] usb 6-1: Manufacturer: syz [ 920.224420][ T792] usb 6-1: SerialNumber: syz [ 920.315576][ T792] usb 6-1: config 0 descriptor?? [ 920.413065][ T792] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 920.441566][ T792] usb 6-1: setting power ON [ 920.454881][ T792] dvb-usb: bulk message failed: -22 (2/0) [ 920.473517][ T9] usb 8-1: USB disconnect, device number 5 [ 920.474001][ T792] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 920.548317][T16543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2728'. [ 920.553916][ T792] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 920.664480][ T792] dvb_usb_cxusb 6-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 921.119611][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 921.287037][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 921.305659][ T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 921.316035][ T9] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 921.326280][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 921.336221][ T9] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 921.364775][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.380222][ T9] usb 8-1: Product: syz [ 921.390427][ T9] usb 8-1: Manufacturer: syz [ 921.395457][ T9] usb 8-1: SerialNumber: syz [ 921.409886][ T9] usb 8-1: config 0 descriptor?? [ 921.846269][T16549] 9p: Bad value for 'rfdno' [ 922.147872][ T9] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 922.163709][ T30] audit: type=1326 audit(1775620651.455:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16557 comm="syz.0.2732" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34ea59c819 code=0x0 [ 922.396608][ T792] usb 6-1: USB disconnect, device number 84 [ 922.574451][ T9] gs_usb 8-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 922.601575][ T9] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -71 [ 922.615247][ T9] usb 8-1: USB disconnect, device number 6 [ 923.377186][ T8125] bond2: (slave macvlan2): failed to get link speed/duplex [ 923.419220][ T145] bond1: (slave macvlan2): failed to get link speed/duplex [ 923.501667][T16573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2736'. [ 923.510934][T15280] bond2: (slave macvlan2): failed to get link speed/duplex [ 923.546762][T15280] bond1: (slave macvlan2): failed to get link speed/duplex [ 923.637418][ T145] bond2: (slave macvlan2): failed to get link speed/duplex [ 923.678791][ T145] bond1: (slave macvlan2): failed to get link speed/duplex [ 923.886817][ T145] bond2: (slave macvlan2): failed to get link speed/duplex [ 924.151367][T16196] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 924.216816][ T145] bond1: (slave macvlan2): failed to get link speed/duplex [ 924.357281][ T62] bond2: (slave macvlan2): failed to get link speed/duplex [ 924.508468][T16196] usb 8-1: unable to get BOS descriptor or descriptor too short [ 924.518234][T16196] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 924.528753][T16196] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 924.574500][T16196] usb 8-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 924.591180][T16196] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.603489][T16196] usb 8-1: Product: syz [ 924.603576][T16584] IPv6: NLM_F_CREATE should be specified when creating new route [ 924.608287][T16196] usb 8-1: Manufacturer: syz [ 924.620780][T16196] usb 8-1: SerialNumber: syz [ 924.640016][T16584] netlink: 'syz.2.2739': attribute type 1 has an invalid length. [ 924.657812][ T145] bond1: (slave macvlan2): failed to get link speed/duplex [ 924.968739][ T5934] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 925.094937][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2737'. [ 925.154709][ T792] usb 8-1: USB disconnect, device number 7 [ 925.177595][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 925.338406][ T5934] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 925.520814][ T5934] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 925.537832][ T5934] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 925.557357][ T5934] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 925.567887][ T5934] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 925.581660][ T5934] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 925.632075][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.863444][ T5934] usb 3-1: usb_control_msg returned -32 [ 925.877304][ T5934] usbtmc 3-1:16.0: can't read capabilities [ 925.992499][T16596] xt_hashlimit: size too large, truncated to 1048576 [ 926.183317][T16601] syzkaller0: entered promiscuous mode [ 926.189903][T16601] syzkaller0: entered allmulticast mode [ 926.211603][T16601] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.219217][T16601] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.053824][T16610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2742'. [ 927.204416][T16610] nbd: socks must be embedded in a SOCK_ITEM attr [ 928.447524][ T3541] net_ratelimit: 47 callbacks suppressed [ 928.447567][ T3541] bond2: (slave macvlan2): failed to get link speed/duplex [ 928.565937][T16196] usb 3-1: USB disconnect, device number 98 [ 928.593274][ T3541] bond1: (slave macvlan2): failed to get link speed/duplex [ 928.649926][ T7717] udevd[7717]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 928.677728][ T1720] bond2: (slave macvlan2): failed to get link speed/duplex [ 928.741091][ T7717] udevd[7717]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 928.757130][ T1720] bond1: (slave macvlan2): failed to get link speed/duplex [ 928.787136][ T1720] bond2: (slave macvlan2): failed to get link speed/duplex [ 928.976847][ T5934] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 929.090808][ T1720] bond1: (slave macvlan2): failed to get link speed/duplex [ 929.117649][ T145] bond2: (slave macvlan2): failed to get link speed/duplex [ 929.178805][T16630] netlink: 'syz.2.2748': attribute type 1 has an invalid length. [ 929.186580][T16630] netlink: 760 bytes leftover after parsing attributes in process `syz.2.2748'. [ 929.202550][T16630] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2748'. [ 929.218764][ T3541] bond1: (slave macvlan2): failed to get link speed/duplex [ 929.236717][ T3541] bond2: (slave macvlan2): failed to get link speed/duplex [ 929.246768][ T5934] usb 8-1: Using ep0 maxpacket: 32 [ 929.260364][ T5934] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 929.317066][ T5934] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26508, setting to 1024 [ 929.342099][ T5934] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 929.515068][ T5934] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 929.691559][ T30] audit: type=1326 audit(1775620658.955:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16631 comm="syz.5.2749" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a5bb9c819 code=0x0 [ 929.719442][ T5934] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 929.727720][ T5934] usb 8-1: Product: syz [ 929.733297][ T5934] usb 8-1: config 0 descriptor?? [ 929.754239][T16622] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 931.041565][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.048279][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.674050][ T1720] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.817980][T16656] 9p: Bad value for 'wfdno' [ 932.058083][ T62] bond1: (slave macvlan2): failed to get link speed/duplex [ 932.075932][ T5934] usbhid 8-1:0.0: can't add hid device: -71 [ 932.103345][T16654] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 932.111191][T16654] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 932.120491][T16654] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 932.124623][ T5934] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 932.148196][T16654] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 932.238928][ T1720] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.372144][ T5934] usb 8-1: USB disconnect, device number 8 [ 932.849214][ T1720] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.869770][T16670] delete_channel: no stack [ 932.877510][T16196] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 932.894726][ T1720] bridge0: port 3(netdevsim0) entered disabled state [ 932.933253][ T1720] netdevsim netdevsim6 netdevsim0 (unregistering): left allmulticast mode [ 932.959873][ T1720] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 932.980125][ T1720] bridge0: port 3(netdevsim0) entered disabled state [ 933.004233][ T1720] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.070736][T16671] comedi comedi2: pcm3724: I/O port conflict (0x8,16) [ 933.090437][ T30] audit: type=1400 audit(1775620662.365:2011): avc: denied { write } for pid=16664 comm="syz.2.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 933.257727][T16196] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 933.268071][T16196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.282147][T16196] usb 1-1: config 0 descriptor?? [ 933.497243][ T5934] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 933.546759][ T145] net_ratelimit: 11 callbacks suppressed [ 933.548970][ T145] bond1: (slave macvlan2): failed to get link speed/duplex [ 933.565174][T16196] cp210x 1-1:0.0: cp210x converter detected [ 933.653528][ T1720] bridge_slave_1: left allmulticast mode [ 933.663464][ T1720] bridge_slave_1: left promiscuous mode [ 933.699585][ T1720] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.719253][ T1720] bridge_slave_0: left allmulticast mode [ 933.724884][ T1720] bridge_slave_0: left promiscuous mode [ 933.731255][ T5934] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 933.757459][ T5934] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 933.778766][T16664] delete_channel: no stack [ 933.800250][ T1720] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.828503][ T5934] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 933.840079][ T5934] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.861981][ T5934] usb 8-1: Product: syz [ 933.866258][ T5934] usb 8-1: Manufacturer: syz [ 933.917606][ T5934] usb 8-1: SerialNumber: syz [ 933.975765][ T5934] usb 8-1: config 0 descriptor?? [ 934.008561][T16675] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 934.016007][T16675] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 934.037216][T16196] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 934.078862][T16196] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 934.099476][T16196] usb 1-1: cp210x converter now attached to ttyUSB0 [ 934.585534][T16662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.591167][T16673] 9p: Bad value for 'wfdno' [ 934.655634][ T5934] dm9601 8-1:0.0: probe with driver dm9601 failed with error -71 [ 934.664194][T16662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 934.727188][T16196] usb 1-1: USB disconnect, device number 87 [ 934.766161][ T5934] usb 8-1: USB disconnect, device number 9 [ 934.780622][ T1720] bond0 (unregistering): (slave gretap1): Releasing active interface [ 934.806879][T16196] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 934.837366][T16196] cp210x 1-1:0.0: device disconnected [ 934.960821][ T5810] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 935.030439][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2761'. [ 935.263068][T16697] nbd: socks must be embedded in a SOCK_ITEM attr [ 936.783973][ T7717] udevd[7717]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 936.950072][ T7717] udevd[7717]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 937.213636][ T1720] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.230179][ T1720] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.241101][ T1720] .` (unregistering): Released all slaves [ 937.342798][ T1720] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 937.364133][ T1720] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 937.402494][ T1720] bond0 (unregistering): Released all slaves [ 937.425639][ T1720] bond1 (unregistering): Released all slaves [ 937.446429][ T1720] bond2 (unregistering): Released all slaves [ 937.461849][T16692] bond2: option mode: unable to set because the bond device has slaves [ 937.482848][T16694] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 937.536356][T16708] bridge0: port 3(netdevsim0) entered blocking state [ 937.552466][T16708] bridge0: port 3(netdevsim0) entered disabled state [ 937.578175][T16708] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 937.579313][T16727] netlink: 'syz.2.2767': attribute type 1 has an invalid length. [ 937.602801][T16727] netlink: 760 bytes leftover after parsing attributes in process `syz.2.2767'. [ 937.616157][T16708] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 937.619201][T16727] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2767'. [ 937.661110][ T1720] tipc: Left network mode [ 937.707610][ T62] bond2: (slave macvlan2): failed to get link speed/duplex [ 937.847019][ T62] bond2: (slave macvlan2): failed to get link speed/duplex [ 938.029273][T16738] siw: device registration error -23 [ 938.322142][T16743] smc: removing ib device syz1 [ 938.635101][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 939.148753][T16743] ------------[ cut here ]------------ [ 939.154258][T16743] !xa_empty(&pool->xa) [ 939.154265][T16743] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.0.2771/16743 [ 939.169792][T16743] Modules linked in: [ 939.173959][T16743] CPU: 0 UID: 0 PID: 16743 Comm: syz.0.2771 Tainted: G L syzkaller #0 PREEMPT(full) [ 939.184951][T16743] Tainted: [L]=SOFTLOCKUP [ 939.189372][T16743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 939.199702][T16743] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 939.205584][T16743] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 d6 d6 4e f9 5b e9 50 5b da 02 e8 cb d6 4e f9 90 <0f> 0b 90 e8 c2 d6 4e f9 5b e9 3c 5b da 02 e8 f7 6a bb f9 eb d0 0f [ 939.225609][T16743] RSP: 0018:ffffc900037271a0 EFLAGS: 00010246 [ 939.231709][T16743] RAX: 0000000000080000 RBX: ffff88807f2b53b8 RCX: ffffc9000ea9e000 [ 939.239732][T16743] RDX: 0000000000080000 RSI: ffffffff88ba2095 RDI: ffff88807f2b5438 [ 939.247837][T16743] RBP: ffffffff88b88320 R08: 0000000000000005 R09: 0000000000000001 [ 939.255852][T16743] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88807f2b46b0 [ 939.263852][T16743] R13: ffff88807f2b3fe0 R14: ffff88807f2b3fe0 R15: ffff88807f2b5118 [ 939.271846][T16743] FS: 00007f34eb3b26c0(0000) GS:ffff888124338000(0000) knlGS:0000000000000000 [ 939.281354][T16743] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 939.287985][T16743] CR2: 000000110c44c057 CR3: 000000007a3f4000 CR4: 00000000003526f0 [ 939.295995][T16743] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 939.304018][T16743] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 939.312022][T16743] Call Trace: [ 939.315454][T16743] [ 939.318409][T16743] rxe_dealloc+0x25/0xc0 [ 939.322653][T16743] ib_dealloc_device+0x49/0x230 [ 939.327539][T16743] __ib_unregister_device+0x396/0x480 [ 939.332917][T16743] ib_unregister_device_and_put+0x5a/0x80 [ 939.338664][T16743] nldev_dellink+0x226/0x320 [ 939.343258][T16743] ? __pfx_nldev_dellink+0x10/0x10 [ 939.348418][T16743] ? rcu_is_watching+0x12/0xc0 [ 939.353175][T16743] ? cap_capable+0x107/0x460 [ 939.358006][T16743] ? bpf_lsm_capable+0x9/0x10 [ 939.362691][T16743] ? security_capable+0x80/0x260 [ 939.367653][T16743] ? ns_capable+0xd2/0xf0 [ 939.371975][T16743] ? __pfx_nldev_dellink+0x10/0x10 [ 939.377118][T16743] rdma_nl_rcv_msg+0x38a/0x6e0 [ 939.381883][T16743] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 939.387180][T16743] ? __lock_acquire+0x4a5/0x2630 [ 939.392120][T16743] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 939.398560][T16743] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 939.405501][T16743] ? netlink_deliver_tap+0x1ae/0xcc0 [ 939.410815][T16743] netlink_unicast+0x5aa/0x870 [ 939.415580][T16743] ? __pfx_netlink_unicast+0x10/0x10 [ 939.421029][T16743] netlink_sendmsg+0x8b0/0xda0 [ 939.425815][T16743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.431111][T16743] ? __might_fault+0x90/0x140 [ 939.435792][T16743] ____sys_sendmsg+0x9e1/0xb70 [ 939.440649][T16743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.445927][T16743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 939.451238][T16743] ? try_to_wake_up+0x644/0x1a80 [ 939.456172][T16743] ___sys_sendmsg+0x190/0x1e0 [ 939.460871][T16743] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.466070][T16743] ? futex_private_hash_put+0x107/0x1c0 [ 939.471658][T16743] __sys_sendmsg+0x170/0x220 [ 939.476253][T16743] ? __pfx___sys_sendmsg+0x10/0x10 [ 939.481392][T16743] ? __x64_sys_futex+0x34f/0x4d0 [ 939.486330][T16743] do_syscall_64+0x106/0xf80 [ 939.490923][T16743] ? clear_bhb_loop+0x40/0x90 [ 939.495594][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.501495][T16743] RIP: 0033:0x7f34ea59c819 [ 939.505904][T16743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.525741][T16743] RSP: 002b:00007f34eb3b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.534181][T16743] RAX: ffffffffffffffda RBX: 00007f34ea816180 RCX: 00007f34ea59c819 [ 939.542193][T16743] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 939.550181][T16743] RBP: 00007f34ea632c91 R08: 0000000000000000 R09: 0000000000000000 [ 939.558173][T16743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.566146][T16743] R13: 00007f34ea816218 R14: 00007f34ea816180 R15: 00007ffc7f0c53e8 [ 939.574160][T16743] [ 939.577188][T16743] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 939.584456][T16743] CPU: 0 UID: 0 PID: 16743 Comm: syz.0.2771 Tainted: G L syzkaller #0 PREEMPT(full) [ 939.595359][T16743] Tainted: [L]=SOFTLOCKUP [ 939.599659][T16743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 939.609700][T16743] Call Trace: [ 939.612960][T16743] [ 939.615865][T16743] dump_stack_lvl+0x100/0x190 [ 939.620525][T16743] vpanic+0x552/0x970 [ 939.624491][T16743] ? __pfx_vpanic+0x10/0x10 [ 939.628982][T16743] panic+0xd1/0xe0 [ 939.632686][T16743] ? __pfx_panic+0x10/0x10 [ 939.637084][T16743] check_panic_on_warn.cold+0x19/0x34 [ 939.642605][T16743] ? rxe_pool_cleanup+0x46/0x60 [ 939.647452][T16743] __warn.cold+0x191/0x348 [ 939.651850][T16743] __report_bug+0x296/0x3d0 [ 939.656351][T16743] ? rxe_pool_cleanup+0x46/0x60 [ 939.661180][T16743] ? __pfx___report_bug+0x10/0x10 [ 939.666195][T16743] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 939.671988][T16743] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 939.677779][T16743] ? __flush_workqueue+0x426/0x1200 [ 939.682960][T16743] ? __mutex_unlock_slowpath+0x15c/0x790 [ 939.688652][T16743] ? rxe_pool_cleanup+0x46/0x60 [ 939.693480][T16743] report_bug+0xb2/0x220 [ 939.697698][T16743] ? rxe_pool_cleanup+0x46/0x60 [ 939.702523][T16743] handle_bug+0x16a/0x2a0 [ 939.706827][T16743] exc_invalid_op+0x17/0x50 [ 939.711305][T16743] asm_exc_invalid_op+0x1a/0x20 [ 939.716135][T16743] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 939.721578][T16743] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 d6 d6 4e f9 5b e9 50 5b da 02 e8 cb d6 4e f9 90 <0f> 0b 90 e8 c2 d6 4e f9 5b e9 3c 5b da 02 e8 f7 6a bb f9 eb d0 0f [ 939.741160][T16743] RSP: 0018:ffffc900037271a0 EFLAGS: 00010246 [ 939.747198][T16743] RAX: 0000000000080000 RBX: ffff88807f2b53b8 RCX: ffffc9000ea9e000 [ 939.755152][T16743] RDX: 0000000000080000 RSI: ffffffff88ba2095 RDI: ffff88807f2b5438 [ 939.763095][T16743] RBP: ffffffff88b88320 R08: 0000000000000005 R09: 0000000000000001 [ 939.771036][T16743] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88807f2b46b0 [ 939.778983][T16743] R13: ffff88807f2b3fe0 R14: ffff88807f2b3fe0 R15: ffff88807f2b5118 [ 939.786935][T16743] ? __pfx_rxe_dealloc+0x10/0x10 [ 939.791853][T16743] ? rxe_pool_cleanup+0x45/0x60 [ 939.796682][T16743] rxe_dealloc+0x25/0xc0 [ 939.800896][T16743] ib_dealloc_device+0x49/0x230 [ 939.805739][T16743] __ib_unregister_device+0x396/0x480 [ 939.811101][T16743] ib_unregister_device_and_put+0x5a/0x80 [ 939.816799][T16743] nldev_dellink+0x226/0x320 [ 939.821373][T16743] ? __pfx_nldev_dellink+0x10/0x10 [ 939.826496][T16743] ? rcu_is_watching+0x12/0xc0 [ 939.831234][T16743] ? cap_capable+0x107/0x460 [ 939.835801][T16743] ? bpf_lsm_capable+0x9/0x10 [ 939.840448][T16743] ? security_capable+0x80/0x260 [ 939.845359][T16743] ? ns_capable+0xd2/0xf0 [ 939.849665][T16743] ? __pfx_nldev_dellink+0x10/0x10 [ 939.854752][T16743] rdma_nl_rcv_msg+0x38a/0x6e0 [ 939.859498][T16743] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 939.864779][T16743] ? __lock_acquire+0x4a5/0x2630 [ 939.869701][T16743] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 939.876102][T16743] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 939.883019][T16743] ? netlink_deliver_tap+0x1ae/0xcc0 [ 939.888296][T16743] netlink_unicast+0x5aa/0x870 [ 939.893036][T16743] ? __pfx_netlink_unicast+0x10/0x10 [ 939.898306][T16743] netlink_sendmsg+0x8b0/0xda0 [ 939.903044][T16743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.908300][T16743] ? __might_fault+0x90/0x140 [ 939.912959][T16743] ____sys_sendmsg+0x9e1/0xb70 [ 939.917696][T16743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.922954][T16743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 939.928214][T16743] ? try_to_wake_up+0x644/0x1a80 [ 939.933132][T16743] ___sys_sendmsg+0x190/0x1e0 [ 939.937786][T16743] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.942958][T16743] ? futex_private_hash_put+0x107/0x1c0 [ 939.948499][T16743] __sys_sendmsg+0x170/0x220 [ 939.953080][T16743] ? __pfx___sys_sendmsg+0x10/0x10 [ 939.958169][T16743] ? __x64_sys_futex+0x34f/0x4d0 [ 939.963097][T16743] do_syscall_64+0x106/0xf80 [ 939.967659][T16743] ? clear_bhb_loop+0x40/0x90 [ 939.972323][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.978187][T16743] RIP: 0033:0x7f34ea59c819 [ 939.982577][T16743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.002157][T16743] RSP: 002b:00007f34eb3b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.010545][T16743] RAX: ffffffffffffffda RBX: 00007f34ea816180 RCX: 00007f34ea59c819 [ 940.018489][T16743] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 940.026443][T16743] RBP: 00007f34ea632c91 R08: 0000000000000000 R09: 0000000000000000 [ 940.034396][T16743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.042350][T16743] R13: 00007f34ea816218 R14: 00007f34ea816180 R15: 00007ffc7f0c53e8 [ 940.050305][T16743] [ 940.053569][T16743] Kernel Offset: disabled [ 940.057881][T16743] Rebooting in 86400 seconds..