last executing test programs: 9m35.324339807s ago: executing program 3 (id=4): socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) truncate(&(0x7f0000000100)='./file1\x00', 0x38) mount$nfs4(0x0, &(0x7f00000002c0)='./file1\x00', 0x0, 0xa00808, 0x0) 9m34.49591445s ago: executing program 3 (id=9): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r3 = syz_io_uring_setup(0xb55, &(0x7f00000003c0)={0x0, 0x4e1e, 0x4, 0x1, 0x244}, &(0x7f0000000500), &(0x7f0000000540)) r4 = syz_io_uring_setup(0x881, &(0x7f0000000480)={0x0, 0xe7ae, 0x200, 0x2, 0x3, 0x0, r3}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) r7 = msgget$private(0x0, 0x0) msgrcv(r7, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) msgsnd(r7, &(0x7f00000003c0)={0x3}, 0x8, 0x0) io_setup(0x5, &(0x7f0000000100)) syz_emit_ethernet(0x1f, &(0x7f0000000780)={@broadcast, @empty, @void, {@llc_tr={0x11, {@llc={0x1c2, 0xe, "ba", "9e9ce0d3bf32c37bb9a7f1a950f5"}}}}}, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0xffffffffffffff80, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x8, 0x89, 0x800000000000d615, 0x3fb, 0x5, 0xfffffffe, 0x8000, 0x3, 0x0, 0x0, 0x3ff, 0x100}}, {0x0, 0x13}}}, 0xa0) r8 = open$dir(&(0x7f0000000240)='./bus\x00', 0x100, 0x143) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) futimesat(r8, &(0x7f0000000280)='./bus/file0\x00', &(0x7f0000000340)={{0x0, 0x2710}, {r9, r10/1000+10000}}) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18000, 0x2010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6b6e2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004041}, 0x24040010) 9m32.357123214s ago: executing program 3 (id=14): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000080000d6250000000018110000", @ANYRES32=r1], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in=@remote, 0x0, 0x0, 0x0, 0x1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x80}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'aegis128l-generic\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000000003050005000d020000056d61703a706f727400000000000000000000000000000900002f77e41b9f00c1e1b9df6dc6f93de91bb191e6fa2cf68d9079d55613bb083e33f5ab3048c8"], 0x34}, 0x1, 0x0, 0x0, 0x24004820}, 0x4044014) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) r11 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r11, 0xab00, r0) r12 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r12, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r12, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r12, 0xc03064b7, &(0x7f0000000200)={r13, 0x0, 0x0, 0x0, 0x80000003, 0x7fffffff, 0x0, 0x0, 0x5, 0xe, 0x200400, 0x31e}) ioctl$NBD_SET_SOCK(r11, 0xab00, r0) ioctl$NBD_DISCONNECT(r11, 0xab08) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f0000000080)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x6f, 0xf}}) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) 9m31.693579594s ago: executing program 32 (id=14): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000080000d6250000000018110000", @ANYRES32=r1], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in=@remote, 0x0, 0x0, 0x0, 0x1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x80}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'aegis128l-generic\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000000003050005000d020000056d61703a706f727400000000000000000000000000000900002f77e41b9f00c1e1b9df6dc6f93de91bb191e6fa2cf68d9079d55613bb083e33f5ab3048c8"], 0x34}, 0x1, 0x0, 0x0, 0x24004820}, 0x4044014) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) r11 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r11, 0xab00, r0) r12 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r12, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r12, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r12, 0xc03064b7, &(0x7f0000000200)={r13, 0x0, 0x0, 0x0, 0x80000003, 0x7fffffff, 0x0, 0x0, 0x5, 0xe, 0x200400, 0x31e}) ioctl$NBD_SET_SOCK(r11, 0xab00, r0) ioctl$NBD_DISCONNECT(r11, 0xab08) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f0000000080)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x6f, 0xf}}) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) 6m14.443876393s ago: executing program 1 (id=750): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r3}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000", 0x17}], 0x1}, 0x0) 6m14.362220684s ago: executing program 1 (id=751): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x2100, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m14.192523797s ago: executing program 1 (id=752): r0 = socket$inet(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) 6m14.078803068s ago: executing program 1 (id=753): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000059c0), 0x111}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000005880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600), 0x13f, 0xa}}, 0x20) writev(r0, &(0x7f0000000000), 0x0) 6m13.903569061s ago: executing program 1 (id=755): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @local, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="b6", 0x1}], 0x1}}], 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x40, '\x00', 0x0, @fallback, r2, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000380)='source\xcf\x87\x86\x1bY\x0f\xde\xd6\xcd\xc0\x01\xd3\x19>K\x04\xfe\x86YG\xa5\x0f\xed\xa0\x9f\x1e\x14R\x9e\x04\xfa\xed\xd0TG&\x88\xeaz\x9aD\xf8Tt\x8c\x00{\x1fm\xfe\x9c\xf6_h\x9e\xfc\'', &(0x7f00000001c0)='sou\x01ce', 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f00000003c0)="0b036800e0ff64000200475400f6a13bb10000000800884848", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0xa, {0x2, 0x800, @multicast2}, 'wg0\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @remote}, 0x4a, {}, 'veth1_to_bridge\x00'}) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x50400) r9 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x141000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r9, 0xc1105511, &(0x7f0000000140)={0xa, 0x0, 0x1, 0x0, 'syz0\x00'}) madvise(&(0x7f0000cd0000/0x4000)=nil, 0xffffffffdf32ffff, 0x16) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000200)={"1701d517", 0x3, 0x9, 0x1, 0x200002, 0xfffffffc, "f9a927627a359827fdc4ed7cb20708", "0600000b", "314391b4", "aa04df4e", ["e4e7d0b3748a08eb4117a58f", "a42a5eb8b07a660e2a22038e", "18ba00000000001000", "d89c2b9ee90029dabfd3b81a"]}) tkill(r8, 0xb) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6m12.739088419s ago: executing program 1 (id=757): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1800018, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000300)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r2, 0x3) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$rose(r2, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10) socket(0x400000000010, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x7f390004, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000005000440000000000900020073797a3100000000050005000a"], 0x60}}, 0x0) 5m57.639520446s ago: executing program 33 (id=757): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1800018, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000300)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r2, 0x3) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$rose(r2, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10) socket(0x400000000010, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x7f390004, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000005000440000000000900020073797a3100000000050005000a"], 0x60}}, 0x0) 1m52.097789672s ago: executing program 5 (id=1630): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) getpgrp(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000200)={0xd, 0x2f, 0x11, 0x3, 0x8, 0x81, 0x4, 0xe4}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0xb) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000005c0)={0x2, {0x2, 0x5, 0x7, 0xffff, 0x5}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x2, 0x5, 0xfffffbe5, 0x8018, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @value, @void, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) 1m47.579896893s ago: executing program 5 (id=1642): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x121a2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1004102, 0x0, 0x0) memfd_create(0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x800) 1m44.923952864s ago: executing program 5 (id=1650): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0xc8, 0x30, 0x1, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_ct={0x4c, 0x2, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010100}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x64, 0x1d, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x10000, 0x2, 0x1, 0x401, 0x87}}]}, {0x1b, 0x6, "c7ac115a75d0e6cf10603bb9d05a144551b02f7c4b3366"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setreuid(0xee01, 0xee01) ioprio_set$uid(0x3, 0x0, 0x4007) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x0, {0x0, 0x300, 0x0, 0x80000300}}) syz_open_dev$vim2m(&(0x7f0000000040), 0x80, 0x2) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r3 = fsopen(&(0x7f00000003c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000300)=0x3) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0xe, &(0x7f0000001880)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m41.092321934s ago: executing program 5 (id=1661): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r0, &(0x7f0000000180)=""/39, 0x27, 0x2b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r6 = syz_io_uring_setup(0x4e1, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x708, 0x41e3, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f00000095c0)={0x2020}, 0x2020) io_submit(r5, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='m', 0xfffffdfc}]) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000100)=0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r10, 0x0, 0x2) recvmsg$unix(r10, 0x0, 0x60000021) socket$igmp(0x2, 0x3, 0x2) 1m39.708583936s ago: executing program 5 (id=1668): ioperm(0x83, 0x6, 0x8) ioperm(0x7, 0x5, 0x70f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 1m38.543332904s ago: executing program 5 (id=1674): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000c000) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x4, 0x9, 0x41495043, 0x9, 0x5, [{0x1, 0xb}, {0x3, 0x9}, {0x3, 0x3ff}, {0x8, 0x7a25}, {}, {0xffff, 0xffff8000}, {0x7, 0x4}, {0x4, 0x10000}], 0xa, 0x7f, 0x4, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) openat$tun(0xffffff9c, 0x0, 0x2401, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000340)={0x400, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}}, {{0x2, 0x0, @broadcast}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000480)=""/120, 0x78}], 0x2}}], 0x1, 0x700, 0x0) sendfile(r4, r2, 0x0, 0x578410eb) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040804"], 0x7) io_uring_setup(0x310f, &(0x7f0000000240)={0x0, 0x5f98, 0x80, 0xffffffff, 0x2000}) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1}], 0x10}, 0x8000) 1m27.574691844s ago: executing program 4 (id=1710): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x3, 0x0, 0x7fffffff}]}) syz_genetlink_get_family_id$nfc(&(0x7f0000001cc0), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYBLOB="1ab2ba361906", @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0xc894}, 0x4000000) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="c14a8cf012b79241197fa55c95cb78c868dc7f4065db6a1f55fdb9b3b620905db1150adbd5a48a5968dce0ca0c3b439a84136af4f91b835cf51a0b762c624ee970f63316960a1c5a1e36e766cf0fbb9676e41671fbe2c846cae88f54cd08de9d971d8205b0f52c3dc829935ceb9b6f73bf7cacade0e52ab90b160f562cc866b026c1261b336312bd662d41d1b80d8141466b9092866d89534e4425d9f046c0f047516825d6671ed32c121c5aa880c9759fb464a544c710dec4bd5b3663332c9310983127de7a7c3e9253a76a0a63a3c692fb2c07fdbae7c2", 0xd8}, {&(0x7f0000000280)="3a9956c64df7c66b7f95b69c46eaa813c943d5cf148b90b62a361ebcd78b041aa5705bbb03fb487eb5ee8d7464c339590ca1bc4edae6b783479647008d27ca60cf62d4f8af4a72242cc21788f5e80bdc43060e1491c8c6c0501cf6f7962c0e5d8c3b1671b17d9fbc2d5e1ea19b7bc33ecd73205071acedce4aae8de86f40aa49727d75ac8ddd6ae8029efcf50cb3bf19", 0x90}, {0x0}, {&(0x7f0000000180)="1cc013eee619095f71f1d359c6b292b0d4d08ddd3e89b55cb66c5d204454453507af7a6c563bd1140150c223c25c8188", 0x30}], 0x4, 0x0, 0x0, 0x4024814}}], 0x1, 0x48044) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000340)={0xfff, 0x2, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'batadv_slave_0\x00'}) 1m23.503846568s ago: executing program 4 (id=1715): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000059c0), 0x111}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000005880), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600), 0x13f, 0xa}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xfe}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 1m23.454574339s ago: executing program 34 (id=1674): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000c000) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x4, 0x9, 0x41495043, 0x9, 0x5, [{0x1, 0xb}, {0x3, 0x9}, {0x3, 0x3ff}, {0x8, 0x7a25}, {}, {0xffff, 0xffff8000}, {0x7, 0x4}, {0x4, 0x10000}], 0xa, 0x7f, 0x4, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) openat$tun(0xffffff9c, 0x0, 0x2401, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000340)={0x400, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}}, {{0x2, 0x0, @broadcast}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000480)=""/120, 0x78}], 0x2}}], 0x1, 0x700, 0x0) sendfile(r4, r2, 0x0, 0x578410eb) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040804"], 0x7) io_uring_setup(0x310f, &(0x7f0000000240)={0x0, 0x5f98, 0x80, 0xffffffff, 0x2000}) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1}], 0x10}, 0x8000) 1m20.060025802s ago: executing program 4 (id=1722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x24, r5, 0x1, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "d6"}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 1m17.998557974s ago: executing program 4 (id=1728): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) close(0xffffffffffffffff) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@nomblk_io_submit}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@usrjquota}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x4102b100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m12.648955757s ago: executing program 4 (id=1739): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x12) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x2, 0x80) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x20000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x810) 1m8.772774137s ago: executing program 4 (id=1749): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x3, 0xfff, 0x0, 0xb49, 0xc, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f000003e000/0x3000)=nil, 0x3000, 0x14) 1m2.332983238s ago: executing program 2 (id=1766): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) write$binfmt_misc(r0, 0x0, 0x0) 59.929352885s ago: executing program 2 (id=1773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 58.96705141s ago: executing program 2 (id=1776): syz_create_resource$binfmt(0x0) r0 = socket(0x2a, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f00000016c0)=""/4126, 0x101e}], 0x1) syz_init_net_socket$ax25(0x3, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x11b68000) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102384, 0x18ff0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x71ba, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r2}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = io_uring_setup(0x6390, &(0x7f00000001c0)={0x0, 0x621d, 0x842, 0x3, 0x39c}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f00000000c0)=[0x7, 0x80000000], 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000002700)={0x0, 0x8, 0x1, [0x80000001, 0x401, 0x7, 0x5, 0xfffffffffffffff7], [0x4, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffa, 0xdd9, 0xfff, 0x3, 0xfffffffffffffffc, 0xffff, 0x8, 0x40, 0x3, 0xfffffffffffffffb, 0x4, 0x400, 0x1ff, 0xfffffffffffffffa, 0x7fffffff, 0x1, 0x3, 0x5, 0x1, 0x3, 0x7, 0x2, 0x5306, 0xffffffffffff64d0, 0x100, 0x3cc98dbb, 0x6, 0x4, 0x1, 0x80000000, 0x21, 0x101, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x3, 0x9, 0x45d96b26, 0xffffffffffffffff, 0x6, 0x5, 0x7, 0x9, 0x7, 0x1d1, 0x0, 0x8, 0x7e, 0x3, 0x0, 0x1ff, 0x60e, 0x4, 0xffffffff, 0x10001, 0x4, 0x8, 0x7c1, 0x9, 0x8000000000000000, 0x8, 0x3, 0x1bf, 0x664, 0x2, 0x8b, 0x3ff, 0x3, 0x8, 0xfffffffffffffe01, 0x3, 0x1, 0x101, 0x380000000000000, 0x1, 0xfffffffffffffff8, 0xffffffffffff517d, 0x0, 0x9, 0x6, 0x1, 0xc400, 0x9, 0x9, 0x6, 0x0, 0xc1c, 0xa, 0x0, 0x5, 0x2, 0xffff, 0x0, 0x5, 0x5, 0x1, 0xffffffffffffffff, 0x10001, 0x0, 0x9, 0x2a55, 0x81, 0xb, 0x80, 0x7fffffff, 0x8, 0x6, 0x8, 0x6c, 0xaa59, 0x8, 0x0, 0x7, 0x7, 0xee2c]}) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0x3) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) socket(0x0, 0x800, 0xc5) 55.251312168s ago: executing program 2 (id=1786): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) 52.849926345s ago: executing program 35 (id=1749): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x3, 0xfff, 0x0, 0xb49, 0xc, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f000003e000/0x3000)=nil, 0x3000, 0x14) 52.716592888s ago: executing program 2 (id=1793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001300)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r1, 0x83625fc5352ba305}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) 51.659896954s ago: executing program 2 (id=1796): syz_create_resource$binfmt(0x0) r0 = socket(0x2a, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f00000016c0)=""/4126, 0x101e}], 0x1) syz_init_net_socket$ax25(0x3, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x11b68000) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x71ba, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = io_uring_setup(0x6390, &(0x7f00000001c0)={0x0, 0x621d, 0x842, 0x3, 0x39c}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f00000000c0)=[0x7, 0x80000000], 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000002700)={0x0, 0x8, 0x1, [0x80000001, 0x401, 0x7, 0x5, 0xfffffffffffffff7], [0x4, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffa, 0xdd9, 0xfff, 0x3, 0xfffffffffffffffc, 0xffff, 0x8, 0x40, 0x3, 0xfffffffffffffffb, 0x4, 0x400, 0x1ff, 0xfffffffffffffffa, 0x7fffffff, 0x1, 0x3, 0x5, 0x1, 0x3, 0x7, 0x2, 0x5306, 0xffffffffffff64d0, 0x100, 0x3cc98dbb, 0x6, 0x4, 0x1, 0x80000000, 0x21, 0x101, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x3, 0x9, 0x45d96b26, 0xffffffffffffffff, 0x6, 0x5, 0x7, 0x9, 0x7, 0x1d1, 0x0, 0x8, 0x7e, 0x3, 0x0, 0x1ff, 0x60e, 0x4, 0xffffffff, 0x10001, 0x4, 0x8, 0x7c1, 0x9, 0x8000000000000000, 0x8, 0x3, 0x1bf, 0x664, 0x2, 0x8b, 0x3ff, 0x3, 0x8, 0xfffffffffffffe01, 0x3, 0x1, 0x101, 0x380000000000000, 0x1, 0xfffffffffffffff8, 0xffffffffffff517d, 0x0, 0x9, 0x6, 0x1, 0xc400, 0x9, 0x9, 0x6, 0x0, 0xc1c, 0xa, 0x0, 0x5, 0x2, 0xffff, 0x0, 0x5, 0x5, 0x1, 0xffffffffffffffff, 0x10001, 0x0, 0x9, 0x2a55, 0x81, 0xb, 0x80, 0x7fffffff, 0x8, 0x6, 0x8, 0x6c, 0xaa59, 0x8, 0x0, 0x7, 0x7, 0xee2c]}) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0x3) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) socket(0x0, 0x800, 0xc5) 36.348924993s ago: executing program 36 (id=1796): syz_create_resource$binfmt(0x0) r0 = socket(0x2a, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f00000016c0)=""/4126, 0x101e}], 0x1) syz_init_net_socket$ax25(0x3, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0x11b68000) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x71ba, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r3}, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = io_uring_setup(0x6390, &(0x7f00000001c0)={0x0, 0x621d, 0x842, 0x3, 0x39c}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f00000000c0)=[0x7, 0x80000000], 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000002700)={0x0, 0x8, 0x1, [0x80000001, 0x401, 0x7, 0x5, 0xfffffffffffffff7], [0x4, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffa, 0xdd9, 0xfff, 0x3, 0xfffffffffffffffc, 0xffff, 0x8, 0x40, 0x3, 0xfffffffffffffffb, 0x4, 0x400, 0x1ff, 0xfffffffffffffffa, 0x7fffffff, 0x1, 0x3, 0x5, 0x1, 0x3, 0x7, 0x2, 0x5306, 0xffffffffffff64d0, 0x100, 0x3cc98dbb, 0x6, 0x4, 0x1, 0x80000000, 0x21, 0x101, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x3, 0x9, 0x45d96b26, 0xffffffffffffffff, 0x6, 0x5, 0x7, 0x9, 0x7, 0x1d1, 0x0, 0x8, 0x7e, 0x3, 0x0, 0x1ff, 0x60e, 0x4, 0xffffffff, 0x10001, 0x4, 0x8, 0x7c1, 0x9, 0x8000000000000000, 0x8, 0x3, 0x1bf, 0x664, 0x2, 0x8b, 0x3ff, 0x3, 0x8, 0xfffffffffffffe01, 0x3, 0x1, 0x101, 0x380000000000000, 0x1, 0xfffffffffffffff8, 0xffffffffffff517d, 0x0, 0x9, 0x6, 0x1, 0xc400, 0x9, 0x9, 0x6, 0x0, 0xc1c, 0xa, 0x0, 0x5, 0x2, 0xffff, 0x0, 0x5, 0x5, 0x1, 0xffffffffffffffff, 0x10001, 0x0, 0x9, 0x2a55, 0x81, 0xb, 0x80, 0x7fffffff, 0x8, 0x6, 0x8, 0x6c, 0xaa59, 0x8, 0x0, 0x7, 0x7, 0xee2c]}) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0x3) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) socket(0x0, 0x800, 0xc5) 22.249380322s ago: executing program 0 (id=1858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000040605000000000000000000030004000900020073797a3200000000090002000100000000000000050001000700000005000100070000000900020073797a310000000005000100070000000900020073797a"], 0x5c}}, 0x0) 17.909163901s ago: executing program 0 (id=1870): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x4080) 16.535993891s ago: executing program 0 (id=1876): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) fsetxattr$security_evm(r3, &(0x7f00000000c0), &(0x7f0000000200)=@md5={0x1, "dce2932cf5fa63fdb6774750c1319375"}, 0x11, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) unshare(0x2040600) ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000000300)={0x2, 0x2, {0x0, 0x31, 0x0, 0x18, 0x80000, 0x60}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/112) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 10.443044117s ago: executing program 0 (id=1900): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) getpgrp(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000200)={0xd, 0x2f, 0x11, 0x3, 0x8, 0x81, 0x4, 0xe4}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0xb) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000005c0)={0x2, {0x2, 0x5, 0x7, 0xffff, 0x5}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x2, 0x5, 0xfffffbe5, 0x8018, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @value, @void, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) 10.359400858s ago: executing program 6 (id=1901): r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 9.403871783s ago: executing program 6 (id=1907): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1060}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r2}, 0x38) 9.280918935s ago: executing program 6 (id=1908): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4]}}, 0x0}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x1801, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000740)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_test={0x51, 0x0, 0x22b2}}) 8.922384051s ago: executing program 8 (id=1911): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r2 = dup2(r0, r0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setresgid(0x0, 0xffffffffffffffff, r5) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000340)={0xa0, 0x0, 0x0, {{0x4, 0x1, 0x3, 0x5, 0x91, 0x3, {0x4, 0x2, 0x7, 0x8, 0x0, 0x1, 0x9694, 0x6, 0x7, 0xc000, 0x7, r3, r5, 0x80000001, 0xfffffffb}}, {0x0, 0x10}}}, 0xa0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='sched_switch\x00', r9}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/74, 0x4a, 0x4000000003c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6.875974142s ago: executing program 8 (id=1913): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28f94174f9f5ffff0700"], 0x28}}, 0x0) 6.537735358s ago: executing program 8 (id=1914): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000440)=""/244) 6.36204177s ago: executing program 7 (id=1915): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) acct(0x0) 6.011919765s ago: executing program 7 (id=1916): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 5.870714318s ago: executing program 7 (id=1917): r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 5.518265983s ago: executing program 0 (id=1920): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r0, &(0x7f0000000180)=""/39, 0x27, 0x2b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r5 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f00000095c0)={0x2020}, 0x2020) io_submit(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r9, 0x0, 0x2) recvmsg$unix(r9, 0x0, 0x60000021) socket$igmp(0x2, 0x3, 0x2) 5.367696786s ago: executing program 6 (id=1922): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x398, 0x308, 0x0, 0x308, 0x308, 0x220, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x0, 0x48}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000002000010328bd70001000000002000004130000cdc25816e4e1"], 0x30}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) prlimit64(r4, 0x5, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d0000af12000000070000000000000003000000060000000100000000000000598cfe0e000000000000000000000000ff7f00"/73]) bpf$PROG_LOAD(0x5, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() 4.406545401s ago: executing program 9 (id=1923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x2040400) fallocate(r3, 0x0, 0xffff, 0x8009) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r4, 0x0, 0x0, 0xfba2, 0x8}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=""/82, &(0x7f00000009c0)=""/251, 0x0, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) unshare(0x64000600) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 4.360228061s ago: executing program 8 (id=1924): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) unlinkat(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a00010000000000000a008000000200000000000005001b003a000000000000"], 0x24}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xf00, 0x0, 0x4080000}, 0x4000004) 3.483931075s ago: executing program 7 (id=1925): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) fsetxattr$security_evm(r3, &(0x7f00000000c0), &(0x7f0000000200)=@md5={0x1, "dce2932cf5fa63fdb6774750c1319375"}, 0x11, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x1e, 0x0, 0x0, 0xff}, {0x7, 0x0, 0x0, 0x6}]}, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) unshare(0x2040600) ioctl$RTC_WKALM_SET(r8, 0x4028700f, &(0x7f0000000300)={0x2, 0x2, {0x0, 0x31, 0x0, 0x18, 0x80000, 0x60}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/112) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.673000484s ago: executing program 6 (id=1926): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) acct(0x0) 1.623332254s ago: executing program 9 (id=1927): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 1.471109396s ago: executing program 9 (id=1928): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000a80)={0x0, "0f7ad7a22f2fd6f4e301e2f43489f4ac"}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x4000) 1.316018529s ago: executing program 7 (id=1929): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1060}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 1.315599799s ago: executing program 6 (id=1930): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) getpgrp(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000200)={0xd, 0x2f, 0x11, 0x3, 0x8, 0x81, 0x4, 0xe4}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0xb) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000005c0)={0x2, {0x2, 0x5, 0x7, 0xffff, 0x5}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x2, 0x5, 0xfffffbe5, 0x8018, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @value, @void, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) 1.017683123s ago: executing program 7 (id=1931): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setreuid(0xee01, 0xee01) ioprio_set$uid(0x3, 0x0, 0x4007) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0x9, 0x0, 0x0, {0x0, 0x300, 0x0, 0x80000300}}) syz_open_dev$vim2m(&(0x7f0000000040), 0x80, 0x2) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r3 = fsopen(&(0x7f00000003c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000300)=0x3) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0xe, &(0x7f0000001880)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 956.290144ms ago: executing program 8 (id=1932): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x8, 0xd6e}}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0x20, 0x101}}) 892.400965ms ago: executing program 9 (id=1933): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], 0x0, 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x5d462ded1cef7b5b}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x48490) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x81}, {0x6}]}, 0x8) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4feefd25ad2983456cc952f1e6fc82"], 0xd) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x0, 0x2, 0x2, '\x00', 0xffffffffffffffe0}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x1, 0x2, 0x0, 0x1cf, 0x4, 0x6, 0x1, 0x2, 0x9, 0x9, 0x4, 0x0, 0x7ff, 0x3, 0x3b, 0x2, 0x9, 0x1, '\x00', 0x81, 0x100000001}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r7, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 460.964843ms ago: executing program 8 (id=1934): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000440)=""/244) 460.391092ms ago: executing program 0 (id=1935): r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 221.713496ms ago: executing program 9 (id=1936): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) 0s ago: executing program 9 (id=1937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f00000003c0)=""/4096, 0x20) kernel console output (not intermixed with test programs): 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 316.371240][ T4332] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 316.384779][ T4332] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 316.394253][ T4332] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.417447][ T4332] usbtmc 7-1:16.0: bulk endpoints not found [ 316.429700][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 316.692552][ T7543] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 316.708629][ T7543] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 317.470716][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 317.870081][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 318.322676][ T7564] fuse: Unknown parameter 'group_id00000000000000000000' [ 318.485209][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 318.519624][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.232453][ T14] usb 7-1: USB disconnect, device number 2 [ 319.549767][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.949733][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 320.599648][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 321.629592][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 322.257111][ T7608] fuse: Bad value for 'user_id' [ 322.267606][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 322.430903][ T4857] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 322.594123][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.600549][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.619088][ T4857] usb 7-1: Using ep0 maxpacket: 8 [ 322.628929][ T4857] usb 7-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config [ 322.650435][ T4857] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.669574][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 322.680935][ T4857] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 322.691574][ T4857] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 322.705182][ T4857] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 322.714623][ T4857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.726750][ T4857] usbtmc 7-1:16.0: bulk endpoints not found [ 323.709560][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 324.749587][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 325.080588][ T7651] fuse: Bad value for 'user_id' [ 325.151193][ T4332] usb 7-1: USB disconnect, device number 3 [ 325.461653][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 325.789908][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 326.120039][ T4268] Bluetooth: hci0: command 0x1003 tx timeout [ 326.127572][ T48] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 326.839634][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 327.869556][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 328.119784][ T4241] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 328.218171][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'. [ 328.299728][ T4241] usb 7-1: Using ep0 maxpacket: 8 [ 328.320881][ T4241] usb 7-1: config 16 has an invalid descriptor of length 48, skipping remainder of the config [ 328.338766][ T4241] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 328.359511][ T4241] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 328.369314][ T4241] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 328.382890][ T4241] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 328.392444][ T4241] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.411374][ T4241] usbtmc 7-1:16.0: bulk endpoints not found [ 328.909574][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 329.149094][ T7712] 9pnet_fd: Insufficient options for proto=fd [ 329.959578][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 330.445476][ T7721] 9pnet_virtio: no channels available for device syz [ 330.589746][ T7725] tipc: Started in network mode [ 330.609382][ T7725] tipc: Node identity ec14140f, cluster identity 4711 [ 330.633894][ T7725] tipc: Enabling of bearer rejected, failed to enable media [ 330.989567][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 331.142243][ T4332] usb 7-1: USB disconnect, device number 4 [ 331.348703][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.890'. [ 332.029564][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 332.126636][ T7748] random: crng reseeded on system resumption [ 333.069582][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 334.109670][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 335.149605][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 335.719954][ T7] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 335.910075][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 335.918135][ T7] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.946987][ T7] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.967328][ T7] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 335.999589][ T7] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 336.029211][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.082010][ T7] usbtmc 7-1:16.0: bulk endpoints not found [ 336.189571][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 337.229579][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 338.269583][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 338.483087][ T4332] usb 7-1: USB disconnect, device number 5 [ 338.566490][ T7805] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 338.899758][ T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 339.169217][ T7] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 339.177689][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.201133][ T7] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 339.222422][ T7] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 339.243104][ T7] usb 6-1: Manufacturer: syz [ 339.262742][ T7] usb 6-1: config 0 descriptor?? [ 339.319594][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 339.535959][ T7] rc_core: IR keymap rc-hauppauge not found [ 339.548115][ T7] Registered IR keymap rc-empty [ 339.893722][ T7] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 339.916470][ T7] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input15 [ 339.995516][ T7] usb 6-1: USB disconnect, device number 5 [ 340.349651][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 341.399590][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 342.139625][ T4296] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 342.329805][ T4296] usb 1-1: Using ep0 maxpacket: 8 [ 342.345684][ T4296] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.364941][ T4296] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 342.379127][ T4296] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 342.401232][ T4296] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 342.439651][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.439739][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 342.544932][ T4296] usbtmc 1-1:16.0: bulk endpoints not found [ 343.469574][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 344.509616][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 345.549709][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 345.605912][ T4332] usb 1-1: USB disconnect, device number 7 [ 346.589575][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 347.639558][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 348.669561][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 348.898947][ T4298] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 349.436120][ T4298] usb 1-1: Using ep0 maxpacket: 8 [ 349.598459][ T4298] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.630615][ T4298] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.679579][ T4298] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 349.695235][ T4298] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 349.709092][ T4298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.717280][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 350.332722][ T4298] usbtmc 1-1:16.0: bulk endpoints not found [ 350.759608][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 351.789555][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 352.385411][ T4332] usb 1-1: USB disconnect, device number 8 [ 352.829596][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 353.395535][ T7965] infiniband sz1: set active [ 353.518282][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 353.555240][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 353.836221][ T4332] lo speed is unknown, defaulting to 1000 [ 353.838109][ T7975] netlink: 'syz.0.956': attribute type 10 has an invalid length. [ 353.869618][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 353.887551][ T7975] bond0: (slave wlan1): Opening slave failed [ 354.648935][ T52] block nbd2: Attempted send on invalid socket [ 354.655476][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 354.667388][ T7990] XFS (nbd2): SB validate failed with error -5. [ 354.909569][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 355.949558][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 356.093107][ T8000] trusted_key: encrypted_key: insufficient parameters specified [ 356.989633][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 357.056786][ T8006] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 358.029558][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 358.084013][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.5.964'. [ 358.119657][ T4298] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 358.299695][ T4298] usb 7-1: Using ep0 maxpacket: 8 [ 358.306931][ T4298] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.319740][ T4298] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.330085][ T4298] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64 [ 358.341686][ T4298] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.355361][ T4298] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.365582][ T4298] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.388227][ T4298] usbtmc 7-1:16.0: bulk endpoints not found [ 359.069648][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 360.109562][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 360.917629][ T4296] usb 7-1: USB disconnect, device number 6 [ 361.149589][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 361.969603][ T8056] netlink: 'syz.6.977': attribute type 4 has an invalid length. [ 362.189567][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 363.229555][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 364.269605][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 364.651510][ T8074] overlayfs: unrecognized mount option "uuid=auto" or missing value [ 365.309552][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 365.899480][ T4298] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 366.121575][ T4298] usb 6-1: Using ep0 maxpacket: 8 [ 366.261286][ T4298] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.272682][ T4298] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.295647][ T4298] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64 [ 366.307251][ T4298] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.324278][ T4298] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 366.339472][ T4298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.349583][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 366.380877][ T4298] usbtmc 6-1:16.0: bulk endpoints not found [ 367.389596][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 367.647113][ T8120] netlink: 328 bytes leftover after parsing attributes in process `syz.4.994'. [ 368.429633][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 368.753109][ T4857] usb 6-1: USB disconnect, device number 6 [ 369.479543][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 370.067030][ T8144] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1002'. [ 370.379615][ T4241] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 370.519555][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 370.590351][ T4241] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.602740][ T4241] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.613921][ T4241] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 370.629055][ T4241] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 370.638585][ T4241] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.651494][ T4241] usb 7-1: config 0 descriptor?? [ 371.261423][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1007'. [ 371.549574][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 372.624509][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 373.110182][ T8174] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117.87.150326315.2007(bad) [ 373.119618][ T8174] PKCS7: Only support pkcs7_signedData type [ 373.161473][ T8179] fuse: Bad value for 'fd' [ 373.319855][ T4298] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 373.339227][ T4857] Process accounting resumed [ 373.509548][ T4298] usb 1-1: Using ep0 maxpacket: 8 [ 373.532635][ T4298] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 373.549896][ T4298] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 373.575637][ T4298] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64 [ 373.594338][ T4298] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.616302][ T4298] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 373.629557][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 373.645689][ T4298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.681415][ T4298] usbtmc 1-1:16.0: bulk endpoints not found [ 373.788610][ T4241] usbhid 7-1:0.0: can't add hid device: -71 [ 373.809687][ T4241] usbhid: probe of 7-1:0.0 failed with error -71 [ 373.840471][ T4241] usb 7-1: USB disconnect, device number 7 [ 374.669629][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 375.070760][ T27] audit: type=1326 audit(1744226538.165:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa18d169 code=0x7ffc0000 [ 375.122103][ T27] audit: type=1326 audit(1744226538.195:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7afa18d169 code=0x7ffc0000 [ 375.154824][ T27] audit: type=1326 audit(1744226538.195:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa18d169 code=0x7ffc0000 [ 375.192416][ T27] audit: type=1326 audit(1744226538.195:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7afa18d169 code=0x7ffc0000 [ 375.234917][ T27] audit: type=1326 audit(1744226538.215:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7afa129359 code=0x7ffc0000 [ 375.271043][ T27] audit: type=1326 audit(1744226538.215:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7afa129359 code=0x7ffc0000 [ 375.306295][ T27] audit: type=1326 audit(1744226538.215:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7afa129359 code=0x7ffc0000 [ 375.346102][ T27] audit: type=1326 audit(1744226538.215:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7afa129359 code=0x7ffc0000 [ 375.378901][ T27] audit: type=1326 audit(1744226538.215:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7afa129359 code=0x7ffc0000 [ 375.416006][ T27] audit: type=1326 audit(1744226538.215:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.6.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7afa129359 code=0x7ffc0000 [ 375.709534][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 376.187803][ T4298] usb 1-1: USB disconnect, device number 9 [ 376.759539][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 376.882107][ T4332] Process accounting resumed [ 377.016861][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 377.144850][ T8217] device team1 entered promiscuous mode [ 377.151629][ T8217] 8021q: adding VLAN 0 to HW filter on device team1 [ 377.563475][ T8226] netlink: 'syz.2.1026': attribute type 4 has an invalid length. [ 377.789548][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 378.829557][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 379.754810][ T4332] Process accounting resumed [ 379.879568][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 380.237062][ T8261] fuse: Unknown parameter 'use00000000000000000000' [ 380.909591][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 381.949544][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 382.566444][ T27] kauditd_printk_skb: 1156 callbacks suppressed [ 382.566458][ T27] audit: type=1326 audit(1744226545.665:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0503b8d169 code=0x7ffc0000 [ 382.612142][ T27] audit: type=1326 audit(1744226545.675:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0503b8d169 code=0x7ffc0000 [ 382.645331][ T27] audit: type=1326 audit(1744226545.675:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0503b8d169 code=0x7ffc0000 [ 382.681294][ T27] audit: type=1326 audit(1744226545.675:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0503b8d169 code=0x7ffc0000 [ 382.711006][ T27] audit: type=1326 audit(1744226545.675:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0503b8d169 code=0x7ffc0000 [ 382.734658][ T27] audit: type=1326 audit(1744226545.675:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0503b8d169 code=0x7ffc0000 [ 382.779587][ T27] audit: type=1326 audit(1744226545.675:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0503b8d169 code=0x7ffc0000 [ 382.801960][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.808822][ T27] audit: type=1326 audit(1744226545.675:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0503b8d169 code=0x7ffc0000 [ 382.842650][ T27] audit: type=1326 audit(1744226545.675:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0503b8d169 code=0x7ffc0000 [ 382.866379][ T27] audit: type=1326 audit(1744226545.675:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0503b8d169 code=0x7ffc0000 [ 382.888718][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.924895][ T8296] fuse: Unknown parameter 'use00000000000000000000' [ 382.989567][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 383.037965][ T7] Process accounting resumed [ 383.078426][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'. [ 384.030842][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 384.038749][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.048001][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.889983][ T8312] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1053'. [ 385.079583][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 385.522081][ T8312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.582404][ T8312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.601517][ T8312] bond0 (unregistering): Released all slaves [ 385.943333][ T1076] block nbd6: Attempted send on invalid socket [ 385.949707][ T1076] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 385.959141][ T8327] XFS (nbd6): SB validate failed with error -5. [ 386.008618][ T8336] fuse: Unknown parameter 'use00000000000000000000' [ 386.119560][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 387.149582][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 387.296966][ T4298] Process accounting resumed [ 387.838752][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 387.920301][ T4298] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 387.932079][ T8369] fuse: Unknown parameter 'user_i00000000000000000000' [ 388.119963][ T4298] usb 7-1: Using ep0 maxpacket: 8 [ 388.133701][ T4298] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 388.149581][ T4298] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 388.168213][ T4298] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 388.188174][ T4298] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 388.198582][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 388.216041][ T4298] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.234625][ T4298] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 388.251244][ T4298] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.308286][ T8366] device team1 entered promiscuous mode [ 388.387778][ T8366] 8021q: adding VLAN 0 to HW filter on device team1 [ 388.499305][ T4298] usb 7-1: GET_CAPABILITIES returned 0 [ 388.513376][ T4298] usbtmc 7-1:16.0: can't read capabilities [ 388.710889][ T4298] usb 7-1: USB disconnect, device number 8 [ 389.205771][ T52] block nbd2: Attempted send on invalid socket [ 389.212226][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 389.239616][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 389.379736][ T8381] XFS (nbd2): SB validate failed with error -5. [ 390.279538][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 391.319570][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 392.349615][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 393.117713][ T8410] fuse: Unknown parameter 'user_i00000000000000000000' [ 393.389541][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 393.506648][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1086'. [ 393.568536][ T8419] device team1 entered promiscuous mode [ 393.584079][ T8419] 8021q: adding VLAN 0 to HW filter on device team1 [ 394.429513][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 394.869640][ T14] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 395.071777][ T14] usb 7-1: Using ep0 maxpacket: 8 [ 395.078746][ T14] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 395.091778][ T14] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 395.105225][ T14] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 395.121170][ T14] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 395.248343][ T14] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.435370][ T14] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 395.469562][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 395.490625][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.835446][ T14] usb 7-1: usb_control_msg returned -32 [ 395.841950][ T14] usbtmc 7-1:16.0: can't read capabilities [ 395.874236][ T14] usb 7-1: USB disconnect, device number 9 [ 396.509538][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 396.649168][ T8461] 9pnet_virtio: no channels available for device syz [ 397.549544][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 398.589555][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 399.199671][ T4857] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 399.390332][ T4857] usb 7-1: Using ep0 maxpacket: 8 [ 399.397430][ T4857] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.419508][ T4857] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 399.429309][ T4857] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 399.429671][ T4296] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 399.460881][ T4857] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 399.483714][ T4857] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.509539][ T4857] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 399.518648][ T4857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.629583][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 399.653027][ T4296] usb 6-1: Using ep0 maxpacket: 8 [ 399.724580][ T4296] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.739486][ T4296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 399.755376][ T4296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.755863][ T4857] usb 7-1: usb_control_msg returned -32 [ 399.765359][ T4296] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 399.784531][ T4857] usbtmc 7-1:16.0: can't read capabilities [ 399.802506][ T4296] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.819729][ T4857] usb 7-1: USB disconnect, device number 10 [ 399.826187][ T4296] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 399.837190][ T4296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.870260][ T4296] usb 6-1: config 0 descriptor?? [ 400.054849][ T8508] fuse: Unknown parameter 'user_id00000000000000000000' [ 400.384945][ T8518] 9pnet_virtio: no channels available for device syz [ 400.669601][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 401.280723][ T8527] fuse: Unknown parameter 'user_id00000000000000000000' [ 401.636246][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1123'. [ 401.709548][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 402.384239][ T8544] fuse: Unknown parameter 'user_id00000000000000000000' [ 402.514008][ T4298] usb 6-1: USB disconnect, device number 7 [ 402.749529][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 402.769726][ T4241] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 402.869611][ T8555] 9pnet_virtio: no channels available for device syz [ 402.950142][ T4241] usb 1-1: Using ep0 maxpacket: 8 [ 403.028210][ T4241] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 403.039342][ T4241] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 403.059659][ T4241] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 403.079683][ T4241] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 403.094544][ T4241] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.117103][ T4241] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 403.129773][ T4241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.789559][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 403.871420][ T4241] usb 1-1: usb_control_msg returned -32 [ 403.877210][ T4241] usbtmc 1-1:16.0: can't read capabilities [ 403.884614][ T8562] fuse: Bad value for 'fd' [ 403.912043][ T4241] usb 1-1: USB disconnect, device number 10 [ 404.829558][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 405.466833][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'. [ 405.869545][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 406.909526][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 407.949641][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 408.417104][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801effe400: rx timeout, send abort [ 408.987205][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801effe400: abort rx timeout. Force session deactivation [ 408.999604][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 409.213614][ T8604] fuse: Bad value for 'fd' [ 409.402460][ T8611] fuse: Bad value for 'fd' [ 409.924924][ T4332] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 410.003129][ T8617] IPVS: stopping backup sync thread 8621 ... [ 410.029586][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 410.120873][ T4332] usb 5-1: Using ep0 maxpacket: 8 [ 410.134701][ T4332] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.157603][ T4332] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 410.176886][ T4332] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 410.191953][ T4332] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 410.210569][ T4332] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.231682][ T4332] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.248554][ T4332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.818910][ T4332] usb 5-1: usb_control_msg returned -32 [ 410.826521][ T4332] usbtmc 5-1:16.0: can't read capabilities [ 411.045128][ T4332] usb 5-1: USB disconnect, device number 7 [ 411.069745][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 412.119669][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 413.159552][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 413.956808][ T8646] fuse: Bad value for 'fd' [ 414.138814][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1159'. [ 414.189547][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 414.657898][ T8666] fuse: Bad value for 'fd' [ 414.706281][ T8667] 9pnet_virtio: no channels available for device syz [ 415.229516][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 415.962647][ T8680] IPVS: stopping backup sync thread 8681 ... [ 415.975742][ T8681] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 416.279536][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 417.309675][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 417.467655][ T8700] fuse: Unknown parameter '00000000000000000003' [ 417.975477][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 418.114577][ T8714] 9pnet_virtio: no channels available for device syz [ 418.359524][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 418.691029][ T8717] fuse: Bad value for 'fd' [ 419.157305][ T8725] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1179'. [ 419.190362][ T8725] netlink: 'syz.6.1179': attribute type 10 has an invalid length. [ 419.375483][ T8725] device veth0_vlan left promiscuous mode [ 419.399524][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 419.413051][ T8725] device veth0_vlan entered promiscuous mode [ 419.439594][ T8725] team0: Device veth0_vlan failed to register rx_handler [ 419.729131][ T8725] syz.6.1179 (8725) used greatest stack depth: 18464 bytes left [ 420.429532][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 421.469521][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 421.679944][ T8752] fuse: Unknown parameter '00000000000000000003' [ 422.192106][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1190'. [ 422.509548][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 423.391736][ T8785] netlink: 'syz.2.1194': attribute type 16 has an invalid length. [ 423.422009][ T8785] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1194'. [ 423.559506][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 424.589609][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 425.288840][ T8815] fuse: Unknown parameter '00000000000000000003' [ 425.327477][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1202'. [ 425.639530][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 427.169089][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 427.928658][ T52] block nbd2: Attempted send on invalid socket [ 427.935039][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 427.945922][ T8844] XFS (nbd2): SB validate failed with error -5. [ 428.199655][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 429.229580][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 430.269607][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 430.279154][ T8860] fuse: Unknown parameter '00000000000000000003' [ 431.309519][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 432.349544][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 433.389540][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 434.429535][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 434.964977][ T8906] fuse: Unknown parameter '00000000000000000003' [ 434.999019][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'. [ 435.479557][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 435.678818][ T8894] device team1 entered promiscuous mode [ 435.694261][ T8894] 8021q: adding VLAN 0 to HW filter on device team1 [ 436.509554][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 436.681593][ T8927] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.549536][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 438.212327][ T8938] Device name cannot be null; rc = [-22] [ 438.573184][ T8950] 9pnet_virtio: no channels available for device syz [ 438.573982][ T8949] fuse: Unknown parameter '00000000000000000003' [ 438.589549][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 438.884866][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1243'. [ 439.165798][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1248'. [ 439.179694][ T8964] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1248'. [ 439.629531][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 440.471429][ T8989] program syz.6.1252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.679532][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 441.497819][ T8995] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1247'. [ 441.510351][ T8999] 9pnet_virtio: no channels available for device syz [ 441.708164][ T4338] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.718904][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 441.833526][ T4338] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.923634][ T4338] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.027568][ T4338] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.038379][ T4241] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 442.047021][ T4298] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 442.076189][ T9007] fuse: Unknown parameter 'fd00000000000000000003' [ 442.236055][ T4241] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 442.245629][ T4241] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 442.256094][ T4241] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 442.277691][ T4241] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 442.288939][ T4241] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 442.330698][ T4241] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 442.340237][ T4241] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 442.348379][ T4241] usb 7-1: Product: syz [ 442.360611][ T4241] usb 7-1: Manufacturer: syz [ 442.383367][ T4241] cdc_wdm 7-1:1.0: skipping garbage [ 442.388723][ T4241] cdc_wdm 7-1:1.0: skipping garbage [ 442.403171][ T4241] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 442.409225][ T4241] cdc_wdm 7-1:1.0: Unknown control protocol [ 442.416762][ T4298] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.437562][ T4298] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 442.451009][ T4298] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 442.462625][ T4298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.473179][ T4298] usb 1-1: config 0 descriptor?? [ 442.493574][ T4298] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 442.749514][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 443.789648][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 444.371033][ T4338] device hsr_slave_0 left promiscuous mode [ 444.377656][ T4338] device hsr_slave_1 left promiscuous mode [ 444.467854][ T4338] device veth1_macvtap left promiscuous mode [ 444.479761][ T4338] device veth0_macvtap left promiscuous mode [ 444.486031][ T4338] device veth1_vlan left promiscuous mode [ 444.506916][ T4338] device veth0_vlan left promiscuous mode [ 444.829533][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 445.442981][ T4332] usb 7-1: USB disconnect, device number 11 [ 445.474261][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.480648][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.869518][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 446.691642][ T4299] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 446.919520][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 446.931765][ T4299] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.943590][ T4299] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.955730][ T4299] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 446.969248][ T4299] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.978826][ T4299] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.990959][ T4299] usb 7-1: config 0 descriptor?? [ 447.959550][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 448.036996][ T4338] bond0 (unregistering): Released all slaves [ 448.133123][ T4367] usb 1-1: USB disconnect, device number 11 [ 448.257671][ T4296] lo speed is unknown, defaulting to 1000 [ 448.352712][ T9081] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1266'. [ 448.372881][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 448.886594][ T9084] 9pnet_virtio: no channels available for device syz [ 449.173515][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 449.515214][ T4299] usbhid 7-1:0.0: can't add hid device: -71 [ 449.525015][ T4299] usbhid: probe of 7-1:0.0 failed with error -71 [ 449.551787][ T4299] usb 7-1: USB disconnect, device number 12 [ 450.189707][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 450.847884][ T9135] fuse: Unknown parameter 'fd00000000000000000003' [ 451.229725][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 452.269702][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 453.075949][ T9195] 9pnet_virtio: no channels available for device syz [ 453.309699][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 454.349726][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 454.657841][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1281'. [ 455.389704][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 456.217173][ T9244] fuse: Unknown parameter 'fd00000000000000000003' [ 456.429700][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 456.838277][ T9260] 9pnet_virtio: no channels available for device syz [ 456.873887][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1294'. [ 457.469612][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 457.743996][ T9272] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 457.884095][ T9270] infiniband sz1: set active [ 458.000833][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 458.015298][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 458.509600][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 458.616563][ T4367] lo speed is unknown, defaulting to 1000 [ 458.635639][ T9273] netlink: 'syz.0.1295': attribute type 10 has an invalid length. [ 458.651793][ T9273] bond0: (slave wlan1): Opening slave failed [ 459.524759][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.533864][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.542214][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.549734][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 459.550684][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.565089][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.578394][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.593427][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.611415][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.626475][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.636006][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.651962][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.667194][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.678720][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.693623][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.704903][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.717379][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.759801][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.767606][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.790949][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.798968][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.807221][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.816008][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.824366][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.834897][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.843160][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.852061][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.860300][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.868311][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.876626][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.884917][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.893318][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.914942][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 459.937923][ T4332] hid-generic 0004:FFFFFFFF:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 460.239559][ T4332] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 460.489794][ T4332] usb 5-1: config 0 has no interfaces? [ 460.495472][ T4332] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 460.514705][ T4332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.528804][ T4332] usb 5-1: config 0 descriptor?? [ 460.589547][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 461.629523][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 462.669507][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 463.516954][ T7] usb 5-1: USB disconnect, device number 8 [ 463.709540][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 464.749522][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 465.700316][ T9376] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 465.789512][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 466.089301][ T9389] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 466.141749][ T9389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 466.179224][ T9389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 466.192307][ T9389] device bridge_slave_0 left promiscuous mode [ 466.199809][ T9389] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.229278][ T9389] device bridge_slave_1 left promiscuous mode [ 466.258253][ T9389] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.431398][ T9389] team0: Port device team_slave_0 removed [ 466.489195][ T9389] team0: Port device team_slave_1 removed [ 466.498800][ T9389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.537237][ T9389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.553523][ T9389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.567852][ T9389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.607857][ T9393] netlink: 'syz.6.1315': attribute type 10 has an invalid length. [ 466.829552][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 467.869507][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 468.912354][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 469.835822][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1325'. [ 469.949546][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 470.799827][ T9471] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 470.999675][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 472.039541][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 473.069544][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 474.022187][ T9560] ======================================================= [ 474.022187][ T9560] WARNING: The mand mount option has been deprecated and [ 474.022187][ T9560] and is ignored by this kernel. Remove the mand [ 474.022187][ T9560] option from the mount to silence this warning. [ 474.022187][ T9560] ======================================================= [ 474.093295][ T9560] 9pnet_virtio: no channels available for device syz [ 474.109624][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 474.299813][ T9565] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1339'. [ 474.342233][ T9565] netlink: 'syz.2.1339': attribute type 5 has an invalid length. [ 474.351269][ T9565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1339'. [ 474.798432][ T9571] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 475.151070][ T9580] 9pnet_virtio: no channels available for device syz [ 475.159614][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 476.189555][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 477.229576][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 477.467289][ T9623] md2: error: bitmap file must be a regular file [ 478.279566][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 478.989549][ T4332] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 479.189812][ T4332] usb 6-1: Using ep0 maxpacket: 16 [ 479.214741][ T4332] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 479.232343][ T4332] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 479.253073][ T4332] usb 6-1: Product: syz [ 479.257638][ T4332] usb 6-1: Manufacturer: syz [ 479.268636][ T4332] usb 6-1: SerialNumber: syz [ 479.290990][ T4332] usb 6-1: config 0 descriptor?? [ 479.319568][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 479.509647][ T9641] 9pnet_virtio: no channels available for device syz [ 479.681793][ T7] usb 6-1: USB disconnect, device number 8 [ 480.359511][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 480.946462][ T9658] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 481.389520][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 482.329316][ T9689] 9pnet_virtio: no channels available for device syz [ 482.429501][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 483.286800][ T9702] IPVS: length: 205 != 24 [ 483.469499][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 484.509509][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 484.839590][ T27] kauditd_printk_skb: 45 callbacks suppressed [ 484.839602][ T27] audit: type=1326 audit(1744226646.755:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 485.266613][ T27] audit: type=1326 audit(1744226646.755:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 485.414503][ T27] audit: type=1326 audit(1744226646.875:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 485.445815][ T27] audit: type=1326 audit(1744226646.875:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 485.474704][ T27] audit: type=1326 audit(1744226646.875:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 485.503069][ T27] audit: type=1326 audit(1744226647.025:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 485.534095][ T27] audit: type=1326 audit(1744226647.025:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 485.556676][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 485.569512][ T27] audit: type=1326 audit(1744226647.025:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 485.599154][ T27] audit: type=1326 audit(1744226647.185:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 485.627544][ T27] audit: type=1326 audit(1744226647.475:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9695 comm="syz.4.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 485.837552][ T9712] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 486.589514][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 487.629577][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 488.486342][ T9761] syz.5.1387[9761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 488.486459][ T9761] syz.5.1387[9761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 488.669502][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 488.819179][ T9769] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 489.163171][ T9774] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 489.274086][ T9774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.453810][ T9774] bond0: (slave rose0): Enslaving as an active interface with an up link [ 489.503160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 489.709508][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 491.829639][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 492.909716][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 493.949682][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 494.996610][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 495.146644][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1408'. [ 496.029664][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 497.069585][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 498.109556][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 498.762195][ T9928] lo speed is unknown, defaulting to 1000 [ 499.149606][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 500.189605][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 501.229571][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 502.269512][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 503.309488][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 504.349485][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 504.764044][ T9987] lo speed is unknown, defaulting to 1000 [ 505.389519][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 506.261432][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1447'. [ 506.429532][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 506.974192][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.980734][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.469488][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 508.007958][T10057] fuse: Bad value for 'fd' [ 508.175219][T10059] 9pnet_fd: Insufficient options for proto=fd [ 508.509510][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 509.549523][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 510.064217][T10101] bridge0: port 1(gretap0) entered blocking state [ 510.071529][T10101] bridge0: port 1(gretap0) entered disabled state [ 510.090277][T10101] device gretap0 entered promiscuous mode [ 510.104672][T10101] bridge0: port 1(gretap0) entered blocking state [ 510.111597][T10101] bridge0: port 1(gretap0) entered forwarding state [ 510.589557][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 510.721391][T10100] 9pnet_fd: Insufficient options for proto=fd [ 511.549632][ T4299] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 511.639599][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 511.740718][ T4299] usb 7-1: Using ep0 maxpacket: 16 [ 511.748808][ T4299] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.766303][ T4299] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8422, setting to 1024 [ 511.785277][ T4299] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.812525][ T4299] usb 7-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 511.830009][ T4299] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.840727][ T4299] usb 7-1: config 0 descriptor?? [ 512.118968][T10120] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1477'. [ 512.417687][T10140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.432520][T10140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.669564][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 513.540233][ T4299] usbhid 7-1:0.0: can't add hid device: -71 [ 513.547645][ T4299] usbhid: probe of 7-1:0.0 failed with error -71 [ 513.565830][ T4299] usb 7-1: USB disconnect, device number 13 [ 513.709490][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 514.749665][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 515.759266][T10166] tty tty30: ldisc open failed (-12), clearing slot 29 [ 515.789498][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 516.076051][T10172] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 516.091189][T10173] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 1 [ 516.105236][T10175] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 2 [ 516.155592][T10176] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 3 [ 516.218903][T10177] IPVS: stopping backup sync thread 10176 ... [ 516.243828][T10177] IPVS: stopping backup sync thread 10175 ... [ 516.244613][T10179] syz.6.1494[10179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.250374][T10179] syz.6.1494[10179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.277579][T10177] IPVS: stopping backup sync thread 10173 ... [ 516.299425][ T4332] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 516.335591][T10177] IPVS: stopping backup sync thread 10172 ... [ 516.499438][ T4332] usb 6-1: Using ep0 maxpacket: 16 [ 516.549878][ T4332] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.569548][ T4332] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 516.587715][ T4332] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 516.604862][ T4332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.642794][ T4332] usb 6-1: config 0 descriptor?? [ 516.829509][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 517.869555][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 518.352379][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 518.352395][ T27] audit: type=1326 audit(1744226681.455:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10202 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 518.439487][ T27] audit: type=1326 audit(1744226681.455:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10202 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 518.463866][ T27] audit: type=1326 audit(1744226681.455:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10202 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 518.489848][ T27] audit: type=1326 audit(1744226681.455:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10202 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 518.513214][ T27] audit: type=1326 audit(1744226681.455:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10202 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 518.536289][ T27] audit: type=1326 audit(1744226681.455:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10202 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 518.571091][ T27] audit: type=1326 audit(1744226681.455:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10202 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 518.595131][ T27] audit: type=1326 audit(1744226681.455:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10202 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 518.618171][ T27] audit: type=1326 audit(1744226681.455:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10202 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 518.642167][ T27] audit: type=1326 audit(1744226681.455:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10202 comm="syz.4.1500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdc298d169 code=0x7ffc0000 [ 518.666390][T10205] 9pnet_fd: Insufficient options for proto=fd [ 518.909557][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 519.249705][ T4299] usb 6-1: USB disconnect, device number 9 [ 519.949562][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 520.989594][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 521.430332][T10250] fuse: Bad value for 'fd' [ 521.437244][ T4299] Process accounting resumed [ 522.029571][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 523.069502][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 524.119578][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 525.149754][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 525.475058][T10286] IPVS: stopping backup sync thread 10288 ... [ 525.477047][T10288] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 525.533833][T10287] fuse: Bad value for 'fd' [ 525.587843][ T4299] Process accounting resumed [ 526.189481][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 527.229509][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 527.515150][T10322] fuse: Bad value for 'fd' [ 527.526347][ T4299] Process accounting resumed [ 528.269579][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 529.309575][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 530.349499][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 530.779253][T10363] fuse: Bad value for 'fd' [ 530.787990][ T7] Process accounting resumed [ 530.915085][T10364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1552'. [ 531.399579][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 532.429513][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 532.909068][T10443] device bridge_slave_0 left promiscuous mode [ 532.918074][T10443] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.469606][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 533.926305][T10443] device bridge_slave_1 left promiscuous mode [ 533.946918][T10443] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.519681][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 534.959170][T10443] bond0: (slave bond_slave_0): Releasing backup interface [ 535.039138][T10443] bond0: (slave bond_slave_1): Releasing backup interface [ 535.242243][T10443] team0: Port device team_slave_0 removed [ 535.397708][T10443] team0: Port device team_slave_1 removed [ 535.559531][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 535.576582][T10443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.655278][T10443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.247047][T10417] netlink: 'syz.2.1554': attribute type 10 has an invalid length. [ 536.349018][T10417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.386228][T10417] bond0: (slave wlan1): Opening slave failed [ 536.454291][T10471] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 536.489892][T10472] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 1 [ 536.589554][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 536.937889][T10415] Bluetooth: hci0: Frame reassembly failed (-84) [ 537.630192][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 537.923975][T10485] fuse: Bad value for 'fd' [ 537.968702][ T7] Process accounting resumed [ 538.679472][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 538.989828][ T4268] Bluetooth: hci0: command 0x1003 tx timeout [ 538.996831][ T48] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 539.709497][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 540.749478][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 541.789495][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 542.053775][T10518] kvm: pic: non byte write [ 542.833082][T10538] fuse: Bad value for 'fd' [ 542.839477][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 542.840630][ T7] Process accounting resumed [ 542.922221][T10539] xt_TPROXY: Can be used only with -p tcp or -p udp [ 543.869526][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 544.115231][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 544.919485][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 545.390980][T10567] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 545.401875][T10561] IPVS: stopping backup sync thread 10567 ... [ 545.959498][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 546.989658][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 548.039490][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 548.251809][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1599'. [ 549.069496][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 550.109484][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 551.149492][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 552.189696][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 553.229547][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 553.534402][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1616'. [ 554.269670][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 555.047915][T10667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1618'. [ 555.319609][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 556.349536][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 557.389526][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 557.495096][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1633'. [ 558.429520][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 560.109683][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 560.597020][T10729] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1635'. [ 561.149543][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 562.189489][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 563.230434][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 563.858716][T10764] lo speed is unknown, defaulting to 1000 [ 564.102635][ T4857] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 564.269486][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 564.310829][ T4857] usb 7-1: Using ep0 maxpacket: 16 [ 564.331527][ T4857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.349405][ T4857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.359224][ T4857] usb 7-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 564.377668][ T4857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.520124][ T4857] usb 7-1: config 0 descriptor?? [ 564.962362][ T4857] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 564.984842][ T4857] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 565.002939][ T4857] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 565.016471][ T4857] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 565.027838][ T4857] gt683r_led 0003:1770:FF00.0007: unknown main item tag 0x0 [ 565.057323][ T4857] gt683r_led 0003:1770:FF00.0007: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.6-1/input0 [ 565.181476][ T4332] usb 7-1: USB disconnect, device number 14 [ 565.211287][ T951] gt683r_led 0003:1770:FF00.0007: failed to send set report request: -19 [ 565.309475][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 566.349489][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 567.389469][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 568.355575][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.362801][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.429472][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 568.745918][T10829] lo speed is unknown, defaulting to 1000 [ 569.469473][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 570.509488][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 571.246320][T10873] fuse: Unknown parameter 'use00000000000000000000' [ 571.260227][ T4332] Process accounting resumed [ 571.549561][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 572.589483][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 574.585960][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 575.639475][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 576.669558][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 577.719645][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 578.609168][T10970] syz.4.1698[10970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 578.609280][T10970] syz.4.1698[10970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 578.749564][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 579.789533][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 580.829502][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 581.869520][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 582.909480][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 583.949464][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 584.989550][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 586.029455][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 586.200511][ T4263] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 586.211009][ T4263] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 586.219578][ T4263] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 586.229139][ T4263] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 586.236822][ T4263] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 586.244792][ T4263] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 586.272343][T10499] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 586.282527][T10499] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 586.290508][T10499] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 586.298042][T10499] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 586.305829][T10499] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 586.313094][T10499] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 586.375378][T11017] lo speed is unknown, defaulting to 1000 [ 586.806373][T11017] chnl_net:caif_netlink_parms(): no params data found [ 586.942318][T11017] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.069468][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 587.101248][T11017] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.121225][T11017] device bridge_slave_0 entered promiscuous mode [ 587.152787][T11017] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.170457][T11017] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.188740][T11017] device bridge_slave_1 entered promiscuous mode [ 587.251196][T11036] IPVS: stopping backup sync thread 11037 ... [ 587.278146][T11017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.362822][T11017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.494603][T11017] team0: Port device team_slave_0 added [ 587.529056][T11017] team0: Port device team_slave_1 added [ 587.626359][T11017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.656514][T11017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.712566][T11017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.743526][T11017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.779504][T11017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.823133][T11017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.904225][T11017] device hsr_slave_0 entered promiscuous mode [ 587.911351][T11017] device hsr_slave_1 entered promiscuous mode [ 588.119469][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 588.165015][T11017] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 588.176490][T11017] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 588.205557][T11017] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 588.226862][T11017] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 588.349572][ T4263] Bluetooth: hci0: command 0x0409 tx timeout [ 588.373193][T11017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.401591][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 588.409894][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 588.430689][T11017] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.489139][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 588.498053][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 588.523277][T10415] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.530432][T10415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.542137][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 588.561256][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 588.570436][T10415] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.577627][T10415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.600939][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 588.671515][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 588.708285][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 588.731644][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 588.792597][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 588.830875][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 588.850901][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 588.861152][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 588.871911][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 588.900916][T11017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 588.912776][T11017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 588.930645][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 589.159472][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 590.146630][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 590.155368][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 590.177880][T11017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.189615][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 590.325590][T11045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 590.431913][ T4263] Bluetooth: hci0: command 0x041b tx timeout [ 590.820276][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 590.840813][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 590.885159][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 590.920771][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 590.958151][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 590.988527][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 591.017447][T11017] device veth0_vlan entered promiscuous mode [ 591.045860][T11017] device veth1_vlan entered promiscuous mode [ 591.145213][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 591.165486][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 591.182080][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 591.183058][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 591.192416][T11017] device veth0_macvtap entered promiscuous mode [ 591.195794][T11017] device veth1_macvtap entered promiscuous mode [ 591.212718][T11017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.212824][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 591.213518][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 591.214095][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 591.224151][T11017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.224436][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 591.231893][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 591.236560][T11017] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.236644][T11017] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.236666][T11017] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.236688][T11017] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.239525][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 591.323066][T10415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.323162][T10415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.326548][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 591.373348][T10429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.373437][T10429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.378280][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 591.778296][T11087] lo speed is unknown, defaulting to 1000 [ 592.269614][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 592.509717][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 592.663200][T11095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1729'. [ 592.663346][T11095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1729'. [ 593.094412][T11086] tty tty29: ldisc open failed (-12), clearing slot 28 [ 593.309496][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 594.395710][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 594.541793][T11107] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 594.552124][T11107] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 594.568583][T11107] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 594.701719][T11114] device gretap0 left promiscuous mode [ 594.708099][T11114] bridge0: port 1(gretap0) entered disabled state [ 594.753793][T11114] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 594.773516][T11114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 594.784970][T11114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 594.997040][T11112] netlink: 'syz.6.1735': attribute type 10 has an invalid length. [ 595.469778][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 596.509837][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 596.594430][T10499] Bluetooth: hci0: command 0x0c1a tx timeout [ 597.612319][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1741'. [ 598.580028][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 598.669675][T10499] Bluetooth: hci0: command 0x0406 tx timeout [ 599.639500][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 600.679486][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 601.709518][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 601.897766][T11152] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 601.961012][T11152] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 601.980177][T11152] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 602.653478][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1754'. [ 602.749458][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 603.799464][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 603.949428][T10499] Bluetooth: hci0: command 0x0c1a tx timeout [ 604.685346][T11205] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 604.830019][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 605.869458][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 606.029552][T10499] Bluetooth: hci0: command 0x0406 tx timeout [ 606.909457][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 607.596683][T11233] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 607.949445][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 608.989448][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 610.029453][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 611.079552][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 613.234861][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 613.745158][T11293] fuse: Unknown parameter 'user_id00000000000000000000' [ 613.804049][ T4857] Process accounting resumed [ 614.269582][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 614.301929][ T52] block nbd6: Attempted send on invalid socket [ 614.308163][ T52] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 614.318158][T11303] XFS (nbd6): SB validate failed with error -5. [ 615.309539][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 616.349586][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 616.592546][T11322] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1794'. [ 617.170720][ T4263] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 617.186597][ T4263] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 617.194779][ T4263] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 617.203057][ T4263] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 617.210879][ T4263] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 617.219544][ T4263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 617.258105][T11327] lo speed is unknown, defaulting to 1000 [ 617.389549][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 618.196802][T11327] chnl_net:caif_netlink_parms(): no params data found [ 618.429524][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 618.484617][T11327] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.500250][T11327] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.501587][T11327] device bridge_slave_0 entered promiscuous mode [ 618.524213][T11327] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.524841][T11327] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.526336][T11327] device bridge_slave_1 entered promiscuous mode [ 618.615709][T11327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.622055][T11327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.701653][T11327] team0: Port device team_slave_0 added [ 618.723625][T11327] team0: Port device team_slave_1 added [ 618.754227][T11327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.764469][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.833087][T11327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.858636][T11327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.878632][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.934937][T11327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.026673][T11327] device hsr_slave_0 entered promiscuous mode [ 619.027635][T11327] device hsr_slave_1 entered promiscuous mode [ 619.028195][T11327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 619.028314][T11327] Cannot create hsr debugfs directory [ 619.267448][T11327] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 619.278325][T11327] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 619.289062][T11327] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 619.304673][T11327] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 619.311939][ T4263] Bluetooth: hci1: command 0x0409 tx timeout [ 619.469648][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 619.585701][T11327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.614881][T10427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 619.629712][T10427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 619.745720][T11327] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.757173][T10427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 619.783140][T10427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 619.828632][T10427] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.835890][T10427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.853470][T10427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 619.878932][T10427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 619.922921][T10427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 619.982151][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.989429][T10427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.008200][T11373] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1804'. [ 620.008454][T10427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 620.198411][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 620.473458][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 620.496274][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 620.509554][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 620.525330][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 620.545956][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 620.680529][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 620.735043][T11327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 620.746605][T11327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.764736][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 620.780804][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 620.812557][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 621.118081][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 621.134135][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 621.389630][ T4263] Bluetooth: hci1: command 0x041b tx timeout [ 621.441787][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 621.454529][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 621.491214][T11389] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1807'. [ 621.509519][T11389] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1807'. [ 621.541687][T11327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.549576][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 622.171449][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 622.202863][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 622.247128][T11327] device veth0_vlan entered promiscuous mode [ 622.267073][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 622.287137][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 622.317426][T11327] device veth1_vlan entered promiscuous mode [ 622.330680][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 622.358399][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 622.370509][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 622.424405][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 623.392675][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 623.439039][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 623.458687][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 623.489362][T10499] Bluetooth: hci1: command 0x040f tx timeout [ 623.658971][T11327] device veth0_macvtap entered promiscuous mode [ 623.680094][T11327] device veth1_macvtap entered promiscuous mode [ 623.870638][T11327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.889849][T11327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.918421][T11327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.933263][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 623.946510][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 623.963252][T11327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 623.986081][T11327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.018537][T11327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.053749][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 624.189976][ T14] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 624.275256][T10429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 624.294113][T11327] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.310299][T11327] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.326936][T11327] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.336832][T11327] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.400987][ T14] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 624.420593][ T14] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 624.439608][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 624.440173][ T14] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 624.463185][ T14] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 624.477401][ T14] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 624.508794][ T14] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 624.538887][ T14] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 624.555389][ T14] usb 8-1: Product: syz [ 624.560658][ T14] usb 8-1: Manufacturer: syz [ 624.585571][ T14] cdc_wdm 8-1:1.0: skipping garbage [ 624.777194][ T14] cdc_wdm 8-1:1.0: skipping garbage [ 624.792246][ T14] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 624.798220][ T14] cdc_wdm 8-1:1.0: Unknown control protocol [ 624.806695][ T14] usb 8-1: USB disconnect, device number 2 [ 624.933826][ T4672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.956905][ T4672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.985988][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 625.038469][T10420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.047873][T10420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.074888][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 625.448446][T11414] lo speed is unknown, defaulting to 1000 [ 625.469469][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 625.559288][T10499] Bluetooth: hci1: command 0x0419 tx timeout [ 625.802001][T11421] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 625.836332][T11421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 625.844449][T11421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 625.877717][T11421] device bridge_slave_0 left promiscuous mode [ 625.890469][T11421] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.922084][T11421] device bridge_slave_1 left promiscuous mode [ 625.940109][T11421] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.974781][T11421] bond0: (slave bond_slave_0): Releasing backup interface [ 626.012477][T11421] bond0: (slave bond_slave_1): Releasing backup interface [ 626.170586][T11421] team0: Port device team_slave_0 removed [ 626.193657][T11421] team0: Port device team_slave_1 removed [ 626.208608][T11421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.221444][T11421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.234776][T11421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.243404][T11421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.267471][T11422] netlink: 'syz.7.1814': attribute type 10 has an invalid length. [ 626.318799][T11422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.386063][T11422] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 626.415566][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 626.509460][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 627.571448][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 628.255496][T10499] Bluetooth: unknown link type 108 [ 628.599440][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 629.629461][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 630.114306][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.122390][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.270778][T10499] Bluetooth: hci0: command 0x0409 tx timeout [ 630.336472][T11459] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1824'. [ 630.582387][ T4297] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 630.669477][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 630.851818][ T4297] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 630.870672][ T4297] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 630.889550][ T4297] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 630.908973][ T4297] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 630.937728][ T4297] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 630.961539][ T4297] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 630.985236][ T4297] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 631.010573][ T4297] usb 7-1: Product: syz [ 631.014814][ T4297] usb 7-1: Manufacturer: syz [ 631.709960][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 631.840094][ T4297] cdc_wdm 7-1:1.0: skipping garbage [ 631.845375][ T4297] cdc_wdm 7-1:1.0: skipping garbage [ 631.854102][ T4297] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 631.867832][ T4297] cdc_wdm 7-1:1.0: Unknown control protocol [ 631.887274][T11469] xt_bpf: check failed: parse error [ 632.058115][ T4297] usb 7-1: USB disconnect, device number 15 [ 632.749454][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 633.114719][ T4263] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 633.127159][ T4263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 633.137959][ T4263] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 633.147397][ T4263] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 633.162678][ T4263] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 633.170230][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 633.338229][T11487] lo speed is unknown, defaulting to 1000 [ 633.540857][T11498] xt_CT: You must specify a L4 protocol and not use inversions on it [ 633.799458][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 634.313777][T11487] chnl_net:caif_netlink_parms(): no params data found [ 634.630843][T11487] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.649492][T11487] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.687136][T11487] device bridge_slave_0 entered promiscuous mode [ 634.717071][T11487] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.739511][T11487] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.767242][T11487] device bridge_slave_1 entered promiscuous mode [ 634.829443][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 634.858884][T11487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.899012][T11487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.036537][T11487] team0: Port device team_slave_0 added [ 635.083894][T11487] team0: Port device team_slave_1 added [ 635.181801][T11487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.209210][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.236255][T10499] Bluetooth: hci2: command 0x0409 tx timeout [ 635.388058][T11487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.417352][T11487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.429545][T11487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.506560][T11487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.662429][T11487] device hsr_slave_0 entered promiscuous mode [ 635.679885][T11487] device hsr_slave_1 entered promiscuous mode [ 635.848986][T11487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.879234][T11487] Cannot create hsr debugfs directory [ 635.879436][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 635.969488][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1829'. [ 636.173615][ T52] block nbd7: Attempted send on invalid socket [ 636.180006][ T52] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 636.197864][T11524] XFS (nbd7): SB validate failed with error -5. [ 636.909449][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 637.309640][T10499] Bluetooth: hci2: command 0x041b tx timeout [ 637.762204][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1843'. [ 637.949482][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 638.540837][T11487] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 638.552696][T11487] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 638.581552][T11487] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 638.612638][T11487] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 638.798395][T11487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.836528][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 638.855770][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 638.874814][T11487] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.913547][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 638.931206][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 638.960440][T10415] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.967633][T10415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.999431][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 639.007273][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 639.027481][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 639.060751][T10415] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.067947][T10415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.111677][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 639.154594][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 639.199539][ T4525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 639.225297][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 639.262180][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 639.296586][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 639.323733][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 639.343542][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 639.369833][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 639.387472][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 639.397132][T10499] Bluetooth: hci2: command 0x040f tx timeout [ 639.424116][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 639.452964][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 640.040390][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 640.207103][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 640.236181][T10415] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 640.333622][T11487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.069435][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 641.544477][T10499] Bluetooth: hci2: command 0x0419 tx timeout [ 641.576212][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 641.625889][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 642.037685][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 642.050394][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 642.069863][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 642.090073][T10408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 642.108074][T11487] device veth0_vlan entered promiscuous mode [ 642.114331][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 642.190712][T11487] device veth1_vlan entered promiscuous mode [ 642.283706][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 642.301654][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 642.320479][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 642.342117][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 642.363848][T11487] device veth0_macvtap entered promiscuous mode [ 642.384761][T11487] device veth1_macvtap entered promiscuous mode [ 643.147966][T11487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.159493][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 643.610284][T11487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.660538][T11487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.688328][T11487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.729372][T11487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.771301][T11487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.810442][T11487] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.850451][T11487] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.880216][T11487] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.909810][T11487] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.142498][T10423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.180090][T10423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.362910][T10423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.377071][T10423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.389620][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 644.759779][T10405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 644.768200][T10405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 644.810719][T10405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 644.852802][T10405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 644.910559][T10405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 644.920169][T10405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 644.929193][T10405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 644.959461][T10405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 645.132400][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1854'. [ 645.469842][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 646.509426][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 647.549469][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 648.562399][T11611] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 648.570174][T11611] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 648.599178][T11611] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 648.606548][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 648.678155][T11611] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 648.712439][T11611] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 648.758385][T11611] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 648.786614][T11611] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 648.806641][T11611] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 648.825307][T11611] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 649.153990][T11628] fuse: Unknown parameter '0x0000000000000003' [ 649.179087][ T4299] Process accounting resumed [ 649.469537][T10499] Bluetooth: hci0: command 0x0c1a tx timeout [ 649.609433][T11636] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 649.619814][T11634] IPVS: stopping backup sync thread 11636 ... [ 649.629496][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 650.669531][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 650.761400][T10499] Bluetooth: hci1: command 0x0c1a tx timeout [ 650.830012][T10499] Bluetooth: hci2: command 0x0c1a tx timeout [ 650.858659][T10499] Bluetooth: unknown link type 108 [ 651.550707][T10499] Bluetooth: hci0: command 0x0406 tx timeout [ 651.719556][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 652.694265][T11675] fuse: Unknown parameter '0x0000000000000003' [ 652.717007][ T4299] Process accounting resumed [ 652.749612][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 652.830823][T10499] Bluetooth: hci1: command 0x0406 tx timeout [ 652.909700][T10499] Bluetooth: hci2: command 0x0406 tx timeout [ 653.789639][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 654.829429][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 654.909458][T10499] Bluetooth: hci1: command 0x0409 tx timeout [ 655.364855][T11703] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 655.374324][T11698] IPVS: stopping backup sync thread 11703 ... [ 655.869483][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 656.909454][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 657.248309][T11721] fuse: Unknown parameter '0x0000000000000003' [ 657.266356][ T4299] Process accounting resumed [ 657.949896][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 658.283755][T11744] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 658.920681][T11762] fuse: Unknown parameter '0x0000000000000003' [ 658.940782][ T4299] Process accounting resumed [ 658.989453][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 659.112715][T11747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 659.269153][T11773] device bridge0 entered promiscuous mode [ 659.290776][T11773] bridge0: port 1(macsec1) entered blocking state [ 659.331814][T11773] bridge0: port 1(macsec1) entered disabled state [ 659.458076][T11773] device bridge0 left promiscuous mode [ 659.899978][ T4299] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 660.029446][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 660.181298][ T4299] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 661.764503][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 661.783335][ T4299] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.904605][ T4299] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 661.915778][T11785] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 661.924719][T11785] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 662.078606][ T4299] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.089521][T11785] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 662.117821][T11785] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 662.124829][ T4299] usb 7-1: config 0 descriptor?? [ 662.130063][T11785] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 662.136322][T11785] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 662.159777][T11785] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 662.241874][T11785] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 662.248234][T11785] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 662.579645][ T4299] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 662.595309][ T4299] hid-thrustmaster 0003:044F:B65D.0008: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 662.607685][ T4299] hid-thrustmaster 0003:044F:B65D.0008: Wrong number of endpoints? [ 662.666353][T11800] fuse: Unknown parameter 'fd0x0000000000000003' [ 662.688083][ T4297] Process accounting resumed [ 662.794417][ C1] hid-thrustmaster 0003:044F:B65D.0008: URB to get model id failed with error -71 [ 662.804103][ T14] usb 7-1: USB disconnect, device number 16 [ 662.829474][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 663.869491][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 664.009502][T10499] Bluetooth: hci0: command 0x0c1a tx timeout [ 664.189715][ T4263] Bluetooth: hci2: command 0x0c1a tx timeout [ 664.268257][ T4263] Bluetooth: hci1: command 0x0c1a tx timeout [ 664.776971][T11806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 664.909534][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 664.950432][ T1076] block nbd8: Attempted send on invalid socket [ 664.956634][ T1076] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 664.966358][T11837] XFS (nbd8): SB validate failed with error -5. [ 664.978611][T11830] lo speed is unknown, defaulting to 1000 [ 665.949479][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 666.349527][T10499] Bluetooth: hci1: command 0x0406 tx timeout [ 666.349958][ T4263] Bluetooth: hci2: command 0x0406 tx timeout [ 666.363349][T11849] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 666.390040][T11849] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 666.396824][T11849] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 666.579588][T11849] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 666.599898][T11849] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 666.674247][T11851] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1922'. [ 666.989505][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 667.160096][T11849] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 667.190642][T11849] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 667.226602][T11849] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 667.259250][T11849] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 667.300021][T11855] fuse: Unknown parameter 'fd0x0000000000000003' [ 667.309908][ T4299] Process accounting resumed [ 667.789391][T10499] Bluetooth: hci0: command 0x0c1a tx timeout [ 668.029478][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 668.255686][T10499] Bluetooth: unknown link type 108 [ 668.589452][T10499] Bluetooth: hci1: command 0x0c1a tx timeout [ 669.069436][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 669.259406][T10499] Bluetooth: hci2: command 0x0c1a tx timeout [ 670.110461][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 671.149520][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 671.309524][T10499] Bluetooth: hci2: command 0x0406 tx timeout [ 672.189520][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 673.229495][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 673.389416][T10499] Bluetooth: hci2: command 0x0409 tx timeout [ 673.709390][T11883] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 674.269562][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 675.309489][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 676.349500][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 677.389501][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 678.429782][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 679.469538][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 680.509513][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 681.549526][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 682.589529][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 683.629592][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 684.669531][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 685.709581][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 686.749579][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 687.789518][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 688.829534][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 689.869530][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 690.909592][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 691.949554][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 692.989589][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 694.029570][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 695.069946][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 696.109554][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 697.149580][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 698.189502][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 699.229536][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 700.269538][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 701.309554][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 702.349506][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 703.389770][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 704.429510][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 705.469557][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 706.509594][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 707.549645][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 708.589535][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 709.629508][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 710.669590][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 711.710434][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 712.749552][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 713.789558][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 714.829563][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 715.869497][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 716.909521][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 717.949526][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 718.989709][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 720.029509][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 721.069509][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 722.109553][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 723.149513][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 724.189537][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 725.229549][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 726.269500][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 727.309565][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 728.349549][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 729.389481][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 730.429500][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 731.469537][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 732.509550][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 733.549493][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 734.589509][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 735.629532][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 736.669490][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 737.709494][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 738.749504][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 739.789674][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 740.829497][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 741.869522][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 742.909480][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 743.949539][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 744.989496][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 746.029509][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 747.069496][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 748.109488][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 749.149519][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 750.189539][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 751.229497][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 752.269467][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 753.309629][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 754.349510][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 755.389539][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 756.429538][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 757.469488][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 758.509494][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 759.549497][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 760.589553][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 761.629575][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 762.669463][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 763.709499][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 764.749487][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 765.789522][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 766.829471][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 767.869473][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 768.909465][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 769.949582][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 770.989466][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 772.029540][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 773.069555][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 773.779269][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 773.786285][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11882/2:b..l [ 773.795255][ C1] (detected by 1, t=10502 jiffies, g=66965, q=351 ncpus=2) [ 773.802596][ C1] task:syz.0.1935 state:R running task stack:25864 pid:11882 ppid:4258 flags:0x00004000 [ 773.814970][ C1] Call Trace: [ 773.818283][ C1] [ 773.821256][ C1] __schedule+0x143f/0x4570 [ 773.825942][ C1] ? release_firmware_map_entry+0x18b/0x18b [ 773.831985][ C1] ? print_irqtrace_events+0x210/0x210 [ 773.837590][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 773.843012][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 773.848169][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 773.853946][ C1] irqentry_exit+0x53/0x80 [ 773.858581][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 773.864695][ C1] RIP: 0010:lock_acquire+0x1/0x5a0 [ 773.869853][ C1] Code: fd ff ff 48 c7 c7 78 f0 a0 8e e8 0a 57 77 00 e9 a2 fd ff ff 0f 1f 44 00 00 65 8b 05 c1 ba 97 7e a9 00 ff ff 00 0f 95 c0 c3 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 20 01 00 [ 773.889863][ C1] RSP: 0018:ffffc90004a8f880 EFLAGS: 00000246 [ 773.895974][ C1] RAX: 0000000000000002 RBX: ffff888076ff2010 RCX: 0000000000000002 [ 773.904161][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d32e740 [ 773.912163][ C1] RBP: 1ffff11004a3a332 R08: 0000000000000000 R09: 0000000000000000 [ 773.920199][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880251d1990 [ 773.928199][ C1] R13: dffffc0000000000 R14: ffffffff81e9d224 R15: ffff888076ff2000 [ 773.936304][ C1] ? percpu_ref_tryget+0x14/0x170 [ 773.941520][ C1] percpu_ref_tryget+0x31/0x170 [ 773.946521][ C1] ? percpu_ref_tryget+0x14/0x170 [ 773.951693][ C1] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 773.957487][ C1] get_mem_cgroup_from_objcg+0xc8/0x150 [ 773.963096][ C1] __memcg_kmem_charge_page+0x233/0x3b0 [ 773.968695][ C1] memcg_charge_kernel_stack+0x2e1/0x710 [ 773.974471][ C1] dup_task_struct+0x15b/0x6d0 [ 773.979477][ C1] copy_process+0x637/0x40a0 [ 773.984125][ C1] ? __might_fault+0xa1/0x110 [ 773.988888][ C1] ? idle_dummy+0x10/0x10 [ 773.993342][ C1] ? __might_fault+0xbd/0x110 [ 773.998075][ C1] kernel_clone+0x222/0x920 [ 774.002615][ C1] ? create_io_thread+0x1a0/0x1a0 [ 774.007690][ C1] __se_sys_clone3+0x3eb/0x440 [ 774.012490][ C1] ? __x64_sys_clone3+0x60/0x60 [ 774.017477][ C1] ? __set_current_blocked+0x2a5/0x2f0 [ 774.023043][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 774.029220][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 774.034571][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 774.040643][ C1] do_syscall_64+0x3b/0xb0 [ 774.045097][ C1] ? clear_bhb_loop+0x45/0xa0 [ 774.049812][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 774.055741][ C1] RIP: 0033:0x7fb34b1c19c9 [ 774.060196][ C1] RSP: 002b:00007ffde60a78b8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 774.068642][ C1] RAX: ffffffffffffffda RBX: 00007fb34b143dd0 RCX: 00007fb34b1c19c9 [ 774.076651][ C1] RDX: 00007fb34b143dd0 RSI: 0000000000000058 RDI: 00007ffde60a7900 [ 774.084753][ C1] RBP: 00007fb34c04c6c0 R08: 00007fb34c04c6c0 R09: 00007ffde60a79e7 [ 774.092762][ C1] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffa8 [ 774.100759][ C1] R13: 000000000000006e R14: 00007ffde60a7900 R15: 00007ffde60a79e8 [ 774.108780][ C1] [ 774.111914][ C1] rcu: rcu_preempt kthread starved for 9060 jiffies! g66965 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 774.123067][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 774.133155][ C1] rcu: RCU grace-period kthread stack dump: [ 774.139067][ C1] task:rcu_preempt state:R running task stack:26712 pid:16 ppid:2 flags:0x00004000 [ 774.149943][ C1] Call Trace: [ 774.153265][ C1] [ 774.156250][ C1] __schedule+0x143f/0x4570 [ 774.160836][ C1] ? _raw_spin_unlock+0x40/0x40 [ 774.165760][ C1] ? release_firmware_map_entry+0x18b/0x18b [ 774.171743][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 774.177270][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 774.183745][ C1] ? _raw_spin_unlock+0x40/0x40 [ 774.188659][ C1] schedule+0xbf/0x180 [ 774.192972][ C1] schedule_timeout+0x1b9/0x300 [ 774.197995][ C1] ? console_conditional_schedule+0x40/0x40 [ 774.203926][ C1] ? update_process_times+0x1b0/0x1b0 [ 774.209352][ C1] ? prepare_to_swait_event+0x329/0x350 [ 774.215063][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 774.220789][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 774.227221][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 774.232497][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 774.237365][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 774.244114][ C1] ? finish_swait+0xcf/0x1e0 [ 774.248794][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 774.253918][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 774.259078][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 774.265040][ C1] ? __kthread_parkme+0x168/0x1c0 [ 774.270246][ C1] kthread+0x28d/0x320 [ 774.274387][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 774.279599][ C1] ? kthread_blkcg+0xd0/0xd0 [ 774.284540][ C1] ret_from_fork+0x1f/0x30 [ 774.289023][ C1] [ 774.292069][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 774.298600][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.133-syzkaller #0 [ 774.306346][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 774.316627][ C1] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 774.323014][ C1] Code: a8 ce f6 48 83 e3 08 0f 85 0b 01 00 00 4c 8d 74 24 20 e8 44 65 d5 f6 0f 1f 44 00 00 e8 6a a4 ce f6 0f 00 2d f3 b5 ad 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 0b 06 26 f7 [ 774.342944][ C1] RSP: 0018:ffffc90000177b80 EFLAGS: 000002d3 [ 774.349249][ C1] RAX: ffffffff8abc05e6 RBX: 0000000000000000 RCX: ffff888018c09dc0 [ 774.357252][ C1] RDX: 0000000000000000 RSI: ffffffff8b0c1dc0 RDI: ffffffff8b5f70e0 [ 774.365439][ C1] RBP: ffffc90000177c10 R08: ffffffff8abc05c8 R09: ffffed10031813b9 [ 774.373473][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200002ef70 [ 774.381485][ C1] R13: ffff88801b36b804 R14: ffffc90000177ba0 R15: dffffc0000000000 [ 774.389538][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 774.398626][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.405242][ C1] CR2: 00007f49fad12866 CR3: 000000001df9e000 CR4: 00000000003506e0 [ 774.413260][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 774.421381][ C1] DR3: 000000000346000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 774.429469][ C1] Call Trace: [ 774.432799][ C1] [ 774.435704][ C1] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 774.442085][ C1] ? print_other_cpu_stall+0x150c/0x1640 [ 774.447809][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 774.452806][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 774.457968][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 774.463226][ C1] ? rcu_sched_clock_irq+0xaf6/0x1200 [ 774.468768][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 774.473664][ C1] ? hrtimer_run_queues+0x163/0x450 [ 774.478933][ C1] ? update_process_times+0x147/0x1b0 [ 774.484397][ C1] ? tick_sched_timer+0x386/0x550 [ 774.490098][ C1] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 774.495711][ C1] ? __hrtimer_run_queues+0x5a7/0xe50 [ 774.501255][ C1] ? hrtimer_interrupt+0x980/0x980 [ 774.506415][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 774.512590][ C1] ? hrtimer_interrupt+0x392/0x980 [ 774.517782][ C1] ? __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 774.523984][ C1] ? sysvec_apic_timer_interrupt+0x9b/0xc0 [ 774.529862][ C1] [ 774.532816][ C1] [ 774.535784][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 774.542078][ C1] ? acpi_idle_do_entry+0xe8/0x340 [ 774.547330][ C1] ? acpi_idle_do_entry+0x106/0x340 [ 774.552564][ C1] ? acpi_idle_do_entry+0x10f/0x340 [ 774.557880][ C1] ? acpi_idle_enter_bm+0x5e0/0x5e0 [ 774.563218][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 774.569282][ C1] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 774.574982][ C1] acpi_idle_enter+0x352/0x4f0 [ 774.579794][ C1] cpuidle_enter_state+0x516/0xf80 [ 774.585053][ C1] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 774.590496][ C1] ? menu_enable_device+0x380/0x380 [ 774.595746][ C1] cpuidle_enter+0x59/0x90 [ 774.600231][ C1] do_idle+0x3ce/0x680 [ 774.604366][ C1] ? print_irqtrace_events+0x210/0x210 [ 774.609901][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 774.615514][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 774.621317][ C1] ? asm_sysvec_error_interrupt+0x10/0x20 [ 774.627097][ C1] ? schedule_idle+0x57/0x90 [ 774.631739][ C1] cpu_startup_entry+0x3d/0x60 [ 774.636583][ C1] start_secondary+0xe4/0xf0 [ 774.641235][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 774.647185][ C1] [ 774.651341][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 775.709494][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 776.749503][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 777.789514][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 778.829501][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 779.869509][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 780.909481][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 781.949493][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 782.989481][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available