last executing test programs: 23m10.252463423s ago: executing program 32 (id=333): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)) 23m6.522203176s ago: executing program 33 (id=342): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x400000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x4, 0x3, 0x0, 0x0, 0x7, 0x6], 0x0, 0x2e1090}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x4}, 0xa}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r0, 0x0, 0x40020) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fsopen(&(0x7f0000000200)='fusectl\x00', 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23m6.470407797s ago: executing program 34 (id=344): mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe8d, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000640)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 23m5.024624313s ago: executing program 35 (id=349): r0 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x600, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80086408, &(0x7f0000000180)={0xac4, 0x0}) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r1, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x1000)=nil], &(0x7f0000001180), &(0x7f0000000000)=[0x0], 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0300ffff0000", 0x6}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0xb) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r7, 0x7323, 0x0, 0x5, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=@deltaction={0x168, 0x31, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5a2}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf088}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x48000}, 0x88) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r12, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) move_pages(0xffffffffffffffff, 0x1, &(0x7f0000000080)=[&(0x7f0000ff8000/0x2000)=nil], &(0x7f00000000c0)=[0x7], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 23m1.349733689s ago: executing program 36 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)) 22m55.121132345s ago: executing program 37 (id=362): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 22m52.18426223s ago: executing program 38 (id=372): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockname$ax25(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x80002, 0x88) syz_emit_ethernet(0x83, 0x0, 0x0) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r7, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3e}}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000805) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 22m52.01152384s ago: executing program 39 (id=374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x8000001, 0x0, 0x100000000000, 0xfffffffffffffffd}, {0x0, 0x2, 0x2}, 0x0, 0x0, 0xa, 0x4, 0xb, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000440)) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x89901) umount2(&(0x7f0000000400)='./file1\x00', 0xc) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x1000, 0x1) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 22m43.943980012s ago: executing program 40 (id=384): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x8000001, 0x0, 0x100000000000, 0xfffffffffffffffd}, {0x0, 0x2, 0x2}, 0x0, 0x0, 0xa, 0x4, 0xb, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000440)) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x89901) umount2(&(0x7f0000000400)='./file1\x00', 0xc) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x1000, 0x1) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 22m41.667380262s ago: executing program 41 (id=389): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)) 22m35.612154871s ago: executing program 42 (id=403): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x8000001, 0x0, 0x100000000000, 0xfffffffffffffffd}, {0x0, 0x2, 0x2}, 0x0, 0x0, 0xa, 0x4, 0xb, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000440)) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x89901) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x1000, 0x1) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 22m35.571216636s ago: executing program 43 (id=405): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xbe) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)) 22m28.783546939s ago: executing program 44 (id=410): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_get$pid(0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x7, 0x0, 0x34324142, 0x2, 0x9, 0x1, 0x5, 0x8, 0x0, 0x2, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x7) rseq(&(0x7f0000001780)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x104) clock_settime(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f00000003c0)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1a9d42, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="fd946c8a0940fd7f59203003000000030c7b"], &(0x7f00000013c0)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "f1c213c12843555d89e741c2f0338928bc87d80294e6b70ba08dbded1da994403415b35627d86c325e3651a69050d9a4342b2d51daf330b46c852d3ae3da6cf831ab2f11301783395f48fdc8cf5989d98ac189f837ec5e3bd7ffde6bdaa023c626ca6491ac1a953a5c2eb5573df536a62b3ae6d8804b2dbaaf338388f4bff5cb7dec12e60714f52a5919ce6deea4201d188aadef2267db9546013b1ed8d4220a0624429d314aa35f7c8387bf29fce183027428250cb3dfe721e5714a7a"}}, &(0x7f0000000280)={0x0, 0x22, 0x9, {[@global=@item_4={0x3, 0x1, 0x20fe8b7473fccccf}, @global=@item_012={0x0, 0x1, 0x3}, @global=@item_012={0x0, 0x1, 0x7}, @local=@item_012={0x1, 0x2, 0x2, "bc"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x40, 0x1, {0x22, 0x103}}}}, &(0x7f0000001740)={0x18, &(0x7f00000014c0)={0x0, 0x1, 0xac, "e309f5632bb41ab2c2b1a777bf3dbc0a22e531941cbbdac734ef4b7d632debc20d853405f24bc140cd101aece17fc3970c024530143557ce3f46859aa7f46d159bfa6763bd7c011e8cc2ef4bd4b34fb15e50329546a684bc2661a5bede19cf3e5ccbd4bc11531ce9d21fc398ef122730de7087bc9d5e5381b89cc29841b3e99b1be2f40b2eba31de4886ecf544b585ededa455f2f829c354bec3b9b15d2acbc25bb2bc9625ea42121657230e"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x9}, 0x0, &(0x7f0000001600), &(0x7f0000001700)={0x20, 0x3, 0x1, 0x40}}) 22m26.264644483s ago: executing program 45 (id=415): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 22m19.373733349s ago: executing program 46 (id=428): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xbe) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)) 22m18.520024063s ago: executing program 47 (id=433): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockname$ax25(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x80002, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r7, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3e}}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000805) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 22m17.760315547s ago: executing program 48 (id=438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x8000001, 0x0, 0x100000000000, 0xfffffffffffffffd}, {0x0, 0x2, 0x2}, 0x0, 0x0, 0xa, 0x4, 0xb, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000440)) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x89901) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x1000, 0x1) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 21m59.481925076s ago: executing program 49 (id=473): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 21m57.515049509s ago: executing program 50 (id=483): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x8000001, 0x0, 0x100000000000, 0xfffffffffffffffd}, {0x0, 0x2, 0x2}, 0x0, 0x0, 0xa, 0x4, 0xb, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 21m55.781692625s ago: executing program 51 (id=489): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 21m50.383172285s ago: executing program 52 (id=497): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xbe) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)) 21m49.106677601s ago: executing program 53 (id=503): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x8000001, 0x0, 0x100000000000, 0xfffffffffffffffd}, {0x0, 0x2, 0x2}, 0x0, 0x0, 0xa, 0x4, 0xb, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000440)) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x89901) umount2(&(0x7f0000000400)='./file1\x00', 0xc) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x1000, 0x1) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 21m47.178000599s ago: executing program 54 (id=508): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)="84c64eee82351c549e64fed6a325dd8696e95fb4a40b67873a9604c904696be4024b948cb2fe35e8de8e55fc9681546e1b3c6850d25a1d636db92b0ea41bbf27513c92ae7650c3bcfafb25ffdbe1893cd93704b6b9f50bafa6b1a2c26ae2e8a7709973df7f26630ca72e7ac368", 0x6d, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200)="8a8af8", 0x3, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @sack_perm, @window={0x3, 0x4008, 0x6}, @timestamp, @mss={0x2, 0x2}, @window={0x3, 0x8, 0xb6a7}], 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3e, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f0000000380)="c75f16175bb69c4013d0479f629c0ba46ff8ac8dc98098b878545ed70bb5bc1bacf36b28b91a23b1365fa8e67059f7c1fc1ade5eb855207f7066f96bdafb14234e8d9afeee1f3fd22e4b4fe5a61f4afde21805ae5206b87bb22d882df14583a3e6616fce86827ba486d004155a4450ce7bc978b14dadd17103787da46b699548"}}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) 21m41.416080372s ago: executing program 55 (id=517): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 21m41.321601537s ago: executing program 56 (id=519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x8000001, 0x0, 0x100000000000, 0xfffffffffffffffd}, {0x0, 0x2, 0x2}, 0x0, 0x0, 0xa, 0x4, 0xb, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000440)) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x89901) umount2(&(0x7f0000000400)='./file1\x00', 0xc) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x1000, 0x1) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 21m40.080323115s ago: executing program 57 (id=521): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 21m30.507450654s ago: executing program 58 (id=540): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 21m30.424911466s ago: executing program 59 (id=543): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x80002, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000805) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 21m29.775795904s ago: executing program 60 (id=545): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockname$ax25(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x80002, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x4c, r7, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000805) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 21m29.336683879s ago: executing program 61 (id=548): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 21m21.576645095s ago: executing program 62 (id=553): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) getsockname$ax25(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x80002, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000805) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 21m17.248099072s ago: executing program 63 (id=562): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x8000001, 0x0, 0x100000000000, 0xfffffffffffffffd}, {0x0, 0x2, 0x2}, 0x0, 0x0, 0xa, 0x4, 0xb, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000440)) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x89901) umount2(&(0x7f0000000400)='./file1\x00', 0xc) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x1000, 0x1) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 21m16.11148642s ago: executing program 64 (id=567): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x7) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x80002, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x4c, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000805) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 21m11.227040212s ago: executing program 65 (id=577): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioperm(0x6, 0x3, 0x8) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) gettid() rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) epoll_pwait2(r2, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000200), &(0x7f0000000280)={[0x3, 0x9]}, 0x8) lstat(&(0x7f0000007cc0)='./file0\x00', &(0x7f0000007d00)) setreuid(0xffffffffffffffff, 0xee00) keyctl$clear(0x7, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x0, 0x2, [0x200, 0x5]}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000440)={r3, 0xa0, &(0x7f0000000380)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x203, @empty, 0xd0000}, @in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff8}, @in6={0xa, 0x4e23, 0x7, @local, 0x800}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x7, @local, 0xa3}, @in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f0000000480)=0xc) read$FUSE(r1, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000) 21m0.200772957s ago: executing program 66 (id=604): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 20m59.423522539s ago: executing program 67 (id=610): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 20m56.589377644s ago: executing program 68 (id=618): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 20m55.420925724s ago: executing program 69 (id=622): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 20m46.827280845s ago: executing program 70 (id=631): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac14140000"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 20m38.392103367s ago: executing program 71 (id=656): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 20m37.698511965s ago: executing program 72 (id=660): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 20m35.590016501s ago: executing program 73 (id=667): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 20m35.531784918s ago: executing program 74 (id=669): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb0300050000000000"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 20m31.596367315s ago: executing program 75 (id=671): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb0300050000"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 20m13.597241705s ago: executing program 76 (id=703): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 20m7.866453045s ago: executing program 77 (id=721): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 20m7.841877272s ago: executing program 78 (id=722): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 20m6.856334082s ago: executing program 79 (id=727): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) mkdirat(r1, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000480)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 19m58.234972976s ago: executing program 80 (id=735): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 19m48.335562243s ago: executing program 81 (id=758): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 19m38.800356983s ago: executing program 8 (id=778): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 19m38.122392596s ago: executing program 82 (id=778): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 19m18.798995532s ago: executing program 83 (id=809): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 19m10.986373818s ago: executing program 0 (id=827): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x8000001, 0x0, 0x100000000000, 0xfffffffffffffffd}, {0x0, 0x2, 0x2}, 0x0, 0x0, 0xa, 0x4, 0xb, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000440)) mount$fuse(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x89901) umount2(&(0x7f0000000400)='./file1\x00', 0xc) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x1000, 0x1) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 19m10.895715124s ago: executing program 0 (id=828): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 19m10.590621604s ago: executing program 0 (id=829): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[@rights={{0xc}}], 0xc, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 19m10.404942184s ago: executing program 84 (id=829): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[@rights={{0xc}}], 0xc, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 18m59.461749072s ago: executing program 85 (id=848): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) ioperm(0x6, 0x3, 0x8) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = gettid() rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r3, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) tkill(r2, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) epoll_pwait2(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000200), &(0x7f0000000280)={[0x3, 0x9]}, 0x8) lstat(&(0x7f0000007cc0)='./file0\x00', &(0x7f0000007d00)) setreuid(0xffffffffffffffff, 0xee00) keyctl$clear(0x7, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x0, 0x1, [0x200]}, &(0x7f0000000340)=0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000440)={r4, 0xa0, &(0x7f0000000380)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e24, 0x203, @empty, 0xd0000}, @in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff8}, @in6={0xa, 0x4e23, 0x7, @local, 0x800}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e24, 0x7, @local, 0xa3}, @in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f0000000480)=0xc) read$FUSE(r1, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000) 18m56.788255061s ago: executing program 86 (id=859): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m49.838368103s ago: executing program 87 (id=872): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m48.169535119s ago: executing program 88 (id=876): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff94906"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m38.037297971s ago: executing program 8 (id=877): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff94906"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m36.569825015s ago: executing program 8 (id=899): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m34.817345381s ago: executing program 8 (id=904): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x8000001, 0x0, 0x100000000000, 0xfffffffffffffffd}, {0x0, 0x2, 0x2}, 0x0, 0x0, 0xa, 0x4, 0xb, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000440)) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x89901) umount2(0x0, 0xc) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x1000, 0x1) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 18m34.461808931s ago: executing program 8 (id=905): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m33.770830337s ago: executing program 8 (id=908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x8000001, 0x0, 0x100000000000, 0xfffffffffffffffd}, {0x0, 0x2, 0x2}, 0x0, 0x0, 0xa, 0x4, 0xb, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000440)) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) umount2(&(0x7f0000000400)='./file1\x00', 0xc) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x1000, 0x1) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 18m33.727754586s ago: executing program 89 (id=908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x8000001, 0x0, 0x100000000000, 0xfffffffffffffffd}, {0x0, 0x2, 0x2}, 0x0, 0x0, 0xa, 0x4, 0xb, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000440)) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) umount2(&(0x7f0000000400)='./file1\x00', 0xc) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x1000, 0x1) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 18m30.292911721s ago: executing program 1 (id=918): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, 0x0, 0x40) 18m28.728152897s ago: executing program 1 (id=919): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m27.719889676s ago: executing program 1 (id=921): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m26.544225134s ago: executing program 1 (id=924): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x8000001, 0x0, 0x100000000000, 0xfffffffffffffffd}, {0x0, 0x2, 0x2}, 0x0, 0x0, 0xa, 0x4, 0xb, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000440)) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x89901) umount2(&(0x7f0000000400)='./file1\x00', 0xc) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x1000, 0x1) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 18m26.369873047s ago: executing program 1 (id=925): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 18m26.058091065s ago: executing program 1 (id=927): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m25.898858094s ago: executing program 90 (id=927): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m19.309748964s ago: executing program 0 (id=928): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x8000001, 0x0, 0x100000000000, 0xfffffffffffffffd}, {0x0, 0x2, 0x2}, 0x0, 0x0, 0xa, 0x4, 0xb, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000440)) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x89901) umount2(&(0x7f0000000400)='./file1\x00', 0xc) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x1000, 0x1) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x4005, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 18m19.121952306s ago: executing program 0 (id=941): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m16.664913952s ago: executing program 5 (id=947): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 18m15.42028113s ago: executing program 0 (id=949): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m15.185555255s ago: executing program 91 (id=949): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m15.16266003s ago: executing program 5 (id=951): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) ioctl$sock_SIOCGPGRP(r7, 0x8904, 0x0) 18m15.078625921s ago: executing program 3 (id=952): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m13.460083318s ago: executing program 5 (id=956): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f000100", 0x22) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m13.451705309s ago: executing program 3 (id=957): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m12.274633915s ago: executing program 3 (id=958): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m12.211979308s ago: executing program 5 (id=959): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x8000001, 0x0, 0x100000000000, 0xfffffffffffffffd}, {0x0, 0x2, 0x2}, 0x0, 0x0, 0xa, 0x4, 0xb, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000440)) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x89901) umount2(&(0x7f0000000400)='./file1\x00', 0xc) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x1000, 0x1) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 18m12.047266056s ago: executing program 5 (id=961): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f00010000", 0x23) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m11.662035538s ago: executing program 5 (id=962): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m11.549093318s ago: executing program 92 (id=962): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m11.175145639s ago: executing program 3 (id=965): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x8000001, 0x0, 0x100000000000, 0xfffffffffffffffd}, {0x0, 0x2, 0x2}, 0x0, 0x0, 0xa, 0x4, 0xb, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000440)) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x89901) umount2(&(0x7f0000000400)='./file1\x00', 0xc) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x1000, 0x1) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x4005, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 18m11.086600671s ago: executing program 3 (id=966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=[@rights={{0x10}}], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39011, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x2400c100}, 0x40) 18m10.790235439s ago: executing program 3 (id=967): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f00", 0x20) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 18m10.655415922s ago: executing program 93 (id=967): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f00", 0x20) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)) 7m27.456862689s ago: executing program 6 (id=2913): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r4, 0x0, 0x1}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 7m25.729945014s ago: executing program 6 (id=2919): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x3f2e}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000000)={0x292e}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/25], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) finit_module(0xffffffffffffffff, 0x0, 0x3) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(0xfffffffffffffffe, 0xfffffffffffffecd, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(&(0x7f0000000000)='./file0\x00') sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e59", @ANYRES64=0x0, @ANYBLOB="09b1e2ed34e71534741006a4ca3cc736af9a280ec272989184e6260f0c8c6c9dfbe1ac8f5d4c5dd3b5d1e248cc1e3ee0062eaeff36a0947d10f1f2437e4d9720c6ab4a921e7f01fce0bf8d0504c751bc9c34906755e152027616079ab09cc839bb019b68e0ec8fc828a9366602387f9dc92d13875b19"], 0x40}}, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) process_madvise(r7, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x5c}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920", 0x7d}, {0x0}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e", 0xd0}], 0x6, 0x9, 0x0) 7m24.487847252s ago: executing program 6 (id=2924): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_setup(0x82, &(0x7f0000000180)=0x0) r3 = open(0x0, 0x14507e, 0x0) io_submit(r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000100)={'\x00', 0xa, 0x6, 0xfffffffe, 0x9, 0x1ff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, 0x0, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9b, 0xa, 0x80, '\x00', 0x3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m23.513633935s ago: executing program 6 (id=2927): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x8000001, 0x0, 0x100000000000, 0xfffffffffffffffd}, {0x0, 0x2, 0x2}, 0x0, 0x0, 0xa, 0x4, 0xb, 0x40}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x134}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000440)) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000400)='./file1\x00', 0xc) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x1000, 0x1) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) 7m23.428308948s ago: executing program 6 (id=2929): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_setup(0x82, &(0x7f0000000180)=0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000340)='p', 0x300}]) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000100)={'\x00', 0xa, 0x6, 0xfffffffe, 0x9, 0x1ff, 0xffffffffffffffff}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0xf}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, 0x0, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9b, 0xa, 0x80, '\x00', 0x3}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 7m23.123631991s ago: executing program 6 (id=2930): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_setup(0x82, &(0x7f0000000180)=0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000340)='p', 0x300}]) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000100)={'\x00', 0xa, 0x6, 0xfffffffe, 0x9, 0x1ff, 0xffffffffffffffff}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0xf}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, 0x0, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9b, 0xa, 0x80, '\x00', 0x3}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 7m22.909758071s ago: executing program 94 (id=2930): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) io_setup(0x82, &(0x7f0000000180)=0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000340)='p', 0x300}]) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000100)={'\x00', 0xa, 0x6, 0xfffffffe, 0x9, 0x1ff, 0xffffffffffffffff}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r6, {0xf}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x68, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, 0x0, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9b, 0xa, 0x80, '\x00', 0x3}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 9.836385172s ago: executing program 7 (id=4158): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf251900005f338895357ecaa9e789240008000300ef0654e7f137d09422e834120ed68b6f74eadad4f724b7839fa1e25f8ee1c5f69f50af6c1b8805df795d2ebdf81309a30a12fbd8cbe53eafc2e6d0c27618944dc0ee417305516d763981a2bbc66c4455499781191ebc73a4edff5999c1de2d108e244415c991c28ebe00fde884ed9af790ee97b5cb8b", @ANYRES32=r1, @ANYBLOB="06006d0004000000"], 0x24}, 0x1, 0x0, 0x0, 0x60000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, 0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r7, &(0x7f00000004c0)="01", 0x1) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@mask_fadd={0x58, 0x114, 0x8, {{0xf, 0x1}, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0x7, 0x3, 0x28, 0x5}}], 0x58}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3, 0x62}) r8 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r11, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) connect$rose(r11, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 8.725282116s ago: executing program 7 (id=4162): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r4, 0x0, 0x1}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r7, 0x289e0cb5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 7.821980468s ago: executing program 2 (id=4165): syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x2000) readv(r4, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4096, 0x1000}, {0x0, 0xe0ff}], 0x2) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x101d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) getsockopt(r5, 0x1, 0x8, 0x0, &(0x7f00000002c0)) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x2, 0x80805, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xd95f, 0x10100, 0x0, 0x242, 0x0, r6}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000cef88060102000000000000578e000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a697000"], 0x44}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002200)={'wlan0\x00'}) 6.941694835s ago: executing program 9 (id=4167): syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x2000) readv(r4, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4096, 0x1000}, {0x0, 0xe0ff}], 0x2) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x101d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) getsockopt(r5, 0x1, 0x8, 0x0, &(0x7f00000002c0)) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x2, 0x80805, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xd95f, 0x10100, 0x0, 0x242, 0x0, r6}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000cef88060102000000000000578e000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a697000"], 0x44}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002200)={'wlan0\x00'}) 6.668008602s ago: executing program 7 (id=4168): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r4, 0x0, 0x1}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r7, 0x289e0cb5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 5.112433519s ago: executing program 7 (id=4171): syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x2000) readv(r4, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4096, 0x1000}, {0x0, 0xe0ff}], 0x2) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x101d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) getsockopt(r5, 0x1, 0x8, 0x0, &(0x7f00000002c0)) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x2, 0x80805, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xd95f, 0x10100, 0x0, 0x242, 0x0, r6}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, 0x0) getcwd(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000cef88060102000000000000578e000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a697000"], 0x44}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002200)={'wlan0\x00'}) 4.679851388s ago: executing program 2 (id=4172): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf251900005f338895357ecaa9e789240008000300ef0654e7f137d09422e834120ed68b6f74eadad4f724b7839fa1e25f8ee1c5f69f50af6c1b8805df795d2ebdf81309a30a12fbd8cbe53eafc2e6d0c27618944dc0ee417305516d763981a2bbc66c4455499781191ebc73a4edff5999c1de2d108e244415c991c28ebe00fde884ed9af790ee97b5cb8b", @ANYRES32=r1, @ANYBLOB="06006d0004000000"], 0x24}, 0x1, 0x0, 0x0, 0x60000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, 0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r7, &(0x7f00000004c0)="01", 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@mask_fadd={0x58, 0x114, 0x8, {{0xf, 0x1}, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0x7, 0x3, 0x28, 0x5}}], 0x58}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3, 0x62}) r9 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r12, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) connect$rose(r12, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) sendmsg$kcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 3.86659476s ago: executing program 9 (id=4174): syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x2000) readv(r4, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4096, 0x1000}, {0x0, 0xe0ff}], 0x2) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x101d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) getsockopt(r5, 0x1, 0x8, 0x0, &(0x7f00000002c0)) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x2, 0x80805, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) getcwd(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000cef88060102000000000000578e000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a697000"], 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002200)={'wlan0\x00'}) 3.495486984s ago: executing program 2 (id=4175): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf251900005f338895357ecaa9e789240008000300ef0654e7f137d09422e834120ed68b6f74eadad4f724b7839fa1e25f8ee1c5f69f50af6c1b8805df795d2ebdf81309a30a12fbd8cbe53eafc2e6d0c27618944dc0ee417305516d763981a2bbc66c4455499781191ebc73a4edff5999c1de2d108e244415c991c28ebe00fde884ed9af790ee97b5cb8b", @ANYRES32=r1, @ANYBLOB="06006d0004000000"], 0x24}, 0x1, 0x0, 0x0, 0x60000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, 0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r7, &(0x7f00000004c0)="01", 0x1) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3, 0x62}) r9 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r12, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) connect$rose(r12, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) sendmsg$kcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 2.586019782s ago: executing program 2 (id=4177): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf251900005f338895357ecaa9e789240008000300ef0654e7f137d09422e834120ed68b6f74eadad4f724b7839fa1e25f8ee1c5f69f50af6c1b8805df795d2ebdf81309a30a12fbd8cbe53eafc2e6d0c27618944dc0ee417305516d763981a2bbc66c4455499781191ebc73a4edff5999c1de2d108e244415c991c28ebe00fde884ed9af790ee97b5cb8b", @ANYRES32=r1, @ANYBLOB="06006d0004000000"], 0x24}, 0x1, 0x0, 0x0, 0x60000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, 0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r7, &(0x7f00000004c0)="01", 0x1) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3, 0x62}) r9 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r12, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) connect$rose(r12, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) sendmsg$kcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 2.043408255s ago: executing program 7 (id=4178): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r4, 0x0, 0x1}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r7, 0x289e0cb5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.579718522s ago: executing program 2 (id=4180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000070000002800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f0000000640), &(0x7f0000000900)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.490165829s ago: executing program 2 (id=4181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x2a) 784.028313ms ago: executing program 9 (id=4182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 216.133312ms ago: executing program 7 (id=4184): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000001c0)={'bridge_slave_0\x00', @random="010000201000"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 215.403127ms ago: executing program 9 (id=4185): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 213.104172ms ago: executing program 4 (id=4186): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 150.409595ms ago: executing program 9 (id=4187): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) close(r0) 150.216387ms ago: executing program 4 (id=4188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r0, &(0x7f00000003c0), &(0x7f00000004c0)=""/135}, 0x20) 145.102943ms ago: executing program 9 (id=4189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0xffbf) 79.108216ms ago: executing program 4 (id=4190): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 78.962478ms ago: executing program 4 (id=4191): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000640)=@generic={&(0x7f00000005c0)='./file0\x00', r0}, 0x18) 186.67µs ago: executing program 4 (id=4192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) 0s ago: executing program 4 (id=4193): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): ister rx_handler [ 1374.771790][T29989] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1374.789990][T29989] netlink: 'syz.9.3704': attribute type 10 has an invalid length. [ 1374.796131][T29989] team0: Device hsr_slave_0 failed to register rx_handler [ 1374.797013][ T6041] usb 46-1: device descriptor read/8, error -110 [ 1375.438694][T30002] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1375.446334][T30002] netlink: 'syz.9.3706': attribute type 10 has an invalid length. [ 1375.450274][T30002] team0: Device hsr_slave_0 failed to register rx_handler [ 1375.737892][ T6041] usb usb46-port1: attempt power cycle [ 1376.320349][T30011] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1376.325509][T30011] netlink: 'syz.4.3708': attribute type 10 has an invalid length. [ 1376.329603][T30011] team0: Device hsr_slave_0 failed to register rx_handler [ 1376.407725][T25507] usb 52-1: device descriptor read/8, error -110 [ 1376.427890][ T6041] usb usb46-port1: unable to enumerate USB device [ 1376.911502][T25507] usb usb52-port1: attempt power cycle [ 1377.327133][T30026] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1377.329469][T30026] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1377.332267][T30026] vhci_hcd vhci_hcd.0: Device attached [ 1377.489421][T25507] usb usb52-port1: unable to enumerate USB device [ 1377.627046][T25817] usb 46-1: SetAddress Request (116) to port 0 [ 1377.629483][T25817] usb 46-1: new SuperSpeed USB device number 116 using vhci_hcd [ 1377.641835][T30027] vhci_hcd: connection closed [ 1377.642631][T20787] vhci_hcd: stop threads [ 1377.645879][T20787] vhci_hcd: release socket [ 1377.647568][T20787] vhci_hcd: disconnect device [ 1377.657024][T25817] usb 46-1: enqueue for inactive port 0 [ 1377.916997][ T8348] usb 56-1: device descriptor read/8, error -110 [ 1378.047645][T25817] usb usb46-port1: attempt power cycle [ 1378.066107][T30037] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1378.072297][T30037] netlink: 'syz.7.3711': attribute type 10 has an invalid length. [ 1378.076223][T30037] team0: Device hsr_slave_0 failed to register rx_handler [ 1378.326003][ T8348] usb usb56-port1: attempt power cycle [ 1378.386673][T30043] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1378.392729][T30043] netlink: 'syz.4.3712': attribute type 10 has an invalid length. [ 1378.396474][T30043] team0: Device hsr_slave_0 failed to register rx_handler [ 1378.727212][T25817] usb usb46-port1: unable to enumerate USB device [ 1378.957743][ T8348] usb usb56-port1: unable to enumerate USB device [ 1379.182012][T30053] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1379.187249][T30053] netlink: 'syz.4.3714': attribute type 10 has an invalid length. [ 1379.190450][T30053] team0: Device hsr_slave_0 failed to register rx_handler [ 1380.075809][T30073] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1380.092859][T30073] netlink: 'syz.4.3718': attribute type 10 has an invalid length. [ 1380.098576][T30073] team0: Device hsr_slave_0 failed to register rx_handler [ 1380.391796][T30080] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1380.398617][T30080] netlink: 'syz.7.3719': attribute type 10 has an invalid length. [ 1380.402530][T30080] team0: Device hsr_slave_0 failed to register rx_handler [ 1381.348184][T30090] netlink: 'syz.7.3721': attribute type 10 has an invalid length. [ 1381.351785][T30090] team0: Device hsr_slave_0 failed to register rx_handler [ 1382.471731][T30100] wireguard0: entered promiscuous mode [ 1382.476485][T30100] wireguard0: entered allmulticast mode [ 1383.122268][T30113] netlink: 'syz.2.3725': attribute type 10 has an invalid length. [ 1383.135903][T30113] team0: Device hsr_slave_0 failed to register rx_handler [ 1383.302532][T30120] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1383.324654][T30120] netlink: 'syz.4.3726': attribute type 10 has an invalid length. [ 1383.419566][T30123] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1383.421674][T30123] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1383.424473][T30123] vhci_hcd vhci_hcd.0: Device attached [ 1383.440395][T30120] team0: Device hsr_slave_0 failed to register rx_handler [ 1383.531716][T30128] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1383.547976][T30128] netlink: 'syz.9.3728': attribute type 10 has an invalid length. [ 1383.552336][T30128] team0: Device hsr_slave_0 failed to register rx_handler [ 1383.717200][T25507] usb 52-1: SetAddress Request (89) to port 0 [ 1383.728489][T25507] usb 52-1: new SuperSpeed USB device number 89 using vhci_hcd [ 1384.092826][T30126] vhci_hcd: connection reset by peer [ 1384.099180][ T12] vhci_hcd: stop threads [ 1384.100478][ T12] vhci_hcd: release socket [ 1384.102128][ T12] vhci_hcd: disconnect device [ 1384.393142][T30145] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1384.395909][T30145] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1384.402474][T30145] vhci_hcd vhci_hcd.0: Device attached [ 1384.453578][T30148] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1384.469957][T30148] netlink: 'syz.9.3731': attribute type 10 has an invalid length. [ 1384.476441][T30148] team0: Device hsr_slave_0 failed to register rx_handler [ 1384.736966][T25817] usb 46-1: SetAddress Request (120) to port 0 [ 1384.739586][T25817] usb 46-1: new SuperSpeed USB device number 120 using vhci_hcd [ 1384.999682][T30146] vhci_hcd: connection reset by peer [ 1385.007538][T24684] vhci_hcd: stop threads [ 1385.008922][T24684] vhci_hcd: release socket [ 1385.010407][T24684] vhci_hcd: disconnect device [ 1385.133018][T30162] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1385.135844][T30162] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1385.140488][T30162] vhci_hcd vhci_hcd.0: Device attached [ 1385.177442][T30163] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1385.181998][T30163] netlink: 'syz.9.3734': attribute type 10 has an invalid length. [ 1385.185311][T30163] team0: Device hsr_slave_0 failed to register rx_handler [ 1385.455634][T30164] vhci_hcd: connection closed [ 1385.456187][ T95] vhci_hcd: stop threads [ 1385.458959][ T95] vhci_hcd: release socket [ 1385.460617][ T95] vhci_hcd: disconnect device [ 1385.890191][T30179] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1385.895337][T30179] netlink: 'syz.4.3736': attribute type 10 has an invalid length. [ 1385.898510][T30179] team0: Device hsr_slave_0 failed to register rx_handler [ 1386.213981][T30181] wireguard0: entered promiscuous mode [ 1386.216337][T30181] wireguard0: entered allmulticast mode [ 1386.802295][T30191] wireguard0: entered promiscuous mode [ 1386.806134][T30191] wireguard0: entered allmulticast mode [ 1387.554520][T30206] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1387.556714][T30206] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1387.560502][T30206] vhci_hcd vhci_hcd.0: Device attached [ 1387.565319][T30208] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1387.578550][T30208] netlink: 'syz.7.3742': attribute type 10 has an invalid length. [ 1387.582489][T30208] team0: Device hsr_slave_0 failed to register rx_handler [ 1387.937278][T25133] usb 56-1: SetAddress Request (104) to port 0 [ 1387.939772][T25133] usb 56-1: new SuperSpeed USB device number 104 using vhci_hcd [ 1388.132620][T30207] vhci_hcd: connection reset by peer [ 1388.134948][T24684] vhci_hcd: stop threads [ 1388.136478][T24684] vhci_hcd: release socket [ 1388.139858][T24684] vhci_hcd: disconnect device [ 1388.796972][T25507] usb 52-1: device descriptor read/8, error -110 [ 1388.805208][T30224] netlink: 'syz.4.3744': attribute type 10 has an invalid length. [ 1388.809167][T30224] team0: Device hsr_slave_0 failed to register rx_handler [ 1389.258059][T25507] usb usb52-port1: attempt power cycle [ 1389.387881][T30234] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1389.390648][T30234] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1389.394205][T30234] vhci_hcd vhci_hcd.0: Device attached [ 1389.775634][T30235] vhci_hcd: connection closed [ 1389.775869][T20787] vhci_hcd: stop threads [ 1389.778873][T20787] vhci_hcd: release socket [ 1389.780307][T20787] vhci_hcd: disconnect device [ 1389.828591][T25507] usb usb52-port1: unable to enumerate USB device [ 1389.837077][T25817] usb 46-1: device descriptor read/8, error -110 [ 1389.919377][T30242] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1389.922116][T30242] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1389.925133][T30242] vhci_hcd vhci_hcd.0: Device attached [ 1390.097002][T25817] usb 46-1: SetAddress Request (121) to port 0 [ 1390.099215][T25817] usb 46-1: new SuperSpeed USB device number 121 using vhci_hcd [ 1390.125628][T30243] vhci_hcd: connection closed [ 1390.125919][T20787] vhci_hcd: stop threads [ 1390.129993][T20787] vhci_hcd: release socket [ 1390.131934][T20787] vhci_hcd: disconnect device [ 1391.252482][T30255] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1391.254541][T30255] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1391.257555][T30255] vhci_hcd vhci_hcd.0: Device attached [ 1391.396003][T30259] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1391.406070][T30259] netlink: 'syz.4.3750': attribute type 10 has an invalid length. [ 1391.410740][T30259] team0: Device hsr_slave_0 failed to register rx_handler [ 1391.508615][T30256] vhci_hcd: connection closed [ 1391.508867][T24684] vhci_hcd: stop threads [ 1391.511791][T24684] vhci_hcd: release socket [ 1391.515549][T24684] vhci_hcd: disconnect device [ 1391.546981][T25507] usb 42-1: enqueue for inactive port 0 [ 1392.052647][T25507] usb usb42-port1: attempt power cycle [ 1392.501060][T30279] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1392.507165][T30279] netlink: 'syz.7.3754': attribute type 10 has an invalid length. [ 1392.510682][T30279] team0: Device hsr_slave_0 failed to register rx_handler [ 1392.668178][T25507] usb usb42-port1: unable to enumerate USB device [ 1392.702571][T30281] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1392.705386][T30281] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1392.713687][T30281] vhci_hcd vhci_hcd.0: Device attached [ 1392.979029][ T8348] usb 42-1: SetAddress Request (98) to port 0 [ 1392.980860][ T8348] usb 42-1: new SuperSpeed USB device number 98 using vhci_hcd [ 1393.037137][T25133] usb 56-1: device descriptor read/8, error -110 [ 1393.466779][T25133] usb usb56-port1: attempt power cycle [ 1393.863451][T30282] vhci_hcd: connection reset by peer [ 1393.865734][ T13] vhci_hcd: stop threads [ 1393.867582][ T13] vhci_hcd: release socket [ 1393.869290][ T13] vhci_hcd: disconnect device [ 1394.037546][T25133] usb usb56-port1: unable to enumerate USB device [ 1394.636174][T30298] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1394.640779][T30298] netlink: 'syz.2.3757': attribute type 10 has an invalid length. [ 1394.644653][T30298] team0: Device hsr_slave_0 failed to register rx_handler [ 1394.719913][T30299] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1394.722040][T30299] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1394.725338][T30299] vhci_hcd vhci_hcd.0: Device attached [ 1394.993133][T30300] vhci_hcd: connection closed [ 1394.993681][ T61] vhci_hcd: stop threads [ 1394.997412][T25507] usb 56-1: SetAddress Request (108) to port 0 [ 1394.998836][ T61] vhci_hcd: release socket [ 1394.999866][T25507] usb 56-1: new SuperSpeed USB device number 108 using vhci_hcd [ 1395.001360][ T61] vhci_hcd: disconnect device [ 1395.027465][T25507] usb 56-1: enqueue for inactive port 0 [ 1395.197000][T25817] usb 46-1: device descriptor read/8, error -110 [ 1395.283921][T30311] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1395.289999][T30311] netlink: 'syz.2.3759': attribute type 10 has an invalid length. [ 1395.293515][T30311] team0: Device hsr_slave_0 failed to register rx_handler [ 1395.307057][T25817] usb usb46-port1: attempt power cycle [ 1395.447943][T25507] usb usb56-port1: attempt power cycle [ 1395.888574][T25817] usb usb46-port1: unable to enumerate USB device [ 1396.052703][T25507] usb usb56-port1: unable to enumerate USB device [ 1396.282583][T30329] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1396.293400][T30329] netlink: 'syz.4.3764': attribute type 10 has an invalid length. [ 1396.296647][T30329] team0: Device hsr_slave_0 failed to register rx_handler [ 1396.768165][T30340] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1396.771215][T30340] netlink: 'syz.9.3766': attribute type 10 has an invalid length. [ 1396.774103][T30340] team0: Device hsr_slave_0 failed to register rx_handler [ 1396.801662][T30341] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1396.805144][T30341] netlink: 'syz.2.3765': attribute type 10 has an invalid length. [ 1396.808231][T30341] team0: Device hsr_slave_0 failed to register rx_handler [ 1397.346556][T30351] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1397.387069][T30354] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1397.393027][T30351] netlink: 'syz.7.3768': attribute type 10 has an invalid length. [ 1397.393683][T30354] netlink: 'syz.4.3767': attribute type 10 has an invalid length. [ 1397.398992][T30351] team0: Device hsr_slave_0 failed to register rx_handler [ 1397.411093][T30354] team0: Device hsr_slave_0 failed to register rx_handler [ 1397.650508][T30360] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1397.653709][T30360] netlink: 'syz.9.3770': attribute type 10 has an invalid length. [ 1397.656695][T30360] team0: Device hsr_slave_0 failed to register rx_handler [ 1397.990332][T30368] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1397.993318][T30368] netlink: 'syz.4.3771': attribute type 10 has an invalid length. [ 1397.996184][T30368] team0: Device hsr_slave_0 failed to register rx_handler [ 1398.086978][ T8348] usb 42-1: device descriptor read/8, error -110 [ 1398.377158][T30372] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1398.379315][T30372] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1398.391302][T30372] vhci_hcd vhci_hcd.0: Device attached [ 1398.571772][T30386] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1398.585928][T30386] netlink: 'syz.9.3773': attribute type 10 has an invalid length. [ 1398.595999][T30386] team0: Device hsr_slave_0 failed to register rx_handler [ 1398.608790][ T8348] usb 42-1: SetAddress Request (99) to port 0 [ 1398.611280][ T8348] usb 42-1: new SuperSpeed USB device number 99 using vhci_hcd [ 1398.827975][T30373] vhci_hcd: connection reset by peer [ 1398.830512][ T61] vhci_hcd: stop threads [ 1398.832255][ T61] vhci_hcd: release socket [ 1398.834056][ T61] vhci_hcd: disconnect device [ 1398.903736][T30378] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1398.906366][T30378] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1398.910208][T30378] vhci_hcd vhci_hcd.0: Device attached [ 1399.197011][T25817] usb 52-1: SetAddress Request (93) to port 0 [ 1399.199125][T25817] usb 52-1: new SuperSpeed USB device number 93 using vhci_hcd [ 1399.276800][T30392] vhci_hcd: connection reset by peer [ 1399.278764][ T95] vhci_hcd: stop threads [ 1399.280126][ T95] vhci_hcd: release socket [ 1399.281600][ T95] vhci_hcd: disconnect device [ 1399.326327][T30399] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1399.333545][T30399] team0: Device hsr_slave_0 failed to register rx_handler [ 1399.685430][T30403] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1399.688298][T30403] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1399.692343][T30403] vhci_hcd vhci_hcd.0: Device attached [ 1399.839737][T30411] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1399.843360][T30411] validate_nla: 1 callbacks suppressed [ 1399.843369][T30411] netlink: 'syz.4.3777': attribute type 10 has an invalid length. [ 1399.848151][T30411] team0: Device hsr_slave_0 failed to register rx_handler [ 1400.109514][T30404] vhci_hcd: connection closed [ 1400.112304][ T13] vhci_hcd: stop threads [ 1400.116133][ T13] vhci_hcd: release socket [ 1400.118151][ T13] vhci_hcd: disconnect device [ 1400.880403][T30427] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1400.882563][T30427] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1400.885811][T30427] vhci_hcd vhci_hcd.0: Device attached [ 1401.003180][T30431] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1401.005316][T30431] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1401.008398][T30431] vhci_hcd vhci_hcd.0: Device attached [ 1401.126339][T30434] wireguard0: entered promiscuous mode [ 1401.130506][T30434] wireguard0: entered allmulticast mode [ 1401.248972][T30428] vhci_hcd: connection closed [ 1401.253480][ T12] vhci_hcd: stop threads [ 1401.257891][T25507] usb 56-1: SetAddress Request (112) to port 0 [ 1401.261718][T25507] usb 56-1: new SuperSpeed USB device number 112 using vhci_hcd [ 1401.266823][ T12] vhci_hcd: release socket [ 1401.270887][ T12] vhci_hcd: disconnect device [ 1401.287343][T25507] usb 56-1: enqueue for inactive port 0 [ 1401.317173][ T6041] usb 46-1: SetAddress Request (124) to port 0 [ 1401.319863][ T6041] usb 46-1: new SuperSpeed USB device number 124 using vhci_hcd [ 1401.383214][T30432] vhci_hcd: connection reset by peer [ 1401.401628][ T12] vhci_hcd: stop threads [ 1401.403033][ T12] vhci_hcd: release socket [ 1401.404545][ T12] vhci_hcd: disconnect device [ 1401.687915][T25507] usb usb56-port1: attempt power cycle [ 1402.103852][T30446] netlink: 'syz.9.3784': attribute type 10 has an invalid length. [ 1402.109054][T30446] team0: Device hsr_slave_0 failed to register rx_handler [ 1402.400996][T25507] usb usb56-port1: unable to enumerate USB device [ 1402.801204][T30457] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1402.816442][T30457] netlink: 'syz.4.3785': attribute type 10 has an invalid length. [ 1402.829414][T30457] team0: Device hsr_slave_0 failed to register rx_handler [ 1403.508004][T30470] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1403.519847][T30470] netlink: 'syz.4.3789': attribute type 10 has an invalid length. [ 1403.523731][T30470] team0: Device hsr_slave_0 failed to register rx_handler [ 1403.847674][ T8348] usb 42-1: device descriptor read/8, error -110 [ 1404.012119][ T8348] usb usb42-port1: attempt power cycle [ 1404.341878][T25817] usb 52-1: device descriptor read/8, error -110 [ 1404.370818][T30485] netlink: 'syz.4.3793': attribute type 10 has an invalid length. [ 1404.374657][T30485] team0: Device hsr_slave_0 failed to register rx_handler [ 1404.603670][ T8348] usb usb42-port1: unable to enumerate USB device [ 1404.637256][T30488] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1404.640010][T30488] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1404.644077][T30488] vhci_hcd vhci_hcd.0: Device attached [ 1404.867302][T30500] netlink: 'syz.7.3795': attribute type 10 has an invalid length. [ 1404.871865][T30500] team0: Device hsr_slave_0 failed to register rx_handler [ 1404.977944][T25817] usb usb52-port1: attempt power cycle [ 1405.066978][ T8348] usb 56-1: SetAddress Request (116) to port 0 [ 1405.069631][ T8348] usb 56-1: new SuperSpeed USB device number 116 using vhci_hcd [ 1405.103558][T30489] vhci_hcd: connection closed [ 1405.110724][T24684] vhci_hcd: stop threads [ 1405.146979][T24684] vhci_hcd: release socket [ 1405.157267][T24684] vhci_hcd: disconnect device [ 1405.488567][T30508] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1405.491273][T30508] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1405.494609][T30508] vhci_hcd vhci_hcd.0: Device attached [ 1405.631633][T30518] netlink: 'syz.7.3797': attribute type 10 has an invalid length. [ 1405.635978][T30518] team0: Device hsr_slave_0 failed to register rx_handler [ 1405.667746][T25817] usb usb52-port1: unable to enumerate USB device [ 1405.997306][ T6061] usb 42-1: SetAddress Request (102) to port 0 [ 1406.000027][ T6061] usb 42-1: new SuperSpeed USB device number 102 using vhci_hcd [ 1406.034198][T30509] vhci_hcd: connection reset by peer [ 1406.039938][ T95] vhci_hcd: stop threads [ 1406.042180][ T95] vhci_hcd: release socket [ 1406.044716][ T95] vhci_hcd: disconnect device [ 1406.154610][T30524] netlink: 'syz.9.3798': attribute type 10 has an invalid length. [ 1406.159474][T30524] team0: Device hsr_slave_0 failed to register rx_handler [ 1406.397046][ T6041] usb 46-1: device descriptor read/8, error -110 [ 1406.433588][T30530] netlink: 'syz.7.3799': attribute type 10 has an invalid length. [ 1406.436740][T30530] team0: Device hsr_slave_0 failed to register rx_handler [ 1406.868323][ T6041] usb usb46-port1: attempt power cycle [ 1407.144941][T30539] wireguard0: entered promiscuous mode [ 1407.148057][T30539] wireguard0: entered allmulticast mode [ 1407.321377][T30547] wireguard0: entered promiscuous mode [ 1407.323371][T30547] wireguard0: entered allmulticast mode [ 1407.424354][T30550] netlink: 'syz.7.3802': attribute type 10 has an invalid length. [ 1407.547271][ T6041] usb usb46-port1: unable to enumerate USB device [ 1407.666544][T30550] team0: Device hsr_slave_0 failed to register rx_handler [ 1408.536242][T30561] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1408.541361][T30561] netlink: 'syz.4.3804': attribute type 10 has an invalid length. [ 1408.545636][T30561] team0: Device hsr_slave_0 failed to register rx_handler [ 1408.914112][T30571] netlink: 'syz.7.3806': attribute type 10 has an invalid length. [ 1408.917904][T30571] team0: Device hsr_slave_0 failed to register rx_handler [ 1409.615862][T30588] netlink: 'syz.7.3809': attribute type 10 has an invalid length. [ 1409.619150][T30588] team0: Device hsr_slave_0 failed to register rx_handler [ 1410.078240][T30590] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1410.080399][T30590] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1410.083057][T30590] vhci_hcd vhci_hcd.0: Device attached [ 1410.167056][ T8348] usb 56-1: device descriptor read/8, error -110 [ 1410.478785][T30591] vhci_hcd: connection closed [ 1410.479042][T12547] vhci_hcd: stop threads [ 1410.481890][T12547] vhci_hcd: release socket [ 1410.483478][T12547] vhci_hcd: disconnect device [ 1410.567364][ T8348] usb usb56-port1: attempt power cycle [ 1410.641214][T30607] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1410.643586][T30607] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1410.647137][T30607] vhci_hcd vhci_hcd.0: Device attached [ 1410.654646][T30610] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1410.656714][T30610] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1410.659466][T30610] vhci_hcd vhci_hcd.0: Device attached [ 1410.918994][ T8348] usb 56-1: SetAddress Request (118) to port 0 [ 1410.921052][ T8348] usb 56-1: new SuperSpeed USB device number 118 using vhci_hcd [ 1410.971017][T30611] vhci_hcd: connection closed [ 1410.971287][T12547] vhci_hcd: stop threads [ 1410.975170][T12547] vhci_hcd: release socket [ 1410.977401][T12547] vhci_hcd: disconnect device [ 1411.036991][ T6041] usb 46-1: enqueue for inactive port 0 [ 1411.038892][ T6061] usb 42-1: device descriptor read/8, error -110 [ 1411.059559][T30608] vhci_hcd: connection reset by peer [ 1411.061479][T20787] vhci_hcd: stop threads [ 1411.063293][T20787] vhci_hcd: release socket [ 1411.065205][T20787] vhci_hcd: disconnect device [ 1411.318980][T30623] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1411.324074][T30623] netlink: 'syz.7.3815': attribute type 10 has an invalid length. [ 1411.328357][T30623] team0: Device hsr_slave_0 failed to register rx_handler [ 1411.436813][ T6061] usb usb42-port1: attempt power cycle [ 1411.587061][ T6041] usb usb46-port1: attempt power cycle [ 1411.997525][ T6061] usb usb42-port1: unable to enumerate USB device [ 1412.128762][T30634] wireguard0: entered promiscuous mode [ 1412.128843][T30636] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1412.128881][T30636] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1412.131277][T30634] wireguard0: entered allmulticast mode [ 1412.148054][ T6041] usb usb46-port1: unable to enumerate USB device [ 1412.155900][T30636] vhci_hcd vhci_hcd.0: Device attached [ 1412.555795][T30638] vhci_hcd: connection closed [ 1412.556147][ T61] vhci_hcd: stop threads [ 1412.559468][ T61] vhci_hcd: release socket [ 1412.561404][ T61] vhci_hcd: disconnect device [ 1413.202272][T30649] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1413.204313][T30649] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1413.207648][T30649] vhci_hcd vhci_hcd.0: Device attached [ 1413.279335][T30655] netlink: 'syz.9.3820': attribute type 10 has an invalid length. [ 1413.282977][T30655] team0: Device hsr_slave_0 failed to register rx_handler [ 1413.497028][T25817] usb 46-1: SetAddress Request (6) to port 0 [ 1413.503587][T25817] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1413.721619][T30650] vhci_hcd: connection reset by peer [ 1413.723612][T24684] vhci_hcd: stop threads [ 1413.725323][T24684] vhci_hcd: release socket [ 1413.727269][T24684] vhci_hcd: disconnect device [ 1414.178145][T30659] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1414.179997][T30659] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1414.187246][T30659] vhci_hcd vhci_hcd.0: Device attached [ 1414.344204][T30666] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1414.348053][T30666] netlink: 'syz.2.3822': attribute type 10 has an invalid length. [ 1414.351354][T30666] team0: Device hsr_slave_0 failed to register rx_handler [ 1414.470740][T30660] vhci_hcd: connection closed [ 1414.470876][T12547] vhci_hcd: stop threads [ 1414.474110][T12547] vhci_hcd: release socket [ 1414.475523][T12547] vhci_hcd: disconnect device [ 1415.443366][T30684] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1415.445539][T30684] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1415.448735][T30684] vhci_hcd vhci_hcd.0: Device attached [ 1415.482634][T30687] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1415.484722][T30687] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1415.487845][T30687] vhci_hcd vhci_hcd.0: Device attached [ 1415.866970][T30685] vhci_hcd: connection closed [ 1415.867475][T24684] vhci_hcd: stop threads [ 1415.873097][T30688] vhci_hcd: connection closed [ 1415.873628][T24684] vhci_hcd: release socket [ 1415.876951][ T6041] usb 52-1: SetAddress Request (97) to port 0 [ 1415.880852][ T6041] usb 52-1: new SuperSpeed USB device number 97 using vhci_hcd [ 1415.883974][T24684] vhci_hcd: disconnect device [ 1415.885947][T24684] vhci_hcd: stop threads [ 1415.887705][T24684] vhci_hcd: release socket [ 1415.889435][T24684] vhci_hcd: disconnect device [ 1415.897246][ T6041] usb 52-1: enqueue for inactive port 0 [ 1415.997035][ T8348] usb 56-1: device descriptor read/8, error -110 [ 1416.287424][ T6041] usb usb52-port1: attempt power cycle [ 1416.387871][ T8348] usb usb56-port1: unable to enumerate USB device [ 1416.755082][T30704] netlink: 'syz.9.3829': attribute type 10 has an invalid length. [ 1416.759289][T30704] team0: Device hsr_slave_0 failed to register rx_handler [ 1416.857984][ T6041] usb usb52-port1: unable to enumerate USB device [ 1416.965925][T30706] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1416.968874][T30706] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1416.974598][T30706] vhci_hcd vhci_hcd.0: Device attached [ 1417.267440][ T6041] usb 52-1: SetAddress Request (101) to port 0 [ 1417.270128][ T6041] usb 52-1: new SuperSpeed USB device number 101 using vhci_hcd [ 1417.446134][T30707] vhci_hcd: connection reset by peer [ 1417.458497][T20787] vhci_hcd: stop threads [ 1417.459866][T20787] vhci_hcd: release socket [ 1417.462134][T20787] vhci_hcd: disconnect device [ 1417.669141][T30717] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1417.671976][T30717] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1417.675921][T30717] vhci_hcd vhci_hcd.0: Device attached [ 1417.936939][ T6061] usb 56-1: SetAddress Request (120) to port 0 [ 1417.939034][ T6061] usb 56-1: new SuperSpeed USB device number 120 using vhci_hcd [ 1418.183901][T30725] netlink: 'syz.7.3832': attribute type 10 has an invalid length. [ 1418.190784][T30725] team0: Device hsr_slave_0 failed to register rx_handler [ 1418.253642][T30718] vhci_hcd: connection reset by peer [ 1418.255696][T12547] vhci_hcd: stop threads [ 1418.257266][T12547] vhci_hcd: release socket [ 1418.259792][T12547] vhci_hcd: disconnect device [ 1418.556972][T25817] usb 46-1: device descriptor read/8, error -110 [ 1418.867159][T30736] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1418.875708][T30736] netlink: 'syz.7.3834': attribute type 10 has an invalid length. [ 1418.880742][T30736] team0: Device hsr_slave_0 failed to register rx_handler [ 1418.976924][T25817] usb usb46-port1: attempt power cycle [ 1419.113669][T30743] netlink: 'syz.2.3836': attribute type 10 has an invalid length. [ 1419.116660][T30743] team0: Device hsr_slave_0 failed to register rx_handler [ 1419.670804][T25817] usb usb46-port1: unable to enumerate USB device [ 1420.157664][T30754] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1420.160479][T30754] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1420.166980][T30754] vhci_hcd vhci_hcd.0: Device attached [ 1420.384768][T30755] vhci_hcd: connection closed [ 1420.384929][ T13] vhci_hcd: stop threads [ 1420.387894][ T13] vhci_hcd: release socket [ 1420.389856][ T13] vhci_hcd: disconnect device [ 1420.561591][T30759] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1420.563836][T30759] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1420.566661][T30759] vhci_hcd vhci_hcd.0: Device attached [ 1420.857929][T25133] usb 42-1: SetAddress Request (106) to port 0 [ 1420.860049][T25133] usb 42-1: new SuperSpeed USB device number 106 using vhci_hcd [ 1420.964440][T30760] vhci_hcd: connection closed [ 1420.964720][ T61] vhci_hcd: stop threads [ 1420.969395][ T61] vhci_hcd: release socket [ 1420.972232][ T61] vhci_hcd: disconnect device [ 1420.997161][T25133] usb 42-1: enqueue for inactive port 0 [ 1421.257608][T30765] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1421.259756][T30765] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1421.262477][T30765] vhci_hcd vhci_hcd.0: Device attached [ 1421.427158][T25133] usb usb42-port1: attempt power cycle [ 1421.479849][T30766] vhci_hcd: connection closed [ 1421.480240][ T12] vhci_hcd: stop threads [ 1421.483783][ T12] vhci_hcd: release socket [ 1421.486190][ T12] vhci_hcd: disconnect device [ 1421.937443][T30776] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1421.939869][T30776] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1422.041484][T30776] vhci_hcd vhci_hcd.0: Device attached [ 1422.248071][T25133] usb usb42-port1: unable to enumerate USB device [ 1422.317108][ T8348] usb 46-1: SetAddress Request (10) to port 0 [ 1422.319128][ T8348] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1422.446991][ T6041] usb 52-1: device descriptor read/8, error -110 [ 1422.550005][T30777] vhci_hcd: connection reset by peer [ 1422.562789][ T61] vhci_hcd: stop threads [ 1422.567494][ T61] vhci_hcd: release socket [ 1422.575538][ T61] vhci_hcd: disconnect device [ 1422.871706][ T6041] usb usb52-port1: attempt power cycle [ 1423.057014][ T6061] usb 56-1: device descriptor read/8, error -110 [ 1423.437894][ T6041] usb usb52-port1: unable to enumerate USB device [ 1423.457459][ T6061] usb usb56-port1: attempt power cycle [ 1424.037421][ T6061] usb usb56-port1: unable to enumerate USB device [ 1424.310686][T30799] netlink: 'syz.4.3845': attribute type 10 has an invalid length. [ 1424.314209][T30799] team0: Device hsr_slave_0 failed to register rx_handler [ 1424.983793][T30810] netlink: 'syz.4.3847': attribute type 10 has an invalid length. [ 1424.987127][T30810] team0: Device hsr_slave_0 failed to register rx_handler [ 1425.471418][T30816] netlink: 'syz.9.3848': attribute type 10 has an invalid length. [ 1425.481725][T30816] team0: Device hsr_slave_0 failed to register rx_handler [ 1425.745795][T30823] netlink: 'syz.4.3849': attribute type 10 has an invalid length. [ 1425.753288][T30823] team0: Device hsr_slave_0 failed to register rx_handler [ 1427.447053][ T8348] usb 46-1: device descriptor read/8, error -110 [ 1427.803930][T30846] netlink: 'syz.2.3853': attribute type 10 has an invalid length. [ 1427.808364][T30846] team0: Device hsr_slave_0 failed to register rx_handler [ 1427.842604][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.844820][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.847616][ T8348] usb usb46-port1: attempt power cycle [ 1428.417884][ T8348] usb usb46-port1: unable to enumerate USB device [ 1428.475976][T30852] netlink: 'syz.2.3854': attribute type 10 has an invalid length. [ 1428.484275][T30852] team0: Device hsr_slave_0 failed to register rx_handler [ 1429.337189][T30865] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1429.339985][T30865] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1429.349383][T30865] vhci_hcd vhci_hcd.0: Device attached [ 1429.787245][ T6041] usb 42-1: SetAddress Request (110) to port 0 [ 1429.789847][ T6041] usb 42-1: new SuperSpeed USB device number 110 using vhci_hcd [ 1429.912534][T30866] vhci_hcd: connection reset by peer [ 1429.914486][ T12] vhci_hcd: stop threads [ 1429.915907][ T12] vhci_hcd: release socket [ 1429.918449][ T12] vhci_hcd: disconnect device [ 1429.974773][T30875] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1429.977467][T30875] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1429.981723][T30875] vhci_hcd vhci_hcd.0: Device attached [ 1430.214165][T30883] netlink: 'syz.9.3859': attribute type 10 has an invalid length. [ 1430.219923][T30883] team0: Device hsr_slave_0 failed to register rx_handler [ 1430.247189][ T24] usb 46-1: SetAddress Request (14) to port 0 [ 1430.249918][ T24] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1430.263267][T30876] vhci_hcd: connection closed [ 1430.263655][ T12] vhci_hcd: stop threads [ 1430.266787][ T12] vhci_hcd: release socket [ 1430.268680][ T12] vhci_hcd: disconnect device [ 1430.615455][T30889] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1430.620732][T30889] netlink: 'syz.2.3860': attribute type 10 has an invalid length. [ 1430.624514][T30889] team0: Device hsr_slave_0 failed to register rx_handler [ 1430.856323][T30895] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1430.863605][T30895] netlink: 'syz.9.3861': attribute type 10 has an invalid length. [ 1430.867053][T30895] team0: Device hsr_slave_0 failed to register rx_handler [ 1431.146783][T30901] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1431.160649][T30901] netlink: 'syz.4.3862': attribute type 10 has an invalid length. [ 1431.173082][T30901] team0: Device hsr_slave_0 failed to register rx_handler [ 1431.556235][T30910] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1431.565221][T30910] netlink: 'syz.9.3864': attribute type 10 has an invalid length. [ 1431.570224][T30910] team0: Device hsr_slave_0 failed to register rx_handler [ 1431.949088][T30911] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1431.951257][T30911] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1431.954101][T30911] vhci_hcd vhci_hcd.0: Device attached [ 1432.096835][T30913] vhci_hcd: connection closed [ 1432.107365][ T12] vhci_hcd: stop threads [ 1432.111185][ T12] vhci_hcd: release socket [ 1432.117324][ T12] vhci_hcd: disconnect device [ 1432.156893][T30923] netlink: 'syz.4.3866': attribute type 10 has an invalid length. [ 1432.161166][T30923] team0: Device hsr_slave_0 failed to register rx_handler [ 1432.367252][T30929] netlink: 'syz.9.3867': attribute type 10 has an invalid length. [ 1432.382761][T30929] team0: Device hsr_slave_0 failed to register rx_handler [ 1432.974443][T30940] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1432.977192][T30940] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1432.988348][T30940] vhci_hcd vhci_hcd.0: Device attached [ 1433.111181][T30948] netlink: 'syz.4.3870': attribute type 10 has an invalid length. [ 1433.114288][T30948] team0: Device hsr_slave_0 failed to register rx_handler [ 1433.450238][T30941] vhci_hcd: connection closed [ 1433.450421][ T12] vhci_hcd: stop threads [ 1433.457309][ T12] vhci_hcd: release socket [ 1433.459223][ T12] vhci_hcd: disconnect device [ 1433.825591][T30958] netlink: 'syz.4.3871': attribute type 10 has an invalid length. [ 1433.828589][T30958] team0: Device hsr_slave_0 failed to register rx_handler [ 1434.844009][T30970] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1434.846697][T30970] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1434.850491][T30970] vhci_hcd vhci_hcd.0: Device attached [ 1434.878470][ T6041] usb 42-1: device descriptor read/8, error -110 [ 1435.117362][ T6061] usb 52-1: SetAddress Request (105) to port 0 [ 1435.119338][ T6061] usb 52-1: new SuperSpeed USB device number 105 using vhci_hcd [ 1435.268678][ T6041] usb usb42-port1: attempt power cycle [ 1435.277020][ T24] usb 46-1: device descriptor read/8, error -110 [ 1435.477290][T30971] vhci_hcd: connection reset by peer [ 1435.479823][ T13] vhci_hcd: stop threads [ 1435.481335][ T13] vhci_hcd: release socket [ 1435.483370][ T13] vhci_hcd: disconnect device [ 1435.667976][ T24] usb usb46-port1: attempt power cycle [ 1435.833050][T30976] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1435.835925][T30976] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1435.841527][ T6041] usb usb42-port1: unable to enumerate USB device [ 1435.845179][T30976] vhci_hcd vhci_hcd.0: Device attached [ 1436.087637][ T24] usb 46-1: SetAddress Request (16) to port 0 [ 1436.090410][ T24] usb 46-1: new SuperSpeed USB device number 16 using vhci_hcd [ 1436.271581][T30977] vhci_hcd: connection reset by peer [ 1436.273527][T24684] vhci_hcd: stop threads [ 1436.275281][T24684] vhci_hcd: release socket [ 1436.279339][T24684] vhci_hcd: disconnect device [ 1437.528875][T31003] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1437.532714][T31003] netlink: 'syz.9.3879': attribute type 10 has an invalid length. [ 1437.535874][T31003] team0: Device hsr_slave_0 failed to register rx_handler [ 1438.132197][T31012] netlink: 'syz.9.3881': attribute type 10 has an invalid length. [ 1438.139467][T31012] team0: Device hsr_slave_0 failed to register rx_handler [ 1438.790003][T31023] netlink: 'syz.9.3883': attribute type 10 has an invalid length. [ 1438.793463][T31023] team0: Device hsr_slave_0 failed to register rx_handler [ 1439.037526][T31029] netlink: 'syz.2.3884': attribute type 10 has an invalid length. [ 1439.040857][T31029] team0: Device hsr_slave_0 failed to register rx_handler [ 1439.631255][T31038] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1439.638194][T31038] netlink: 'syz.7.3886': attribute type 10 has an invalid length. [ 1439.642367][T31038] team0: Device hsr_slave_0 failed to register rx_handler [ 1439.886978][T31042] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1439.889142][T31042] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1439.893143][T31042] vhci_hcd vhci_hcd.0: Device attached [ 1440.068762][T31046] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1440.071320][T31046] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1440.075050][T31046] vhci_hcd vhci_hcd.0: Device attached [ 1440.393334][ T6041] usb 56-1: SetAddress Request (124) to port 0 [ 1440.396174][ T6041] usb 56-1: new SuperSpeed USB device number 124 using vhci_hcd [ 1440.401377][ T6061] usb 52-1: device descriptor read/8, error -110 [ 1440.716731][T31047] vhci_hcd: connection closed [ 1440.717530][ T12] vhci_hcd: stop threads [ 1440.721397][ T12] vhci_hcd: release socket [ 1440.723480][ T12] vhci_hcd: disconnect device [ 1440.936583][T31043] vhci_hcd: connection reset by peer [ 1440.939951][T24684] vhci_hcd: stop threads [ 1440.941786][T24684] vhci_hcd: release socket [ 1440.943744][T24684] vhci_hcd: disconnect device [ 1440.988201][ T6061] usb usb52-port1: attempt power cycle [ 1441.130017][ T24] usb 46-1: device descriptor read/8, error -110 [ 1441.225197][T31062] netlink: 'syz.7.3889': attribute type 10 has an invalid length. [ 1441.231107][T31062] team0: Device hsr_slave_0 failed to register rx_handler [ 1441.521382][ T24] usb usb46-port1: unable to enumerate USB device [ 1441.560874][ T6061] usb usb52-port1: unable to enumerate USB device [ 1441.739853][T31074] netlink: 'syz.4.3891': attribute type 10 has an invalid length. [ 1441.743211][T31074] team0: Device hsr_slave_0 failed to register rx_handler [ 1441.921622][T31076] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1441.923718][T31076] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1441.926525][T31076] vhci_hcd vhci_hcd.0: Device attached [ 1442.193521][T31077] vhci_hcd: connection closed [ 1442.193797][ T12] vhci_hcd: stop threads [ 1442.197733][ T12] vhci_hcd: release socket [ 1442.199533][ T12] vhci_hcd: disconnect device [ 1442.482387][T31091] netlink: 'syz.7.3893': attribute type 10 has an invalid length. [ 1442.486774][T31091] team0: Device hsr_slave_0 failed to register rx_handler [ 1443.179777][T31102] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1443.184719][T31102] netlink: 'syz.7.3896': attribute type 10 has an invalid length. [ 1443.188524][T31102] team0: Device hsr_slave_0 failed to register rx_handler [ 1444.726104][T31117] wireguard0: entered promiscuous mode [ 1444.727963][T31117] wireguard0: entered allmulticast mode [ 1445.437160][ T6041] usb 56-1: device descriptor read/8, error -110 [ 1445.512614][T31125] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1445.519762][T31125] netlink: 'syz.2.3900': attribute type 10 has an invalid length. [ 1445.523674][T31125] team0: Device hsr_slave_0 failed to register rx_handler [ 1445.840715][ T6041] usb usb56-port1: attempt power cycle [ 1446.092495][T31131] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1446.094604][T31131] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1446.097498][T31131] vhci_hcd vhci_hcd.0: Device attached [ 1446.176976][ T6041] usb 56-1: SetAddress Request (126) to port 0 [ 1446.178901][ T6041] usb 56-1: new SuperSpeed USB device number 126 using vhci_hcd [ 1446.227212][T31136] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1446.235852][T31136] netlink: 'syz.2.3902': attribute type 10 has an invalid length. [ 1446.240560][T31136] team0: Device hsr_slave_0 failed to register rx_handler [ 1446.680436][T31132] vhci_hcd: connection reset by peer [ 1446.703711][ T13] vhci_hcd: stop threads [ 1446.705325][ T13] vhci_hcd: release socket [ 1446.717046][ T13] vhci_hcd: disconnect device [ 1446.881200][T31151] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1446.890718][T31151] netlink: 'syz.2.3904': attribute type 10 has an invalid length. [ 1446.894115][T31151] team0: Device hsr_slave_0 failed to register rx_handler [ 1447.442103][T31157] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1447.444807][T31157] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1447.450870][T31157] vhci_hcd vhci_hcd.0: Device attached [ 1447.590912][T31165] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1447.625207][T31165] netlink: 'syz.9.3906': attribute type 10 has an invalid length. [ 1447.641239][T31165] team0: Device hsr_slave_0 failed to register rx_handler [ 1447.766936][ T6061] usb 52-1: SetAddress Request (109) to port 0 [ 1447.768859][ T6061] usb 52-1: new SuperSpeed USB device number 109 using vhci_hcd [ 1447.904795][T31159] vhci_hcd: connection reset by peer [ 1447.908023][ T13] vhci_hcd: stop threads [ 1447.909527][ T13] vhci_hcd: release socket [ 1447.911454][ T13] vhci_hcd: disconnect device [ 1448.381767][T31173] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1448.384420][T31173] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1448.660028][T31173] vhci_hcd vhci_hcd.0: Device attached [ 1448.840877][T31183] netlink: 'syz.2.3909': attribute type 10 has an invalid length. [ 1448.845236][T31183] team0: Device hsr_slave_0 failed to register rx_handler [ 1448.980012][T31174] vhci_hcd: connection closed [ 1448.980299][ T61] vhci_hcd: stop threads [ 1448.985389][ T61] vhci_hcd: release socket [ 1448.988870][ T61] vhci_hcd: disconnect device [ 1449.007370][T31185] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1449.009373][T31185] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1449.012076][T31185] vhci_hcd vhci_hcd.0: Device attached [ 1449.345840][T31186] vhci_hcd: connection closed [ 1449.346983][T20787] vhci_hcd: stop threads [ 1449.351790][T20787] vhci_hcd: release socket [ 1449.355315][T20787] vhci_hcd: disconnect device [ 1449.590750][T31197] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1449.598796][T31197] netlink: 'syz.4.3912': attribute type 10 has an invalid length. [ 1449.603563][T31197] team0: Device hsr_slave_0 failed to register rx_handler [ 1449.641681][T31201] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1449.643792][T31201] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1449.646470][T31201] vhci_hcd vhci_hcd.0: Device attached [ 1449.829894][T31205] netlink: 'syz.9.3913': attribute type 10 has an invalid length. [ 1449.832704][T31205] team0: Device hsr_slave_0 failed to register rx_handler [ 1449.946988][ T8348] usb 42-1: SetAddress Request (115) to port 0 [ 1449.949052][ T8348] usb 42-1: new SuperSpeed USB device number 115 using vhci_hcd [ 1450.040255][T31202] vhci_hcd: connection reset by peer [ 1450.042806][ T61] vhci_hcd: stop threads [ 1450.044208][ T61] vhci_hcd: release socket [ 1450.045670][ T61] vhci_hcd: disconnect device [ 1450.186503][T31212] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1450.191851][T31212] netlink: 'syz.7.3914': attribute type 10 has an invalid length. [ 1450.195900][T31212] team0: Device hsr_slave_0 failed to register rx_handler [ 1451.120452][T31230] wireguard0: entered promiscuous mode [ 1451.122232][T31230] wireguard0: entered allmulticast mode [ 1451.277125][ T6041] usb 56-1: device descriptor read/8, error -110 [ 1451.667750][ T6041] usb usb56-port1: unable to enumerate USB device [ 1452.202838][T31246] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1452.205665][T31246] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1452.253348][T31246] vhci_hcd vhci_hcd.0: Device attached [ 1452.710531][T31247] vhci_hcd: connection closed [ 1452.710709][T24684] vhci_hcd: stop threads [ 1452.713663][T24684] vhci_hcd: release socket [ 1452.715152][T24684] vhci_hcd: disconnect device [ 1452.797066][ T6061] usb 52-1: device descriptor read/8, error -110 [ 1453.197758][ T6061] usb usb52-port1: attempt power cycle [ 1453.503388][T31264] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1453.527623][T31264] netlink: 'syz.7.3923': attribute type 10 has an invalid length. [ 1453.530926][T31264] team0: Device hsr_slave_0 failed to register rx_handler [ 1453.579369][T31265] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1453.582048][T31265] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1453.585394][T31265] vhci_hcd vhci_hcd.0: Device attached [ 1453.757478][ T6061] usb usb52-port1: unable to enumerate USB device [ 1453.829707][T31266] vhci_hcd: connection closed [ 1453.830246][T20787] vhci_hcd: stop threads [ 1453.833322][T20787] vhci_hcd: release socket [ 1453.834807][T20787] vhci_hcd: disconnect device [ 1453.856996][T25133] usb 46-1: enqueue for inactive port 0 [ 1454.169566][T31274] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1454.177204][T31274] netlink: 'syz.7.3925': attribute type 10 has an invalid length. [ 1454.180846][T31274] team0: Device hsr_slave_0 failed to register rx_handler [ 1454.357489][T25133] usb usb46-port1: attempt power cycle [ 1454.861771][T31290] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1454.878160][T31290] netlink: 'syz.7.3928': attribute type 10 has an invalid length. [ 1454.912732][T31290] team0: Device hsr_slave_0 failed to register rx_handler [ 1454.917478][T25133] usb usb46-port1: unable to enumerate USB device [ 1455.037353][ T8348] usb 42-1: device descriptor read/8, error -110 [ 1455.427476][ T8348] usb usb42-port1: attempt power cycle [ 1455.852992][T31297] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1455.855759][T31297] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1455.860428][T31297] vhci_hcd vhci_hcd.0: Device attached [ 1455.970321][T31303] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1455.980895][T31303] netlink: 'syz.2.3930': attribute type 10 has an invalid length. [ 1455.985626][T31303] team0: Device hsr_slave_0 failed to register rx_handler [ 1455.988086][ T8348] usb usb42-port1: unable to enumerate USB device [ 1456.157500][T25817] usb 52-1: SetAddress Request (113) to port 0 [ 1456.160113][T25817] usb 52-1: new SuperSpeed USB device number 113 using vhci_hcd [ 1456.381469][T31298] vhci_hcd: connection reset by peer [ 1456.383941][ T12] vhci_hcd: stop threads [ 1456.385742][ T12] vhci_hcd: release socket [ 1456.387405][ T12] vhci_hcd: disconnect device [ 1457.661553][T31319] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1457.685287][T31319] netlink: 'syz.4.3933': attribute type 10 has an invalid length. [ 1457.697740][T31319] team0: Device hsr_slave_0 failed to register rx_handler [ 1457.851125][T31323] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1457.879097][T31323] netlink: 'syz.2.3934': attribute type 10 has an invalid length. [ 1457.882197][T31323] team0: Device hsr_slave_0 failed to register rx_handler [ 1458.293166][T31334] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1458.299229][T31334] netlink: 'syz.4.3936': attribute type 10 has an invalid length. [ 1458.302290][T31334] team0: Device hsr_slave_0 failed to register rx_handler [ 1458.788721][T31341] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1458.805159][T31341] netlink: 'syz.2.3937': attribute type 10 has an invalid length. [ 1458.812731][T31341] team0: Device hsr_slave_0 failed to register rx_handler [ 1459.407621][T31347] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1459.410479][T31347] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1459.414318][T31347] vhci_hcd vhci_hcd.0: Device attached [ 1459.787843][T31348] vhci_hcd: connection closed [ 1459.788487][T12547] vhci_hcd: stop threads [ 1459.793534][T12547] vhci_hcd: release socket [ 1459.795766][T12547] vhci_hcd: disconnect device [ 1459.898286][T31354] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1459.901001][T31354] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1459.905710][T31354] vhci_hcd vhci_hcd.0: Device attached [ 1460.166995][T25133] usb 42-1: SetAddress Request (119) to port 0 [ 1460.169038][T25133] usb 42-1: new SuperSpeed USB device number 119 using vhci_hcd [ 1460.231509][T31355] vhci_hcd: connection reset by peer [ 1460.233989][T20787] vhci_hcd: stop threads [ 1460.235391][T20787] vhci_hcd: release socket [ 1460.236973][T20787] vhci_hcd: disconnect device [ 1460.363779][T31360] wireguard0: entered promiscuous mode [ 1460.365839][T31360] wireguard0: entered allmulticast mode [ 1460.528376][T31368] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1460.534188][T31368] netlink: 'syz.4.3941': attribute type 10 has an invalid length. [ 1460.541999][T31368] team0: Device hsr_slave_0 failed to register rx_handler [ 1461.163544][T31380] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1461.169608][T31380] netlink: 'syz.9.3943': attribute type 10 has an invalid length. [ 1461.172845][T31380] team0: Device hsr_slave_0 failed to register rx_handler [ 1461.276965][T25817] usb 52-1: device descriptor read/8, error -110 [ 1461.677377][T25817] usb usb52-port1: attempt power cycle [ 1461.886001][T31393] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1461.893054][T31393] netlink: 'syz.9.3946': attribute type 10 has an invalid length. [ 1461.897701][T31393] team0: Device hsr_slave_0 failed to register rx_handler [ 1462.171067][T31398] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1462.174846][T31398] netlink: 'syz.2.3947': attribute type 10 has an invalid length. [ 1462.181420][T31398] team0: Device hsr_slave_0 failed to register rx_handler [ 1462.239657][T25817] usb usb52-port1: unable to enumerate USB device [ 1462.543452][T31405] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1462.609276][T31405] netlink: 'syz.4.3948': attribute type 10 has an invalid length. [ 1462.619988][T31405] team0: Device hsr_slave_0 failed to register rx_handler [ 1462.967039][T31412] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1462.969817][T31412] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1462.973629][T31412] vhci_hcd vhci_hcd.0: Device attached [ 1463.327688][T31419] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1463.329811][T31419] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1463.332878][T31419] vhci_hcd vhci_hcd.0: Device attached [ 1463.431624][T25817] usb 56-1: SetAddress Request (2) to port 0 [ 1463.433580][T25817] usb 56-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1463.472085][T31413] vhci_hcd: connection reset by peer [ 1463.474765][T24684] vhci_hcd: stop threads [ 1463.476596][T24684] vhci_hcd: release socket [ 1463.478738][T24684] vhci_hcd: disconnect device [ 1463.575806][T31420] vhci_hcd: connection closed [ 1463.576745][ T13] vhci_hcd: stop threads [ 1463.580970][ T13] vhci_hcd: release socket [ 1463.582859][ T13] vhci_hcd: disconnect device [ 1464.316500][T31435] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1464.320397][T31435] netlink: 'syz.2.3953': attribute type 10 has an invalid length. [ 1464.323360][T31435] team0: Device hsr_slave_0 failed to register rx_handler [ 1464.345132][T31436] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1464.347917][T31436] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1464.351847][T31436] vhci_hcd vhci_hcd.0: Device attached [ 1464.631267][T31443] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1464.635536][T31443] netlink: 'syz.7.3954': attribute type 10 has an invalid length. [ 1464.638618][T31443] team0: Device hsr_slave_0 failed to register rx_handler [ 1464.765303][T31437] vhci_hcd: connection closed [ 1464.765519][T12547] vhci_hcd: stop threads [ 1464.769722][T12547] vhci_hcd: release socket [ 1464.776648][T12547] vhci_hcd: disconnect device [ 1465.197010][T25133] usb 42-1: device descriptor read/8, error -110 [ 1465.630618][T25133] usb usb42-port1: attempt power cycle [ 1466.208771][T25133] usb usb42-port1: unable to enumerate USB device [ 1466.568294][T31464] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1466.571100][T31464] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1466.574688][T31464] vhci_hcd vhci_hcd.0: Device attached [ 1466.856957][T25133] usb 46-1: SetAddress Request (23) to port 0 [ 1466.859124][T25133] usb 46-1: new SuperSpeed USB device number 23 using vhci_hcd [ 1467.165729][T31465] vhci_hcd: connection reset by peer [ 1467.167737][T20787] vhci_hcd: stop threads [ 1467.169073][T20787] vhci_hcd: release socket [ 1467.170554][T20787] vhci_hcd: disconnect device [ 1468.117088][T31477] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1468.139366][T31477] netlink: 'syz.2.3960': attribute type 10 has an invalid length. [ 1468.150478][T31477] team0: Device hsr_slave_0 failed to register rx_handler [ 1468.478533][T25817] usb 56-1: device descriptor read/8, error -110 [ 1468.754356][T31483] wireguard0: entered promiscuous mode [ 1468.764435][T31483] wireguard0: entered allmulticast mode [ 1468.867804][T25817] usb usb56-port1: attempt power cycle [ 1469.090924][T31493] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1469.093017][T31493] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1469.095819][T31493] vhci_hcd vhci_hcd.0: Device attached [ 1469.105625][T31492] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1469.123059][T31492] netlink: 'syz.2.3963': attribute type 10 has an invalid length. [ 1469.138394][T31492] team0: Device hsr_slave_0 failed to register rx_handler [ 1469.287769][T25817] usb 56-1: SetAddress Request (4) to port 0 [ 1469.290645][T25817] usb 56-1: new SuperSpeed USB device number 4 using vhci_hcd [ 1469.506627][T31494] vhci_hcd: connection reset by peer [ 1469.509255][ T61] vhci_hcd: stop threads [ 1469.510682][ T61] vhci_hcd: release socket [ 1469.512160][ T61] vhci_hcd: disconnect device [ 1469.600250][T31501] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1469.603895][T31501] netlink: 'syz.7.3964': attribute type 10 has an invalid length. [ 1469.606745][T31501] team0: Device hsr_slave_0 failed to register rx_handler [ 1470.034750][T31508] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1470.134977][T31508] netlink: 'syz.2.3965': attribute type 10 has an invalid length. [ 1470.151414][T31508] team0: Device hsr_slave_0 failed to register rx_handler [ 1470.352883][T31517] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1470.358375][T31517] netlink: 'syz.7.3966': attribute type 10 has an invalid length. [ 1470.362164][T31517] team0: Device hsr_slave_0 failed to register rx_handler [ 1471.315121][T31537] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1471.319490][T31537] netlink: 'syz.9.3971': attribute type 10 has an invalid length. [ 1471.322659][T31537] team0: Device hsr_slave_0 failed to register rx_handler [ 1471.477172][T31538] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1471.479486][T31538] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1471.484156][T31538] vhci_hcd vhci_hcd.0: Device attached [ 1471.797892][ T6061] usb 52-1: SetAddress Request (117) to port 0 [ 1471.800237][ T6061] usb 52-1: new SuperSpeed USB device number 117 using vhci_hcd [ 1471.865640][T31539] vhci_hcd: connection reset by peer [ 1471.870033][T24684] vhci_hcd: stop threads [ 1471.872186][T24684] vhci_hcd: release socket [ 1471.874782][T24684] vhci_hcd: disconnect device [ 1471.917530][T25133] usb 46-1: device descriptor read/8, error -110 [ 1472.090516][T31549] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1472.111944][T31549] netlink: 'syz.4.3972': attribute type 10 has an invalid length. [ 1472.119609][T31549] team0: Device hsr_slave_0 failed to register rx_handler [ 1472.318070][T25133] usb usb46-port1: attempt power cycle [ 1472.672690][T31561] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1472.690504][T31561] netlink: 'syz.7.3974': attribute type 10 has an invalid length. [ 1472.704500][T31561] team0: Device hsr_slave_0 failed to register rx_handler [ 1472.740910][T31564] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1472.750785][T31564] netlink: 'syz.4.3975': attribute type 10 has an invalid length. [ 1472.755693][T31564] team0: Device hsr_slave_0 failed to register rx_handler [ 1472.897815][T25133] usb usb46-port1: unable to enumerate USB device [ 1473.473491][T31574] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1473.478680][T31574] netlink: 'syz.4.3977': attribute type 10 has an invalid length. [ 1473.481728][T31574] team0: Device hsr_slave_0 failed to register rx_handler [ 1474.477192][T25817] usb 56-1: device descriptor read/8, error -110 [ 1474.867548][T25817] usb usb56-port1: unable to enumerate USB device [ 1475.091924][T31592] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1475.101148][T31592] netlink: 'syz.9.3980': attribute type 10 has an invalid length. [ 1475.105913][T31592] team0: Device hsr_slave_0 failed to register rx_handler [ 1475.778149][T31598] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1475.783899][T31598] netlink: 'syz.9.3981': attribute type 10 has an invalid length. [ 1475.787573][T31598] team0: Device hsr_slave_0 failed to register rx_handler [ 1476.580804][T31607] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1476.583647][T31607] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1476.588313][T31607] vhci_hcd vhci_hcd.0: Device attached [ 1476.891116][ T6061] usb 52-1: device descriptor read/8, error -110 [ 1476.957452][T25817] usb 56-1: SetAddress Request (6) to port 0 [ 1476.959970][T25817] usb 56-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1477.188074][T31608] vhci_hcd: connection reset by peer [ 1477.190030][T24684] vhci_hcd: stop threads [ 1477.191385][T24684] vhci_hcd: release socket [ 1477.192875][T24684] vhci_hcd: disconnect device [ 1477.249570][T31624] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1477.253351][T31624] netlink: 'syz.4.3985': attribute type 10 has an invalid length. [ 1477.256249][T31624] team0: Device hsr_slave_0 failed to register rx_handler [ 1477.287505][ T6061] usb usb52-port1: attempt power cycle [ 1477.920560][ T6061] usb usb52-port1: unable to enumerate USB device [ 1477.972460][T31636] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1477.982466][T31636] netlink: 'syz.9.3988': attribute type 10 has an invalid length. [ 1477.986602][T31636] team0: Device hsr_slave_0 failed to register rx_handler [ 1478.182133][T31639] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1478.184258][T31639] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1478.187504][T31639] vhci_hcd vhci_hcd.0: Device attached [ 1478.207269][T31642] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1478.209216][T31642] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1478.211940][T31642] vhci_hcd vhci_hcd.0: Device attached [ 1478.586971][ T6061] usb 42-1: SetAddress Request (123) to port 0 [ 1478.588958][ T6061] usb 42-1: new SuperSpeed USB device number 123 using vhci_hcd [ 1478.616966][ T6041] usb 46-1: SetAddress Request (27) to port 0 [ 1478.618986][ T6041] usb 46-1: new SuperSpeed USB device number 27 using vhci_hcd [ 1478.678348][T31643] vhci_hcd: connection reset by peer [ 1478.680361][T24684] vhci_hcd: stop threads [ 1478.681855][T24684] vhci_hcd: release socket [ 1478.683491][T24684] vhci_hcd: disconnect device [ 1478.686285][T31640] vhci_hcd: connection reset by peer [ 1478.697159][T24684] vhci_hcd: stop threads [ 1478.698633][T24684] vhci_hcd: release socket [ 1478.700122][T24684] vhci_hcd: disconnect device [ 1478.786106][T31650] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1478.794412][T31650] netlink: 'syz.9.3989': attribute type 10 has an invalid length. [ 1478.799027][T31650] team0: Device hsr_slave_0 failed to register rx_handler [ 1480.224625][T31668] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1480.227008][T31668] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1480.239531][T31668] vhci_hcd vhci_hcd.0: Device attached [ 1480.474430][T31676] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1480.486091][T31676] netlink: 'syz.2.3994': attribute type 10 has an invalid length. [ 1480.491747][T31676] team0: Device hsr_slave_0 failed to register rx_handler [ 1480.738093][T31669] vhci_hcd: connection closed [ 1480.740366][ T61] vhci_hcd: stop threads [ 1480.743489][ T61] vhci_hcd: release socket [ 1480.757258][ T61] vhci_hcd: disconnect device [ 1481.282384][T31691] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1481.286793][T31691] netlink: 'syz.2.3996': attribute type 10 has an invalid length. [ 1481.290353][T31691] team0: Device hsr_slave_0 failed to register rx_handler [ 1481.954961][T31702] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1481.962353][T31702] netlink: 'syz.2.3998': attribute type 10 has an invalid length. [ 1481.965971][T31702] team0: Device hsr_slave_0 failed to register rx_handler [ 1481.997593][T25817] usb 56-1: device descriptor read/8, error -110 [ 1482.397615][T25817] usb usb56-port1: attempt power cycle [ 1482.805902][T31709] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1482.808245][T31709] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1482.812062][T31709] vhci_hcd vhci_hcd.0: Device attached [ 1482.842644][T31712] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1482.844737][T31712] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1482.847922][T31712] vhci_hcd vhci_hcd.0: Device attached [ 1483.000679][T25817] usb usb56-port1: unable to enumerate USB device [ 1483.236200][T31713] vhci_hcd: connection closed [ 1483.236389][T12547] vhci_hcd: stop threads [ 1483.240195][T12547] vhci_hcd: release socket [ 1483.243044][T12547] vhci_hcd: disconnect device [ 1483.256955][T25507] usb 52-1: SetAddress Request (121) to port 0 [ 1483.259017][T25507] usb 52-1: new SuperSpeed USB device number 121 using vhci_hcd [ 1483.282392][T31710] vhci_hcd: connection reset by peer [ 1483.284321][T20787] vhci_hcd: stop threads [ 1483.285758][T20787] vhci_hcd: release socket [ 1483.289585][T20787] vhci_hcd: disconnect device [ 1483.676955][ T6061] usb 42-1: device descriptor read/8, error -110 [ 1483.679464][ T6041] usb 46-1: device descriptor read/8, error -110 [ 1483.961687][T31727] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1483.968789][T31727] netlink: 'syz.2.4001': attribute type 10 has an invalid length. [ 1483.973770][T31727] team0: Device hsr_slave_0 failed to register rx_handler [ 1484.069413][T31733] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1484.074545][T31733] netlink: 'syz.9.4003': attribute type 10 has an invalid length. [ 1484.079888][T31733] team0: Device hsr_slave_0 failed to register rx_handler [ 1484.089304][ T6041] usb usb46-port1: attempt power cycle [ 1484.091682][ T6061] usb usb42-port1: attempt power cycle [ 1484.146174][T31731] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1484.168131][T31731] netlink: 'syz.7.4002': attribute type 10 has an invalid length. [ 1484.172019][T31731] team0: Device hsr_slave_0 failed to register rx_handler [ 1484.698102][ T6061] usb usb42-port1: unable to enumerate USB device [ 1484.700218][ T6041] usb usb46-port1: unable to enumerate USB device [ 1484.760750][T31738] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1484.765010][T31738] netlink: 'syz.4.4004': attribute type 10 has an invalid length. [ 1484.768519][T31738] team0: Device hsr_slave_0 failed to register rx_handler [ 1484.919899][T31744] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1484.923762][T31744] netlink: 'syz.2.4005': attribute type 10 has an invalid length. [ 1484.926710][T31744] team0: Device hsr_slave_0 failed to register rx_handler [ 1485.903772][T31764] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1485.908525][T31764] netlink: 'syz.4.4008': attribute type 10 has an invalid length. [ 1485.911341][T31764] team0: Device hsr_slave_0 failed to register rx_handler [ 1487.561396][T31779] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1487.567976][T31779] netlink: 'syz.4.4011': attribute type 10 has an invalid length. [ 1487.572157][T31779] team0: Device hsr_slave_0 failed to register rx_handler [ 1488.273755][T31788] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1488.279808][T31788] netlink: 'syz.4.4012': attribute type 10 has an invalid length. [ 1488.282850][T31788] team0: Device hsr_slave_0 failed to register rx_handler [ 1488.316933][T25507] usb 52-1: device descriptor read/8, error -110 [ 1488.377839][T31791] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1488.391644][T31791] netlink: 'syz.7.4013': attribute type 10 has an invalid length. [ 1488.395097][T31791] team0: Device hsr_slave_0 failed to register rx_handler [ 1488.672880][T31796] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1488.679131][T31796] netlink: 'syz.9.4014': attribute type 10 has an invalid length. [ 1488.682449][T31796] team0: Device hsr_slave_0 failed to register rx_handler [ 1488.727565][T25507] usb usb52-port1: attempt power cycle [ 1489.062041][T31811] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1489.068266][T31811] netlink: 'syz.4.4016': attribute type 10 has an invalid length. [ 1489.071441][T31811] team0: Device hsr_slave_0 failed to register rx_handler [ 1489.098438][T31812] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1489.103180][T31812] netlink: 'syz.7.4017': attribute type 10 has an invalid length. [ 1489.106517][T31812] team0: Device hsr_slave_0 failed to register rx_handler [ 1489.281665][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.284914][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.470566][T25507] usb usb52-port1: unable to enumerate USB device [ 1489.883965][T31822] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1489.906479][T31822] netlink: 'syz.4.4019': attribute type 10 has an invalid length. [ 1489.966555][T31816] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1489.969342][T31816] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1489.972947][T31816] vhci_hcd vhci_hcd.0: Device attached [ 1489.983936][T31822] team0: Device hsr_slave_0 failed to register rx_handler [ 1490.132763][T31832] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1490.138733][T31832] netlink: 'syz.7.4020': attribute type 10 has an invalid length. [ 1490.142892][T31832] team0: Device hsr_slave_0 failed to register rx_handler [ 1490.223694][T31826] vhci_hcd: connection closed [ 1490.224048][ T95] vhci_hcd: stop threads [ 1490.228592][ T95] vhci_hcd: release socket [ 1490.230623][ T95] vhci_hcd: disconnect device [ 1490.246937][ T68] usb 56-1: enqueue for inactive port 0 [ 1490.760300][ T68] usb usb56-port1: attempt power cycle [ 1490.792703][T31847] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1490.822020][T31847] netlink: 'syz.7.4022': attribute type 10 has an invalid length. [ 1490.824927][T31847] team0: Device hsr_slave_0 failed to register rx_handler [ 1490.964655][T31853] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1490.971818][T31853] netlink: 'syz.9.4023': attribute type 10 has an invalid length. [ 1490.975151][T31853] team0: Device hsr_slave_0 failed to register rx_handler [ 1491.337999][ T68] usb usb56-port1: unable to enumerate USB device [ 1491.606453][T31861] wireguard0: entered promiscuous mode [ 1491.608876][T31861] wireguard0: entered allmulticast mode [ 1491.668904][T31863] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1491.683287][T31863] netlink: 'syz.9.4025': attribute type 10 has an invalid length. [ 1491.687725][T31863] team0: Device hsr_slave_0 failed to register rx_handler [ 1492.204052][T31874] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1492.207941][T31874] netlink: 'syz.2.4026': attribute type 10 has an invalid length. [ 1492.210766][T31874] team0: Device hsr_slave_0 failed to register rx_handler [ 1492.751744][T31882] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1492.753811][T31882] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1492.759535][T31882] vhci_hcd vhci_hcd.0: Device attached [ 1493.087865][T31883] vhci_hcd: connection closed [ 1493.088219][T20787] vhci_hcd: stop threads [ 1493.092469][T20787] vhci_hcd: release socket [ 1493.094508][T20787] vhci_hcd: disconnect device [ 1493.127272][T25507] usb 56-1: enqueue for inactive port 0 [ 1493.617465][T25507] usb usb56-port1: attempt power cycle [ 1493.830455][T31902] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1493.836210][T31902] netlink: 'syz.9.4031': attribute type 10 has an invalid length. [ 1493.843402][T31902] team0: Device hsr_slave_0 failed to register rx_handler [ 1493.867029][T31903] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1493.881109][T31903] netlink: 'syz.2.4032': attribute type 10 has an invalid length. [ 1493.889745][T31903] team0: Device hsr_slave_0 failed to register rx_handler [ 1494.207541][T25507] usb usb56-port1: unable to enumerate USB device [ 1494.614374][T31915] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1494.624620][T31915] netlink: 'syz.2.4033': attribute type 10 has an invalid length. [ 1494.629545][T31915] team0: Device hsr_slave_0 failed to register rx_handler [ 1494.662358][T31916] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1494.676740][T31916] netlink: 'syz.9.4034': attribute type 10 has an invalid length. [ 1494.690490][T31916] team0: Device hsr_slave_0 failed to register rx_handler [ 1495.308461][T31925] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1495.313989][T31925] netlink: 'syz.2.4035': attribute type 10 has an invalid length. [ 1495.317504][T31925] team0: Device hsr_slave_0 failed to register rx_handler [ 1495.445763][T31929] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1495.451912][T31929] netlink: 'syz.9.4036': attribute type 10 has an invalid length. [ 1495.455759][T31929] team0: Device hsr_slave_0 failed to register rx_handler [ 1495.799531][T31934] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1495.806977][T31934] netlink: 'syz.7.4037': attribute type 10 has an invalid length. [ 1495.843577][T31934] team0: Device hsr_slave_0 failed to register rx_handler [ 1496.443985][T31948] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1496.446087][T31948] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1496.449881][T31948] vhci_hcd vhci_hcd.0: Device attached [ 1497.251756][T31958] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1497.254347][T31958] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1497.259549][T31958] vhci_hcd vhci_hcd.0: Device attached [ 1497.324326][T31949] vhci_hcd: connection closed [ 1497.324895][T24684] vhci_hcd: stop threads [ 1497.330772][T24684] vhci_hcd: release socket [ 1497.333029][T24684] vhci_hcd: disconnect device [ 1497.527093][ T7951] usb 46-1: SetAddress Request (31) to port 0 [ 1497.529708][ T7951] usb 46-1: new SuperSpeed USB device number 31 using vhci_hcd [ 1497.702478][T31964] vhci_hcd: connection reset by peer [ 1497.704438][ T12] vhci_hcd: stop threads [ 1497.706314][ T12] vhci_hcd: release socket [ 1497.708428][ T12] vhci_hcd: disconnect device [ 1498.076629][T31972] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1498.104521][T31972] netlink: 'syz.2.4043': attribute type 10 has an invalid length. [ 1498.114358][T31972] team0: Device hsr_slave_0 failed to register rx_handler [ 1498.414988][T31978] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1498.420656][T31978] netlink: 'syz.4.4044': attribute type 10 has an invalid length. [ 1498.423791][T31978] team0: Device hsr_slave_0 failed to register rx_handler [ 1499.020299][T31984] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1499.022572][T31984] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1499.025276][T31984] vhci_hcd vhci_hcd.0: Device attached [ 1499.369794][T31985] vhci_hcd: connection closed [ 1499.369893][ T61] vhci_hcd: stop threads [ 1499.373531][ T61] vhci_hcd: release socket [ 1499.375423][ T61] vhci_hcd: disconnect device [ 1499.406956][T25507] usb 42-1: enqueue for inactive port 0 [ 1499.472795][T31993] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1499.474894][T31993] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1499.481491][T31996] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1499.483552][T31996] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1499.486244][T31996] vhci_hcd vhci_hcd.0: Device attached [ 1499.606920][T31993] vhci_hcd vhci_hcd.0: Device attached [ 1499.607917][T32001] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1499.620372][T32001] netlink: 'syz.7.4048': attribute type 10 has an invalid length. [ 1499.625766][T32001] team0: Device hsr_slave_0 failed to register rx_handler [ 1499.866974][T25133] usb 56-1: SetAddress Request (18) to port 0 [ 1499.868946][T25133] usb 56-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1500.017748][T25507] usb usb42-port1: attempt power cycle [ 1500.042936][T31997] vhci_hcd: connection reset by peer [ 1500.045167][T12547] vhci_hcd: stop threads [ 1500.047296][T12547] vhci_hcd: release socket [ 1500.049319][T12547] vhci_hcd: disconnect device [ 1500.104486][T31994] vhci_hcd: connection closed [ 1500.107463][T12547] vhci_hcd: stop threads [ 1500.110815][T12547] vhci_hcd: release socket [ 1500.112400][T12547] vhci_hcd: disconnect device [ 1500.337272][T32014] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1500.344458][T32014] netlink: 'syz.7.4050': attribute type 10 has an invalid length. [ 1500.347898][T32014] team0: Device hsr_slave_0 failed to register rx_handler [ 1500.504246][T32015] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1500.507029][T32015] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1500.667238][T32015] vhci_hcd vhci_hcd.0: Device attached [ 1500.726971][T25507] usb 42-1: SetAddress Request (5) to port 0 [ 1500.729238][T25507] usb 42-1: new SuperSpeed USB device number 5 using vhci_hcd [ 1501.005967][T32016] vhci_hcd: connection reset by peer [ 1501.054389][T20787] vhci_hcd: stop threads [ 1501.060003][T20787] vhci_hcd: release socket [ 1501.061974][T20787] vhci_hcd: disconnect device [ 1501.062867][T32034] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1501.071737][T32034] netlink: 'syz.7.4053': attribute type 10 has an invalid length. [ 1501.075060][T32034] team0: Device hsr_slave_0 failed to register rx_handler [ 1501.863981][T32049] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1501.882446][T32049] netlink: 'syz.7.4055': attribute type 10 has an invalid length. [ 1501.890383][T32049] team0: Device hsr_slave_0 failed to register rx_handler [ 1502.646976][ T7951] usb 46-1: device descriptor read/8, error -110 [ 1502.890980][T32059] wireguard0: entered promiscuous mode [ 1502.893095][T32059] wireguard0: entered allmulticast mode [ 1503.049144][ T7951] usb usb46-port1: attempt power cycle [ 1503.448335][T32065] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1503.450441][T32065] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1503.453159][T32065] vhci_hcd vhci_hcd.0: Device attached [ 1503.667029][ T7951] usb 46-1: SetAddress Request (34) to port 0 [ 1503.669729][ T7951] usb 46-1: new SuperSpeed USB device number 34 using vhci_hcd [ 1503.762060][T32073] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1503.772601][T32073] netlink: 'syz.7.4060': attribute type 10 has an invalid length. [ 1503.776809][T32073] team0: Device hsr_slave_0 failed to register rx_handler [ 1503.824558][T32066] vhci_hcd: connection reset by peer [ 1503.832303][T12547] vhci_hcd: stop threads [ 1503.835584][T12547] vhci_hcd: release socket [ 1503.838587][T12547] vhci_hcd: disconnect device [ 1504.010528][T32079] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1504.016000][T32079] netlink: 'syz.9.4061': attribute type 10 has an invalid length. [ 1504.019197][T32079] team0: Device hsr_slave_0 failed to register rx_handler [ 1504.448993][T32084] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1504.474792][T32084] netlink: 'syz.7.4062': attribute type 10 has an invalid length. [ 1504.488677][T32084] team0: Device hsr_slave_0 failed to register rx_handler [ 1504.592750][T32091] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1504.648106][T32091] netlink: 'syz.4.4063': attribute type 10 has an invalid length. [ 1504.651679][T32091] team0: Device hsr_slave_0 failed to register rx_handler [ 1504.957089][T25133] usb 56-1: device descriptor read/8, error -110 [ 1505.203136][T32104] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1505.206057][T32104] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1505.227363][T32104] vhci_hcd vhci_hcd.0: Device attached [ 1505.603021][T32106] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1505.605795][T32106] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1505.607456][T25133] usb 56-1: SetAddress Request (19) to port 0 [ 1505.610413][T25133] usb 56-1: new SuperSpeed USB device number 19 using vhci_hcd [ 1505.622867][T32106] vhci_hcd vhci_hcd.0: Device attached [ 1505.757112][T25507] usb 42-1: device descriptor read/8, error -110 [ 1505.784595][T32108] vhci_hcd: connection reset by peer [ 1505.787524][ T12] vhci_hcd: stop threads [ 1505.789343][ T12] vhci_hcd: release socket [ 1505.793501][ T12] vhci_hcd: disconnect device [ 1505.861068][T32115] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1505.863779][T32115] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1505.867664][T25507] usb usb42-port1: unable to enumerate USB device [ 1505.872748][T32115] vhci_hcd vhci_hcd.0: Device attached [ 1505.887071][T29001] usb 52-1: SetAddress Request (125) to port 0 [ 1505.889706][T29001] usb 52-1: new SuperSpeed USB device number 125 using vhci_hcd [ 1506.099556][T32112] vhci_hcd: connection reset by peer [ 1506.102250][ T95] vhci_hcd: stop threads [ 1506.103889][ T95] vhci_hcd: release socket [ 1506.105302][ T95] vhci_hcd: disconnect device [ 1506.163891][T32116] vhci_hcd: connection closed [ 1506.164135][T12547] vhci_hcd: stop threads [ 1506.168463][T12547] vhci_hcd: release socket [ 1506.169945][T12547] vhci_hcd: disconnect device [ 1507.115606][T32128] wireguard0: entered promiscuous mode [ 1507.191185][T32134] netlink: 'syz.4.4071': attribute type 10 has an invalid length. [ 1507.224103][T32128] wireguard0: entered allmulticast mode [ 1507.242748][T32131] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1507.246012][T32134] team0: Device hsr_slave_0 failed to register rx_handler [ 1507.940239][T32142] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1507.946091][T32142] netlink: 'syz.4.4072': attribute type 10 has an invalid length. [ 1507.949584][T32142] team0: Device hsr_slave_0 failed to register rx_handler [ 1508.181194][T32149] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1508.185770][T32149] netlink: 'syz.9.4074': attribute type 10 has an invalid length. [ 1508.197365][T32149] team0: Device hsr_slave_0 failed to register rx_handler [ 1508.689801][T32154] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1508.694895][T32154] netlink: 'syz.2.4075': attribute type 10 has an invalid length. [ 1508.699737][T32154] team0: Device hsr_slave_0 failed to register rx_handler [ 1508.716978][ T7951] usb 46-1: device descriptor read/8, error -110 [ 1508.827359][ T7951] usb usb46-port1: unable to enumerate USB device [ 1509.202502][T32166] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1509.206332][T32166] netlink: 'syz.9.4078': attribute type 10 has an invalid length. [ 1509.210025][T32166] team0: Device hsr_slave_0 failed to register rx_handler [ 1509.420721][T32173] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1509.422830][T32173] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1509.425537][T32173] vhci_hcd vhci_hcd.0: Device attached [ 1509.750316][T32174] vhci_hcd: connection closed [ 1509.750561][ T13] vhci_hcd: stop threads [ 1509.753429][ T13] vhci_hcd: release socket [ 1509.754905][ T13] vhci_hcd: disconnect device [ 1510.308656][T32192] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1510.320711][T32192] netlink: 'syz.4.4081': attribute type 10 has an invalid length. [ 1510.325290][T32192] team0: Device hsr_slave_0 failed to register rx_handler [ 1510.637801][T32197] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1510.642322][T32197] netlink: 'syz.7.4082': attribute type 10 has an invalid length. [ 1510.645624][T32197] team0: Device hsr_slave_0 failed to register rx_handler [ 1510.717021][T25133] usb 56-1: device descriptor read/8, error -110 [ 1510.827085][T25133] usb usb56-port1: attempt power cycle [ 1510.966965][T29001] usb 52-1: device descriptor read/8, error -110 [ 1511.306248][T32206] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1511.308345][T32206] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1511.311450][T32206] vhci_hcd vhci_hcd.0: Device attached [ 1511.367694][T29001] usb usb52-port1: attempt power cycle [ 1511.399557][T25133] usb usb56-port1: unable to enumerate USB device [ 1511.480481][T32212] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1511.506074][T32212] netlink: 'syz.7.4085': attribute type 10 has an invalid length. [ 1511.518185][T32212] team0: Device hsr_slave_0 failed to register rx_handler [ 1511.577053][ T6041] usb 46-1: SetAddress Request (35) to port 0 [ 1511.579712][ T6041] usb 46-1: new SuperSpeed USB device number 35 using vhci_hcd [ 1511.595001][T32207] vhci_hcd: connection closed [ 1511.595280][ T61] vhci_hcd: stop threads [ 1511.599085][ T61] vhci_hcd: release socket [ 1511.601532][ T61] vhci_hcd: disconnect device [ 1511.932180][T29001] usb usb52-port1: unable to enumerate USB device [ 1512.138535][T32218] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1512.146354][T32218] netlink: 'syz.7.4086': attribute type 10 has an invalid length. [ 1512.150429][T32218] team0: Device hsr_slave_0 failed to register rx_handler [ 1512.447407][T32226] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1512.455287][T32226] netlink: 'syz.4.4087': attribute type 10 has an invalid length. [ 1512.474436][T32226] team0: Device hsr_slave_0 failed to register rx_handler [ 1512.546312][T32229] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1512.552732][T32229] netlink: 'syz.2.4088': attribute type 10 has an invalid length. [ 1512.558127][T32229] team0: Device hsr_slave_0 failed to register rx_handler [ 1512.944945][T32236] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1512.949066][T32236] netlink: 'syz.7.4089': attribute type 10 has an invalid length. [ 1512.951875][T32236] team0: Device hsr_slave_0 failed to register rx_handler [ 1513.359659][T32245] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1513.363457][T32245] netlink: 'syz.4.4090': attribute type 10 has an invalid length. [ 1513.366366][T32245] team0: Device hsr_slave_0 failed to register rx_handler [ 1513.741798][T32255] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1513.746674][T32255] netlink: 'syz.2.4094': attribute type 10 has an invalid length. [ 1513.751353][T32255] team0: Device hsr_slave_0 failed to register rx_handler [ 1514.145481][T32259] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1514.147551][T32259] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1514.151633][T32259] vhci_hcd vhci_hcd.0: Device attached [ 1514.497005][T25133] usb 52-1: SetAddress Request (3) to port 0 [ 1514.499624][T25133] usb 52-1: new SuperSpeed USB device number 3 using vhci_hcd [ 1514.584144][T32260] vhci_hcd: connection reset by peer [ 1514.587375][T12547] vhci_hcd: stop threads [ 1514.589485][T12547] vhci_hcd: release socket [ 1514.591777][T12547] vhci_hcd: disconnect device [ 1514.760146][T32272] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1514.768460][T32272] netlink: 'syz.2.4096': attribute type 10 has an invalid length. [ 1514.772040][T32272] team0: Device hsr_slave_0 failed to register rx_handler [ 1515.357193][T32280] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1515.391605][T32280] netlink: 'syz.7.4097': attribute type 10 has an invalid length. [ 1515.396202][T32280] team0: Device hsr_slave_0 failed to register rx_handler [ 1515.711936][T32283] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1515.714037][T32283] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1515.716706][T32283] vhci_hcd vhci_hcd.0: Device attached [ 1516.029283][T32284] vhci_hcd: connection closed [ 1516.029648][T12547] vhci_hcd: stop threads [ 1516.033414][T12547] vhci_hcd: release socket [ 1516.036285][T12547] vhci_hcd: disconnect device [ 1516.057882][ T6061] usb 42-1: enqueue for inactive port 0 [ 1516.549663][ T6061] usb usb42-port1: attempt power cycle [ 1516.637033][ T6041] usb 46-1: device descriptor read/8, error -110 [ 1517.029626][ T6041] usb usb46-port1: attempt power cycle [ 1517.117658][ T6061] usb usb42-port1: unable to enumerate USB device [ 1517.623903][ T6041] usb usb46-port1: unable to enumerate USB device [ 1517.760035][T32310] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1517.762602][T32310] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1517.766586][T32310] vhci_hcd vhci_hcd.0: Device attached [ 1518.067034][ T6041] usb 46-1: SetAddress Request (39) to port 0 [ 1518.069770][ T6041] usb 46-1: new SuperSpeed USB device number 39 using vhci_hcd [ 1518.276553][T32311] vhci_hcd: connection reset by peer [ 1518.278722][T24684] vhci_hcd: stop threads [ 1518.280563][T24684] vhci_hcd: release socket [ 1518.282712][T24684] vhci_hcd: disconnect device [ 1519.587101][T32329] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1519.597011][T25133] usb 52-1: device descriptor read/8, error -110 [ 1519.598781][T32329] netlink: 'syz.9.4106': attribute type 10 has an invalid length. [ 1519.602293][T32329] team0: Device hsr_slave_0 failed to register rx_handler [ 1519.990674][T25133] usb usb52-port1: attempt power cycle [ 1520.151854][T32335] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1520.180833][T32335] netlink: 'syz.2.4107': attribute type 10 has an invalid length. [ 1520.183798][T32335] team0: Device hsr_slave_0 failed to register rx_handler [ 1520.573850][T25133] usb usb52-port1: unable to enumerate USB device [ 1521.134086][T32347] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1521.413106][T32351] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1521.422528][T32351] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1521.427734][T32351] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1521.442161][T32351] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1521.459393][T32351] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1521.672977][T12547] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.693539][T32349] chnl_net:caif_netlink_parms(): no params data found [ 1521.777350][T12547] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.818813][T32349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.821382][T32349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.824215][T32349] bridge_slave_0: entered allmulticast mode [ 1521.828684][T32349] bridge_slave_0: entered promiscuous mode [ 1521.833575][T32349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.836306][T32349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.839555][T32349] bridge_slave_1: entered allmulticast mode [ 1521.843662][T32349] bridge_slave_1: entered promiscuous mode [ 1521.941595][T12547] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.965633][T32349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1521.970836][T32349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.012593][T12547] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.043671][T32349] team0: Port device team_slave_0 added [ 1522.048203][T32349] team0: Port device team_slave_1 added [ 1522.122548][T32349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1522.125139][T32349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1522.134061][T32349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1522.143198][T32349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1522.146161][T32349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1522.157510][T32349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1522.242074][T32349] hsr_slave_0: entered promiscuous mode [ 1522.246472][T32349] hsr_slave_1: entered promiscuous mode [ 1522.250872][T32349] debugfs: 'hsr0' already exists in 'hsr' [ 1522.253380][T32349] Cannot create hsr debugfs directory [ 1522.336170][T32374] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1522.338231][T32374] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1522.343764][T32374] vhci_hcd vhci_hcd.0: Device attached [ 1522.388399][ T40] audit: type=1800 audit(1757713738.166:16086): pid=32374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4112" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1522.692674][T32375] vhci_hcd: connection closed [ 1522.692895][T24684] vhci_hcd: stop threads [ 1522.696749][T24684] vhci_hcd: release socket [ 1522.701162][T24684] vhci_hcd: disconnect device [ 1522.945758][T12547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1522.953597][T12547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1522.961334][T12547] bond0 (unregistering): Released all slaves [ 1523.117373][ T6041] usb 46-1: device descriptor read/8, error -110 [ 1523.355277][T12547] hsr_slave_0: left promiscuous mode [ 1523.364456][T12547] hsr_slave_1: left promiscuous mode [ 1523.367568][T12547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1523.371193][T12547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1523.375744][T12547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1523.378521][T12547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1523.410798][T12547] veth1_macvtap: left promiscuous mode [ 1523.413097][T12547] veth0_macvtap: left promiscuous mode [ 1523.415094][T12547] veth1_vlan: left promiscuous mode [ 1523.416810][T12547] veth0_vlan: left promiscuous mode [ 1523.494652][T12547] pim6reg (unregistering): left allmulticast mode [ 1523.510995][ T6041] usb usb46-port1: attempt power cycle [ 1523.527079][ T5983] Bluetooth: hci4: command tx timeout [ 1523.728301][T32394] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1523.730494][T32394] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1523.737276][T32394] vhci_hcd vhci_hcd.0: Device attached [ 1523.806089][ T40] audit: type=1800 audit(1757713739.576:16087): pid=32394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4114" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1523.967019][ T6041] usb 46-1: SetAddress Request (41) to port 0 [ 1523.969017][ T6041] usb 46-1: new SuperSpeed USB device number 41 using vhci_hcd [ 1523.982342][T32395] vhci_hcd: connection closed [ 1523.982532][ T12] vhci_hcd: stop threads [ 1523.985428][ T12] vhci_hcd: release socket [ 1523.987537][ T12] vhci_hcd: disconnect device [ 1524.191988][T12547] team0 (unregistering): Port device team_slave_1 removed [ 1524.252523][T12547] team0 (unregistering): Port device team_slave_0 removed [ 1524.839126][T32403] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1524.870846][T32403] netlink: 'syz.4.4115': attribute type 10 has an invalid length. [ 1524.886680][T32403] team0: Device hsr_slave_0 failed to register rx_handler [ 1525.131834][T32349] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1525.235861][T32349] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1525.325293][T32349] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1525.400279][T32349] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1525.428504][T32427] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1525.434046][T32427] netlink: 'syz.7.4117': attribute type 10 has an invalid length. [ 1525.437577][T32427] team0: Device hsr_slave_0 failed to register rx_handler [ 1525.624746][ T5983] Bluetooth: hci4: command tx timeout [ 1525.673988][T12547] IPVS: stop unused estimator thread 0... [ 1525.732289][T32349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1525.754642][T32349] 8021q: adding VLAN 0 to HW filter on device team0 [ 1525.766194][T12547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.768645][T12547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.784242][T24684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.786638][T24684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1526.099805][T32349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1526.310823][T32349] veth0_vlan: entered promiscuous mode [ 1526.315996][T32349] veth1_vlan: entered promiscuous mode [ 1526.331420][T32349] veth0_macvtap: entered promiscuous mode [ 1526.335185][T32349] veth1_macvtap: entered promiscuous mode [ 1526.345711][T32349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1526.353085][T32349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1526.360865][ T61] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.364111][ T61] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.368709][T12547] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.372476][T12547] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.410681][T24684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.413897][T24684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.426527][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1526.430179][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1527.677110][ T5983] Bluetooth: hci4: command tx timeout [ 1529.037161][ T6041] usb 46-1: device descriptor read/8, error -110 [ 1529.437620][ T6041] usb usb46-port1: unable to enumerate USB device [ 1529.767022][ T5983] Bluetooth: hci4: command tx timeout [ 1539.069577][T32351] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1539.079752][T32351] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1539.082941][T32351] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1539.086196][T32351] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1539.089431][T32351] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1539.252278][T32456] chnl_net:caif_netlink_parms(): no params data found [ 1539.334578][ T95] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.454720][ T95] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.461151][T32471] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1539.463252][T32471] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1539.467214][T32471] vhci_hcd vhci_hcd.0: Device attached [ 1539.495467][ T40] audit: type=1800 audit(1757713755.266:16088): pid=32471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4120" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1539.551547][T32456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.554778][T32456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.559346][T32456] bridge_slave_0: entered allmulticast mode [ 1539.563241][T32456] bridge_slave_0: entered promiscuous mode [ 1539.582197][ T95] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.590436][T32456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.592853][T32456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.595314][T32456] bridge_slave_1: entered allmulticast mode [ 1539.603230][T32456] bridge_slave_1: entered promiscuous mode [ 1539.668435][T32456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1539.681209][T32476] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1539.681240][ T95] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.683321][T32476] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1539.683588][T32476] vhci_hcd vhci_hcd.0: Device attached [ 1539.693891][T32456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1539.732830][T32456] team0: Port device team_slave_0 added [ 1539.736758][T32456] team0: Port device team_slave_1 added [ 1539.774671][T32456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1539.778142][T32456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1539.786815][T32456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1539.791873][T32456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1539.794123][T32456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1539.802382][T32456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1539.834332][T32472] vhci_hcd: connection closed [ 1539.835168][T24684] vhci_hcd: stop threads [ 1539.838759][T24684] vhci_hcd: release socket [ 1539.840237][T24684] vhci_hcd: disconnect device [ 1539.854407][ T40] audit: type=1800 audit(1757713755.626:16089): pid=32476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4119" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1539.887097][T32456] hsr_slave_0: entered promiscuous mode [ 1539.890434][T32456] hsr_slave_1: entered promiscuous mode [ 1539.892598][T32456] debugfs: 'hsr0' already exists in 'hsr' [ 1539.894398][T32456] Cannot create hsr debugfs directory [ 1539.989811][ T6041] usb 52-1: SetAddress Request (7) to port 0 [ 1539.991911][ T6041] usb 52-1: new SuperSpeed USB device number 7 using vhci_hcd [ 1540.222720][T32477] vhci_hcd: connection reset by peer [ 1540.225180][ T12] vhci_hcd: stop threads [ 1540.227583][ T12] vhci_hcd: release socket [ 1540.229537][ T12] vhci_hcd: disconnect device [ 1540.372036][ T95] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1540.378148][ T95] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1540.383299][ T95] bond0 (unregistering): Released all slaves [ 1540.851949][ T95] hsr_slave_0: left promiscuous mode [ 1540.856935][ T95] hsr_slave_1: left promiscuous mode [ 1540.860879][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1540.864290][ T95] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1540.869893][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1540.873023][ T95] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.929503][ T95] veth1_macvtap: left promiscuous mode [ 1540.932063][ T95] veth0_macvtap: left promiscuous mode [ 1540.935536][ T95] veth1_vlan: left promiscuous mode [ 1540.938392][ T95] veth0_vlan: left promiscuous mode [ 1541.122856][ T95] pim6reg (unregistering): left allmulticast mode [ 1541.129892][T32351] Bluetooth: hci1: command tx timeout [ 1541.880248][ T95] team0 (unregistering): Port device team_slave_1 removed [ 1541.973041][ T95] team0 (unregistering): Port device team_slave_0 removed [ 1542.279833][T32508] netlink: 'syz.2.4124': attribute type 10 has an invalid length. [ 1542.565881][T32499] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1542.570364][T32507] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1542.587658][T32508] team0: Device hsr_slave_0 failed to register rx_handler [ 1542.954517][T32525] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1542.962140][T32525] netlink: 'syz.2.4126': attribute type 10 has an invalid length. [ 1542.966524][T32525] team0: Device hsr_slave_0 failed to register rx_handler [ 1542.980602][T32456] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1543.002404][T32456] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1543.014969][T32456] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1543.048360][T32456] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1543.086639][ T95] IPVS: stop unused estimator thread 0... [ 1543.216674][T32351] Bluetooth: hci1: command tx timeout [ 1543.273753][T32456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.298415][T32456] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.310570][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.313349][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1543.345594][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.348308][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1543.760015][T32456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1544.108955][T32456] veth0_vlan: entered promiscuous mode [ 1544.131731][T32456] veth1_vlan: entered promiscuous mode [ 1544.197275][T32456] veth0_macvtap: entered promiscuous mode [ 1544.209351][T32456] veth1_macvtap: entered promiscuous mode [ 1544.233185][T32456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1544.250595][T32456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1544.261097][ T95] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.264586][ T95] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.278532][ T95] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.285551][ T95] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.343542][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.347498][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1544.407449][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1544.410017][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1544.817354][T32562] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1544.820262][T32562] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1544.824137][T32562] vhci_hcd vhci_hcd.0: Device attached [ 1544.892123][ T40] audit: type=1800 audit(1757713760.666:16090): pid=32562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4118" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1545.047098][ T6041] usb 52-1: device descriptor read/8, error -110 [ 1545.117167][ T6061] usb 46-1: SetAddress Request (43) to port 0 [ 1545.121322][ T6061] usb 46-1: new SuperSpeed USB device number 43 using vhci_hcd [ 1545.245981][T32563] vhci_hcd: connection reset by peer [ 1545.248819][ T61] vhci_hcd: stop threads [ 1545.250659][ T61] vhci_hcd: release socket [ 1545.252238][ T61] vhci_hcd: disconnect device [ 1545.276961][T32351] Bluetooth: hci1: command tx timeout [ 1545.457904][ T6041] usb usb52-port1: attempt power cycle [ 1546.039633][ T6041] usb usb52-port1: unable to enumerate USB device [ 1546.915778][T32581] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1546.921608][T32581] netlink: 'syz.9.4131': attribute type 10 has an invalid length. [ 1546.930258][T32581] team0: Device hsr_slave_0 failed to register rx_handler [ 1547.367610][T32351] Bluetooth: hci1: command tx timeout [ 1547.420969][ T5983] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1547.425847][ T5983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1547.429652][ T5983] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1547.435842][ T5983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1547.440355][ T5983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1547.552105][ T1144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.639507][T32583] chnl_net:caif_netlink_parms(): no params data found [ 1547.668457][ T1144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.759608][T32583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.762036][T32583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.764358][T32583] bridge_slave_0: entered allmulticast mode [ 1547.767125][T32583] bridge_slave_0: entered promiscuous mode [ 1547.779940][ T1144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.799981][T32594] wireguard0: entered promiscuous mode [ 1547.801835][T32594] wireguard0: entered allmulticast mode [ 1547.830589][T32583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.833013][T32583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.835386][T32583] bridge_slave_1: entered allmulticast mode [ 1547.838363][T32583] bridge_slave_1: entered promiscuous mode [ 1547.849958][ T1144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.895251][T32583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1547.900605][T32583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1547.940894][T32583] team0: Port device team_slave_0 added [ 1547.944941][T32583] team0: Port device team_slave_1 added [ 1548.023184][T32583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1548.029353][T32583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.040081][T32583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1548.058170][T32583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1548.063320][T32583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.074080][T32583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.346541][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1548.354113][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1548.361594][ T1144] bond0 (unregistering): Released all slaves [ 1548.376990][T32583] hsr_slave_0: entered promiscuous mode [ 1548.380175][T32583] hsr_slave_1: entered promiscuous mode [ 1548.382712][T32583] debugfs: 'hsr0' already exists in 'hsr' [ 1548.385202][T32583] Cannot create hsr debugfs directory [ 1548.698095][ T1144] hsr_slave_0: left promiscuous mode [ 1548.701279][ T1144] hsr_slave_1: left promiscuous mode [ 1548.704136][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1548.709511][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1548.714058][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1548.716418][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1548.748259][ T1144] veth1_macvtap: left promiscuous mode [ 1548.750861][ T1144] veth0_macvtap: left promiscuous mode [ 1548.753288][ T1144] veth1_vlan: left promiscuous mode [ 1548.755818][ T1144] veth0_vlan: left promiscuous mode [ 1548.887909][ T1144] pim6reg (unregistering): left allmulticast mode [ 1549.202202][T32614] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1549.204303][T32614] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1549.219257][T32614] vhci_hcd vhci_hcd.0: Device attached [ 1549.289408][ T40] audit: type=1800 audit(1757713765.066:16091): pid=32614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4134" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1549.496842][T32618] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1549.499436][T32618] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1549.503750][T32618] vhci_hcd vhci_hcd.0: Device attached [ 1549.519959][T32351] Bluetooth: hci0: command tx timeout [ 1549.537005][T25507] usb 56-1: SetAddress Request (23) to port 0 [ 1549.539819][T25507] usb 56-1: new SuperSpeed USB device number 23 using vhci_hcd [ 1549.645950][T32615] vhci_hcd: connection closed [ 1549.646495][ T12] vhci_hcd: stop threads [ 1549.651920][ T12] vhci_hcd: release socket [ 1549.656084][ T12] vhci_hcd: disconnect device [ 1549.667062][ T40] audit: type=1800 audit(1757713765.446:16092): pid=32618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4135" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1549.887500][ T6041] usb 52-1: SetAddress Request (11) to port 0 [ 1549.889801][ T6041] usb 52-1: new SuperSpeed USB device number 11 using vhci_hcd [ 1550.128827][T32620] vhci_hcd: connection reset by peer [ 1550.130728][ T95] vhci_hcd: stop threads [ 1550.131911][ T95] vhci_hcd: release socket [ 1550.133511][ T95] vhci_hcd: disconnect device [ 1550.149517][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 1550.167007][ T6061] usb 46-1: device descriptor read/8, error -110 [ 1550.242500][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 1550.647816][ T6061] usb usb46-port1: attempt power cycle [ 1550.729049][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 1550.731809][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.993531][T32626] wireguard0: entered promiscuous mode [ 1550.995963][T32626] wireguard0: entered allmulticast mode [ 1551.247823][ T6061] usb usb46-port1: unable to enumerate USB device [ 1551.436248][T32583] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1551.442243][T32583] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1551.449785][T32583] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1551.457888][T32583] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1551.472859][ T1144] IPVS: stop unused estimator thread 0... [ 1551.546714][T32583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.561135][T32583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.566151][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.568430][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.580996][T12547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.584138][T12547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1551.603847][T32583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1551.607477][T32351] Bluetooth: hci0: command tx timeout [ 1551.698436][T32583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1551.724812][T32583] veth0_vlan: entered promiscuous mode [ 1551.730188][T32583] veth1_vlan: entered promiscuous mode [ 1551.745940][T32583] veth0_macvtap: entered promiscuous mode [ 1551.752567][T32583] veth1_macvtap: entered promiscuous mode [ 1551.761095][T32583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.768522][T32583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1551.775502][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.779221][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.782309][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.785142][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.920407][T12547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.922869][T12547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.930251][T20787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.937376][T20787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.039798][T32668] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1552.041892][T32668] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1552.045024][T32668] vhci_hcd vhci_hcd.0: Device attached [ 1552.083218][ T40] audit: type=1800 audit(1757713767.856:16093): pid=32668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4139" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1552.485382][T32669] vhci_hcd: connection reset by peer [ 1552.497980][T20787] vhci_hcd: stop threads [ 1552.499536][T20787] vhci_hcd: release socket [ 1552.501243][T20787] vhci_hcd: disconnect device [ 1552.680589][T32678] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1552.682762][T32678] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1552.685435][T32678] vhci_hcd vhci_hcd.0: Device attached [ 1552.705420][ T40] audit: type=1800 audit(1757713768.476:16094): pid=32678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4140" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1552.956996][ T6061] usb 46-1: SetAddress Request (47) to port 0 [ 1552.959638][ T6061] usb 46-1: new SuperSpeed USB device number 47 using vhci_hcd [ 1552.971934][T32679] vhci_hcd: connection closed [ 1552.972111][T12547] vhci_hcd: stop threads [ 1552.976546][T12547] vhci_hcd: release socket [ 1552.978547][T12547] vhci_hcd: disconnect device [ 1552.986929][ T6061] usb 46-1: enqueue for inactive port 0 [ 1553.219312][T32686] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1553.224768][T32686] netlink: 'syz.9.4141': attribute type 10 has an invalid length. [ 1553.230802][T32686] team0: Device hsr_slave_0 failed to register rx_handler [ 1553.388001][ T6061] usb usb46-port1: attempt power cycle [ 1553.676975][T32351] Bluetooth: hci0: command tx timeout [ 1553.735509][T32692] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1553.744965][T32692] netlink: 'syz.4.4142': attribute type 10 has an invalid length. [ 1553.759237][T32692] team0: Device hsr_slave_0 failed to register rx_handler [ 1553.959748][ T6061] usb usb46-port1: unable to enumerate USB device [ 1554.052002][T25133] IPVS: starting estimator thread 0... [ 1554.147198][T32699] IPVS: using max 23 ests per chain, 55200 per kthread [ 1554.494838][T32703] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1554.496953][T32703] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1554.499690][T32703] vhci_hcd vhci_hcd.0: Device attached [ 1554.727872][T25507] usb 56-1: device descriptor read/8, error -110 [ 1554.953648][T32704] vhci_hcd: connection closed [ 1554.955119][ T12] vhci_hcd: stop threads [ 1554.960214][ T12] vhci_hcd: release socket [ 1554.962986][ T12] vhci_hcd: disconnect device [ 1554.967022][ T6041] usb 52-1: device descriptor read/8, error -110 [ 1555.066064][T32712] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1555.068627][T32712] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1555.072157][T32712] vhci_hcd vhci_hcd.0: Device attached [ 1555.105871][T32715] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1555.108419][T32715] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1555.112266][T32715] vhci_hcd vhci_hcd.0: Device attached [ 1555.297268][T25507] usb 56-1: SetAddress Request (24) to port 0 [ 1555.299699][T25507] usb 56-1: new SuperSpeed USB device number 24 using vhci_hcd [ 1555.357219][T25133] usb 46-1: SetAddress Request (51) to port 0 [ 1555.359819][T25133] usb 46-1: new SuperSpeed USB device number 51 using vhci_hcd [ 1555.457578][ T6041] usb usb52-port1: attempt power cycle [ 1555.588683][T32716] vhci_hcd: connection reset by peer [ 1555.592417][ T1144] vhci_hcd: stop threads [ 1555.594962][ T1144] vhci_hcd: release socket [ 1555.597054][ T1144] vhci_hcd: disconnect device [ 1555.630263][T32713] vhci_hcd: connection reset by peer [ 1555.633009][ T1144] vhci_hcd: stop threads [ 1555.634825][ T1144] vhci_hcd: release socket [ 1555.638257][ T1144] vhci_hcd: disconnect device [ 1555.757024][T32351] Bluetooth: hci0: command tx timeout [ 1555.773399][T32727] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1556.067550][ T6041] usb usb52-port1: unable to enumerate USB device [ 1556.379568][T32737] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1556.689997][T32739] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1556.692512][T32739] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1556.695327][T32739] vhci_hcd vhci_hcd.0: Device attached [ 1556.839078][T32740] vhci_hcd: connection closed [ 1556.844991][ T12] vhci_hcd: stop threads [ 1556.852423][ T12] vhci_hcd: release socket [ 1556.855072][ T12] vhci_hcd: disconnect device [ 1556.956705][T32746] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1556.959476][T32746] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1556.963763][T32746] vhci_hcd vhci_hcd.0: Device attached [ 1557.205793][T32750] wireguard0: entered promiscuous mode [ 1557.213534][T32750] wireguard0: entered allmulticast mode [ 1557.227606][T25817] usb 52-1: SetAddress Request (15) to port 0 [ 1557.229849][T25817] usb 52-1: new SuperSpeed USB device number 15 using vhci_hcd [ 1557.281901][T32747] vhci_hcd: connection reset by peer [ 1557.284057][ T95] vhci_hcd: stop threads [ 1557.285550][ T95] vhci_hcd: release socket [ 1557.287512][ T95] vhci_hcd: disconnect device [ 1557.586799][T32758] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1558.080620][ T300] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1558.290895][ T311] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1558.297463][ T311] netlink: 'syz.2.4157': attribute type 10 has an invalid length. [ 1558.302026][ T311] team0: Device hsr_slave_0 failed to register rx_handler [ 1558.316625][ T312] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1558.359005][ T312] netlink: 'syz.4.4156': attribute type 10 has an invalid length. [ 1558.362806][ T312] team0: Device hsr_slave_0 failed to register rx_handler [ 1558.961040][ T321] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1559.252334][ T329] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1559.450697][ T330] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1559.975348][ T339] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1560.220434][ T345] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1560.406975][T25507] usb 56-1: device descriptor read/8, error -110 [ 1560.409836][T25133] usb 46-1: device descriptor read/8, error -110 [ 1560.456460][ T347] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1560.459166][ T347] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1560.463120][ T347] vhci_hcd vhci_hcd.0: Device attached [ 1560.517277][T25507] usb usb56-port1: attempt power cycle [ 1560.808079][T25133] usb usb46-port1: attempt power cycle [ 1561.057869][ T362] wireguard0: entered promiscuous mode [ 1561.059906][ T362] wireguard0: entered allmulticast mode [ 1561.123506][T25507] usb usb56-port1: unable to enumerate USB device [ 1561.144638][ T368] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1561.243483][ T348] vhci_hcd: connection closed [ 1561.246334][ T1144] vhci_hcd: stop threads [ 1561.256964][ T1144] vhci_hcd: release socket [ 1561.263630][ T1144] vhci_hcd: disconnect device [ 1561.459662][T25133] usb usb46-port1: unable to enumerate USB device [ 1562.266169][ T379] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1562.281627][ T379] netlink: 'syz.4.4169': attribute type 10 has an invalid length. [ 1562.285290][ T379] team0: Device hsr_slave_0 failed to register rx_handler [ 1562.317062][T25817] usb 52-1: device descriptor read/8, error -110 [ 1562.382666][ T383] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1562.385458][ T383] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1562.389307][ T383] vhci_hcd vhci_hcd.0: Device attached [ 1562.710536][T25817] usb 52-1: SetAddress Request (16) to port 0 [ 1562.713279][T25817] usb 52-1: new SuperSpeed USB device number 16 using vhci_hcd [ 1562.852893][ T384] vhci_hcd: connection reset by peer [ 1562.855705][ T13] vhci_hcd: stop threads [ 1562.858491][ T13] vhci_hcd: release socket [ 1562.862824][ T13] vhci_hcd: disconnect device [ 1563.644369][ T394] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1563.646288][ T394] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1563.648870][ T394] vhci_hcd vhci_hcd.0: Device attached [ 1564.071765][ T402] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1564.076601][ T402] netlink: 'syz.2.4172': attribute type 10 has an invalid length. [ 1564.080114][ T402] team0: Device hsr_slave_0 failed to register rx_handler [ 1564.116941][T25507] usb 46-1: SetAddress Request (55) to port 0 [ 1564.118925][T25507] usb 46-1: new SuperSpeed USB device number 55 using vhci_hcd [ 1564.141237][ T395] vhci_hcd: connection reset by peer [ 1564.143574][ T74] vhci_hcd: stop threads [ 1564.145508][ T74] vhci_hcd: release socket [ 1564.149304][ T74] vhci_hcd: disconnect device [ 1564.907163][ T413] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1565.337438][ T421] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1565.345569][ T421] netlink: 'syz.2.4175': attribute type 10 has an invalid length. [ 1565.349745][ T421] team0: Device hsr_slave_0 failed to register rx_handler [ 1565.796965][ T426] wireguard0: entered promiscuous mode [ 1565.805231][ T426] wireguard0: entered allmulticast mode [ 1566.253555][ T434] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1566.268547][ T434] netlink: 'syz.2.4177': attribute type 10 has an invalid length. [ 1566.274902][ T434] team0: Device hsr_slave_0 failed to register rx_handler [ 1567.280852][ T446] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1567.283449][ T446] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1567.287539][ T446] vhci_hcd vhci_hcd.0: Device attached [ 1567.298906][ T449] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1567.300961][ T449] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1567.455843][ T449] vhci_hcd vhci_hcd.0: Device attached [ 1567.529952][ T447] vhci_hcd: connection closed [ 1567.530519][ T74] vhci_hcd: stop threads [ 1567.533848][ T74] vhci_hcd: release socket [ 1567.535372][ T74] vhci_hcd: disconnect device [ 1567.778092][ T450] vhci_hcd: connection closed [ 1567.778278][ T74] vhci_hcd: stop threads [ 1567.781604][ T74] vhci_hcd: release socket [ 1567.783540][ T74] vhci_hcd: disconnect device [ 1567.836989][T25817] usb 52-1: device descriptor read/8, error -110 [ 1567.957779][T25817] usb usb52-port1: attempt power cycle [ 1568.549393][T25817] usb usb52-port1: unable to enumerate USB device [ 1568.647253][ T485] [ 1568.654221][ T485] ============================= [ 1568.656134][ T485] WARNING: suspicious RCU usage [ 1568.658341][ T485] syzkaller #0 Not tainted [ 1568.660743][ T485] ----------------------------- [ 1568.663587][ T485] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 1568.667007][ T485] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1568.667007][ T485] other info that might help us debug this: [ 1568.667007][ T485] [ 1568.671492][ T485] [ 1568.671492][ T485] rcu_scheduler_active = 2, debug_locks = 1 [ 1568.675012][ T485] 1 lock held by syz.4.4193/485: [ 1568.677314][ T485] #0: ffffffff8e5c0aa0 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x344/0x780 [ 1568.681790][ T485] [ 1568.681790][ T485] stack backtrace: [ 1568.684403][ T485] CPU: 0 UID: 0 PID: 485 Comm: syz.4.4193 Not tainted syzkaller #0 PREEMPT(full) [ 1568.684428][ T485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1568.684442][ T485] Call Trace: [ 1568.684449][ T485] [ 1568.684458][ T485] dump_stack_lvl+0x16c/0x1f0 [ 1568.684492][ T485] lockdep_rcu_suspicious+0x166/0x260 [ 1568.684523][ T485] get_callchain_entry+0x278/0x3f0 [ 1568.684549][ T485] get_perf_callchain+0xdb/0x760 [ 1568.684574][ T485] ? __pfx_get_perf_callchain+0x10/0x10 [ 1568.684600][ T485] ? __pfx___schedule+0x10/0x10 [ 1568.684625][ T485] ? find_held_lock+0x2b/0x80 [ 1568.684647][ T485] __bpf_get_stack+0x4f5/0xa10 [ 1568.684674][ T485] ? __pfx___bpf_get_stack+0x10/0x10 [ 1568.684712][ T485] bpf_get_stack+0x32/0x40 [ 1568.684736][ T485] bpf_get_stack_raw_tp+0x1dd/0x280 [ 1568.684770][ T485] bpf_prog_d43750871481577d+0x46/0x4e [ 1568.684788][ T485] bpf_prog_test_run_syscall+0x5b3/0x780 [ 1568.684819][ T485] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1568.684846][ T485] ? fput+0x9b/0xd0 [ 1568.684871][ T485] ? __bpf_prog_get+0x97/0x2a0 [ 1568.684894][ T485] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1568.684923][ T485] __sys_bpf+0x1050/0x4de0 [ 1568.684947][ T485] ? __pfx_futex_wake+0x10/0x10 [ 1568.684977][ T485] ? __pfx___sys_bpf+0x10/0x10 [ 1568.685004][ T485] ? __lock_acquire+0xb97/0x1ce0 [ 1568.685032][ T485] ? do_futex+0x122/0x350 [ 1568.685085][ T485] ? __pfx_do_futex+0x10/0x10 [ 1568.685125][ T485] ? xfd_validate_state+0x61/0x180 [ 1568.685162][ T485] __ia32_sys_bpf+0x76/0xe0 [ 1568.685180][ T485] __do_fast_syscall_32+0x7c/0x300 [ 1568.685211][ T485] do_fast_syscall_32+0x32/0x80 [ 1568.685239][ T485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1568.685261][ T485] RIP: 0023:0xf700e579 [ 1568.685276][ T485] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1568.685294][ T485] RSP: 002b:00000000f53fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1568.685314][ T485] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800004c0 [ 1568.685326][ T485] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000 [ 1568.685337][ T485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1568.685347][ T485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1568.685357][ T485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1568.685382][ T485] [ 1569.197087][T25507] usb 46-1: device descriptor read/8, error -110 [ 1569.282798][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.597448][T25507] usb usb46-port1: attempt power cycle [ 1570.161830][T25507] usb usb46-port1: unable to enumerate USB device [ 1570.395145][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.484307][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.538887][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.626155][ T12] bridge_slave_1: left allmulticast mode [ 1570.628091][ T12] bridge_slave_1: left promiscuous mode [ 1570.630013][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.634981][ T12] bridge_slave_0: left allmulticast mode [ 1570.637674][ T12] bridge_slave_0: left promiscuous mode [ 1570.639981][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.949412][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1570.955266][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1570.960766][ T12] bond0 (unregistering): Released all slaves [ 1571.264411][ T12] hsr_slave_0: left promiscuous mode [ 1571.267912][ T12] hsr_slave_1: left promiscuous mode [ 1571.270693][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1571.273613][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1571.277438][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1571.280444][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1571.304143][ T12] veth1_macvtap: left promiscuous mode [ 1571.307242][ T12] veth0_macvtap: left promiscuous mode [ 1571.309527][ T12] veth1_vlan: left promiscuous mode [ 1571.311580][ T12] veth0_vlan: left promiscuous mode [ 1571.874752][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1571.938633][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1572.812276][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.898864][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.993684][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.079734][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.170702][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.254460][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.340112][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.439953][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.547488][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.600596][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.660917][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.742286][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.856309][ T12] bridge_slave_1: left allmulticast mode [ 1573.858619][ T12] bridge_slave_1: left promiscuous mode [ 1573.860770][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.864437][ T12] bridge_slave_0: left allmulticast mode [ 1573.866254][ T12] bridge_slave_0: left promiscuous mode [ 1573.870312][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.875864][ T12] bridge_slave_1: left allmulticast mode [ 1573.878316][ T12] bridge_slave_1: left promiscuous mode [ 1573.880634][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.884509][ T12] bridge_slave_0: left allmulticast mode [ 1573.886319][ T12] bridge_slave_0: left promiscuous mode [ 1573.889206][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.894853][ T12] bridge_slave_1: left allmulticast mode [ 1573.896641][ T12] bridge_slave_1: left promiscuous mode [ 1573.899246][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.902872][ T12] bridge_slave_0: left allmulticast mode [ 1573.904630][ T12] bridge_slave_0: left promiscuous mode [ 1573.906441][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.250458][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1574.256318][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1574.261887][ T12] bond0 (unregistering): Released all slaves [ 1574.480058][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1574.484761][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1574.489830][ T12] bond0 (unregistering): Released all slaves [ 1574.750727][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1574.754840][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1574.758796][ T12] bond0 (unregistering): Released all slaves [ 1575.451304][ T12] hsr_slave_0: left promiscuous mode [ 1575.453493][ T12] hsr_slave_1: left promiscuous mode [ 1575.455617][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1575.459744][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1575.462546][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1575.464885][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1575.470865][ T12] hsr_slave_0: left promiscuous mode [ 1575.472889][ T12] hsr_slave_1: left promiscuous mode [ 1575.474878][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1575.477273][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1575.480120][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1575.482437][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1575.492144][ T12] hsr_slave_0: left promiscuous mode [ 1575.494248][ T12] hsr_slave_1: left promiscuous mode [ 1575.496396][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1575.499422][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1575.502238][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1575.504667][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1575.548297][ T12] veth1_macvtap: left promiscuous mode [ 1575.550148][ T12] veth0_macvtap: left promiscuous mode [ 1575.551919][ T12] veth1_vlan: left promiscuous mode [ 1575.553623][ T12] veth0_vlan: left promiscuous mode [ 1575.555998][ T12] veth1_macvtap: left promiscuous mode [ 1575.557845][ T12] veth0_macvtap: left promiscuous mode [ 1575.559625][ T12] veth1_vlan: left promiscuous mode [ 1575.561315][ T12] veth0_vlan: left promiscuous mode [ 1575.563735][ T12] veth1_macvtap: left promiscuous mode [ 1575.565498][ T12] veth0_macvtap: left promiscuous mode [ 1575.567405][ T12] veth1_vlan: left promiscuous mode [ 1575.569111][ T12] veth0_vlan: left promiscuous mode [ 1576.234458][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1576.306376][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1577.289202][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1577.354696][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1578.299478][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1578.373753][ T12] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 21:49:44 Registers: info registers vcpu 0 CPU#0 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8561cab5 RDI=ffffffff9b102740 RBP=ffffffff9b102700 RSP=ffffc90003037470 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000000d R14=ffffffff9b102700 R15=ffffffff8561ca50 RIP=ffffffff8561cadf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974ba000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3f77f9 CR3=0000000062419000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000002f26c9d RBX=0000000000000001 RCX=ffffffff8b918b29 RDX=0000000000000000 RSI=ffffffff8de4f1c9 RDI=ffffffff8c163600 RBP=ffffed1003bda488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801ded2440 R14=ffffffff90aba890 R15=0000000000000000 RIP=ffffffff8b91766f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000005fb59000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b241d40 RCX=ffffffff81af1491 RDX=ffff888026824880 RSI=ffffffff81af146b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90002be74e8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed10056483a9 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81af146d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f46e40 CR3=000000004bf1d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f73e4ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000001156895 RBX=0000000000000003 RCX=ffffffff8b918b29 RDX=0000000000000000 RSI=ffffffff8de4f1c9 RDI=ffffffff8c163600 RBP=ffffed1003866000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801c330000 R14=ffffffff90aba890 R15=0000000000000000 RIP=ffffffff8b91766f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbf25e32e9c CR3=000000005ec45000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000002 Opmask01=0000000000000001 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 311b2ace2d10485a 5ec6e761e95b3a5e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 24ce9313866df1e5 55e17a7b16f1f63a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fff4cec431a3869b f5c6bf39d734c3ae ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 77e6a275b0897b9a 6655bdb81b646398 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000d40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00b89e30dd643cc6 000003b6000003b6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dd36348eddc23d6c e1b41e000163d3fa ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dd5f4d82000003b6 000003b600000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000003b600000000 e1a9eb18000003b6 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 db7bf9695578c894 5bcfbffb4cb638de ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4aeb56660b962213 39ed97bde129623d ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e75006465696669 63657073206e6f69 74706f20676e6f6c 207974706d65000a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 636572696420746f 6f722065676e6168 632074276e616300 7269646863660027 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4640574c4105514a 4a570540424b444d 460551024b444600 574c414d46430002 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000