last executing test programs: 10m35.340975889s ago: executing program 4 (id=137): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1f}, 0x14) socket$netlink(0x10, 0x3, 0x0) r6 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000005c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\\proc/sys/fs/binfmt_misc/register\x00', 0x3a, '\x00', 0x3a, './bus/file0', 0x3a, [0x43, 0x43]}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@RTM_DELMDB={0x38, 0x55, 0x8, 0x2000002, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x3, {@ip4=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 10m30.421007085s ago: executing program 4 (id=148): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000010100800c0001000000000000000000140003"], 0x114}], 0x1}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3aa711f2) fsync(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x0, 0x1c, 0x2, {0x2, 0x0, @loopback}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_aout(r2, 0x0, 0xfce1) 10m27.556551853s ago: executing program 4 (id=153): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000080), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24044050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x80}, 0x17) r2 = socket$inet6(0xa, 0x0, 0x2f) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0x24, "2f70011ac78477f205f7527fe5c3662f88710e0714f11c5f4dd5f207f883dd09696a0604"}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000300)=[{0x40, 0x8, 0x0, 0x8}, {0x6, 0xff, 0xfc, 0xfffffffe}]}) 10m20.436490368s ago: executing program 4 (id=163): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="0d32818e7e6ae0", 0x7}]) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x2262, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001900000095d851ff3dc385fb71a3eb7f7c17ae60febd8f6459f4bd239d1ee7c27bfe00d33494bedc1850f0ec194c94d73585aba535f1989175c4cd5c4694bb5222c6be4a72"], &(0x7f0000000600)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005400000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x14, &(0x7f0000000100)={@mcast1}, 0x14) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close(r9) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="40a5b3aac3001420b5cfe35db56dfa243024b1000000", @ANYRES32=r8, @ANYBLOB="14000200fe8000000000000000000000000000aa14000600000000000700"/40], 0x40}}, 0x0) syz_open_dev$vcsu(&(0x7f00000004c0), 0x5, 0x10001) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r11) ioctl$SIOCSIFHWADDR(r11, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x0, 0x8, 0x10002, 0x0, 0x1, 0x0, '\x00', 0x0, r11, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r12}, 0x38) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@private0, @loopback, @remote, 0x5, 0x9, 0x1cb, 0x500, 0x41, 0x450000, r4}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x0, 0x0) 10m15.383369018s ago: executing program 4 (id=174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000fcffffdf000000000000800095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x1d, 0x72, 0xffffffffffffffff, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x20) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x8000, 0x0, {0x1, 0x6f37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6005, 0x8, r5, r6, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r8, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r7, &(0x7f0000000180)='\x00', 0x1001}]) fchown(r7, r5, r6) dup3(r1, r2, 0x0) 10m14.390229621s ago: executing program 4 (id=178): epoll_create1(0x0) epoll_create1(0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010000000000fddb"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) mknod$loop(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_dev$usbmon(&(0x7f0000000380), 0x7, 0x0) syz_emit_ethernet(0xae, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket(0x18, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) read$msr(r2, &(0x7f00000028c0)=""/102392, 0x18ff8) ioprio_set$pid(0x0, 0x0, 0x2007) ioperm(0xd005, 0x100, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000480)='vlan0\x00') 10m4.668349569s ago: executing program 32 (id=166): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, 0x0, 0x0) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x331, 0x0, 0x0, 0xe, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x18fcffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 9m58.690859669s ago: executing program 33 (id=178): epoll_create1(0x0) epoll_create1(0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010000000000fddb"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) mknod$loop(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_dev$usbmon(&(0x7f0000000380), 0x7, 0x0) syz_emit_ethernet(0xae, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket(0x18, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) read$msr(r2, &(0x7f00000028c0)=""/102392, 0x18ff8) ioprio_set$pid(0x0, 0x0, 0x2007) ioperm(0xd005, 0x100, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000480)='vlan0\x00') 5m34.100700862s ago: executing program 5 (id=812): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="3c0d000000000000c91000000000000000000000000000000001040109c20400000004071000000000020306000500000000000000c20400000006073800000003f805090000000000000000000400000000000000ffffffffffffffffffffffffffffffff09000000000000007e00"/120], 0x78) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000080)={0x5, 0x81}) bind$x25(r0, &(0x7f0000000200), 0x12) write(r0, &(0x7f0000000100)="8c35fe4e72bd", 0x6) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003afe0620e6040b000001010203010902241654030310000904140002a024260009050602ff0300000009058202"], 0x0) shmat(0x0, &(0x7f0000fed000/0x3000)=nil, 0x400c) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x5], [0x12000, 0x0, 0x0, 0xfffffffc], [0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]], '\x00', [{}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x6}, {0x8000000, 0xb}, {}, {0x0, 0x8}, {}, {0x0, 0x32e6}], '\x00', 0x1000}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x325500, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x30, r0, 0x8e642000) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000140)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582", @ANYRES32], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r3) r4 = open(&(0x7f0000000440)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) unlink(&(0x7f0000000580)='./cgroup\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x800, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_create(0x1) sendmsg$AUDIT_USER(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xdc, 0x3ed, 0x8, 0x70bd29, 0x25dfdbfd, "065fb8e6bace078b567692a5143a23e82e49113104fad8db089fac5c9628dd1d84236286d45d524fe8f74d5052566058ebe9129dbce4f625e66a424bf7196b0b484f0229e7cea4dc089caff145fe3d105e3a526c25358bb3418119d91fe0a1cc3430eb39f5bc5ea12bd1dd2221f003690db920ae913499a931b83d3469b3db13c07469e902aac2b20c84fada7af9ceb9b3ba974c16c45b1fe67ff4e99241f8c865ffe3e05eef9b551af036dfbb3ea655a78a85128c7502913df511c2ba51e63d4546775c5999771ea1", ["", ""]}, 0xdc}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000000000)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5m32.350606405s ago: executing program 2 (id=817): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181500006b11773a0c3b12d2010931818bfde30f7933d94dcad102203523c97bbb", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000540000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000780)={0x4, 0x395e, 0x3, {0x1, @sdr={0x3031334d, 0xdd17}}, 0x6}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000300)={0x28, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) writev(r7, &(0x7f0000001a40)=[{&(0x7f0000000040)="7713be6ea9de3f51d3e8b47f9a9d6da16f11217d9e669efba75b32b51ea7cdfed4932d98f1f21d631f1a927ea3033614", 0x30}, {&(0x7f0000000240)}, {&(0x7f0000000380)}, {0x0}], 0x4) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000001b80)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) 5m31.512772904s ago: executing program 2 (id=819): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000580)={0x1, 0x10, 0xfa00, {&(0x7f0000000380)}}, 0x18) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1f}, 0x14) socket$netlink(0x10, 0x3, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000005c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\\proc/sys/fs/binfmt_misc/register\x00', 0x3a, '\x00', 0x3a, './bus/file0', 0x3a, [0x43, 0x43]}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@RTM_DELMDB={0x38, 0x55, 0x8, 0x2000002, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x3, {@ip4=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x761, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) 5m29.21104625s ago: executing program 5 (id=821): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181500006b11773a0c3b12d2010931818bfde30f7933d94dcad102203523c97bbb", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000540000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000780)={0x4, 0x395e, 0x3, {0x1, @sdr={0x3031334d, 0xdd17}}, 0x6}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f000044b000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) writev(r5, &(0x7f0000001a40)=[{&(0x7f0000000040)="7713be6ea9de3f51d3e8b47f9a9d6da16f11217d9e669efba75b32b51ea7cdfed4932d98f1f21d631f1a927ea3033614", 0x30}, {&(0x7f0000000240)}, {&(0x7f0000000380)}, {0x0}], 0x4) 5m28.31690429s ago: executing program 2 (id=824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000400000014000400"], 0x58}}, 0x0) 5m27.55623829s ago: executing program 5 (id=825): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001400), 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001401) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 5m27.47002673s ago: executing program 2 (id=826): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x18fcffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5m26.026003121s ago: executing program 5 (id=829): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$caif_seqpacket(0x25, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c5e9abdb17bd8f26356887bcd2f78aeec77d079ed499cf32e3ac447e64f4dd0cbc510a7bc28fdd1a11905e4318e1db9ed93fbdf59ce2710d9ae7be87f82c647d98c6501b596665000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='sched_switch\x00', r5, 0x0, 0xed}, 0x18) r6 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000300)={0xa10000, 0x0, 0xf8, r7, 0x0, 0x0}) sendmsg$inet(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)="771103e730e22c82975713326ec370e061ff9ef6a956d961f4dc43421491efb051ed568e9e3234d752633945b5d9bf3c13", 0x31}, {&(0x7f0000000240)}, {&(0x7f00000000c0)="5b66e6481f0bb9c86006e443a01c1a394fa21db31fa7e96bb9be1476ae2cfedcfe42", 0x22}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="bcd1c0823335e95477b992142fcbd665274a5107ad3de2378186a6e38e9b632341ce2c140ca8df219133767670a0015a9b75771ca3bd01b88a4ff30e11c66611d7a2dfc2ab2b3cbd0a2ed97997292d276fa735b36bb96779b8a39c06d940ecbd0e5921f57dfff52fda5a47ce6c8223b9bcb4426b3c2d8c39cb23001f7de518ba466028c7f9696e75b2e3ec6170660f867058fe620c91b1b0ab8655fb941e30fbc8", 0xa1}, {&(0x7f00000013c0)="79fd86b0a2b375e4b827079a16bed357074d029317f30f9a97e5b7579f0830c3faa370d01a45ad6abdd329073187de5a1ea73f4317f003b5c889143d456f5ebaa699ec942f6636499ab7383cce2dbac8b092854c4e9a7e63a4a6764b5777f09519f4265b83595b579800e1618d796b8ed5edbb4bc8d7997ec2982b1f797e72730588ab9cf1382a8a115d60dca668a4264e8110e380d195c29bb3e137fc88f430f79f6fb65caad6dae38aa24e", 0xac}, {&(0x7f0000001480)="f10c315d3914e8422bc9b81e2ce663e825ddf9b8509c660aa68a7267a67c123096f1f80fbb003db28abe73598033d6bcdbd8ecb6e1863a5adab497ecf6a763dc81f5e496859b9f25435dd454a13ab6b51edbc0db245ebe7716f206c1d779143d", 0x60}, {&(0x7f0000001500)}], 0x8, &(0x7f0000001600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x30}, 0x4000000) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000340)) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x90000) r10 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r10, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e23, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x3e}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x30}, 0x20044051) socket$inet_mptcp(0x2, 0x1, 0x106) 5m25.974355028s ago: executing program 2 (id=830): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x1f8, 0xfeffffff, 0x1f8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'pimreg\x00'}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x2200, {0x0, @local, @local, @gre_key, @icmp_id}}}}, {{@ip={@private, @dev, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000004e3000006000000030000042c0500000200000004000000050a00000700000604000000fdffffff010000000100000036c7000000000000060000060400000015000000ff070000"], &(0x7f0000000b00)=""/178, 0x88, 0xb2, 0x1, 0x9, 0x0, @void, @value}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001380)=@newtaction={0x1184, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}, {0x116c, 0x1, [@m_pedit={0x1168, 0x1b, 0x0, 0x0, {{0xa}, {0x10f0, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xc4, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_KEYS_EX={0x10c, 0x5, 0x0, 0x1, [{0x4}, {0x4}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0xc19b, 0x4, 0x20000000, 0x1ff, 0x1}, 0x34, 0x10, [{0x0, 0x3, 0xcd8, 0x9f, 0x4, 0xa}, {0x8, 0xf1, 0x4, 0x0, 0xd, 0x7}, {0x8eb, 0x2, 0x6a8, 0x2, 0x8, 0x6}]}, [{0x6a5, 0x2, 0x3a, 0xffffffff, 0x9, 0x5}, {0x1, 0x2, 0x4, 0x59, 0x8, 0x9}, {0x5, 0x5, 0xfffff801, 0xffff, 0xc8, 0xfffffff9}, {0x366e6a, 0x3e, 0x5, 0x81, 0x5, 0x8}, {0x87ec, 0x1, 0x0, 0x1ff, 0x5, 0x3}, {0x0, 0x2, 0x3, 0x8, 0x9, 0xff}, {0x7, 0x8722, 0x7e869eed, 0x9, 0x1, 0x6}, {0x1, 0x101, 0x1bba, 0x47, 0x8, 0x7}, {0x6, 0x2, 0x0, 0x10000, 0x44f, 0x6}, {0x200, 0x7, 0x5, 0xaf, 0x8, 0x401}, {0xfffffff0, 0xfffffffd, 0x5, 0x4, 0x1000000}, {0x6, 0x5, 0x7, 0x400, 0x1, 0x1}, {0x2, 0x415c, 0x1000, 0x8, 0x9, 0x7}, {0x7, 0x49, 0x31, 0x57a, 0x81, 0x7}, {0x6, 0xfffffffe, 0x9, 0x101, 0x7fff, 0x7}, {0x8001, 0x1, 0x2, 0x3ff, 0x1c82d45, 0x4}, {0x6, 0x7, 0x8, 0x7, 0xfff, 0x8000}, {0x2, 0xfffffffe, 0x2366db86, 0x538b, 0x5, 0xc}, {0x9, 0x1ff, 0x7, 0x5, 0xfffffff8, 0x9}, {0x7, 0x10, 0x0, 0x430, 0x20, 0xffffffff}, {0x6, 0x8, 0xc979, 0x2, 0x8, 0x2}, {0x3, 0x7, 0x8, 0x8, 0x5, 0x6}, {0x3, 0x9, 0x5, 0x8001, 0x4, 0xb23}, {0x80, 0xfffff5dc, 0x18000, 0x8, 0x3, 0x5}, {0x80000001, 0x0, 0x367, 0xd86d, 0x80000000, 0x8}, {0x1, 0xf, 0x400, 0x2, 0x400, 0xc}, {0xfff, 0x1, 0x3, 0x3, 0xbb, 0xd}, {0x7, 0x1, 0x7, 0xbd, 0x7, 0xffffffff}, {0x7ff, 0x6, 0x3, 0x7, 0x1, 0x6}, {0x200, 0x7, 0x6, 0x0, 0x5, 0x80000001}, {0x6, 0x5, 0x40, 0x2, 0x4, 0x9}, {0x4, 0x508, 0x6, 0x1, 0x7, 0x819b}, {0x1, 0xba5, 0x2, 0x3, 0x5, 0x7}, {0x9d, 0x5600, 0x6ca2, 0x4, 0xe9, 0x7}, {0x6, 0x1ff, 0xfffff000, 0x8, 0x8, 0x3}, {0x1, 0x0, 0x5, 0x100, 0xfffffffa, 0xffff}, {0x80, 0x6, 0x2, 0xffffff37}, {0xaecc, 0x3, 0xfffffffb, 0x4bfd, 0x1, 0x2}, {0x3, 0x7, 0x2, 0xff, 0x7, 0xd}, {0x7fff, 0x0, 0x9, 0x1c80, 0x10, 0x680}, {0xa7, 0x6, 0x3, 0x2, 0x4, 0x5}, {0x5, 0x7, 0x81, 0x4, 0x6, 0x80}, {0x80, 0x4, 0x2c9a, 0x2, 0x1b9, 0x101}, {0x3, 0x81, 0x5, 0x0, 0x9}, {0x6, 0x20000, 0x100, 0x80, 0xfff, 0x80000001}, {0x7, 0x7, 0x1, 0xd, 0x10001, 0x80}, {0x101, 0x40, 0x4, 0x9, 0x0, 0x10}, {0x7, 0x9, 0x2, 0xb2, 0x1, 0x1ca8669f}, {0x0, 0x9, 0x9dd, 0x4, 0x9}, {0x9, 0x2, 0x2, 0x7fffffff, 0xf7b8, 0xf2}, {0x6, 0x2, 0x1, 0x3, 0x2, 0x3}, {0xffffffff, 0x6, 0x4, 0x9, 0x4, 0x81}, {0x5, 0x7, 0x7, 0x2a, 0x3, 0x8}, {0x401, 0xd6, 0x98, 0x9, 0x4, 0x1}, {0xb4c, 0x7, 0x697, 0x5, 0x9, 0x5a41}, {0x80, 0x0, 0xc, 0x9, 0x6, 0x4}, {0x5, 0x3, 0x0, 0x1, 0x101, 0x400}, {0x79, 0x7ff, 0x2, 0x0, 0x8, 0xf28}, {0x2, 0x2, 0xff, 0x9, 0x3, 0x80000000}, {0x38, 0x200, 0x5ecf4f7, 0x3, 0x2, 0x8}, {0xf1, 0x4, 0xbd, 0xa, 0x3664, 0x4}, {0x0, 0x10001, 0x4, 0xe85, 0xffffffff, 0x8}, {0x8, 0x5, 0xfff, 0x6, 0x5, 0xde15}, {0x6, 0x75400000, 0x8, 0x4, 0xff, 0x9}, {0x2, 0x1, 0x7f, 0x5, 0xa, 0x8000}, {0xe, 0xffff7d9e, 0x8, 0x5, 0xb75, 0x6}, {0x2067, 0x101, 0x101, 0x3, 0xd, 0x7f}, {0x7, 0x951, 0x1, 0x3ff, 0x5277, 0x7}, {0x8, 0x2, 0x1ff, 0x62, 0x9, 0xcc7}, {0x657, 0x8, 0xfffff801, 0xffffff80, 0x4, 0x5}, {0x3, 0xf424, 0xffffffb3, 0x8, 0xfffffffa, 0xfff}, {0x8, 0x8001, 0x7, 0xf5, 0x8, 0x8}, {0x3, 0x4b0162f5, 0x3, 0x8001, 0x7, 0xfffff19c}, {0x2, 0x80000000, 0x80000000, 0xffffffff, 0x6b8, 0xf}, {0x101, 0x4, 0xe370, 0xfffffff8, 0x40, 0x9}, {0x401, 0x5, 0xe7, 0x9, 0x9, 0x2}, {0xc43, 0x7f, 0x9, 0x80, 0x7, 0x82ac}, {0x2, 0x6, 0xb, 0x2c, 0x7815, 0x400}, {0x81, 0x0, 0xb3, 0x7fffffff, 0x8}, {0x3, 0x76, 0x3, 0x6, 0xc, 0xf}, {0xffff, 0x5, 0x100, 0x1, 0x3, 0x4d}, {0xc, 0x8, 0x7, 0x3, 0x1, 0x80000000}, {0x401, 0x1847, 0x4, 0x1ff, 0x0, 0xffff1ee6}, {0x16, 0x2, 0x2, 0x7, 0x1, 0x4}, {0x5a, 0x5, 0x7fffffff, 0x0, 0x0, 0x5d3e}, {0x7, 0x10001, 0x10001, 0x4, 0xcda, 0xe}, {0x5, 0x6989, 0x3, 0xc0a, 0x0, 0x6}, {0x2, 0x3, 0x9, 0x6, 0x7, 0x685c}, {0x4, 0x9, 0x8, 0x2, 0x1, 0x3}, {0x4, 0x7, 0x1, 0x9, 0x3, 0x6b}, {0x400, 0xfff, 0x7f, 0x5, 0x7, 0xffff}, {0x4, 0x7, 0x2, 0x2, 0x1, 0xd62}, {0x5, 0xdf, 0x0, 0x8, 0x7, 0x7}, {0xfffffff8, 0x1ff, 0xb1, 0xaea, 0x6, 0x80}, {0x0, 0xa, 0x3, 0x7, 0xb, 0xa874a87}, {0x3, 0x9, 0xf8, 0x0, 0x8, 0x40d}, {0x7, 0xc31, 0x0, 0xffff, 0x40000000, 0x6}, {0x6, 0x1, 0x3, 0x4, 0x2, 0x9}, {0x80000000, 0x1, 0x6, 0xff, 0x1, 0x60000}, {0x6, 0x4, 0x67a9, 0x4619b90f, 0x4, 0x95fd}, {0xf000, 0x8, 0x2, 0x76, 0x10, 0x3}, {0xb6b, 0x423, 0x2, 0x400, 0x6, 0x8}, {0x6, 0x7ff, 0x2, 0x19, 0x8000}, {0x7, 0x5, 0x7, 0x80000000, 0x81, 0x10}, {0x3, 0x5, 0x4, 0x8, 0x66db87b, 0x80}, {0xf, 0x0, 0x10, 0x1, 0x1f, 0xfffffffa}, {0xfffffff8, 0x1, 0x0, 0x4, 0x7a010846, 0x6}, {0xa, 0x0, 0xfffff593, 0xb1, 0x1ff, 0xff}, {0xc, 0x4, 0x7, 0x8001, 0x9, 0x20}, {0x4a, 0xfffffffa, 0x7f, 0x8, 0x3}, {0x3, 0x4f, 0x5, 0x1, 0x5f0d, 0xfc}, {0x4, 0x2, 0x5, 0x52b0, 0x1c, 0x6}, {0x0, 0x53bd, 0x584, 0x1, 0x7fffffff}, {0x5f, 0x9, 0x6, 0x6, 0x9, 0xffff2c7b}, {0x6, 0x1cdeafd8, 0x2, 0xe, 0x7b, 0x7}, {0x2ca0bff8, 0xffffff01, 0x6, 0xce3, 0xf84, 0x3}, {0x7, 0x6, 0x4, 0x0, 0x0, 0xffffffff}, {0x1, 0xc37, 0x2, 0xff, 0x10, 0x8eb}, {0x9, 0x2, 0x1, 0x881, 0x1, 0x7ff}, {0x81, 0x400, 0x3e1, 0x3, 0x3, 0x5}, {0x1, 0x587, 0x6, 0x0, 0x7, 0x3}, {0xfff, 0x5, 0xfffffff9, 0x10, 0x3, 0x8}, {0x9, 0x4, 0x3, 0x5, 0x5, 0x2}, {0x2, 0x1, 0x53357e82, 0x5, 0x8, 0xdc1}, {0xfffffbff, 0x1802e2, 0xbe1, 0x4, 0xfffffffa, 0x8f}, {0x9, 0x9, 0x624c, 0x2, 0x7ff, 0x5}, {0x5, 0x6, 0x7, 0x8, 0x0, 0x4}, {0x0, 0x748, 0xb4a, 0x7fffffff, 0x7, 0x7fff}], [{0x3, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0xbc54f4ac2cf5a87c}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0xd877faf42f6055d7}, {0x5, 0x1}, {0x2}, {}, {0x3}, {0x2, 0x9b5b4301bde12b1}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {0x2}, {0x3, 0x1}, {0x5}, {0x2}, {0x2}, {0x4aa9db310814b87a, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x4}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x2}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x5}, {}, {0x4, 0x1}, {}, {0x4}, {0x2}, {0x5}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}, @TCA_PEDIT_KEYS_EX={0xa4, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x68d5dce8ba305b8b}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x50, 0x6, "59ddaf71ddeddab877b0208104d83c89cc4ef2573feef3d52b16b7fbd77f76c4d9a68a31528b43fa63fc2cace0770f40eb0a9f120f381335617e71236a366c59cb4da75b4141055337ad671c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1184}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r6, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000740)={0xe0, 0x12, 0x509, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x3}, @generic="ceac591a72f3000abef98efc79891092c64309ee439485c834e724d6766d856f0dde39d75c8e324def58e27ec30015a75f85b6291f46ab0fa269ae9bac769ea55743fc70b34fe8611892095104276d4b879c5cf97f9283a39a1220e2f7ae3a3756f081482fef6569a1e2000194e865d1affdba49967cf82b601e07bf0556bcdab5880b978fcd23443aceb3fc6a39ddda300abfd0130f7d787cbf75be01e1c78691f1c4a120916ab6d23e59b5e44b9a651fe2be380e", @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='{\x00'}]}]}, 0xe0}], 0x1, 0x0, 0x0, 0x22000800}, 0x0) 5m24.524765903s ago: executing program 2 (id=833): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x207, 0x161a81) r2 = memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\nr\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc2038"], 0xfebe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000000f4ff0300"/50], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) accept4$inet(r1, 0x0, &(0x7f0000000140), 0x80800) syz_pidfd_open(r0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000340)=0xff, 0x4) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f000001f9c0)={0x2, {0x8000, 0x200, 0x87, 0x8}}) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x1, 0x0, 0xa, 0xfffffff9}}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='ramfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 3m45.107807699s ago: executing program 8 (id=1054): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@index_on}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 3m44.431813041s ago: executing program 8 (id=1056): socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x4, &(0x7f00000014c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000040)}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000340)=""/1, 0x1}, {&(0x7f0000000380)=""/250, 0xfa}, {&(0x7f0000000480)=""/177, 0xb1}, {&(0x7f0000000540)=""/169, 0xa9}], 0x8, &(0x7f0000000680)=""/173, 0xad}, 0xe}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc2}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r4, 0x0) keyctl$get_security(0x11, r4, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000300)=0xbbe) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd, @rand_addr, 0x5fdf4394}, 0x1c) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x22044850, &(0x7f0000b63fe4)={0xa, 0xffff, 0x2000, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) r5 = fanotify_init(0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r5, 0x101, 0x20, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r8 = fanotify_init(0x200, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fanotify_mark(r8, 0x0, 0x10, r9, 0x0) fanotify_mark(r8, 0x102, 0x48001050, r7, 0x0) socket$inet6(0xa, 0x2, 0x0) 3m42.306373089s ago: executing program 8 (id=1063): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x8000, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x18000000, 0xa) 3m41.199492421s ago: executing program 8 (id=1067): socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001480), 0x8000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0xffffff7d, 0x0, 0x0, 0xbcad, 0x1a, "9b056936103000"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0xd) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f00000000c0)=@l={0x92, 0x9, 0xe0, 0x3, 0x7, 0x6, 0x8}) r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1000001000104) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r5) ioctl$NBD_DO_IT(r4, 0xab03) 3m38.843908773s ago: executing program 8 (id=1070): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_improper_term\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10001, 0x0, "59c27c65a78308634e78299ef68057107ea354"}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x18) get_mempolicy(0x0, 0x0, 0x3, &(0x7f00006b4000/0x4000)=nil, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="02090603050000002dbd7000ffdbdf2503000700728000000a"], 0x28}}, 0x10) 3m38.049195407s ago: executing program 36 (id=1070): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_improper_term\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10001, 0x0, "59c27c65a78308634e78299ef68057107ea354"}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x18) get_mempolicy(0x0, 0x0, 0x3, &(0x7f00006b4000/0x4000)=nil, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="02090603050000002dbd7000ffdbdf2503000700728000000a"], 0x28}}, 0x10) 1m35.452298898s ago: executing program 9 (id=1307): r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0x5) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast2}], 0x20, 0x2400c842}], 0x1, 0x2000c000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x8, 0xffffffff, 0xffdffffe}, &(0x7f0000000000), &(0x7f0000000280)) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100002010ff"}) 1m34.344257138s ago: executing program 9 (id=1308): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x60, 0xffffffffffffffff}, './file0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000005000000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='afs_call_state\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) sendmmsg$sock(r1, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e23, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$inet6(0xa, 0x2, 0x0) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='-\x00', 0xfffffffffffffffc) 1m33.753409309s ago: executing program 9 (id=1309): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x207, 0x161a81) r2 = memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chroot(&(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000000000000d17d13729b"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r5, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_names='dummy0\x00'}) 1m28.048526162s ago: executing program 9 (id=1321): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x48) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100009c323f08a5040330b23a010203010902120001000200000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00030e0000000e03"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000340)=ANY=[]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000001240)=ANY=[@ANYBLOB="01000000000000003b"]) 1m27.614468347s ago: executing program 9 (id=1323): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x24, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="82", 0xfd67}, {&(0x7f00000000c0)='\x00\x00', 0x2}], 0x2}}], 0x1, 0x8080) sendto$inet6(r0, 0x0, 0x0, 0x3b00, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r4, 0x701, 0x0, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 1m26.751456639s ago: executing program 37 (id=1323): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x24, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="82", 0xfd67}, {&(0x7f00000000c0)='\x00\x00', 0x2}], 0x2}}], 0x1, 0x8080) sendto$inet6(r0, 0x0, 0x0, 0x3b00, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r4, 0x701, 0x0, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 13.176393958s ago: executing program 7 (id=1491): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x8) (async) listen(r0, 0x0) (async) listen(r0, 0xeb8) r1 = add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffb) keyctl$read(0xb, r1, &(0x7f0000000140)=""/169, 0xa9) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000200)={'batadv0\x00', 0xd}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000008d020600300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb080004000905", @ANYRES16=r2], 0x58}}, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) (async) r7 = accept$alg(r6, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000000c0)="ad060000", 0x4) sendmsg$alg(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c00)="fe1cbb0b000034d291", 0x9}], 0x1, &(0x7f0000000980)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x2000) (async) recvmmsg(r7, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/113, 0x71}], 0x1}}], 0x2, 0x0, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x6, 0x834, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, &(0x7f0000000040), &(0x7f0000001d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000030000000200000088f770696d36726567000000000000000000627269646765300000000000000000007663616e30000000000000000000000076657468315f746f5f62726964676500aaaaaaaaaabb00000000ffffad039296514800ff00ff9c00de0000003e0200006e0200006d616300000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa35000000000000000000006d616300000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa2b000001000000000000005345434d41524b000000000000000000000000000000000000000000000000000801000000000000010000000600000073797374656d5f753a6f626a6563745f723a73656d616e6167655f726561645f6c6f636b5f743a733000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e4651554555450000000000000000000000000000000000000000000000000008000000000000001b0000000000000072656469726563740000000000000000000000000000000000000000000000000800000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0200000003000000080000006006626f6e645f736c6176655f3100000000726f736530000000000000000000000076657468305f766c616e000000000000697036746e6c30000000000000000000aaaaaaaaaa2bffffff00ffff0180c200000e00ffffff00006e000000be0000000601000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000006dea000073797a3100000000000000000000000000000000000000000000000001000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a3100000000000000000000000001040000000000000400000000000000110000000000000008067465616d30000000000000000000000070696d3672656731000000000000000076657468305f746f5f6261746164760076657468315f766972745f77696669000180c200000200ff0000ffffaaaaaaaaaabb00ffff0000ff6e000000060100007e0100004552524f520000000000000000000000000000000000000000000000000000002000000000000000c125c5ab39c3001cdf8613dfbcdd5640f6c3c6518a03d61fa7aaf0236dd900004c454400000e0000000000000000000000000000000000000000000000000000280000000000000073797a310000000000000000000000000000000000000000000000010f00000009000000000000006e666c6f67000000000000000000000000000000000000000000000000000000500000000000000034d300007c730100000000004681df60ae2d1598f67c6d56ac3f9b568890ca7b6541a08da49269a3612f34b99b07008ae4b327199fd05f462c1f9730506fb5b2839c70ec314d2c4e8106ea4f0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000feffffff020000001100000009000000001a6261746164765f736c6176655f300000766574683100000000000000000000007767300000000000000000000000000070696d72656700000000000000000000aaaaaaaaaa0b00ffff000080793611ec061a0000ffff00ff6e0000006e000000a60000006d61726b00000000000000000000879eca31228c9a30b4d8fe97822500000000000000000000000000000081470000001000000000000000d0ffffff00000000fdffffff000000007f7ce27b2000000080f3677265300000000000000000000000007369743000000000000000000000000076657468305f6d6163767461700000006970365f7674693000000000000000000180c2000000ffff00ffffffaaaaaaaaaaaa0000ff00ff006e0000006e000000a6000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000bbbbbbbbbbbb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000fcffffff01000000030000002200000060026272020000000000000000000000000064756d6d7930000000000000000000006970766c616e31000000000000000000776c616e300000000000000000000000aaaaaaaaaaaaffffff00ff000000000000000000ff0000ff6e000000be000000360100006c6f6700000000000000000000000000000000000000000000000000000000002800000000000000fcf8cf8851efbaada1c01b1688151e33f4a845e85c7f782b79e6d1d098f94f0019000000000000004e464c4f47000000000000000000000000000000000000000000000000000000500000000000000005000000810006000000000081a7b5d5bf53a60c5149097aa98b31b806fe9d7cfced18313633b255bd7ce9605da9da293ec6ddd2e9c736abf49b16068ed14a0b2903"]}, 0x8ae) (async) r8 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r9, r9, r9) (async) setfsuid(0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0}) migrate_pages(r10, 0x7fff, &(0x7f0000000400)=0x4, &(0x7f0000000440)=0x30) (async) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (async) write$nbd(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="6744669800000000010004000400000054072ab163eab8fb949784b3f4118a29d0a8cb00663b4b1e98c37592174075b2318a2a576c09ea8dc9f7b7ca6dc5ce6130bf86bc52cfa896d6b2ff98d06b28f295b592402628bed0f05fd03456fcae0d5a42794e6ccd431b4ba1cd7be6cdf858919a61cf8b66927f3142e1c0f4d3022ed93db1190872d10748501aa6681fc4b90e81acef60f2686c475da6cfb61582c43ae58b9e4a0422621e18219337f12d02b7fca700d2fabd2cdbd1cd1ceeaa3421ef2480bcebef60c271434803cd18af2ea0cf4555dd238f898c0c12d92b8c1c38c77beee58901ddd4cbf9e0899efa4192939c8a89e1ff4bc8e5"], 0xf9) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB="2c7766646e6f3d2b9533e32594283e6c8ace21b3c4a6faf838edcc2fdbe2c343f31c8f3fcdac110a997e945df112ec2642003d09a9e51f8e7262176bffa3243ff05df72100afe8ee7eb397e2b03adf0c984f1f3ab5a3094598d0da0ffd1bd5479b05179a22612d772b37933a8b7836e2dafeb9d8f4d002ef5bfa8f46", @ANYRESHEX=r11, @ANYBLOB=',cachetag=rfdno,cache=fscache,\x00']) 13.000257547s ago: executing program 0 (id=1493): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x1f8, 0xfeffffff, 0x1f8, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'pimreg\x00'}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x2200, {0x0, @local, @local, @gre_key, @icmp_id}}}}, {{@ip={@private, @dev, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000b00)=""/178, 0x88, 0xb2, 0x1, 0x9, 0x0, @void, @value}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r6, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000740)={0xe0, 0x12, 0x509, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x3}, @generic="ceac591a72f3000abef98efc79891092c64309ee439485c834e724d6766d856f0dde39d75c8e324def58e27ec30015a75f85b6291f46ab0fa269ae9bac769ea55743fc70b34fe8611892095104276d4b879c5cf97f9283a39a1220e2f7ae3a3756f081482fef6569a1e2000194e865d1affdba49967cf82b601e07bf0556bcdab5880b978fcd23443aceb3fc6a39ddda300abfd0130f7d787cbf75be01e1c78691f1c4a120916ab6d23e59b5e44b9a651fe2be380e", @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='{\x00'}]}]}, 0xe0}], 0x1, 0x0, 0x0, 0x22000800}, 0x0) 12.864783516s ago: executing program 7 (id=1495): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, "9f646a", "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"}}, 0x110) mkdir(&(0x7f0000000180)='./file0\x00', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10000, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x3b, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x800, @empty, 0xfffff801}}}, 0x118) splice(r0, &(0x7f0000000340)=0x8, r0, &(0x7f0000000380)=0x9, 0x3, 0xa) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0xd6}}, './file0\x00'}) connect$llc(r2, &(0x7f0000000400)={0x1a, 0x339, 0x9, 0x48, 0x5, 0x8, @multicast}, 0x10) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440), 0x200000, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r2, r2, 0x0, r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {r0}}, './file1\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000640)={&(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], 0x4, 0x1, 0x7, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000680)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r6}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000700)={0xe0000003}) mount$overlay(0x0, &(0x7f0000000740)='./file1\x00', &(0x7f0000000780), 0x10010, &(0x7f00000007c0)={[{@redirect_dir_on}, {@default_permissions}], [{@subj_role={'subj_role', 0x3d, '/dev/infiniband/rdma_cm\x00'}}]}) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000840), &(0x7f0000000880), 0x2, 0x2) r7 = syz_open_dev$loop(&(0x7f00000008c0), 0xbcf, 0x20000) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000900)={0x1}) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'veth1_macvtap\x00'}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001e80), 0x0, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000002180)=0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r12 = fcntl$getown(r2, 0x9) getresuid(&(0x7f0000004200), &(0x7f0000004240), &(0x7f0000004280)=0x0) lstat(&(0x7f00000042c0)='./file1\x00', &(0x7f0000004300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f0000004400)=[{{&(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000000a40)="30b2d26dc9b30aa40e468b4d4038bcc04d17b92b7dc0cddd55130182aebb584e804988c0038e4563301535f0d9e41bbfdfcec0d65b555acfa555e5aa5452517fcb57cac38bcfccc2f230716aa4687e60b03a9d462fb294fb3b11b88e730db247c207012a9c5ec4b5348769437567944dea75ad7640928311b725ba23885025888deb6718fd5664169c2cea718ab33fa7c5e95d37710a94c302a059f13f161401406baa7ccab879cd9089f5415784f445a9f30af383683101", 0xb8}, {&(0x7f0000000b00)="3bade116fd496f047e", 0x9}, {&(0x7f0000000b40)="4ec0af6b2e8a6fcf79cae9b6a5c971c204b12723bb36db65a7a5df4739decee788055b3825077905f11266999945788b0b0201a2de262b5d35fec9d3f2bb00b137bfc334efd54ea6af56b27dab889bef1897e901b1643402e1201b1e41191611f955fa9e0f443a9d1f24e22381a6955aa4564ff67c4c04e9aba8078b53a162f31939ad1d9d65eb28161c5db8e53113244518f90aef080a8f822b300cee1837f400d7e3eb88445b8645ccb17c4ba0c2c06559214f356aff44b2d87ac7683a37570a28b0251111f5", 0xc7}, {&(0x7f0000000c40)="9988ac8a2d5d9e3aeb14c66d547e8fd1fd038ae5e672f74f28dc87b5b3b23dffa04ae14bb701c6ca0391f7fe2b1e4f9d6e35db23e94133cfb14ecaee30e1637c6140471c01", 0x45}, {&(0x7f0000000cc0)="be8a1feccf373127a9972de5a12ab5e3c1a23dc17d95e157f0ed0da4502659af72f1a89e1aa791bd3eb625b0748aabc019124b8044afc323240fa9627b594feb78a8839d358f549f761f290719767caf8f14cf3bc1f963f1316b48a0452ac5a57c59e9e74139c9abbc0ddcf2964b111fc565ab4e0e36e5d47aeb105c501f9d12cf13dd0a2ea359c8eeca81993cb8338ca4464a28c5cadc9ae55c8aaee6154913d8659a439ca9068f547180d9e625f17a8f11291986bf2380985022bd9406fd600e5a796462754b1b105c137b57f04fcfab55b82febb52fc96f44323d79e1ad0808b74f9567fa744400cbe63f", 0xec}, {&(0x7f0000000dc0)="4e3347075f937908c54be4756da6fbf9588ad5d71a13b86e4fe47a3d9e80180f7bd63015d32b77fd1a84e109387a642c553db3e254", 0x35}, {&(0x7f0000000e00)="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", 0x1000}], 0x7, &(0x7f0000001ec0)=[@rights={{0x1c, 0x1, 0x1, [r2, r5, r8]}}, @rights={{0x38, 0x1, 0x1, [r1, r3, r5, r1, r0, r9, r7, r7, r5, r5]}}], 0x58}}, {{&(0x7f0000001f40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000001fc0)="807801ee33c03a2f72ae2e411157c9e7ab5c85454071004a09a44f16a1460e95e85fba1dfd382e6389f3e6da8443812b46cd3369753696411533fc6f52d445e6e9d98702af7f087452a0add91e016752ae25fd4a2a78035635330f4b0c951a1731d3fb3ab472eab213cb255e06f9d9452401e961d36575e4a95cce04dda66eb9394156cf2ab32e85759512986f121c0e02c2b922b40306a2f17cad3da884e7313a9ec65296ff9ea253e75adb254faa2d98ac74afaf05e69b4ba19e0484743d4aa531e08eec3a3c9bab1f012eee8fa17fd8d231958f9c9c06f07e", 0xda}, {&(0x7f00000020c0)="5facc7f05fb84f5cf6d849438437597739527d815db81f2da170b4c9c94dfd8000611197fe1b769f7f9718a17017fbb7d5f48562bc0a9d75d8b6a2f6ee2bcc690a50e329193178", 0x47}], 0x2, &(0x7f0000004380)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}], 0x58, 0x1}}], 0x2, 0x8041) ioctl$VHOST_VDPA_GET_VQS_COUNT(r2, 0x8004af80, &(0x7f0000004480)) 11.761103911s ago: executing program 0 (id=1497): r0 = getpgid(0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x80201, 0x0) setgroups(0x0, 0x0) getgroups(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) setregid(0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[], 0x6c) syz_open_procfs$namespace(r0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x410000) socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x3}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) 11.604878899s ago: executing program 6 (id=1498): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = inotify_init() inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@getchain={0x3c, 0x66, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff2}, {0xffe0}, {0x7, 0xfff2}}, [{0x8, 0xb, 0x4000054}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x1}]}, 0x3c}}, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e000000001b0103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'has\x04liz;\xb6Y2EHwmit\x00'}, {0x20, 'gre0\x00'}, {0x20, 'pim6reg\x00'}, {0x20, '\\\x1d'}, {0x20, '*-,+'}, {0x20, 'pim6reg\x00'}, {0x20, '/dev/video#\x00'}, {0x20, '\x00'}, {0x20, '\xb8\xdb\v\xb0\xcd\xaadn\vx\x02\x00\x00\x00\x00\x00\x00\x00VvD\nKQ\xe8\xeaJ\r\xe0\xeb\xfeU\xe2}\x93\xbf/\x99\x85\x02\xa1\xef\xd6\x95\xfe\xd0\xf1r@1F\b\xa8<\xf8\xf6y\x14\x19\x0f\xea'}], 0xa, "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"}, 0x1a0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r5, 0x1) setsockopt(r5, 0x7, 0x81, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xe8}}, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0xffffffffffffff47, 0xfffffffffffffffd, 0x0) request_key(&(0x7f0000000080)='big_key\x00', 0x0, 0x0, 0xfffffffffffffff8) 10.832718121s ago: executing program 7 (id=1501): r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000050000008dcee3ff3127053b40b80004", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32=r7], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x10) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f00000067c0)=0x10, 0x4) close_range(0xffffffffffffffff, r5, 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r0, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) (async, rerun: 32) wait4(r1, &(0x7f0000000380), 0x80000000, &(0x7f0000000480)) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ftruncate(0xffffffffffffffff, 0x5) 8.696448228s ago: executing program 0 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r4, &(0x7f0000000640)={'#! ', './file0', [{0x20, 'Tab^'}, {0x20, 'aT-^'}, {0x20, '\xb4\xde\r\xc8\xc6\vev/s@\xd0\xa4\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00hnVg\x17m$S\'\xfb\x15\xd9\xf1\x06/\xf0\x05},9i\\G\xeco\x816%\xbf\x1d\xd7}8\x92L\xaf\xf8\xc5(\x069\xc4x\xe2\xef\xc1\t\vb\x9f\xc0\x1d\x98\xc8\xa2\xa4\xa2\t\xf5\x98\xe2\x946\x1d\xb5\xab\x83\xf5]0\xf7\xc1Q\x1b\xd5\"\t\xf7\x83\xdb\xd3\x7f\x17\xae`\n\x96\xee\xb8\xda\\\xde\xd1\x9a\xb6\xa7\v\xe6Y\x9d\xff\xab\x84\x01\xdd\xa5\x8d\xe6\xe0\xa4@\xf1\xba\xfe@)\fG\xe1:s\xfc\xf3\xe8\xcd\xd9d\x81\x19\x83\xda\xb2\x9fK#+dL\x9fQ\xf1\xde9\xaa\x17\xa9\xd3A{1y\xdc0W*\x03\x01Wz\xa8\xd2\xd1\xea\x13b\t\'\xb6\x83O4\x85\xd4\xd0\xd1z\xe1\xa4\xafb\xa6E\x19\xfa\x89\x13\xca\x83\x0e'}, {0x20, '($^'}, {0x20, '-\\'}, {}, {0x20, 's\x00\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=\xbdJ\xba\x87t\xb22\xf7\t\xa5d\x85s~\x01\xb1+\xf68\xa6\x16{#\x97a\x87G\xcd\xba\xc3]\xc8\xd3\x8c2\xf5\x84\xf14\x83\xb9\xbf0x0) timer_settime(r9, 0x5, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) 8.563106417s ago: executing program 3 (id=1504): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 7.377762664s ago: executing program 0 (id=1505): syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x2700) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) msgget(0x2, 0x624) msgctl$IPC_RMID(0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) 7.324153649s ago: executing program 6 (id=1506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, &(0x7f0000000080)=0x35) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES8=r5, @ANYRES8=r0, @ANYRES64=r1, @ANYRES16=r0, @ANYRES32, @ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ppoll(&(0x7f0000000200)=[{}, {}], 0x2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100ffffff0000000000000000000000000000000000ace5e6e1f11bbff1386345f61549b6aa3e0b1042887bdba2494e03af0b7f86e1b5", @ANYRES32, @ANYBLOB="000000a15800"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r7], 0x50) openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x2082, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000480)={0x6, @win={{0x9, 0x8001, 0xb, 0x4}, 0x0, 0x101, 0x0, 0x6, 0x0, 0x8}}) 6.381548106s ago: executing program 3 (id=1508): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x10000000}, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) readv(r2, &(0x7f0000006480)=[{&(0x7f0000004000)=""/4096, 0x1000}], 0x1) pread64(r2, &(0x7f0000000000)=""/167, 0xa7, 0xff) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 5.711183176s ago: executing program 1 (id=1509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c2800005000c0001"], 0x48}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000200)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') 5.497105829s ago: executing program 3 (id=1510): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000240)=""/254, 0xfe) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) 5.459785198s ago: executing program 6 (id=1511): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x18}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x14) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a80100001500200028bd7000ffdbdf25ac1e0101000000000000000000000000ff0200000000000000000000000000014e224f1b4e20000402008000ff000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000000000000de0003006465666c617465000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000b004000023ce3882c1dddacb5c97c72586bc2094cb527de9faa203b8b156b92a30356a753858695c05dce15cbad23a3cf8c231bb5d4044f1db1e8803dd026309fcd37c907c6b4bca18ce32167e4236fd9e7a3a037e16675abd93970366da680f6799a2742c", @ANYRES32=0x0, @ANYBLOB="0200000024001700020000002bbd700025bd700027bd70002bbd7000060000000400000007000000240017000200000026bd700026bd700027bd700026bd700029030000ff0f0000060000000c000f000a000000000000000a00100000000000000000000c000f000600000000000000"], 0x1a8}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) sendmsg$nl_generic(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x37, 0x1, 0x70bd2c, 0x25dfdbff, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0xc804) msync(&(0x7f00007e9000/0xe000)=nil, 0xe000, 0x7) 4.551264618s ago: executing program 1 (id=1512): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) shutdown(r1, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r9}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x10}}]}, 0x38}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = gettid() sendmsg$unix(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c9ee5205f9c540000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x4800}, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r0, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r12) sendmsg$NLBL_MGMT_C_LISTALL(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="eb8f000000000000000007"], 0x14}}, 0x0) 4.301094541s ago: executing program 3 (id=1513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r0) r2 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000300)=0x3ff, 0x4) (async) connect$caif(r2, &(0x7f0000000000)=@dgm={0x25, 0x3, 0x9}, 0x18) (async, rerun: 64) r3 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000040)=0x4009, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async, rerun: 64) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="50010000", @ANYRES16=r1, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x801}, 0x24000080) (rerun: 64) 4.274701231s ago: executing program 7 (id=1514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x54, r1, 0x1, 0x3, 0x0, {}, [@WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x2f, 0x1, r2}]}, 0x54}}, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)={0x114, 0x33, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0x600}, @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x24040040}, 0x0) 3.278179881s ago: executing program 0 (id=1515): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file1\x00', 0x60280, 0x100) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000240)) close(r0) 3.249072063s ago: executing program 6 (id=1516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r4, &(0x7f0000000640)={'#! ', './file0', [{0x20, 'Tab^'}, {0x20, 'aT-^'}, {0x20, '\xb4\xde\r\xc8\xc6\vev/s@\xd0\xa4\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00hnVg\x17m$S\'\xfb\x15\xd9\xf1\x06/\xf0\x05},9i\\G\xeco\x816%\xbf\x1d\xd7}8\x92L\xaf\xf8\xc5(\x069\xc4x\xe2\xef\xc1\t\vb\x9f\xc0\x1d\x98\xc8\xa2\xa4\xa2\t\xf5\x98\xe2\x946\x1d\xb5\xab\x83\xf5]0\xf7\xc1Q\x1b\xd5\"\t\xf7\x83\xdb\xd3\x7f\x17\xae`\n\x96\xee\xb8\xda\\\xde\xd1\x9a\xb6\xa7\v\xe6Y\x9d\xff\xab\x84\x01\xdd\xa5\x8d\xe6\xe0\xa4@\xf1\xba\xfe@)\fG\xe1:s\xfc\xf3\xe8\xcd\xd9d\x81\x19\x83\xda\xb2\x9fK#+dL\x9fQ\xf1\xde9\xaa\x17\xa9\xd3A{1y\xdc0W*\x03\x01Wz\xa8\xd2\xd1\xea\x13b\t\'\xb6\x83O4\x85\xd4\xd0\xd1z\xe1\xa4\xafb\xa6E\x19\xfa\x89\x13\xca\x83\x0e'}, {0x20, '($^'}, {0x20, '-\\'}, {}, {0x20, 's\x00\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=\xbdJ\xba\x87t\xb22\xf7\t\xa5d\x85s~\x01\xb1+\xf68\xa6\x16{#\x97a\x87G\xcd\xba\xc3]\xc8\xd3\x8c2\xf5\x84\xf14\x83\xb9\xbf0x0) timer_settime(r9, 0x5, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) 3.129007078s ago: executing program 7 (id=1517): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x24, 0x0) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="82", 0xfd67}, {&(0x7f00000000c0)='\x00\x00', 0x2}], 0x2}}], 0x1, 0x8080) sendto$inet6(r0, 0x0, 0x0, 0x3b00, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r3, 0x701, 0x0, 0x0, {0x45}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 1.426275151s ago: executing program 6 (id=1518): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1.343990516s ago: executing program 1 (id=1519): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8991, &(0x7f0000000040)={'sit0\x00', 0x0}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000380)={0x8, [[0x1, 0x5, 0x9525, 0x3, 0x3, 0xf, 0x1b, 0x1], [0x5, 0x57, 0xfffffff8, 0x1, 0x858e, 0xfffffffd, 0xff, 0x7fff], [0x7, 0x4, 0x9, 0x12, 0xf68, 0x5, 0x10, 0x5]], '\x00', [{0x8, 0x3, 0x0, 0x1, 0x1}, {0x1, 0x3f, 0x1, 0x1, 0x1}, {0x8, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x80000000, 0x7af4, 0x1, 0x1, 0x1}, {0x10000, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x1ff, 0x4, 0x1, 0x1, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x1}, {0xfffffff8, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xfffffeff, 0x9, 0x1, 0x1}, {0x9, 0x2, 0x1, 0x0, 0x1, 0x1}, {0xf, 0x5, 0x1, 0x1, 0x1}], '\x00', 0x2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0xbfc, 0xe, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xbe8, 0x3, 0x0, 0x1, [{0x7f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_DATA={0x248, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "0e297eed"}, @NFTA_DATA_VALUE={0x31, 0x1, "cd37c553271394993d3ebc6fab7cf0e3c0ba455026ae3222fd011a6e4271e586a0a95a4c65e281a2d4e7c55af3"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x8, 0x1, "4c3dcf8b"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x10bf7c09c7156232}]}, @NFTA_DATA_VALUE={0x59, 0x1, "6776acaedcfd86f946e357bf9b0de1ffd7fc6147221d6b8ebae2e22ddf9f6fe83277bdf1d49de36cdc24cd81a77052b67b9e482d18ff9899c90ef2bfe891e2777e6ae3af77adaf0dff9935e09b3673527a35a4f941"}, @NFTA_DATA_VALUE={0xce, 0x1, "6682e79c1838cead2983924b0cd08f40a3be74d239434506ae4521c762ac4c40defce3846736dc1adb87d6e1d5b7eb4920a24bfc3ef2720212f5b3dfd84f1400f60e2e978008b5ce6e2246b1366eb2a76248a11fdf7e107e163a911b178e83d73d4efb41bf07741cbaabf969c6dd9cf9ce661bb47d18543e18722523e03e61318b78b09f7e06f8330f8fa5c22c56599a0f7494805573bff05f6a04851ce4c5c171d83b7d6bea9ce1776ea2e5fe7d6ecfd6d2eb0c2f8ae4131753536f5ae6599d33de73743e913f6e18b6"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x8c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x36c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfd, 0x1, "1fca08d8ec461a401d30b2c96d2e2a6efbbe32cba79038da41c2a6aa16c21040456f2827107625ef6c996f10fe04ae400e4bcea23f7f500e41293ad73749ff15983e919cb7f38b1ab20dc316ca862fa558916154721e4071ff398eeb0089b3ff53dfecdd3970e1174572cc7be919f4b61c9ab0a84216cac013e4e230cb66788d2b83fee911ae48bddef276d89f34fd5be94cd278b414b286e6ff9c567c66172730922f92e163db619ebb11e350d437c9e55d4fe0e30acd730d8ed7cf9de0dd8ec92982bfc3a3b2d0ebae93298e03719f5c5f4d5f1f3472e806bd96c449646648a07bd29eb5b7ead15ed6ffb625b94caa87492d6cc457ce9966"}, @NFTA_DATA_VALUE={0x32, 0x1, "d7807bd927af90917373f8a43e494576fe0b157ee7b03c5a1b362c5f494976e4f8dc1d05e4021542e03d8a64c689"}, @NFTA_DATA_VALUE={0x5, 0x1, 'C'}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xea, 0x1, "d4b6d52d8a3d96a7bf849a96e6d0ee5f554a8ca57ed66e44f708e6f0bd65eb1631746c739f04644231f5a58a54d66521f2a306f30679aa1692784a2afc5ed129ed8fc1700af0d475db7e885ef104d5d17e5e848f2c41ea2529c30a39e24ef02a88a59a546884a82fc4ec92e4ec50ca64b3a324db4ff159554ad4ff72ef70574fa67092facf936e2b46a475df533957164953e0ac91317d404a9ca4cf29342d7944a7947c0eedf282cedc95ca5f5c8ae1e4eddc392fc6ec3f93d05a6b2075dacd2d6dd69afce2acc59827120f4bf298028cab6dce40941dde936f72a21eb297f35149bd0836e3"}, @NFTA_DATA_VALUE={0xf2, 0x1, "58f42a91bf3e7a21e7b4deb4b9a4b99d271ee4d151b48e1287e5f4e81f0da33cf82eac4d9515c421fc2c7c15f7cdc6c3d1bd07385f6be3cb361b8d61cf12baf3b3d42f7246d6ccfdd5f4768283a2f5df1840d7efd4f2f7e5e0e3b21bf7a9bdbdf67748ea1ea3ab5c20b232eb409b916d4121d03c4a0b89078e1652986de6a1fcb0baee2427e38ee726e139bde24ad2918143cd317bdad3b60be2d2bc30ac73ba84d2c02c876f56ef49af7778f8bab203b722d638f3d81d092e51f420f31a87526252c231ebe303f4ca6d0d26f4b6e2526123a6ee482d8d580bce7ca32a652e316ad79a931ad8f51fc769a7039432"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SREG={0x8}]}}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x128, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x4c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}, {0x2a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2f, 0x1, "845269ac8a5e342f511283132908a4e3c9219fb363a194a5d0d180e731b9287c12dadba8293e6cca726913"}, @NFTA_DATA_VALUE={0x4f, 0x1, "8891f9d200c68ad89abd3afddef5d72b09178ef3316515cc6316cc51c0369e03354468e09169a1e6246c5e2a5c5b478a34920d18f565912c22620ea70ca866ed683fd639b3cc67aebde3d1"}, @NFTA_DATA_VALUE={0xeb, 0x1, "61401a5167a50113130966ed88ee59c4d8c93e60207ff6609cb2e40385f904248e77a32e656d5f4db22f801de6181d12705d0333652413bf1c225473ebe45bf062eeaeb15a9b1b742aad8da75a0dc9043794f8b2421a3e0f0e469ba9d266385d61a6c12487f396d1ce9f95184c3ddff0a1c7cd501babfd18dbb635aff3826fd9546fd5addc9b417198c325ef491b3074e33addee8a1dd7b956328230eb0f2b251d7c1eb3f6672cef650e3de527c6c9b4197c1ee15905f13e2008a4c9c5f7fe392f0a9eb20cd59ea3bf501d1a1854a8d407ca555342e47b01f9affd926aa5a6c3489c3f7d2a58d1"}, @NFTA_DATA_VALUE={0x19, 0x1, "41f8a19e92ffc1811ac52698a2080630121315e98b"}]}, @NFTA_SET_ELEM_KEY_END={0x10c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "5b9ff6ae0f37869359ea711ce207f20e800477313385013f54cab78257d04a5afdb1ec10a9f791bb7c3a9a7ca40ec0fd1656f98b2c701a8c6558852c2a98fd3c078cdaac7c475df46c096fa1b21cb31ce10b77fb593a59f8f4623da32e5f861124310095738180a04e7706856b2f012b7b8c79bd5feffe4837fc62e57c9606f7ae9ffb5e001d805928a590c7782964f3c1a2383c0a70d2a46403496acdf5cec7b0daf404f21a2c14c55d337c0b12469da612819228898294f6fe1423b8a27633c74576ac3dd422fa2a51b8efa93d34271cd349c7d16c8cf483d9d3c787bd037b9aa50fbc8c"}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10000}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_CT_SREG={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x44, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x916}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}, @NFT_MSG_DELOBJ={0x5c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc80}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000040) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000180)=0x3, 0x12) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x8, @private1, 0x8}}, 0x2, 0x1000}, 0x90) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x50, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xd6b}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x50}}, 0x0) 1.272549856s ago: executing program 3 (id=1520): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x101) r3 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000001080)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000006540)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000300)="814d41a41ea554a617c44bb7cb11be8c83712b30911fc10990e8988293ac26d0c04398595196539e780e609a70c8a8716a52d433dc00c8c695bf93b887f5752a00438b096863", 0x46}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="38020000d18cc1190000", @ANYRES32, @ANYRES32=r3], 0x18, 0x800}}, {{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000640)="1c4806b1ed2bb4d66241a644315bc68755a87dc58a3bc26064797fffef8a30ba8d818b6555280d7215af7c63c0017a0e81610e8b0321b92b37f6d14825e8cadaa24ab2b5211c9ea824e8b80582c2d118893b9fef43a423fb7ad7a41e7399d99c3445e141fa79210744aeffd5ae4beebd981f0d1f642044757fdbc69e745a5f72d9e6261bcab4e46f796e8b935746a60e368fa92a8f9a80e5e3ef634d173f92a16ba71ded177762df4c1ae616b8b08963ede35f81bb191bc5d042957567dc449be263e378a4c3770fa834564f", 0xcc}, {&(0x7f00000003c0)="45cacea26f1739844861cafb838a2b69b241913b0db1f131f06f4ff1cd7dacbfc88c25309e5ae84b3f9adfbaa3dded1585580ddd2abc611ae5510fd938aa", 0x3e}], 0x2, &(0x7f0000000900)=[@rights={{0x24, 0x1, 0x1, [r1, r3, r5, 0xffffffffffffffff, r0]}}, @rights={{0x38, 0x1, 0x1, [r6, r6, r2, r3, r6, r2, r2, 0xffffffffffffffff, r5, r3]}}, @rights={{0x24, 0x1, 0x1, [r5, r5, r5, r1, r1]}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, r3, r5, r2, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r1, r6, r6, r5, r5, r1, r5]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x158, 0x80}}, {{&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000b00)="7fa38ec03f5ea3b58062c335191388ba04a4d57eb984e6e02010eee134eb9e6d2cb94285f5d5c58bc7c252a7f39f29aeaa1310b02e98f57751cec982cf78d1fe04328262b99c0acf80065d2c2bac731c6b4474781e4b272dbb0de3556f70a9b5eaf85c47afeed6ff200cf023c22935e5de510a70e857e0de522fa2868bea6766827d1e280598233fad9c612f5badf04e03e4627908aad489dd61061afe7969aef3dc9237eed7ef9cbda7a4f2bf7ef2cd154df45f2dda26d1b4211379f8b50007194a0b70cdf57404f1188388d01646163c", 0xd1}, {&(0x7f0000000c00)="2a3a146d8ad085ccd25011b7323d8026ee3b086f2e88d72cf0f2ea6a74222c66831058", 0x23}, {&(0x7f0000000c40)="d022b527492093351991cb137d1fa7d8ce972cdb536aeaa203172fc01a87980ae11efd7c57b3fa2dda1e8e8b6119f24f0d19095a45b320c8b4c620a6b76ebe71903310ce5dc85bb3ef8e81582e5e2e40c62ac31bb47b635c0275dd7486cd17c182ef92b8df4d3e50678bc57afceb585b7f62405b711c489fbf8f96e94dc081cf4e63f3fbd9188aaa9c24fa24a4134bb6ab4e1fc69d965ef7001a1c71f16ef0660c67e33f41f1c7f5227255459070333b5adb6993be3b244f231774801e5d3e09a444092dce7e63d2621945044ca3", 0xce}], 0x3, &(0x7f0000000d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x58, 0x40000}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)="bbccd6a8d3406b3c92048f7a3d7cad8ea1aaaafbef68ea10d66ddbd05387ebf35f5ac0c3e4166d769ab7804f179e356af9fad78492bfe15ec4a2a712f27e2755c9dc54d89a724086922b5a7d871a2c4450e704f5ff31614f2768845ae2b32aa8a34b4949824c8a12ed7605eaccf0a8452491e00184b58094a808806a2dab00a59d520cc01822a0fe41957a8a0f022d9a18654e477e306df3f7dbe0923c7947b4b0270c6c7a82e8876dc5c6d72e1b346f7e", 0xb1}, {&(0x7f0000000580)="14c5fcfdab7a1ac62127d98437fc2cd78b1e044ad68520d116a78b7ac001e8b92e076d44d134e9799c", 0x29}, {&(0x7f0000000800)="e9f1f7d9f6767d8b9ae95ecd26", 0xd}, {&(0x7f0000000840)="2114e806643d7d3dea377890a00e0904a461be1d9331e3ccdc15af608022725f2aba3bbab2911bf76a7fd901d554b16887528f643d351e31cfb2accb8581bf6be320dd60d1c6a075335777ed5db7d1986ee1f06cd11b1ad977", 0x59}, {&(0x7f0000000e00)="9ea5deee4a309905e766e73f375e4ed036697926276b7ec2489712cd5479947490d30e4bee27fcaf86ff09cb293a3b587d976c79bae741db2d11552b9359bc503e304b9afc8a5687067ddf6f9fb6e8a6bf786f802550fc999878acf174aff3456a4051302ca6c8b92c9808d0d44f6360925bfa661a5d46e3052346d0ceb2bca16ab3a3c282c7841e3ae284614d57855a70a24c13a1e2bbd2caf95ec6e3a7d56b3b9a4ff749f142", 0xa7}, {&(0x7f0000002900)="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", 0x1000}], 0x6, &(0x7f00000011c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x68, 0x20000020}}, {{&(0x7f0000001240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002500)=[{&(0x7f00000012c0)="b958452ae159c01bf017d62e2fe4569b1da66c0a29adf4e9f14fe0f32c156841ac4584e1c0b4185eb9d13bb58845b24f28da281316c4fcdcd3b16e840200ffc3e359a70c10d99dfc544b71dfda0185ee4849a1b26073aa95c036cd61bd4cf1c03ef588b48384bc766ba2002df41f6b119b436705cd3b80db4334f4ff3fd60b0812760b8b0d78b2c877c52b8b075abb023cf6e5c24d29446346acd85f9c902729ec91ed9139301ec6ed5698e17e6c779de60139badb", 0xb5}, {&(0x7f0000001380)="1d75ee0db7", 0x5}, {&(0x7f00000013c0)="e134dddc4e20dc4b0a597ac60a31a9ea8dcf679a4109dd793501b4fee5adefb858e5d3c04a22301cd3fe2bd9afa09f6cc29486bcceeb534f697ae05933bddd1b764993", 0x43}, {&(0x7f0000001440)="c06d8472fa23ea662ca7e49c2abc3297566c993aa7bd71221f43e25c31d3fcf63af47d83ce738e97b9b9aa59b0fcfaee10fefe02fa917ad40e668eec067048b7ac04a937cf220adac34b5711f04bd17aa7cfa12268f3e9bd28473da468e44fd67c31cbd164d8fb146a4df49bb8caf982fbc820fd9ffedbb64c0f729a1863186ff97681739ac44799b13f93658d44e4a8f822bc6d0780f67422", 0x99}, {&(0x7f0000001500)="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", 0x1000}], 0x5, &(0x7f0000002600)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4090}}, {{&(0x7f0000002640)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000028c0)=[{&(0x7f00000026c0)="88fc51179eb9369e3b2ae9cea4e94bbd0c8b961decad510705d3d7985f18b700fea0910fcd99e5af22fe738b9179e6ba0d27cf02276b91f60d7121647c22fb74550e32fb91d7d61225ef2ade4583a71faa801cb19e3d201cfd0f48b8980c8140d2e747662a7835e141f7537c8bd5b7210cf074b74a2b343b438748cef6be47ac5e2333fc24236d49d1f81e5eccff131b000ab55d9907273bf44c1706999c109397d7124d8717a451a3ce08afa00f15d4a74a3a31f9b1cdf454971af827599498d9cb3bb138fa64a5251377642d617066f9cbe73d15b3e9eb1934618159866e5576", 0xe1}, {&(0x7f00000027c0)="03cb0065d3dcbd504035419035a29dd1a0696f1c845c0a115d2b72540cc018fe1cf2b7477a8606cfc372c6bf983c4daf4ea9f982ce63069fbc2d63cb5cf907876af3138bc061f43d56f972a84c3da87e940853460d8f2bd8ae8b3aaf3a9c8238d4bf11fb3d236437638fcaed42fd94a138fa4101f44efa8bbf815c96b4d68e6cc0fb99fe2505ed9f3d35d9ab3400e24dc3a02ff1b929d813196690d432adf8ed464de1c0f4027b6d87f130e669c779507e6bd08a1300f33ca1f18fabcafc61c6b177e62689c9f6117c82bb086ab86ca7fea01eaec9b4d9025ae37c8d335e7579c4", 0xe1}], 0x2, &(0x7f00000049c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000006340)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000064c0)=[{&(0x7f00000063c0)="2561576de49e5be71b9ce9209952e026b48c6a69f3e55e976b1810", 0x1b}, {&(0x7f0000006400)="ad259ab82ba266ad61d69a88f967e5a22aec1badffdbf0400b98a6ae5d95d02922d13bc7f15ebaa63fe2b0e495a7ca86b5f28ef65e0422ec56fc8d5c813774ae25342fb218d60b4ac1e948f5fb23fa5091fb4730e7bad23379a609534781782911343918bae0a9292c13d86f70df6b52", 0x70}, {&(0x7f0000006480)}], 0x3, &(0x7f0000006500)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r6, 0xffffffffffffffff]}}], 0x30, 0x40090}}], 0x7, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x736c, 0x4002, 0x1}, &(0x7f0000000480), &(0x7f00000004c0)) r7 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @dev}, 0x1c) sendmmsg$alg(r7, &(0x7f0000000240)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="d8000000000000002900000002000000"], 0xd8}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) 1.188015052s ago: executing program 0 (id=1521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, &(0x7f0000000080)=0x35) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES8=r5, @ANYRES8=r0, @ANYRES64=r1, @ANYRES16=r0, @ANYRES32, @ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ppoll(&(0x7f0000000200)=[{}, {}], 0x2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100ffffff0000000000000000000000000000000000ace5e6e1f11bbff1386345f61549b6aa3e0b1042887bdba2494e03af0b7f86e1b5", @ANYRES32, @ANYBLOB="000000a15800"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r7], 0x50) openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x2082, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000480)={0x6, @win={{0x9, 0x8001, 0xb, 0x4}, 0x0, 0x101, 0x0, 0x6, 0x0, 0x8}}) 1.101758652s ago: executing program 6 (id=1522): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000540)={0x0, 0x9c, "1bfe064a55781831e6aec1308847d6be9e12dda64a96c86868f4a498282fc542fbab4b287494f1164ce338c3bb1bbb5ea0cc2f2add540ebd82efc7e852239bb788bc7f322a4e9139dbc2db06659183fa006fff140b90f04f0628966a424529d2e10c2993d07ca1e39debfada4f34f3d384c15270db08d866c87c85765552c2e5ee286e011f913045d30f46ecfe63749ee0e1f1db56e02e9c4af50b0d"}, &(0x7f0000000600)=0xa4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000640)={0x0, 0x1c61, 0x9, 0x59}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000006c0)={0x0, 0x4}, &(0x7f0000000700)=0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000007c0)={r6, 0xffff, 0x1, "df"}, 0x9) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001780)={0x0, 0x2}, &(0x7f00000017c0)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000001940)={&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0xa, @mcast2, 0xfff}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000001c0)="ebbcf1a45bc1c84336247b4492478d72172b1bae0923aac11d3cacf68ce8a0a119cdfce99d9b2834cbfe022dafa781b7f1e5bd3455d753a29d2ae310a4c90d1209ec20ae4130dc8339f6cc68935de5490b1822ade2f3919d494eca59c6e12d40b100f39c18dff26ca79bde287f1ebc5e707b9cc04d7e57f28d9ece902cee3bc70aef3145d0a1d33d5ddfb422173199c19511492f69b950ec6e064e36569d741d9c", 0xa1}, {&(0x7f0000000280)="66ec56457011412bbc8b68ae8bd04879dd2dfe0c250c38444e72da9399f3800e22ecb5a02519a82f0907c9480b102d90bf31a4b3ec000012740f359cb99fbc239b5972056a4d404051f6f83712952174d689346d0c397f1a8ebf2c8bb6a27bdb2f4699147f4112e4c76da6a3db346bb0397443dbf672a94dd61cc0e1e2d9261e4537784ab0bd5a98355969ab4124820fae273ae99e22c19cfde7bc62b8ea88ab1751725cf9b06fa6736bfd71d85841bafcf7388e", 0xb4}, {&(0x7f0000000780)="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", 0xffe}], 0x3, &(0x7f0000001800)=[@sndinfo={0x20, 0x84, 0x2, {0xffff, 0x4, 0x3, 0x7fffffff, r1}}, @authinfo={0x18, 0x84, 0x6, {0x7f}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x3, 0x10000, 0x1, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @sndinfo={0x20, 0x84, 0x2, {0xd, 0x2, 0x9, 0x20, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x10, 0x0, 0x8, 0x1, 0x6, 0x9, 0x40, r6}}, @sndinfo={0x20, 0x84, 0x2, {0x5278, 0x5, 0x6, 0x5, r7}}, @init={0x18, 0x84, 0x0, {0x0, 0x8000, 0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}, @init={0x18, 0x84, 0x0, {0x0, 0x2, 0x5, 0x3}}], 0x128, 0x400c0800}, 0x8000) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r8, &(0x7f0000000100)="15", 0x1, 0x24000007, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) sendmsg$inet6(r8, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) r9 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x19, &(0x7f0000001840), 0x8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r11, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000001280)=[0xff], &(0x7f0000001280), 0x200000000000000, 0x1}}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0xa00}, [@call={0x85, 0x0, 0x0, 0x46}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 880.997721ms ago: executing program 7 (id=1523): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r4 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r4}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = gettid() tkill(r5, 0x14) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fstatfs(r3, &(0x7f0000000540)=""/203) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = mq_open(&(0x7f0000000080)='!selx\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x1}) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr=@empty, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) 859.505689ms ago: executing program 1 (id=1524): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="041498f8c8003122784634d73fc02777c6b8bdf15ee640453352751ea20c2dca2aeaaf6c80a2b7341cadd557b016b18e756a038a6b681e6fe53090fa3d86117a64be137743aad0a2e0b45f43c5d6baaa41e2373c5150bca930218a0c750dd54329e7646c7d31258c5f17fac5b7cef555"], 0x9) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') getdents64(r1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r2 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xec9223f0ec860c78, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) epoll_create(0x207ffd) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000080)=0x0) socket$inet6(0xa, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0xfffffffc}, {}, {}, 0x0, 0x3f0, 0xfffffffd, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x200000, 0x18, 0x4}, 0x18) mknodat$null(r4, &(0x7f00000000c0)='./file0\x00', 0x40, 0x103) 808.865µs ago: executing program 1 (id=1526): syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x2700) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) msgget(0x2, 0x624) msgctl$IPC_RMID(0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) 0s ago: executing program 3 (id=1527): mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x4, 0x3, 0x800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) kernel console output (not intermixed with test programs): t=ffff, bcdDevice= 0.00 [ 490.344419][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.355445][ T974] usb 4-1: config 0 descriptor?? [ 490.391326][ T12]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.403208][ T12]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.416504][ T12]  (unregistering): (slave batadv0): Releasing backup interface [ 490.432939][ T12]  (unregistering): Released all slaves [ 490.460310][ T9889] team0: Port device team_slave_1 added [ 490.480115][ T9988] netlink: 'syz.6.902': attribute type 25 has an invalid length. [ 490.494442][ T9988] netlink: 'syz.6.902': attribute type 7 has an invalid length. [ 490.700587][ T9889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.716967][ T9889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.753382][ T9889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.767061][ T9985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.781140][ T9889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.788643][ T9985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.846886][ T9889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.103731][ T9889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.811677][ T974] usbhid 4-1:0.0: can't add hid device: -71 [ 491.812909][ T9845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.836645][ T974] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 491.885281][ T974] usb 4-1: USB disconnect, device number 28 [ 491.990081][ T9889] hsr_slave_0: entered promiscuous mode [ 491.997564][ T5941] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 492.015913][ T9889] hsr_slave_1: entered promiscuous mode [ 492.035777][ T9889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.047783][ T9889] Cannot create hsr debugfs directory [ 492.122767][ T12] hsr_slave_0: left promiscuous mode [ 492.143456][ T12] hsr_slave_1: left promiscuous mode [ 492.159529][ T5941] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 492.172634][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.180423][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.188734][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 492.256134][T10027] xt_nat: multiple ranges no longer supported [ 492.338249][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.346427][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.661958][ T12] veth1_macvtap: left promiscuous mode [ 492.762372][ T12] veth0_macvtap: left promiscuous mode [ 492.854596][ T12] veth1_vlan: left promiscuous mode [ 492.950349][ T12] veth0_vlan: left promiscuous mode [ 493.005987][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 493.015916][ T5941] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 493.028940][ T5941] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 493.038127][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.049818][ T5941] usb 7-1: config 0 descriptor?? [ 493.651726][ T5941] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 493.744842][ T5941] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 493.779724][ T5941] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 493.807367][ T5941] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 493.831963][ T5941] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 493.875899][ T5941] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 493.897963][ T5941] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 493.908643][ T5941] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 493.916102][ T5941] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 493.984956][ T5941] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 494.013615][ T5941] plantronics 0003:047F:FFFF.000B: unbalanced collection at end of report description [ 494.025624][ T5941] plantronics 0003:047F:FFFF.000B: parse failed [ 494.035450][ T5941] plantronics 0003:047F:FFFF.000B: probe with driver plantronics failed with error -22 [ 494.089953][ T5941] usb 7-1: USB disconnect, device number 20 [ 494.451107][T10047] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 494.461332][T10047] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 494.482414][T10047] vhci_hcd vhci_hcd.0: Device attached [ 494.485349][T10050] netlink: 1264 bytes leftover after parsing attributes in process `syz.6.913'. [ 494.573577][ T12] team0 (unregistering): Port device team_slave_1 removed [ 494.628729][ T12] team0 (unregistering): Port device team_slave_0 removed [ 494.747817][ T59] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 495.186815][T10048] vhci_hcd: connection reset by peer [ 495.218512][ T35] vhci_hcd: stop threads [ 495.224185][ T35] vhci_hcd: release socket [ 495.242939][T10043] netlink: 'syz.0.912': attribute type 25 has an invalid length. [ 495.273946][T10043] netlink: 'syz.0.912': attribute type 7 has an invalid length. [ 495.285071][ T35] vhci_hcd: disconnect device [ 495.414436][T10061] FAULT_INJECTION: forcing a failure. [ 495.414436][T10061] name failslab, interval 1, probability 0, space 0, times 0 [ 495.453928][T10061] CPU: 1 UID: 0 PID: 10061 Comm: syz.0.915 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 495.464682][T10061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 495.474783][T10061] Call Trace: [ 495.478105][T10061] [ 495.481069][T10061] dump_stack_lvl+0x241/0x360 [ 495.485804][T10061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.491043][T10061] ? __pfx__printk+0x10/0x10 [ 495.495681][T10061] ? kmem_cache_alloc_noprof+0x48/0x380 [ 495.501280][T10061] ? __pfx___might_resched+0x10/0x10 [ 495.506625][T10061] should_fail_ex+0x3b0/0x4e0 [ 495.511352][T10061] should_failslab+0xac/0x100 [ 495.516085][T10061] ? vm_area_dup+0x27/0x290 [ 495.520640][T10061] kmem_cache_alloc_noprof+0x70/0x380 [ 495.526076][T10061] vm_area_dup+0x27/0x290 [ 495.530458][T10061] __split_vma+0x1cb/0xc50 [ 495.534922][T10061] ? ima_match_policy+0x111/0x2230 [ 495.540075][T10061] ? __pfx___split_vma+0x10/0x10 [ 495.545033][T10061] ? __pfx_validate_chain+0x10/0x10 [ 495.550249][T10061] ? __pfx_up_write+0x10/0x10 [ 495.554943][T10061] ? ima_get_action+0x75/0xb0 [ 495.559647][T10061] vms_gather_munmap_vmas+0x2e6/0x1600 [ 495.565158][T10061] ? mtree_range_walk+0x6fd/0x8e0 [ 495.570224][T10061] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 495.576155][T10061] ? mas_find+0x8c0/0xbb0 [ 495.580515][T10061] __mmap_region+0x7c4/0x2d30 [ 495.585218][T10061] ? validate_chain+0x11e/0x5920 [ 495.590184][T10061] ? __pfx_lock_release+0x10/0x10 [ 495.595236][T10061] ? __pfx___mmap_region+0x10/0x10 [ 495.600367][T10061] ? __lock_acquire+0x1397/0x2100 [ 495.605447][T10061] ? mark_lock+0x9a/0x360 [ 495.609793][T10061] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 495.616054][T10061] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 495.622658][T10061] ? cap_mmap_addr+0x163/0x2c0 [ 495.627463][T10061] mmap_region+0x226/0x2c0 [ 495.631900][T10061] do_mmap+0x97a/0x10d0 [ 495.636080][T10061] ? __pfx_do_mmap+0x10/0x10 [ 495.640770][T10061] ? __pfx_down_write_killable+0x10/0x10 [ 495.646415][T10061] ? __pfx_lock_acquire+0x10/0x10 [ 495.651451][T10061] vm_mmap_pgoff+0x1dd/0x3d0 [ 495.656073][T10061] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 495.661197][T10061] ? __fget_files+0x2a/0x410 [ 495.665801][T10061] ? __fget_files+0x395/0x410 [ 495.670493][T10061] ? __fget_files+0x2a/0x410 [ 495.675102][T10061] ksys_mmap_pgoff+0x4eb/0x720 [ 495.679880][T10061] ? __x64_sys_mmap+0x7f/0x140 [ 495.684656][T10061] do_syscall_64+0xf3/0x230 [ 495.689168][T10061] ? clear_bhb_loop+0x35/0x90 [ 495.693860][T10061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.699776][T10061] RIP: 0033:0x7fce94d85d29 [ 495.704208][T10061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.723824][T10061] RSP: 002b:00007fce95b23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 495.732256][T10061] RAX: ffffffffffffffda RBX: 00007fce94f75fa0 RCX: 00007fce94d85d29 [ 495.740240][T10061] RDX: 0000000000000406 RSI: 0000000000004000 RDI: 0000000020f9f000 [ 495.748217][T10061] RBP: 00007fce95b23090 R08: 0000000000000003 R09: 0000000000000000 [ 495.756193][T10061] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 495.764181][T10061] R13: 0000000000000000 R14: 00007fce94f75fa0 R15: 00007fff1dba1e58 [ 495.772194][T10061] [ 495.775316][ C1] vkms_vblank_simulate: vblank timer overrun [ 495.920059][ T9845] veth0_vlan: entered promiscuous mode [ 495.943216][ T9845] veth1_vlan: entered promiscuous mode [ 496.050148][ T9845] veth0_macvtap: entered promiscuous mode [ 496.589240][T10077] netlink: 'syz.0.916': attribute type 1 has an invalid length. [ 496.596961][T10077] netlink: 224 bytes leftover after parsing attributes in process `syz.0.916'. [ 497.329716][ T9845] veth1_macvtap: entered promiscuous mode [ 497.527531][ T9889] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 498.662856][ T9889] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 498.992617][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.010830][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.020932][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.031533][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.050789][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.075112][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.085185][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.095880][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.107091][ T9845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.195100][ T5941] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 499.349537][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.410950][ T5941] usb 4-1: config 0 has an invalid interface number: 242 but max is 0 [ 499.457892][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.495814][ T5941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.651923][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.684707][ T5941] usb 4-1: config 0 has no interface number 0 [ 499.717906][ T5941] usb 4-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 499.738714][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.769207][ T5941] usb 4-1: config 0 interface 242 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 499.804316][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.927584][ T59] vhci_hcd: vhci_device speed not set [ 499.930625][ T5941] usb 4-1: config 0 interface 242 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 499.944507][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.954468][ T9845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.965063][ T5941] usb 4-1: config 0 interface 242 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 499.976019][ T9845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.977125][ T9845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.987939][ T5941] usb 4-1: config 0 interface 242 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 500.006053][ T5941] usb 4-1: config 0 interface 242 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 16 [ 500.016305][ T5941] usb 4-1: config 0 interface 242 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 500.029709][ T5941] usb 4-1: config 0 interface 242 has no altsetting 0 [ 500.041739][ T9889] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 500.081246][ T5941] usb 4-1: string descriptor 0 read error: -71 [ 500.090779][ T9889] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 500.113353][ T5941] usb 4-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 500.125349][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.214998][T10104] xt_nat: multiple ranges no longer supported [ 500.350463][ T9845] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.359646][ T9845] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.368648][ T9845] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.377967][ T9845] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.971986][ T5941] usb 4-1: config 0 descriptor?? [ 500.998038][ T5941] usb 4-1: can't set config #0, error -71 [ 501.088838][ T9889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.104755][ T9889] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.117592][ T9307] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 501.119864][ T5941] usb 4-1: USB disconnect, device number 29 [ 501.125464][ T6950] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.138231][ T6950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.228181][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.331135][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.347658][ T6911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.348791][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.355643][ T6911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.362756][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.375374][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.385468][ T9307] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 501.397356][ T9307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 501.410919][ T9307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 501.420899][ T9307] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.434023][ T9307] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.443238][ T9307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.515243][ T9307] usb 1-1: config 0 descriptor?? [ 501.722022][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.729536][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.743270][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.231845][ T9307] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 502.247531][ T9307] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 502.267602][ T9307] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 502.287017][ T9307] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 502.305008][ T9307] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 502.321695][ T9307] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 502.336579][ T9307] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 502.345425][ T9307] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 502.353046][ T9307] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 502.360695][ T9307] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 502.368212][ T9307] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 502.370872][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.375646][ T9307] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 502.394414][ T9307] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 502.401905][ T9307] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 502.409424][ T9307] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 502.417533][ T9307] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 502.445008][ T9307] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 502.477769][ T9307] usb 1-1: USB disconnect, device number 28 [ 502.646796][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.706451][ T9889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 503.574228][ T12] bridge_slave_1: left allmulticast mode [ 503.589938][ T12] bridge_slave_1: left promiscuous mode [ 503.616075][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.679567][ T12] bridge_slave_0: left allmulticast mode [ 503.685283][ T12] bridge_slave_0: left promiscuous mode [ 503.727557][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.210426][T10152] netlink: 'syz.0.929': attribute type 10 has an invalid length. [ 506.020548][T10148] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 506.327877][T10156] block nbd3: shutting down sockets [ 507.062428][ T9787] udevd[9787]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 507.482774][ T12] erspan0 (unregistering): left allmulticast mode [ 508.004489][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.6.937'. [ 508.061431][ T5882] kernel write not supported for file /adsp1 (pid: 5882 comm: kworker/1:5) [ 508.327819][ T12]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.344880][ T12]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.356005][ T12]  (unregistering): (slave batadv0): Releasing backup interface [ 508.366844][ T12]  (unregistering): Released all slaves [ 508.429447][ T9889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.532298][T10192] Cannot find del_set index 0 as target [ 511.789148][T10219] block nbd6: shutting down sockets [ 511.801471][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.947'. [ 512.367837][T10255] netlink: 'syz.3.950': attribute type 10 has an invalid length. [ 512.807657][ T12] hsr_slave_0: left promiscuous mode [ 512.853057][ T12] hsr_slave_1: left promiscuous mode [ 512.881876][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.899276][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.921239][T10270] netlink: 'syz.7.953': attribute type 2 has an invalid length. [ 512.958434][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.969943][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.062970][ T12] veth1_macvtap: left promiscuous mode [ 513.069520][ T12] veth0_macvtap: left promiscuous mode [ 513.076424][ T12] veth1_vlan: left promiscuous mode [ 513.091110][ T12] veth0_vlan: left promiscuous mode [ 517.396404][T10300] netlink: 12 bytes leftover after parsing attributes in process `syz.6.960'. [ 517.687302][T10307] netlink: 'syz.6.962': attribute type 1 has an invalid length. [ 517.696135][T10307] netlink: 224 bytes leftover after parsing attributes in process `syz.6.962'. [ 517.839217][ T12] team0 (unregistering): Port device team_slave_1 removed [ 517.892303][ T12] team0 (unregistering): Port device team_slave_0 removed [ 519.967535][ T59] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 520.119728][ T59] usb 1-1: config 0 has an invalid interface number: 242 but max is 0 [ 520.137026][ T59] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.159897][ T59] usb 1-1: config 0 has no interface number 0 [ 520.166276][ T59] usb 1-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 520.197659][ T59] usb 1-1: config 0 interface 242 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 520.239955][ T59] usb 1-1: config 0 interface 242 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 520.255809][ T9889] veth0_vlan: entered promiscuous mode [ 520.289023][ T59] usb 1-1: config 0 interface 242 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 520.310502][ T9889] veth1_vlan: entered promiscuous mode [ 520.317304][ T59] usb 1-1: config 0 interface 242 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 520.382786][ T59] usb 1-1: config 0 interface 242 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 16 [ 520.424877][ T59] usb 1-1: config 0 interface 242 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 520.432447][ T9889] veth0_macvtap: entered promiscuous mode [ 520.460735][ T59] usb 1-1: config 0 interface 242 has no altsetting 0 [ 520.473027][ T59] usb 1-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 520.495403][ T9889] veth1_macvtap: entered promiscuous mode [ 520.504225][ T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.534431][ T59] usb 1-1: Product: syz [ 520.553035][ T9889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.555930][ T59] usb 1-1: Manufacturer: syz [ 520.577080][ T9889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.587775][ T59] usb 1-1: SerialNumber: syz [ 520.595704][ T59] usb 1-1: config 0 descriptor?? [ 520.601681][ T9889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.613361][T10322] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 520.616637][ T9889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.642282][ T9889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.656313][ T9889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.682056][ T9889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.705151][ T9889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.726465][ T9889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.761448][T10340] tipc: Failed to remove unknown binding: 66,1,1/0:3431124709/3431124711 [ 520.763933][ T9889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.795349][ T9889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.798598][T10340] tipc: Failed to remove unknown binding: 66,1,1/0:3431124709/3431124711 [ 520.807785][ T9889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.815092][ T9307] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 520.825004][ T9889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.843131][ T9889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.854282][ T9889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.865064][ T9889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.880389][T10340] tipc: Failed to remove unknown binding: 66,1,1/0:3431124709/3431124711 [ 520.902321][T10320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.911029][T10320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.953676][ T9889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.987217][ T9889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.041152][ T12] IPVS: stop unused estimator thread 0... [ 521.063941][ T9889] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.074234][ T9889] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.121549][ T9889] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.152777][ T9889] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.329789][ T9307] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 521.339076][ T9307] usb 7-1: config 1 has no interface number 1 [ 521.345249][ T9307] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 521.358514][ T9307] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 521.566779][T10351] 9pnet_fd: Insufficient options for proto=fd [ 521.665813][ T9307] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 521.838547][ T9307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.172311][ T9307] usb 7-1: Product: syz [ 522.186835][ T9307] usb 7-1: Manufacturer: syz [ 522.192760][ T9307] usb 7-1: SerialNumber: syz [ 522.202622][T10331] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 522.254761][ T5883] usb 1-1: USB disconnect, device number 29 [ 522.415340][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.6.966'. [ 522.449403][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.474553][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.656514][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.971'. [ 522.691307][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.744069][ T9307] usb 7-1: 2:1 : no UAC_FORMAT_TYPE desc [ 522.768860][ T9307] usb 7-1: USB disconnect, device number 21 [ 522.804245][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.362036][ T9802] udevd[9802]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 526.489364][T10384] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.500286][T10384] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.340930][T10383] net_ratelimit: 343 callbacks suppressed [ 527.340947][T10383] netlink: zone id is out of range [ 527.341000][T10383] netlink: zone id is out of range [ 527.342735][T10383] netlink: zone id is out of range [ 527.342787][T10383] netlink: zone id is out of range [ 527.343405][T10383] netlink: zone id is out of range [ 527.344104][T10383] netlink: zone id is out of range [ 527.344231][T10383] netlink: zone id is out of range [ 527.344303][T10383] netlink: zone id is out of range [ 527.346634][T10383] netlink: zone id is out of range [ 527.346643][T10383] netlink: zone id is out of range [ 527.838714][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.7.982'. [ 528.041626][T10424] netlink: 'syz.6.984': attribute type 25 has an invalid length. [ 528.041655][T10424] netlink: 'syz.6.984': attribute type 7 has an invalid length. [ 534.119520][T10490] netlink: 60 bytes leftover after parsing attributes in process `syz.3.998'. [ 537.268632][T10507] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 537.659184][T10506] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 539.615957][T10551] overlay: ./file0 is not a directory [ 541.990910][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1014'. [ 542.521266][T10574] : renamed from bond0 (while UP) [ 542.720840][T10581] netlink: 'syz.8.1016': attribute type 10 has an invalid length. [ 543.451187][T10581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.461724][T10581] : (slave batadv0): Enslaving as an active interface with an up link [ 543.667879][ T5882] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 543.975709][T10602] : renamed from bond0 (while UP) [ 545.107010][T10608] netlink: 'syz.7.1019': attribute type 10 has an invalid length. [ 545.242384][T10608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.260695][T10608] : (slave batadv0): Enslaving as an active interface with an up link [ 545.383351][T10603] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 545.520514][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.649409][ T5882] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 545.880827][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 545.894262][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 545.904120][ T5882] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 546.881073][ T5882] usb 4-1: string descriptor 0 read error: -71 [ 546.887604][ T5882] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 546.896725][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 547.520179][ T5882] usb 4-1: config 0 descriptor?? [ 547.527597][ T5882] usb 4-1: can't set config #0, error -71 [ 547.534808][ T5882] usb 4-1: USB disconnect, device number 30 [ 548.167670][ T9] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 548.743141][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.797522][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.585232][T10660] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 549.702100][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 549.741874][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.750019][ T9] usb 1-1: Product: syz [ 549.754258][ T9] usb 1-1: Manufacturer: syz [ 549.758976][ T9] usb 1-1: SerialNumber: syz [ 549.963448][T10672] netlink: 'syz.3.1035': attribute type 10 has an invalid length. [ 550.726697][ T9] usb 1-1: 0:2 : does not exist [ 551.453137][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 552.757775][ T5941] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 552.779244][ T9] usb 1-1: USB disconnect, device number 30 [ 552.848399][T10699] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 552.897997][T10697] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1041'. [ 552.967580][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 553.104036][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 553.124751][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 553.157697][ T47] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 553.327518][ T47] usb 7-1: Using ep0 maxpacket: 8 [ 553.356781][ T47] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.543219][ T47] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.780340][ T47] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 553.927355][ T47] usb 7-1: string descriptor 0 read error: -71 [ 553.955966][ T47] usb 7-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 553.985615][ T9802] udevd[9802]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.022949][ T5941] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 554.032184][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.041250][ T5941] usb 4-1: Product: syz [ 554.045481][ T5941] usb 4-1: Manufacturer: syz [ 554.049835][ T47] usb 7-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 554.051011][ T5941] usb 4-1: SerialNumber: syz [ 555.076179][ T47] usb 7-1: can't set config #1, error -71 [ 555.085936][ T47] usb 7-1: USB disconnect, device number 22 [ 555.951007][ T5941] usb 4-1: config 0 descriptor?? [ 555.962757][ T5941] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 555.972528][ T5941] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 556.221710][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1047'. [ 556.237509][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 556.237529][ T29] audit: type=1326 audit(1737153042.764:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10731 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278cb85d29 code=0x7ffc0000 [ 556.317749][ T29] audit: type=1326 audit(1737153042.764:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10731 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f278cb85d29 code=0x7ffc0000 [ 556.339318][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.376293][ T29] audit: type=1326 audit(1737153042.764:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10731 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278cb85d29 code=0x7ffc0000 [ 556.484770][ T29] audit: type=1326 audit(1737153042.764:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10731 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f278cb85d29 code=0x7ffc0000 [ 556.506495][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.617515][ T29] audit: type=1326 audit(1737153042.774:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10731 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278cb85d29 code=0x7ffc0000 [ 556.639473][ T29] audit: type=1326 audit(1737153042.774:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10731 comm="syz.6.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278cb85d29 code=0x7ffc0000 [ 557.309844][ T5941] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 557.321851][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'. [ 557.336556][ T47] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 557.956822][ T5941] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 557.964260][ T5941] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 557.972588][ T5941] em28xx 4-1:0.0: No AC97 audio processor [ 558.036593][ T5941] usb 4-1: USB disconnect, device number 31 [ 558.157635][ T47] usb 9-1: Using ep0 maxpacket: 8 [ 558.201676][ T47] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.219493][ T47] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.406621][ T47] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 558.669379][ T5941] em28xx 4-1:0.0: Disconnecting em28xx [ 559.031310][ T5941] em28xx 4-1:0.0: Freeing device [ 559.158507][ T47] usb 9-1: string descriptor 0 read error: -71 [ 559.167547][ T47] usb 9-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 559.176694][ T47] usb 9-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 559.218047][T10754] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 559.272112][T10754] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 559.273989][ T47] usb 9-1: can't set config #1, error -71 [ 559.308380][T10754] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 559.344369][ T47] usb 9-1: USB disconnect, device number 2 [ 559.369455][ T5941] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 559.514220][ T5836] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 559.607876][ T5941] usb 4-1: config 0 has an invalid interface number: 242 but max is 0 [ 559.787478][ T5941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.808192][ T5941] usb 4-1: config 0 has no interface number 0 [ 559.814369][ T5941] usb 4-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 560.009278][ T5836] usb 7-1: device descriptor read/64, error -71 [ 560.059430][ T5941] usb 4-1: config 0 interface 242 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 560.117717][ T5941] usb 4-1: config 0 interface 242 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 560.135549][ T5941] usb 4-1: config 0 interface 242 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 560.146586][ T5941] usb 4-1: config 0 interface 242 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 560.158506][ T5941] usb 4-1: config 0 interface 242 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 16 [ 560.166833][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1057'. [ 560.168593][ T5941] usb 4-1: config 0 interface 242 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 560.168626][ T5941] usb 4-1: config 0 interface 242 has no altsetting 0 [ 560.267712][ T5941] usb 4-1: string descriptor 0 read error: -71 [ 560.274019][ T5941] usb 4-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 560.283917][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.294616][ T5941] usb 4-1: config 0 descriptor?? [ 560.301362][ T5941] usb 4-1: can't set config #0, error -71 [ 560.315456][ T5941] usb 4-1: USB disconnect, device number 32 [ 560.417522][ T5836] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 560.567711][ T5836] usb 7-1: device descriptor read/64, error -71 [ 560.697848][ T5836] usb usb7-port1: attempt power cycle [ 561.087519][ T5836] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 561.118199][ T5836] usb 7-1: device descriptor read/8, error -71 [ 561.359075][ T5836] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 561.529403][ T5836] usb 7-1: device descriptor read/8, error -71 [ 561.724360][ T5836] usb usb7-port1: unable to enumerate USB device [ 563.186616][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.257775][ T59] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 563.502258][T10828] net_ratelimit: 343 callbacks suppressed [ 563.502292][T10828] netlink: zone id is out of range [ 563.537656][ T59] usb 4-1: Using ep0 maxpacket: 8 [ 563.551338][ T59] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.578725][ T59] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.582780][T10828] netlink: zone id is out of range [ 563.595916][T10828] netlink: zone id is out of range [ 563.634575][ T59] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 563.678640][T10832] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1066'. [ 563.699924][T10828] netlink: zone id is out of range [ 563.715209][T10832] block device autoloading is deprecated and will be removed. [ 563.811817][T10828] netlink: set zone limit has 8 unknown bytes [ 564.082864][ T59] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 564.094155][ T59] usb 4-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 564.107447][ T59] usb 4-1: Product: syz [ 564.111699][ T59] usb 4-1: Manufacturer: syz [ 564.126681][ T59] usb 4-1: SerialNumber: syz [ 564.177072][ T59] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input23 [ 564.345802][T10838] xt_nat: multiple ranges no longer supported [ 565.916783][ T5180] bcm5974 4-1:1.0: could not read from device [ 565.925116][ T5941] usb 4-1: USB disconnect, device number 33 [ 566.002097][ T9787] bcm5974 4-1:1.0: could not read from device [ 566.090184][ T6911] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.243559][ T6911] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.290934][ T9787] udevd[9787]: Error opening device "/dev/input/event4": No such file or directory [ 566.310886][ T9787] udevd[9787]: Unable to EVIOCGABS device "/dev/input/event4" [ 566.356113][ T9787] udevd[9787]: Unable to EVIOCGABS device "/dev/input/event4" [ 566.384280][ T9787] udevd[9787]: Unable to EVIOCGABS device "/dev/input/event4" [ 566.416413][ T9787] udevd[9787]: Unable to EVIOCGABS device "/dev/input/event4" [ 566.458581][ T6911] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.629098][ T6911] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.778165][ T6911] bridge_slave_1: left allmulticast mode [ 567.817534][ T6911] bridge_slave_1: left promiscuous mode [ 567.823363][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.018014][ T6911] bridge_slave_0: left allmulticast mode [ 568.047813][ T6911] bridge_slave_0: left promiscuous mode [ 568.078620][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.783843][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 568.794513][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 568.810725][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 568.818881][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 568.827174][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 568.835188][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 569.207893][ T59] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 569.386502][ T59] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 569.416553][ T59] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 569.431825][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.442881][ T59] usb 7-1: config 0 descriptor?? [ 569.674419][ T59] ath6kl: Failed to submit usb control message: -71 [ 569.740453][ T59] ath6kl: unable to send the bmi data to the device: -71 [ 569.834278][ T59] ath6kl: Unable to send get target info: -71 [ 569.919790][ T59] ath6kl: Failed to init ath6kl core: -71 [ 569.935527][ T59] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 569.967072][ T59] usb 7-1: USB disconnect, device number 27 [ 570.435931][ T6911]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.467041][ T6911]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.496620][ T6911]  (unregistering): (slave batadv0): Releasing backup interface [ 570.504830][ T59] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 570.531847][ T6911]  (unregistering): Released all slaves [ 571.469579][ T5848] Bluetooth: hci1: command tx timeout [ 571.627507][ T59] usb 4-1: Using ep0 maxpacket: 8 [ 571.634408][ T59] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.645760][ T59] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.656652][ T59] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 571.671841][ T59] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 571.796046][T10917] netlink: 'syz.0.1085': attribute type 10 has an invalid length. [ 572.335356][ T59] usb 4-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 572.343704][ T59] usb 4-1: Product: syz [ 572.347971][ T59] usb 4-1: Manufacturer: syz [ 572.352625][ T59] usb 4-1: SerialNumber: syz [ 572.575092][ T59] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input24 [ 573.477690][ T5848] Bluetooth: hci1: command tx timeout [ 573.589426][ T5180] bcm5974 4-1:1.0: could not read from device [ 573.692604][ T5180] bcm5974 4-1:1.0: could not read from device [ 573.705542][ T59] usb 4-1: USB disconnect, device number 34 [ 574.884520][ T6911] hsr_slave_0: left promiscuous mode [ 574.936107][ T6911] hsr_slave_1: left promiscuous mode [ 575.695712][ T5848] Bluetooth: hci1: command tx timeout [ 576.009341][T10962] netlink: 'syz.0.1092': attribute type 10 has an invalid length. [ 576.501114][ T6911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.522608][ T6911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.595267][ T6911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.611103][ T6911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.719426][ T6911] veth1_macvtap: left promiscuous mode [ 576.719496][ T6911] veth0_macvtap: left promiscuous mode [ 576.719625][ T6911] veth1_vlan: left promiscuous mode [ 576.719792][ T6911] veth0_vlan: left promiscuous mode [ 577.970418][ T5848] Bluetooth: hci1: command tx timeout [ 578.929948][T10992] Cannot find del_set index 0 as target [ 579.357793][ T5941] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 579.407770][ T6911] team0 (unregistering): Port device team_slave_1 removed [ 579.468128][ T6911] team0 (unregistering): Port device team_slave_0 removed [ 579.507893][ T5941] usb 7-1: Using ep0 maxpacket: 8 [ 579.519346][ T5941] usb 7-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 579.528777][ T5941] usb 7-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 579.542222][ T5941] usb 7-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 579.551789][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.560380][ T5941] usb 7-1: Product: syz [ 579.564684][ T5941] usb 7-1: Manufacturer: syz [ 579.574828][ T5941] usb 7-1: SerialNumber: syz [ 579.595694][ T5941] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 579.610543][ T5941] dvb-usb: bulk message failed: -22 (3/0) [ 579.702803][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 579.724979][ T5941] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 579.738900][ T5941] usb 7-1: media controller created [ 580.041826][T11003] fuse: Bad value for 'fd' [ 580.054191][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 580.242677][ T5941] dvb-usb: bulk message failed: -22 (6/0) [ 580.270505][ T5941] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 580.317242][ T5941] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input25 [ 580.346266][ T5941] dvb-usb: schedule remote query interval to 150 msecs. [ 580.406356][ T5941] dvb-usb: bulk message failed: -22 (3/0) [ 580.439805][ T5941] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 580.493551][ T5941] usb 7-1: USB disconnect, device number 28 [ 580.829571][ T5941] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 583.418249][T10875] chnl_net:caif_netlink_parms(): no params data found [ 584.717026][T10875] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.962543][T10875] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.084786][T10875] bridge_slave_0: entered allmulticast mode [ 585.615185][T10875] bridge_slave_0: entered promiscuous mode [ 585.624064][T10875] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.824790][T10875] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.836681][T10875] bridge_slave_1: entered allmulticast mode [ 585.844754][T10875] bridge_slave_1: entered promiscuous mode [ 585.877663][ T9673] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 585.926463][T11049] netlink: zone id is out of range [ 585.931796][T11049] netlink: zone id is out of range [ 585.938589][T11049] netlink: zone id is out of range [ 585.943749][T11049] netlink: zone id is out of range [ 585.949483][T11049] netlink: zone id is out of range [ 585.955295][T11049] netlink: zone id is out of range [ 585.960637][T11049] netlink: zone id is out of range [ 585.965781][T11049] netlink: zone id is out of range [ 585.973007][T11049] netlink: zone id is out of range [ 585.978148][T11049] netlink: zone id is out of range [ 586.082899][ T9673] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 586.638734][ T9673] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 586.647925][ T9673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.668425][T10875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.750276][T10875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.794080][ T9673] usb 4-1: config 0 descriptor?? [ 586.874163][T10875] team0: Port device team_slave_0 added [ 587.002587][T10875] team0: Port device team_slave_1 added [ 587.410905][ T9673] ath6kl: Failed to submit usb control message: -71 [ 587.435439][ T9673] ath6kl: unable to send the bmi data to the device: -71 [ 587.442830][ T9673] ath6kl: Unable to send get target info: -71 [ 587.449851][ T9673] ath6kl: Failed to init ath6kl core: -71 [ 587.455952][ T9673] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 588.252319][ T9673] usb 4-1: USB disconnect, device number 35 [ 588.339194][T11067] xt_bpf: check failed: parse error [ 588.888395][T10875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.898075][T10875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.924085][ C1] vkms_vblank_simulate: vblank timer overrun [ 589.106077][T10875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.153942][T10875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.161800][T10875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.187861][ C1] vkms_vblank_simulate: vblank timer overrun [ 589.194208][T10875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.625986][T10875] hsr_slave_0: entered promiscuous mode [ 589.658296][T10875] hsr_slave_1: entered promiscuous mode [ 589.685110][T10875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.710611][T10875] Cannot create hsr debugfs directory [ 591.264937][T10875] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 591.297364][T10875] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 591.315930][T11101] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 591.326090][T10875] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 591.360875][T10875] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 592.022715][T10875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.051566][T11117] FAULT_INJECTION: forcing a failure. [ 592.051566][T11117] name failslab, interval 1, probability 0, space 0, times 0 [ 592.079686][T10875] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.086524][T11117] CPU: 1 UID: 0 PID: 11117 Comm: syz.3.1129 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 592.097332][T11117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 592.107432][T11117] Call Trace: [ 592.110750][T11117] [ 592.113715][T11117] dump_stack_lvl+0x241/0x360 [ 592.118458][T11117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.123702][T11117] ? __pfx__printk+0x10/0x10 [ 592.128338][T11117] ? fs_reclaim_acquire+0x93/0x130 [ 592.133506][T11117] ? __pfx___might_resched+0x10/0x10 [ 592.138848][T11117] should_fail_ex+0x3b0/0x4e0 [ 592.143561][T11117] should_failslab+0xac/0x100 [ 592.148267][T11117] __kmalloc_noprof+0xdd/0x4c0 [ 592.153039][T11117] ? kstrtouint_from_user+0x128/0x190 [ 592.158439][T11117] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 592.164179][T11117] tomoyo_realpath_from_path+0xcf/0x5e0 [ 592.169752][T11117] tomoyo_path_number_perm+0x236/0x860 [ 592.175218][T11117] ? __lock_acquire+0x1397/0x2100 [ 592.180255][T11117] ? tomoyo_path_number_perm+0x206/0x860 [ 592.185897][T11117] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 592.191916][T11117] ? __fget_files+0x2a/0x410 [ 592.196518][T11117] ? __fget_files+0x2a/0x410 [ 592.201121][T11117] security_file_ioctl+0xc6/0x2a0 [ 592.206247][T11117] __se_sys_ioctl+0x46/0x170 [ 592.210850][T11117] do_syscall_64+0xf3/0x230 [ 592.215366][T11117] ? clear_bhb_loop+0x35/0x90 [ 592.220079][T11117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.225999][T11117] RIP: 0033:0x7f1413385d29 [ 592.230470][T11117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.250102][T11117] RSP: 002b:00007f1414140038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.258537][T11117] RAX: ffffffffffffffda RBX: 00007f1413575fa0 RCX: 00007f1413385d29 [ 592.266536][T11117] RDX: 0000000020000000 RSI: 000000000000890b RDI: 0000000000000004 [ 592.274530][T11117] RBP: 00007f1414140090 R08: 0000000000000000 R09: 0000000000000000 [ 592.282522][T11117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.290506][T11117] R13: 0000000000000000 R14: 00007f1413575fa0 R15: 00007fffc54808c8 [ 592.298516][T11117] [ 592.301717][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.327527][ T6950] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.334693][ T6950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.337587][T11117] ERROR: Out of memory at tomoyo_realpath_from_path. [ 592.356521][ T6950] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.363721][ T6950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.448364][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 592.647501][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 592.860839][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 593.161777][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.351455][ T9] usb 7-1: config 0 descriptor?? [ 593.538028][ T5883] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 593.612467][ T9] ath6kl: Failed to submit usb control message: -71 [ 593.630956][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 593.728355][ T9] ath6kl: Unable to send get target info: -71 [ 593.788172][ T5883] usb 4-1: device descriptor read/64, error -71 [ 593.800621][ T9] ath6kl: Failed to init ath6kl core: -71 [ 593.815712][ T9] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 593.836891][T10875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.873929][ T9] usb 7-1: USB disconnect, device number 29 [ 594.028509][ T5883] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 594.348130][ T5883] usb 4-1: device descriptor read/64, error -71 [ 594.528382][ T5883] usb usb4-port1: attempt power cycle [ 594.956366][ T5883] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 595.170578][ T5883] usb 4-1: device descriptor read/8, error -71 [ 595.341986][T10875] veth0_vlan: entered promiscuous mode [ 595.374575][T10875] veth1_vlan: entered promiscuous mode [ 595.410845][ T5883] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 595.946442][T11171] FAULT_INJECTION: forcing a failure. [ 595.946442][T11171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.004951][ T5883] usb 4-1: device descriptor read/8, error -71 [ 596.015216][T10875] veth0_macvtap: entered promiscuous mode [ 596.039971][T11171] CPU: 1 UID: 0 PID: 11171 Comm: syz.0.1137 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 596.050895][T11171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 596.061126][T11171] Call Trace: [ 596.064444][T11171] [ 596.067410][T11171] dump_stack_lvl+0x241/0x360 [ 596.071915][T10875] veth1_macvtap: entered promiscuous mode [ 596.072117][T11171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 596.083088][T11171] ? __pfx__printk+0x10/0x10 [ 596.087721][T11171] ? __pfx_lock_release+0x10/0x10 [ 596.092799][T11171] should_fail_ex+0x3b0/0x4e0 [ 596.097519][T11171] _copy_from_user+0x2f/0xc0 [ 596.102198][T11171] sk_setsockopt+0x2d4/0x3440 [ 596.106921][T11171] ? mark_lock+0x9a/0x360 [ 596.111305][T11171] ? __pfx_sk_setsockopt+0x10/0x10 [ 596.116571][T11171] ? __pfx_lock_acquire+0x10/0x10 [ 596.121644][T11171] ? __fget_files+0x2a/0x410 [ 596.126280][T11171] do_sock_setsockopt+0x2fb/0x720 [ 596.131355][T11171] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 596.136952][T11171] ? __fget_files+0x395/0x410 [ 596.138050][ T5883] usb usb4-port1: unable to enumerate USB device [ 596.141645][T11171] ? __fget_files+0x2a/0x410 [ 596.141683][T11171] __x64_sys_setsockopt+0x1ee/0x280 [ 596.157860][T11171] do_syscall_64+0xf3/0x230 [ 596.162402][T11171] ? clear_bhb_loop+0x35/0x90 [ 596.167118][T11171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.173056][T11171] RIP: 0033:0x7fce94d85d29 [ 596.173760][T10875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.177492][T11171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.177516][T11171] RSP: 002b:00007fce95b23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 596.177542][T11171] RAX: ffffffffffffffda RBX: 00007fce94f75fa0 RCX: 00007fce94d85d29 [ 596.177561][T11171] RDX: 0000000000000042 RSI: 0000000000000001 RDI: 0000000000000004 [ 596.177576][T11171] RBP: 00007fce95b23090 R08: 0000000000000010 R09: 0000000000000000 [ 596.177592][T11171] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 596.177609][T11171] R13: 0000000000000000 R14: 00007fce94f75fa0 R15: 00007fff1dba1e58 [ 596.177642][T11171] [ 596.177710][ C1] vkms_vblank_simulate: vblank timer overrun [ 596.268111][T10875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.280626][T10875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.291346][T10875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.301537][T10875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.312341][T10875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.324104][T10875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.335070][T10875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.350379][T10875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.637787][T10875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.727150][T10875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.781125][T10875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.868373][T10875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.999525][T10875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.060499][T10875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.084445][T10875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 597.103197][T10875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.114906][T10875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.124583][T11183] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 597.189098][T10875] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.229267][T10875] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.284391][T10875] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.315208][T10875] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.362606][T11193] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1144'. [ 599.145486][T10896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.166374][T10896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.296058][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.362787][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 600.238947][T11214] netlink: 'syz.0.1149': attribute type 12 has an invalid length. [ 600.261661][T11214] netlink: 'syz.0.1149': attribute type 29 has an invalid length. [ 600.289814][T11214] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1149'. [ 600.345028][T11227] binder: 11213:11227 ioctl 89f8 200005c0 returned -22 [ 600.368894][T11214] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1149'. [ 600.479579][T11217] Cannot find del_set index 0 as target [ 601.808191][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 602.909628][T11252] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 604.000815][T11264] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 604.523094][T11261] input: syz0 as /devices/virtual/input/input26 [ 604.817817][T11279] netlink: 'syz.0.1157': attribute type 5 has an invalid length. [ 605.018310][T11283] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1157'. [ 606.071832][T11291] block nbd9: shutting down sockets [ 607.377593][ T5836] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 608.029397][ T5836] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 608.103326][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 608.332170][T11326] loop9: detected capacity change from 0 to 6 [ 608.540982][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 608.566514][ T5836] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 608.795025][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.814231][ T5836] usb 7-1: config 0 descriptor?? [ 609.032147][ T5836] ath6kl: Failed to submit usb control message: -71 [ 609.076609][ T5836] ath6kl: unable to send the bmi data to the device: -71 [ 609.112142][ T5836] ath6kl: Unable to send get target info: -71 [ 609.168388][ T5836] ath6kl: Failed to init ath6kl core: -71 [ 609.202992][ T5836] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 609.240577][ T5836] usb 7-1: USB disconnect, device number 30 [ 609.620193][T11351] input: syz0 as /devices/virtual/input/input27 [ 610.079265][T11354] netlink: 'syz.3.1172': attribute type 1 has an invalid length. [ 610.280038][T11359] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1172'. [ 610.445645][T11354] bond0: entered allmulticast mode [ 610.453420][T11354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.708389][T11392] tipc: Enabling of bearer rejected, failed to enable media [ 617.138079][T11392] netlink: 'syz.0.1180': attribute type 1 has an invalid length. [ 618.197970][ T59] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 618.282124][T11417] net_ratelimit: 688 callbacks suppressed [ 618.282149][T11417] netlink: zone id is out of range [ 618.293287][T11417] netlink: zone id is out of range [ 618.298593][T11417] netlink: zone id is out of range [ 618.303743][T11417] netlink: zone id is out of range [ 618.308970][T11417] netlink: zone id is out of range [ 618.314120][T11417] netlink: zone id is out of range [ 618.319302][T11417] netlink: zone id is out of range [ 618.324445][T11417] netlink: zone id is out of range [ 618.329671][T11417] netlink: zone id is out of range [ 618.334814][T11417] netlink: zone id is out of range [ 618.396777][ T59] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 618.416802][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 618.491773][T11425] input: syz0 as /devices/virtual/input/input28 [ 618.544909][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 618.555267][ T59] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 618.564675][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.224687][ T59] usb 7-1: config 0 descriptor?? [ 619.414067][T11436] loop9: detected capacity change from 0 to 6 [ 619.529186][ T59] ath6kl: Failed to submit usb control message: -71 [ 619.535957][ T59] ath6kl: unable to send the bmi data to the device: -71 [ 619.861169][ T59] ath6kl: Unable to send get target info: -71 [ 619.985967][ T59] ath6kl: Failed to init ath6kl core: -71 [ 620.012580][ T59] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 620.140142][ T59] usb 7-1: USB disconnect, device number 31 [ 621.459701][T11444] xt_l2tp: v2 sid > 0xffff: 262144 [ 621.487859][T11444] SET target dimension over the limit! [ 624.297759][ T59] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 624.492002][ T59] usb 1-1: device descriptor read/64, error -71 [ 624.604414][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.063292][T11488] input: syz0 as /devices/virtual/input/input29 [ 630.177533][ T59] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 630.630850][T11533] FAULT_INJECTION: forcing a failure. [ 630.630850][T11533] name failslab, interval 1, probability 0, space 0, times 0 [ 630.644266][T11533] CPU: 0 UID: 0 PID: 11533 Comm: syz.7.1206 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 630.655072][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 630.665167][T11533] Call Trace: [ 630.668475][T11533] [ 630.671453][T11533] dump_stack_lvl+0x241/0x360 [ 630.676176][T11533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 630.681411][T11533] ? __pfx__printk+0x10/0x10 [ 630.686053][T11533] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 630.691459][T11533] ? __pfx___might_resched+0x10/0x10 [ 630.696790][T11533] ? rcu_is_watching+0x15/0xb0 [ 630.701609][T11533] should_fail_ex+0x3b0/0x4e0 [ 630.706331][T11533] should_failslab+0xac/0x100 [ 630.711053][T11533] __kmalloc_node_noprof+0xe1/0x4d0 [ 630.716289][T11533] ? __kvmalloc_node_noprof+0x72/0x190 [ 630.721826][T11533] __kvmalloc_node_noprof+0x72/0x190 [ 630.727176][T11533] v4l2_event_subscribe+0x8b/0x8f0 [ 630.732343][T11533] __video_do_ioctl+0xc23/0xdd0 [ 630.737262][T11533] ? __pfx___video_do_ioctl+0x10/0x10 [ 630.742676][T11533] ? smack_log+0x123/0x540 [ 630.747146][T11533] ? __might_fault+0xc6/0x120 [ 630.751865][T11533] video_usercopy+0x89b/0x1180 [ 630.756822][T11533] ? __pfx___video_do_ioctl+0x10/0x10 [ 630.762237][T11533] ? __pfx_video_usercopy+0x10/0x10 [ 630.767476][T11533] ? smack_file_ioctl+0x29e/0x3a0 [ 630.772553][T11533] ? __fget_files+0x2a/0x410 [ 630.777185][T11533] ? __fget_files+0x2a/0x410 [ 630.781819][T11533] v4l2_ioctl+0x189/0x1e0 [ 630.786190][T11533] ? __pfx_v4l2_ioctl+0x10/0x10 [ 630.791087][T11533] __se_sys_ioctl+0xf5/0x170 [ 630.795770][T11533] do_syscall_64+0xf3/0x230 [ 630.800306][T11533] ? clear_bhb_loop+0x35/0x90 [ 630.805021][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.810963][T11533] RIP: 0033:0x7f4e99185d29 [ 630.815423][T11533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.835080][T11533] RSP: 002b:00007f4e99ef8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.843545][T11533] RAX: ffffffffffffffda RBX: 00007f4e99376160 RCX: 00007f4e99185d29 [ 630.851553][T11533] RDX: 0000000020000080 RSI: 000000004020565a RDI: 0000000000000004 [ 630.859567][T11533] RBP: 00007f4e99ef8090 R08: 0000000000000000 R09: 0000000000000000 [ 630.867597][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.875606][T11533] R13: 0000000000000000 R14: 00007f4e99376160 R15: 00007ffcc2d21be8 [ 630.883638][T11533] [ 631.202465][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 631.243146][T11532] overlayfs: failed to resolve './file0': -2 [ 631.409784][ T59] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 631.418152][ T59] usb 7-1: config 0 has no interface number 0 [ 631.424292][ T59] usb 7-1: config 0 interface 184 has no altsetting 0 [ 631.770060][ T59] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 631.779644][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.877957][ T59] usb 7-1: Product: syz [ 631.882241][ T59] usb 7-1: Manufacturer: syz [ 631.886947][ T59] usb 7-1: SerialNumber: syz [ 631.974956][ T59] usb 7-1: config 0 descriptor?? [ 631.997899][ T5882] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 632.071870][ T59] smsc75xx v1.0.0 [ 632.196109][ T5882] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 632.234761][ T5882] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 632.297503][ T5882] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 632.306766][ T5882] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 632.322206][ T59] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 632.339673][ T59] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 632.366345][ T5882] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 632.399514][ T59] usb 7-1: USB disconnect, device number 32 [ 632.418025][ T5882] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 632.427204][ T5882] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 632.457586][ T5882] usb 10-1: Product: syz [ 632.482425][ T5882] usb 10-1: Manufacturer: syz [ 632.487006][T11553] FAULT_INJECTION: forcing a failure. [ 632.487006][T11553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.510554][ T5882] cdc_wdm 10-1:1.0: skipping garbage [ 632.536325][ T5882] cdc_wdm 10-1:1.0: skipping garbage [ 632.542297][T11553] CPU: 0 UID: 0 PID: 11553 Comm: syz.7.1211 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 632.553106][T11553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 632.563199][T11553] Call Trace: [ 632.566510][T11553] [ 632.568883][ T5882] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 632.569450][T11553] dump_stack_lvl+0x241/0x360 [ 632.580147][T11553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.585394][T11553] ? __pfx__printk+0x10/0x10 [ 632.587030][ T5882] cdc_wdm 10-1:1.0: Unknown control protocol [ 632.590008][T11553] ? __pfx_lock_release+0x10/0x10 [ 632.590038][T11553] ? __mutex_unlock_slowpath+0x21e/0x790 [ 632.590080][T11553] should_fail_ex+0x3b0/0x4e0 [ 632.590107][T11553] strncpy_from_user+0x36/0x270 [ 632.590145][T11553] __se_sys_request_key+0xa3/0x3b0 [ 632.590172][T11553] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 632.590198][T11553] ? __pfx___se_sys_request_key+0x10/0x10 [ 632.590227][T11553] ? do_syscall_64+0x100/0x230 [ 632.590254][T11553] ? do_syscall_64+0xb6/0x230 [ 632.590279][T11553] do_syscall_64+0xf3/0x230 [ 632.590301][T11553] ? clear_bhb_loop+0x35/0x90 [ 632.590327][T11553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.590361][T11553] RIP: 0033:0x7f4e99185d29 [ 632.590383][T11553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.590404][T11553] RSP: 002b:00007f4e99f3a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 632.590431][T11553] RAX: ffffffffffffffda RBX: 00007f4e99375fa0 RCX: 00007f4e99185d29 [ 632.590450][T11553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 632.590466][T11553] RBP: 00007f4e99f3a090 R08: 0000000000000000 R09: 0000000000000000 [ 632.590482][T11553] R10: fffffffffffffff8 R11: 0000000000000246 R12: 0000000000000001 [ 632.590499][T11553] R13: 0000000000000000 R14: 00007f4e99375fa0 R15: 00007ffcc2d21be8 [ 632.590533][T11553] [ 632.683783][ C1] vkms_vblank_simulate: vblank timer overrun [ 633.133017][ T59] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 633.327021][ T59] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 633.381865][ T59] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 634.097497][ T9673] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 634.118214][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 634.133446][ T59] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 634.173497][ T59] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 634.210243][ T59] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 634.294041][ T59] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 634.303826][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 634.312016][ T59] usb 7-1: SerialNumber: syz [ 634.827525][ T9673] usb 4-1: device descriptor read/64, error -32 [ 635.197586][ T9673] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 635.468580][ T5882] usb 10-1: USB disconnect, device number 2 [ 636.350006][ T5941] usb 7-1: USB disconnect, device number 33 [ 637.085571][T11608] netlink: 'syz.3.1220': attribute type 16 has an invalid length. [ 637.208470][T11609] ebt_among: dst integrity fail: 200 [ 639.056927][ T9673] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 640.671687][ T9673] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.706738][ T9673] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 640.766678][ T9673] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 640.798031][ T5836] IPVS: starting estimator thread 0... [ 640.817017][T11634] net_ratelimit: 335 callbacks suppressed [ 640.817061][T11634] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 640.830924][ T9673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.873835][ T9673] usb 4-1: Product: syz [ 640.897479][ T9673] usb 4-1: Manufacturer: syz [ 640.924950][ T9673] usb 4-1: SerialNumber: syz [ 640.993189][T11640] IPVS: using max 22 ests per chain, 52800 per kthread [ 641.305762][ T9673] usb 4-1: 0:2 : does not exist [ 641.337064][ T9673] usb 4-1: USB disconnect, device number 42 [ 641.549026][T11439] udevd[11439]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.625937][T11661] xt_nat: multiple ranges no longer supported [ 644.831172][ T5941] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 645.550422][T11698] dccp_invalid_packet: P.Data Offset(224) too large [ 645.642789][ T5941] usb 1-1: Using ep0 maxpacket: 16 [ 646.326983][ T5941] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.368943][ T5941] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 646.380530][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.392875][ T5941] usb 1-1: Product: syz [ 646.397094][ T5941] usb 1-1: Manufacturer: syz [ 646.432158][ T5941] usb 1-1: SerialNumber: syz [ 646.460357][ T5941] usb 1-1: config 0 descriptor?? [ 646.494307][ T5941] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 646.997201][T11721] netlink: zone id is out of range [ 647.014761][T11721] netlink: set zone limit has 4 unknown bytes [ 647.037938][T11725] syz_tun: entered allmulticast mode [ 647.102458][T11727] xt_nat: multiple ranges no longer supported [ 647.955431][ T9673] usb 1-1: USB disconnect, device number 33 [ 647.977595][ T6950] usb 1-1: Failed to submit usb control message: -71 [ 648.046575][ T6950] usb 1-1: unable to send the bmi data to the device: -71 [ 648.056591][ T6950] usb 1-1: unable to get target info from device [ 648.071928][ T6950] usb 1-1: could not get target info (-71) [ 648.112507][ T6950] usb 1-1: could not probe fw (-71) [ 648.153204][T11737] delete_channel: no stack [ 654.617757][ T59] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 656.010770][T11792] xt_nat: multiple ranges no longer supported [ 656.739352][ T59] usb 7-1: device not accepting address 34, error -71 [ 659.147862][ T5941] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 659.434066][ T5941] usb 10-1: Using ep0 maxpacket: 32 [ 659.741531][ T5941] usb 10-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 659.757333][ T5941] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.827166][ T5941] usb 10-1: Product: syz [ 659.879772][ T5941] usb 10-1: Manufacturer: syz [ 659.927570][ T5941] usb 10-1: SerialNumber: syz [ 659.943785][ T5941] usb 10-1: config 0 descriptor?? [ 660.661931][T11817] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 660.836205][ T5941] usb 10-1: can't set config #0, error -71 [ 661.312663][ T5941] usb 10-1: USB disconnect, device number 3 [ 662.630047][T11835] netlink: zone id is out of range [ 662.643283][T11835] netlink: set zone limit has 4 unknown bytes [ 666.597568][ T5882] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 667.021707][T11868] xt_nat: multiple ranges no longer supported [ 668.675302][T11851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.683989][T11851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.840256][ T5836] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 669.062923][ T5882] usb 10-1: config 0 has an invalid interface number: 242 but max is 0 [ 669.128154][ T5882] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.151880][ T5882] usb 10-1: config 0 has no interface number 0 [ 669.552577][ T5882] usb 10-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 669.764807][ T5882] usb 10-1: config 0 interface 242 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 669.854394][ T5882] usb 10-1: config 0 interface 242 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 669.937960][ T5882] usb 10-1: config 0 interface 242 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 670.139427][ T5882] usb 10-1: config 0 interface 242 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 670.151362][ T5882] usb 10-1: config 0 interface 242 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 16 [ 670.161925][ T5882] usb 10-1: config 0 interface 242 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 670.175397][ T5882] usb 10-1: config 0 interface 242 has no altsetting 0 [ 670.930370][ T5882] usb 10-1: string descriptor 0 read error: -71 [ 670.937163][ T5882] usb 10-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 670.946549][ T5882] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.183490][T11888] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 671.885606][ T5836] usb 4-1: device not accepting address 43, error -71 [ 671.907785][ T5882] usb 10-1: config 0 descriptor?? [ 671.984325][ T5882] usb 10-1: can't set config #0, error -71 [ 672.336330][ T5882] usb 10-1: USB disconnect, device number 4 [ 673.437767][T11913] dccp_invalid_packet: P.Data Offset(224) too large [ 674.821070][T11916] xt_nat: multiple ranges no longer supported [ 675.040359][ T5836] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 676.033915][T11925] netlink: zone id is out of range [ 676.050507][T11925] netlink: set zone limit has 4 unknown bytes [ 679.830743][ T5836] usb 4-1: config 0 has an invalid interface number: 242 but max is 0 [ 679.846661][ T5836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.037500][ T5836] usb 4-1: config 0 has no interface number 0 [ 680.044068][ T5836] usb 4-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 680.055400][ T5836] usb 4-1: config 0 interface 242 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 680.066542][ T5836] usb 4-1: config 0 interface 242 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 680.078020][ T5836] usb 4-1: config 0 interface 242 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 680.089588][ T5836] usb 4-1: config 0 interface 242 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 680.101948][ T5836] usb 4-1: config 0 interface 242 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 16 [ 680.112274][ T5836] usb 4-1: config 0 interface 242 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 680.125796][ T5836] usb 4-1: config 0 interface 242 has no altsetting 0 [ 680.238587][ T5836] usb 4-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 680.374285][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.585169][ T5836] usb 4-1: Product: syz [ 680.617674][ T5836] usb 4-1: Manufacturer: syz [ 680.622348][ T5836] usb 4-1: SerialNumber: syz [ 681.287680][ T59] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 681.585294][ T59] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 681.639486][ T5836] usb 4-1: config 0 descriptor?? [ 681.640524][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.645001][ T5836] usb 4-1: can't set config #0, error -71 [ 681.660748][ T5836] usb 4-1: USB disconnect, device number 44 [ 681.953053][ T59] usb 7-1: Product: syz [ 681.957654][ T59] usb 7-1: Manufacturer: syz [ 681.962291][ T59] usb 7-1: SerialNumber: syz [ 681.969615][ T59] usb 7-1: config 0 descriptor?? [ 682.515677][T11984] xt_nat: multiple ranges no longer supported [ 683.757685][ T59] usb-storage 7-1:0.0: USB Mass Storage device detected [ 686.047051][ T47] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 686.224413][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.531502][ T47] usb 1-1: config 0 has an invalid interface number: 242 but max is 0 [ 686.540200][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.556156][ T47] usb 1-1: config 0 has no interface number 0 [ 686.700303][ T5883] usb 7-1: USB disconnect, device number 36 [ 687.311091][ T47] usb 1-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 687.374634][ T47] usb 1-1: config 0 interface 242 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 687.417988][ T47] usb 1-1: config 0 interface 242 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 687.462062][ T47] usb 1-1: config 0 interface 242 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 687.510051][ T47] usb 1-1: config 0 interface 242 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 687.553703][ T47] usb 1-1: config 0 interface 242 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 16 [ 687.606752][ T47] usb 1-1: config 0 interface 242 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 687.637448][ T47] usb 1-1: config 0 interface 242 has no altsetting 0 [ 687.813884][ T47] usb 1-1: string descriptor 0 read error: -71 [ 687.820274][ T47] usb 1-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95 [ 687.829703][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.844513][ T47] usb 1-1: config 0 descriptor?? [ 687.858543][ T47] usb 1-1: can't set config #0, error -71 [ 687.867628][ T47] usb 1-1: USB disconnect, device number 34 [ 688.348021][ T47] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 688.924975][ T47] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 688.981367][ T5941] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 689.001266][ T47] usb 1-1: can't read configurations, error -61 [ 689.468166][ T47] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 689.610594][ T5941] usb 7-1: config 0 has an invalid interface number: 4 but max is 0 [ 689.633764][ T5941] usb 7-1: config 0 has no interface number 0 [ 689.669038][ T47] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 689.672671][ T5941] usb 7-1: config 0 interface 4 has no altsetting 0 [ 689.683793][ T47] usb 1-1: can't read configurations, error -61 [ 689.685605][ T47] usb usb1-port1: attempt power cycle [ 689.697438][ T5941] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 689.697481][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.726512][ T5941] usb 7-1: config 0 descriptor?? [ 689.784458][ T5836] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 689.842334][ T5941] cp210x 7-1:0.4: cp210x converter detected [ 690.597519][ T47] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 690.724926][ T5941] cp210x 7-1:0.4: failed to get vendor val 0x000e size 3: -71 [ 690.735920][ T5836] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 690.744598][ T5836] usb 4-1: config 0 has no interface number 0 [ 690.771204][ T5941] usb 7-1: cp210x converter now attached to ttyUSB0 [ 690.789843][ T5836] usb 4-1: string descriptor 0 read error: -71 [ 690.796130][ T5836] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=9e.3c [ 690.804720][ T47] usb 1-1: device descriptor read/8, error -71 [ 690.828513][ T5941] usb 7-1: USB disconnect, device number 37 [ 690.867430][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.243109][ T5941] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 691.275414][ T5836] usb 4-1: config 0 descriptor?? [ 691.427317][ T5836] usb 4-1: can't set config #0, error -71 [ 691.435275][ T5941] cp210x 7-1:0.4: device disconnected [ 691.450057][ T5836] usb 4-1: USB disconnect, device number 45 [ 691.977527][T12066] input: syz0 as /devices/virtual/input/input30 [ 693.400839][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 695.443951][T12101] lo speed is unknown, defaulting to 1000 [ 695.445493][T12101] lo speed is unknown, defaulting to 1000 [ 695.451839][T12101] lo speed is unknown, defaulting to 1000 [ 695.468948][T12101] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 695.500066][T12101] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 695.624953][T12101] lo speed is unknown, defaulting to 1000 [ 695.632613][T12101] lo speed is unknown, defaulting to 1000 [ 695.638435][T12101] lo speed is unknown, defaulting to 1000 [ 695.644482][T12101] lo speed is unknown, defaulting to 1000 [ 695.650996][T12101] lo speed is unknown, defaulting to 1000 [ 696.507560][T10875] syz_tun (unregistering): left allmulticast mode [ 696.616478][T10875] syz-executor (10875) used greatest stack depth: 17560 bytes left [ 697.198878][ T6950] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.425578][ T6950] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.546877][ T6950] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.003011][ T6950] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.018204][ T5941] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 698.179718][ T5941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.219378][ T5941] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 698.236935][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 698.247954][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 698.305243][ T5941] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 698.336034][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 698.350761][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 698.362880][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 698.370736][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 698.388501][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.510045][ T5941] usb 4-1: Product: syz [ 698.514826][ T5941] usb 4-1: Manufacturer: syz [ 698.532069][ T5941] usb 4-1: SerialNumber: syz [ 698.572411][ T6950] bridge_slave_1: left allmulticast mode [ 698.578278][ T6950] bridge_slave_1: left promiscuous mode [ 698.584096][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.628367][ T6950] bridge_slave_0: left allmulticast mode [ 698.634199][ T6950] bridge_slave_0: left promiscuous mode [ 698.640507][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.982963][ T5941] usb 4-1: 0:2 : does not exist [ 698.988026][ T5941] usb 4-1: unit 6 not found! [ 699.000389][ T5941] usb 4-1: USB disconnect, device number 46 [ 699.470211][T12141] block nbd0: shutting down sockets [ 700.140774][T11439] udevd[11439]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 700.456182][ T5848] Bluetooth: hci1: command tx timeout [ 701.275531][T12158] xt_nat: multiple ranges no longer supported [ 702.439509][T12162] block device autoloading is deprecated and will be removed. [ 702.561616][ T5848] Bluetooth: hci1: command tx timeout [ 702.911863][T12170] 9pnet_fd: Insufficient options for proto=fd [ 703.058406][ T6950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.171128][ T6950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.577160][ T6950] bond0 (unregistering): Released all slaves [ 703.875178][T12131] lo speed is unknown, defaulting to 1000 [ 704.379351][ T5883] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 704.678822][ T5848] Bluetooth: hci1: command tx timeout [ 704.805185][T12178] block nbd0: shutting down sockets [ 704.851614][ T5883] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 704.860138][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.896356][ T5883] usb 4-1: config 0 has no interface number 0 [ 704.918310][ T5883] usb 4-1: too many endpoints for config 0 interface 164 altsetting 79: 246, using maximum allowed: 30 [ 704.992881][ T5883] usb 4-1: config 0 interface 164 altsetting 79 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 705.053750][T12131] chnl_net:caif_netlink_parms(): no params data found [ 705.076797][ T5883] usb 4-1: config 0 interface 164 has no altsetting 0 [ 705.869753][ T5883] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 705.879179][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.933294][ T5883] usb 4-1: config 0 descriptor?? [ 706.202066][ T5883] ath6kl: Failed to submit usb control message: -71 [ 706.216356][ T5883] ath6kl: unable to send the bmi data to the device: -71 [ 706.229145][ T5883] ath6kl: Unable to send get target info: -71 [ 706.254001][ T5883] ath6kl: Failed to init ath6kl core: -71 [ 706.262948][ T5883] ath6kl_usb 4-1:0.164: probe with driver ath6kl_usb failed with error -71 [ 706.332870][ T5883] usb 4-1: USB disconnect, device number 47 [ 706.514435][ T6950] hsr_slave_0: left promiscuous mode [ 707.131723][ T5848] Bluetooth: hci1: command tx timeout [ 707.647652][ T6950] hsr_slave_1: left promiscuous mode [ 707.670775][ T6950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.805334][ T6950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.119826][ T6950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.177647][ T6950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.339043][ T6950] veth1_macvtap: left promiscuous mode [ 708.407703][ T6950] veth0_macvtap: left promiscuous mode [ 708.416553][ T6950] veth1_vlan: left promiscuous mode [ 708.422449][ T6950] veth0_vlan: left promiscuous mode [ 709.668980][ T6950] team0 (unregistering): Port device team_slave_1 removed [ 709.763194][ T6950] team0 (unregistering): Port device team_slave_0 removed [ 710.581244][T12131] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.595927][T12131] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.613645][T12131] bridge_slave_0: entered allmulticast mode [ 710.640870][T12131] bridge_slave_0: entered promiscuous mode [ 710.669492][T12131] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.683102][T12131] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.694553][T12131] bridge_slave_1: entered allmulticast mode [ 710.710976][T12131] bridge_slave_1: entered promiscuous mode [ 710.755058][ T5842] lo speed is unknown, defaulting to 1000 [ 710.767198][ T5842] infiniband syz2: ib_query_port failed (-19) [ 711.759054][T12273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1352'. [ 711.857137][T12276] trusted_key: syz.6.1351 sent an empty control message without MSG_MORE. [ 712.490197][T12131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.786712][T12131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.438588][T12131] team0: Port device team_slave_0 added [ 713.662968][T12131] team0: Port device team_slave_1 added [ 714.711041][T12131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.728373][T12131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.077431][T12131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.110011][T12131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.117011][T12131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.176533][T12131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.301220][T12131] hsr_slave_0: entered promiscuous mode [ 716.367769][T12131] hsr_slave_1: entered promiscuous mode [ 716.488095][T12131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 716.495720][T12131] Cannot create hsr debugfs directory [ 717.433312][ T9845] cgroup: fork rejected by pids controller in /syz7 [ 718.381800][T12351] random: crng reseeded on system resumption [ 718.512631][ T53] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.555147][T12357] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 718.660336][ T53] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.973111][ T53] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.111433][ T53] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.143901][T12131] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 719.183881][T12131] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 719.201860][T12131] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 719.229919][T12131] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 719.254524][T10878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 719.265780][T10878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 719.284256][T10878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 719.295754][T10878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 719.310157][T10878] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 719.319292][T10878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 719.488163][ T47] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 719.646451][ T53] bridge_slave_1: left allmulticast mode [ 719.657603][ T53] bridge_slave_1: left promiscuous mode [ 719.663472][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.861022][ T53] bridge_slave_0: left allmulticast mode [ 719.874928][ T53] bridge_slave_0: left promiscuous mode [ 719.881132][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.921872][ T47] usb 7-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.4a [ 719.994949][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.263890][ T47] usb 7-1: config 0 descriptor?? [ 720.348871][ T47] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 720.577687][T12356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 720.591283][ T47] gspca_sn9c2028: read1 error 0 [ 720.794726][T12356] 9p: Unknown uid 00000000004294967295 [ 720.840186][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'. [ 720.920085][T12385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.930365][T12385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.954122][ T47] gspca_sn9c2028: read1 error -71 [ 720.966618][ T47] gspca_sn9c2028: read1 error -71 [ 720.971851][ T47] sn9c2028 7-1:0.0: probe with driver sn9c2028 failed with error -71 [ 720.987451][ T47] usb 7-1: USB disconnect, device number 38 [ 721.292271][ T53]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.303368][ T53]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.313875][ T53]  (unregistering): (slave batadv0): Releasing backup interface [ 721.325453][ T53]  (unregistering): Released all slaves [ 721.483277][T10878] Bluetooth: hci0: command tx timeout [ 721.653295][T12131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.970212][T12131] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.036961][T12398] syzkaller0: entered promiscuous mode [ 722.145032][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.152223][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.163919][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.171083][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.525838][T12414] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 723.583599][T10878] Bluetooth: hci0: command tx timeout [ 724.197776][T12417] dccp_invalid_packet: P.Data Offset(224) too large [ 724.206594][T12417] overlayfs: failed to resolve './file0': -2 [ 726.440510][T10878] Bluetooth: hci0: command tx timeout [ 728.031187][T12456] dccp_invalid_packet: P.Data Offset(224) too large [ 728.040113][T12456] overlayfs: failed to resolve './file0': -2 [ 728.533831][T12459] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 728.547106][T10878] Bluetooth: hci0: command tx timeout [ 729.267428][ T9673] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 729.283938][ T53] hsr_slave_0: left promiscuous mode [ 729.292498][ T53] hsr_slave_1: left promiscuous mode [ 729.301104][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.313225][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.338469][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.346373][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.665127][ T53] veth1_macvtap: left promiscuous mode [ 729.698173][ T53] veth0_macvtap: left promiscuous mode [ 729.745905][ T53] veth1_vlan: left promiscuous mode [ 729.799272][ T53] veth0_vlan: left promiscuous mode [ 730.196786][ T9673] usb 1-1: Using ep0 maxpacket: 8 [ 730.215089][ T9673] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.337114][ T9673] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.348187][ T9673] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 730.525278][ T9673] usb 1-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 730.556250][ T9673] usb 1-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 730.582335][ T9673] usb 1-1: Product: syz [ 730.612066][ T9673] usb 1-1: Manufacturer: syz [ 730.641150][ T9673] usb 1-1: SerialNumber: syz [ 730.681616][ T9673] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input31 [ 730.851684][T12481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1393'. [ 731.011919][ T5180] bcm5974 1-1:1.0: could not read from device [ 731.018277][ T9307] usb 1-1: USB disconnect, device number 39 [ 731.033036][ T5180] bcm5974 1-1:1.0: could not read from device [ 731.161645][T12466] bcm5974 1-1:1.0: could not read from device [ 731.176745][ T5180] bcm5974 1-1:1.0: could not read from device [ 731.190133][ T5180] bcm5974 1-1:1.0: could not read from device [ 731.461872][T12466] udevd[12466]: Error opening device "/dev/input/event4": No such file or directory [ 731.515199][T12466] udevd[12466]: Unable to EVIOCGABS device "/dev/input/event4" [ 731.534710][T12466] udevd[12466]: Unable to EVIOCGABS device "/dev/input/event4" [ 731.543311][T12466] udevd[12466]: Unable to EVIOCGABS device "/dev/input/event4" [ 731.559339][T12466] udevd[12466]: Unable to EVIOCGABS device "/dev/input/event4" [ 732.313457][ T53] team0 (unregistering): Port device team_slave_1 removed [ 732.517940][ T53] team0 (unregistering): Port device team_slave_0 removed [ 733.203018][ T5941] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 733.399464][ T5941] usb 7-1: Using ep0 maxpacket: 32 [ 733.424141][ T5941] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 733.484265][ T5941] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 733.598883][ T5941] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 733.639480][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.705192][ T5941] usb 7-1: Product: syz [ 733.741919][ T5941] usb 7-1: Manufacturer: syz [ 733.770363][ T5941] usb 7-1: SerialNumber: syz [ 734.092320][T12365] chnl_net:caif_netlink_parms(): no params data found [ 734.259840][T12131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 734.339925][T12519] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 735.045041][ T5941] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 735.055171][ T5941] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 735.092287][T12365] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.124935][T12365] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.128107][ T5941] usb 7-1: USB disconnect, device number 39 [ 735.173149][T12365] bridge_slave_0: entered allmulticast mode [ 735.208778][T12365] bridge_slave_0: entered promiscuous mode [ 735.245149][T12365] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.254166][T12365] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.261772][T12365] bridge_slave_1: entered allmulticast mode [ 735.269743][T12365] bridge_slave_1: entered promiscuous mode [ 735.350085][T12467] udevd[12467]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.361066][T12365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.436193][T12365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.019192][T12365] team0: Port device team_slave_0 added [ 738.029174][T12365] team0: Port device team_slave_1 added [ 738.095377][T12365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.110304][T12365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.150005][T12365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.199145][T12131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.226004][T12365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.233238][T12365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.259794][T12365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.274188][ T47] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 738.368927][T12365] hsr_slave_0: entered promiscuous mode [ 738.376709][T12365] hsr_slave_1: entered promiscuous mode [ 738.389002][T12365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.396615][T12365] Cannot create hsr debugfs directory [ 738.437613][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 738.450752][ T47] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.472270][ T47] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.485372][ T47] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 738.510797][ T47] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 738.520796][ T47] usb 4-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 738.529218][ T47] usb 4-1: Product: syz [ 738.533569][ T47] usb 4-1: Manufacturer: syz [ 738.551082][ T47] usb 4-1: SerialNumber: syz [ 738.596951][ T47] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input32 [ 738.686704][T12131] veth0_vlan: entered promiscuous mode [ 738.723691][T12131] veth1_vlan: entered promiscuous mode [ 738.940965][ T5180] bcm5974 4-1:1.0: could not read from device [ 738.971843][T12131] veth0_macvtap: entered promiscuous mode [ 738.983938][ T5180] bcm5974 4-1:1.0: could not read from device [ 739.001458][ T47] usb 4-1: USB disconnect, device number 48 [ 739.019911][ T5180] bcm5974 4-1:1.0: could not read from device [ 739.035154][T12131] veth1_macvtap: entered promiscuous mode [ 739.042236][ T5180] bcm5974 4-1:1.0: could not read from device [ 739.054426][T12555] FAULT_INJECTION: forcing a failure. [ 739.054426][T12555] name failslab, interval 1, probability 0, space 0, times 0 [ 739.072588][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.096238][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.107244][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.113671][T12555] CPU: 0 UID: 0 PID: 12555 Comm: syz.0.1407 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 739.118537][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.128413][T12555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 739.128432][T12555] Call Trace: [ 739.128441][T12555] [ 739.128451][T12555] dump_stack_lvl+0x241/0x360 [ 739.128492][T12555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 739.139109][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 739.148339][T12555] ? __pfx__printk+0x10/0x10 [ 739.148377][T12555] ? kmem_cache_alloc_noprof+0x48/0x380 [ 739.148424][T12555] ? __pfx___might_resched+0x10/0x10 [ 739.148461][T12555] should_fail_ex+0x3b0/0x4e0 [ 739.152596][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.154657][T12555] should_failslab+0xac/0x100 [ 739.161006][T12131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.164504][T12555] ? getname_flags+0xb7/0x540 [ 739.164533][T12555] kmem_cache_alloc_noprof+0x70/0x380 [ 739.226776][T12555] getname_flags+0xb7/0x540 [ 739.231306][T12555] do_sys_openat2+0xd2/0x1d0 [ 739.235908][T12555] ? __pfx_do_sys_openat2+0x10/0x10 [ 739.241109][T12555] ? __fget_files+0x2a/0x410 [ 739.245704][T12555] ? __fget_files+0x2a/0x410 [ 739.250331][T12555] __x64_sys_openat+0x247/0x2a0 [ 739.255205][T12555] ? __pfx___x64_sys_openat+0x10/0x10 [ 739.260594][T12555] ? do_syscall_64+0x100/0x230 [ 739.265362][T12555] ? do_syscall_64+0xb6/0x230 [ 739.270092][T12555] do_syscall_64+0xf3/0x230 [ 739.274630][T12555] ? clear_bhb_loop+0x35/0x90 [ 739.279313][T12555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.285215][T12555] RIP: 0033:0x7fce94d85d29 [ 739.289632][T12555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.309254][T12555] RSP: 002b:00007fce95b02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 739.317704][T12555] RAX: ffffffffffffffda RBX: 00007fce94f76080 RCX: 00007fce94d85d29 [ 739.325699][T12555] RDX: 0000000000024c01 RSI: 0000000020000280 RDI: ffffffffffffff9c [ 739.333688][T12555] RBP: 00007fce95b02090 R08: 0000000000000000 R09: 0000000000000000 [ 739.341668][T12555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.349635][T12555] R13: 0000000000000001 R14: 00007fce94f76080 R15: 00007fff1dba1e58 [ 739.357629][T12555] [ 739.428716][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.447466][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.467474][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.497399][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.513068][T12131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.523631][T12131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.534783][T12131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.545369][T12131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.554255][T12131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.563166][T12131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.571958][T12131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.676463][T12487] udevd[12487]: Error opening device "/dev/input/event4": No such file or directory [ 739.734899][T12487] udevd[12487]: Unable to EVIOCGABS device "/dev/input/event4" [ 739.742752][T12487] udevd[12487]: Unable to EVIOCGABS device "/dev/input/event4" [ 739.766336][T12487] udevd[12487]: Unable to EVIOCGABS device "/dev/input/event4" [ 739.782987][T12487] udevd[12487]: Unable to EVIOCGABS device "/dev/input/event4" [ 739.822589][T12365] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 739.964502][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.973105][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.241001][T12365] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 740.367188][ T6450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.423825][T12365] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 740.445683][ T6450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.484801][T12561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1409'. [ 741.603594][T12365] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 741.754818][T12571] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 742.454057][T12365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.743811][T12365] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.810168][ T6950] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.817424][ T6950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.912325][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 742.921843][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 743.092181][ T6950] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.098299][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1415'. [ 743.099393][ T6950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.737589][T12630] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1423'. [ 745.761381][T12365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.164351][T12639] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 747.484026][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.637627][T12634] IPVS: You probably need to specify IP address on multicast interface. [ 747.649191][T12634] IPVS: Error connecting to the multicast addr [ 747.806349][T12365] veth0_vlan: entered promiscuous mode [ 747.817893][T12365] veth1_vlan: entered promiscuous mode [ 747.840204][T12365] veth0_macvtap: entered promiscuous mode [ 747.851362][T12365] veth1_macvtap: entered promiscuous mode [ 747.866747][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.877576][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.887885][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.898417][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.908376][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.918905][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.928814][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.939352][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.951469][T12365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.961153][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.971754][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.981889][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.992586][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.002856][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.096147][T12656] FAULT_INJECTION: forcing a failure. [ 748.096147][T12656] name failslab, interval 1, probability 0, space 0, times 0 [ 748.109352][T12656] CPU: 1 UID: 0 PID: 12656 Comm: syz.3.1426 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 748.120156][T12656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 748.130259][T12656] Call Trace: [ 748.133560][T12656] [ 748.136512][T12656] dump_stack_lvl+0x241/0x360 [ 748.141242][T12656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 748.146483][T12656] ? __pfx__printk+0x10/0x10 [ 748.151120][T12656] should_fail_ex+0x3b0/0x4e0 [ 748.155830][T12656] should_failslab+0xac/0x100 [ 748.160558][T12656] __kmalloc_noprof+0xdd/0x4c0 [ 748.165352][T12656] ? io_cqring_event_overflow+0xd2/0x660 [ 748.171022][T12656] io_cqring_event_overflow+0xd2/0x660 [ 748.176518][T12656] io_req_cqe_overflow+0xf2/0x150 [ 748.181578][T12656] __io_submit_flush_completions+0x2b7/0xd70 [ 748.187594][T12656] ? io_req_defer_failed+0x624/0x8f0 [ 748.192928][T12656] ? __pfx___io_submit_flush_completions+0x10/0x10 [ 748.199468][T12656] ? io_submit_fail_init+0x3c8/0x5b0 [ 748.204798][T12656] ? io_epoll_ctl_prep+0x19f/0x290 [ 748.209949][T12656] io_submit_sqes+0x18cd/0x1d60 [ 748.214871][T12656] __se_sys_io_uring_enter+0x2c8/0x33b0 [ 748.220470][T12656] ? ksys_write+0x22a/0x2b0 [ 748.225007][T12656] ? preempt_schedule_thunk+0x1a/0x30 [ 748.230410][T12656] ? __pfx_lock_release+0x10/0x10 [ 748.235466][T12656] ? sb_end_write+0xdc/0x1c0 [ 748.240106][T12656] ? vfs_write+0x730/0xd30 [ 748.244558][T12656] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 748.250577][T12656] ? __mutex_unlock_slowpath+0x21e/0x790 [ 748.256251][T12656] ? __pfx_vfs_write+0x10/0x10 [ 748.261070][T12656] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 748.267102][T12656] ? __fget_files+0x2a/0x410 [ 748.271732][T12656] ? __fget_files+0x2a/0x410 [ 748.276371][T12656] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 748.282388][T12656] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 748.288764][T12656] ? do_syscall_64+0x100/0x230 [ 748.293578][T12656] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 748.299174][T12656] do_syscall_64+0xf3/0x230 [ 748.303716][T12656] ? clear_bhb_loop+0x35/0x90 [ 748.308447][T12656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.314406][T12656] RIP: 0033:0x7f1413385d29 [ 748.318858][T12656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.338502][T12656] RSP: 002b:00007f14140fe038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 748.346951][T12656] RAX: ffffffffffffffda RBX: 00007f1413576160 RCX: 00007f1413385d29 [ 748.354952][T12656] RDX: 0000000000000000 RSI: 0000000000002d3e RDI: 0000000000000009 [ 748.362953][T12656] RBP: 00007f14140fe090 R08: 0000000000000000 R09: 0000000000000000 [ 748.370950][T12656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.378947][T12656] R13: 0000000000000000 R14: 00007f1413576160 R15: 00007fffc54808c8 [ 748.386963][T12656] [ 748.390062][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.460865][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.505309][T12365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 748.522082][T12365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 748.545131][T12365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.666030][T12365] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.694760][T12365] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.745416][T12365] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.754435][T12365] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.989062][ T5883] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 750.147653][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 750.154694][ T5883] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 750.183111][ T5883] usb 1-1: config 1 has no interface number 0 [ 750.202853][ T6450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.234546][ T5883] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 1024 [ 750.257419][ T6450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.268329][ T5883] usb 1-1: config 1 interface 236 has no altsetting 0 [ 750.280355][ T5883] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 750.291065][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.335145][ T5883] usb 1-1: Product: syz [ 750.353111][ T5883] usb 1-1: Manufacturer: syz [ 750.358351][ T5883] usb 1-1: SerialNumber: syz [ 750.365541][ T6911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.386771][T12660] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 750.408666][ T5883] ti_usb_3410_5052 1-1:1.236: TI USB 5052 2 port adapter converter detected [ 750.423210][ T6911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.716171][T12660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.170567][T12660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.635456][ T5848] Bluetooth: hci0: command 0x0405 tx timeout [ 753.338590][T12702] openvswitch: netlink: nsh attr 223 is out of range max 3 [ 753.357903][T12704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1437'. [ 753.559232][T12702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.107692][ T5883] usb 1-1: USB disconnect, device number 40 [ 756.002822][T12713] dccp_close: ABORT with 15584 bytes unread [ 757.139090][T12740] netlink: 'syz.0.1444': attribute type 10 has an invalid length. [ 758.136188][T12739] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 758.566298][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1447'. [ 760.630300][T12768] pimreg: entered allmulticast mode [ 760.969866][T12795] xt_nat: multiple ranges no longer supported [ 761.049615][T12768] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1450'. [ 764.483252][T12853] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1456'. [ 765.396095][T12871] xt_nat: multiple ranges no longer supported [ 767.192757][T12902] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1474'. [ 768.110342][T12930] xt_nat: multiple ranges no longer supported [ 768.394656][T12932] ieee802154 phy1 wpan1: encryption failed: -22 [ 769.207576][T12940] block nbd7: shutting down sockets [ 771.163122][T12974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1490'. [ 771.721038][T12992] xt_nat: multiple ranges no longer supported [ 772.004720][T12994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.107359][T13020] Cannot find set identified by id 0 to match [ 776.114054][T13020] Cannot find set identified by id 0 to match [ 776.120624][T13020] Cannot find set identified by id 0 to match [ 776.127053][T13020] Cannot find set identified by id 0 to match [ 776.135617][T13020] Cannot find set identified by id 0 to match [ 776.142397][T13020] Cannot find set identified by id 0 to match [ 776.148733][T13020] Cannot find set identified by id 0 to match [ 776.154982][T13020] Cannot find set identified by id 0 to match [ 776.161303][T13020] Cannot find set identified by id 0 to match [ 776.167692][T13020] Cannot find set identified by id 0 to match [ 778.253087][T13074] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 778.300001][T13074] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 781.028010][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1514'. [ 781.175948][T13107] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 781.314697][T13107] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 781.382240][T13107] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 781.520115][T13107] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 781.626394][T13107] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 781.674983][T13107] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 781.841356][T13107] netlink: 'syz.3.1513': attribute type 1 has an invalid length. [ 783.028270][T13123] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 784.810735][T13170] pimreg: entered allmulticast mode [ 784.816631][ C1] ------------[ cut here ]------------ [ 784.816953][ C1] WARNING: CPU: 1 PID: 13170 at kernel/signal.c:2050 posixtimer_send_sigqueue+0xa08/0xce0 [ 784.817006][ C1] Modules linked in: [ 784.817027][ C1] CPU: 1 UID: 0 PID: 13170 Comm: syz.7.1523 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 784.817056][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 784.817073][ C1] RIP: 0010:posixtimer_send_sigqueue+0xa08/0xce0 [ 784.817107][ C1] Code: 00 0f 85 f4 02 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 23 1e 3b 00 4c 8b 64 24 08 e9 28 ff ff ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 4c 89 f7 [ 784.817128][ C1] RSP: 0018:ffffc90000a18c00 EFLAGS: 00010082 [ 784.817152][ C1] RAX: dffffc0000000000 RBX: 1ffff1100b4707c3 RCX: ffff88802b015a00 [ 784.817172][ C1] RDX: 0000000000010000 RSI: 0000000000020000 RDI: 0000000000000000 [ 784.817189][ C1] RBP: ffffc90000a18cf8 R08: ffffffff81646100 R09: 1ffffffff1e12532 [ 784.817208][ C1] R10: dffffc0000000000 R11: fffffbfff1e12533 R12: ffff88805a383e00 [ 784.817227][ C1] R13: 1ffff1100b4707d0 R14: ffff88805a383e18 R15: ffff88805a383ec0 [ 784.817247][ C1] FS: 00007f651ed7e6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 784.817269][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 784.817286][ C1] CR2: 000000110c325ae8 CR3: 000000007eaaa000 CR4: 00000000003526f0 [ 784.817306][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 784.817321][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 784.817337][ C1] Call Trace: [ 784.817347][ C1] [ 784.817358][ C1] ? __warn+0x165/0x4d0 [ 784.817385][ C1] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 784.817422][ C1] ? report_bug+0x2b3/0x500 [ 784.817454][ C1] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 784.817493][ C1] ? handle_bug+0x60/0x90 [ 784.817515][ C1] ? exc_invalid_op+0x1a/0x50 [ 784.817540][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 784.817582][ C1] ? prepare_signal+0x6c0/0xc90 [ 784.817616][ C1] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 784.817650][ C1] ? posixtimer_send_sigqueue+0xd3/0xce0 [ 784.817691][ C1] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 784.817736][ C1] posix_timer_fn+0xe2/0x160 [ 784.817766][ C1] ? __pfx_posix_timer_fn+0x10/0x10 [ 784.817797][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 784.817850][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 784.817879][ C1] ? sched_clock+0x4a/0x70 [ 784.817921][ C1] ? read_tsc+0x9/0x20 [ 784.817952][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 784.817986][ C1] hrtimer_interrupt+0x403/0xa40 [ 784.818046][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 784.818077][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 784.818110][ C1] [ 784.818119][ C1] [ 784.818130][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 784.818154][ C1] RIP: 0010:console_flush_all+0x996/0xeb0 [ 784.818189][ C1] Code: 48 21 c3 0f 85 16 02 00 00 e8 66 ab 20 00 4c 8b 7c 24 10 4d 85 f6 75 07 e8 57 ab 20 00 eb 06 e8 50 ab 20 00 fb 48 8b 5c 24 18 <48> 8b 44 24 30 42 80 3c 28 00 74 08 48 89 df e8 06 8a 84 00 4c 8b [ 784.818210][ C1] RSP: 0018:ffffc9000543f1c0 EFLAGS: 00000287 [ 784.818232][ C1] RAX: ffffffff817ec6d0 RBX: ffffffff8f162e38 RCX: 0000000000080000 [ 784.818251][ C1] RDX: ffffc9001870f000 RSI: 00000000000089e7 RDI: 00000000000089e8 [ 784.818268][ C1] RBP: ffffc9000543f370 R08: ffffffff817ec6a7 R09: 1ffffffff284e310 [ 784.818287][ C1] R10: dffffc0000000000 R11: fffffbfff284e311 R12: ffffffff8f162de0 [ 784.818305][ C1] R13: dffffc0000000000 R14: 0000000000000200 R15: ffffc9000543f3c0 [ 784.818332][ C1] ? console_flush_all+0x967/0xeb0 [ 784.818364][ C1] ? console_flush_all+0x990/0xeb0 [ 784.818412][ C1] ? console_flush_all+0x1a3/0xeb0 [ 784.818456][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 784.818495][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 784.818530][ C1] ? this_cpu_in_panic+0x4f/0x80 [ 784.818559][ C1] ? is_printk_legacy_deferred+0x43/0x50 [ 784.818584][ C1] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 784.818621][ C1] console_unlock+0x14f/0x3b0 [ 784.818656][ C1] ? __pfx_console_unlock+0x10/0x10 [ 784.818693][ C1] ? this_cpu_in_panic+0x4f/0x80 [ 784.818722][ C1] ? is_printk_legacy_deferred+0x43/0x50 [ 784.818747][ C1] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 784.818784][ C1] vprintk_emit+0x730/0xa10 [ 784.818819][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 784.818874][ C1] _printk+0xd5/0x120 [ 784.818906][ C1] ? __netdev_printk+0x19e/0x4d0 [ 784.818946][ C1] ? __pfx__printk+0x10/0x10 [ 784.818971][ C1] ? rxe_notify+0xef/0x4c0 [ 784.819007][ C1] ? __netdev_printk+0x30d/0x4d0 [ 784.819044][ C1] netdev_info+0x122/0x170 [ 784.819077][ C1] ? __dev_set_allmulti+0x19e/0x380 [ 784.819101][ C1] ? __pfx_netdev_info+0x10/0x10 [ 784.819131][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 784.819155][ C1] ? notifier_call_chain+0x3cc/0x3f0 [ 784.819194][ C1] __dev_set_allmulti+0x1b0/0x380 [ 784.819226][ C1] vif_add+0x1073/0x1670 [ 784.819268][ C1] ? __pfx_vif_add+0x10/0x10 [ 784.819301][ C1] ? __might_fault+0xaa/0x120 [ 784.819330][ C1] ? __pfx_lock_release+0x10/0x10 [ 784.819355][ C1] ? ip_mroute_setsockopt+0x15b/0x1190 [ 784.819392][ C1] ? __pfx_lock_release+0x10/0x10 [ 784.819438][ C1] ip_mroute_setsockopt+0xee2/0x1190 [ 784.819482][ C1] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 784.819526][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 784.819565][ C1] do_ip_setsockopt+0x129f/0x3cd0 [ 784.819605][ C1] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 784.819665][ C1] ip_setsockopt+0x63/0x100 [ 784.819695][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 784.819731][ C1] do_sock_setsockopt+0x3af/0x720 [ 784.819764][ C1] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 784.819798][ C1] ? __fget_files+0x395/0x410 [ 784.819820][ C1] ? __fget_files+0x2a/0x410 [ 784.819854][ C1] __x64_sys_setsockopt+0x1ee/0x280 [ 784.819890][ C1] do_syscall_64+0xf3/0x230 [ 784.819918][ C1] ? clear_bhb_loop+0x35/0x90 [ 784.819946][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.819980][ C1] RIP: 0033:0x7f651df85d29 [ 784.820002][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.820022][ C1] RSP: 002b:00007f651ed7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 784.820049][ C1] RAX: ffffffffffffffda RBX: 00007f651e176160 RCX: 00007f651df85d29 [ 784.820067][ C1] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000008 [ 784.820083][ C1] RBP: 00007f651e001b08 R08: 0000000000000010 R09: 0000000000000000 [ 784.820100][ C1] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000000 [ 784.820116][ C1] R13: 0000000000000000 R14: 00007f651e176160 R15: 00007ffd0f9c3c68 [ 784.820152][ C1] [ 784.820177][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 784.820192][ C1] CPU: 1 UID: 0 PID: 13170 Comm: syz.7.1523 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 784.820218][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 784.820232][ C1] Call Trace: [ 784.820242][ C1] [ 784.820252][ C1] dump_stack_lvl+0x241/0x360 [ 784.820286][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.820317][ C1] ? __pfx__printk+0x10/0x10 [ 784.820342][ C1] ? _printk+0xd5/0x120 [ 784.820371][ C1] ? __init_begin+0x41000/0x41000 [ 784.820402][ C1] ? vscnprintf+0x5d/0x90 [ 784.820433][ C1] panic+0x349/0x880 [ 784.820462][ C1] ? __warn+0x174/0x4d0 [ 784.820490][ C1] ? __pfx_panic+0x10/0x10 [ 784.820540][ C1] __warn+0x344/0x4d0 [ 784.820565][ C1] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 784.820601][ C1] report_bug+0x2b3/0x500 [ 784.820632][ C1] ? posixtimer_send_sigqueue+0xa08/0xce0 [ 784.820669][ C1] handle_bug+0x60/0x90 [ 784.820692][ C1] exc_invalid_op+0x1a/0x50 [ 784.820717][ C1] asm_exc_invalid_op+0x1a/0x20 [ 784.820749][ C1] RIP: 0010:posixtimer_send_sigqueue+0xa08/0xce0 [ 784.820781][ C1] Code: 00 0f 85 f4 02 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 23 1e 3b 00 4c 8b 64 24 08 e9 28 ff ff ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 4c 89 f7 [ 784.820801][ C1] RSP: 0018:ffffc90000a18c00 EFLAGS: 00010082 [ 784.820823][ C1] RAX: dffffc0000000000 RBX: 1ffff1100b4707c3 RCX: ffff88802b015a00 [ 784.820842][ C1] RDX: 0000000000010000 RSI: 0000000000020000 RDI: 0000000000000000 [ 784.820858][ C1] RBP: ffffc90000a18cf8 R08: ffffffff81646100 R09: 1ffffffff1e12532 [ 784.820877][ C1] R10: dffffc0000000000 R11: fffffbfff1e12533 R12: ffff88805a383e00 [ 784.820895][ C1] R13: 1ffff1100b4707d0 R14: ffff88805a383e18 R15: ffff88805a383ec0 [ 784.820928][ C1] ? prepare_signal+0x6c0/0xc90 [ 784.820968][ C1] ? posixtimer_send_sigqueue+0xd3/0xce0 [ 784.821008][ C1] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 784.821053][ C1] posix_timer_fn+0xe2/0x160 [ 784.821082][ C1] ? __pfx_posix_timer_fn+0x10/0x10 [ 784.821112][ C1] __hrtimer_run_queues+0x59b/0xd30 [ 784.821163][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 784.821193][ C1] ? sched_clock+0x4a/0x70 [ 784.821227][ C1] ? read_tsc+0x9/0x20 [ 784.821257][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 784.821290][ C1] hrtimer_interrupt+0x403/0xa40 [ 784.821348][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 784.821379][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 784.821411][ C1] [ 784.821420][ C1] [ 784.821431][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 784.821454][ C1] RIP: 0010:console_flush_all+0x996/0xeb0 [ 784.821488][ C1] Code: 48 21 c3 0f 85 16 02 00 00 e8 66 ab 20 00 4c 8b 7c 24 10 4d 85 f6 75 07 e8 57 ab 20 00 eb 06 e8 50 ab 20 00 fb 48 8b 5c 24 18 <48> 8b 44 24 30 42 80 3c 28 00 74 08 48 89 df e8 06 8a 84 00 4c 8b [ 784.821508][ C1] RSP: 0018:ffffc9000543f1c0 EFLAGS: 00000287 [ 784.821529][ C1] RAX: ffffffff817ec6d0 RBX: ffffffff8f162e38 RCX: 0000000000080000 [ 784.821547][ C1] RDX: ffffc9001870f000 RSI: 00000000000089e7 RDI: 00000000000089e8 [ 784.821563][ C1] RBP: ffffc9000543f370 R08: ffffffff817ec6a7 R09: 1ffffffff284e310 [ 784.821582][ C1] R10: dffffc0000000000 R11: fffffbfff284e311 R12: ffffffff8f162de0 [ 784.821600][ C1] R13: dffffc0000000000 R14: 0000000000000200 R15: ffffc9000543f3c0 [ 784.821626][ C1] ? console_flush_all+0x967/0xeb0 [ 784.821658][ C1] ? console_flush_all+0x990/0xeb0 [ 784.821706][ C1] ? console_flush_all+0x1a3/0xeb0 [ 784.821748][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 784.821787][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 784.821821][ C1] ? this_cpu_in_panic+0x4f/0x80 [ 784.821849][ C1] ? is_printk_legacy_deferred+0x43/0x50 [ 784.821874][ C1] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 784.821917][ C1] console_unlock+0x14f/0x3b0 [ 784.821952][ C1] ? __pfx_console_unlock+0x10/0x10 [ 784.821988][ C1] ? this_cpu_in_panic+0x4f/0x80 [ 784.822016][ C1] ? is_printk_legacy_deferred+0x43/0x50 [ 784.822041][ C1] ? printk_get_console_flush_type+0x1fe/0x4f0 [ 784.822077][ C1] vprintk_emit+0x730/0xa10 [ 784.822111][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 784.822164][ C1] _printk+0xd5/0x120 [ 784.822195][ C1] ? __netdev_printk+0x19e/0x4d0 [ 784.822224][ C1] ? __pfx__printk+0x10/0x10 [ 784.822249][ C1] ? rxe_notify+0xef/0x4c0 [ 784.822282][ C1] ? __netdev_printk+0x30d/0x4d0 [ 784.822319][ C1] netdev_info+0x122/0x170 [ 784.822351][ C1] ? __dev_set_allmulti+0x19e/0x380 [ 784.822375][ C1] ? __pfx_netdev_info+0x10/0x10 [ 784.822404][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 784.822428][ C1] ? notifier_call_chain+0x3cc/0x3f0 [ 784.822465][ C1] __dev_set_allmulti+0x1b0/0x380 [ 784.822497][ C1] vif_add+0x1073/0x1670 [ 784.822537][ C1] ? __pfx_vif_add+0x10/0x10 [ 784.822570][ C1] ? __might_fault+0xaa/0x120 [ 784.822598][ C1] ? __pfx_lock_release+0x10/0x10 [ 784.822622][ C1] ? ip_mroute_setsockopt+0x15b/0x1190 [ 784.822659][ C1] ? __pfx_lock_release+0x10/0x10 [ 784.822703][ C1] ip_mroute_setsockopt+0xee2/0x1190 [ 784.822747][ C1] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 784.822789][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 784.822827][ C1] do_ip_setsockopt+0x129f/0x3cd0 [ 784.822866][ C1] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 784.822927][ C1] ip_setsockopt+0x63/0x100 [ 784.822958][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 784.822993][ C1] do_sock_setsockopt+0x3af/0x720 [ 784.823027][ C1] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 784.823059][ C1] ? __fget_files+0x395/0x410 [ 784.823082][ C1] ? __fget_files+0x2a/0x410 [ 784.823115][ C1] __x64_sys_setsockopt+0x1ee/0x280 [ 784.823150][ C1] do_syscall_64+0xf3/0x230 [ 784.823172][ C1] ? clear_bhb_loop+0x35/0x90 [ 784.823199][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.823233][ C1] RIP: 0033:0x7f651df85d29 [ 784.823252][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.823273][ C1] RSP: 002b:00007f651ed7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 784.823297][ C1] RAX: ffffffffffffffda RBX: 00007f651e176160 RCX: 00007f651df85d29 [ 784.823315][ C1] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000008 [ 784.823330][ C1] RBP: 00007f651e001b08 R08: 0000000000000010 R09: 0000000000000000 [ 784.823346][ C1] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000000 [ 784.823362][ C1] R13: 0000000000000000 R14: 00007f651e176160 R15: 00007ffd0f9c3c68 [ 784.823397][ C1] [ 784.823712][ C1] Kernel Offset: disabled