last executing test programs: 17m56.246861354s ago: executing program 32 (id=810): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000080000000400000001f7000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) r8 = creat(&(0x7f0000000200)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) write$P9_RVERSION(r7, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) (async) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x800, 0xffffffffffffc725}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="cc"}) (async) accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r9}, 0x20) (async) accept4$x25(r1, &(0x7f0000000100), &(0x7f0000000140)=0x12, 0x800) (async) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x1003, &(0x7f0000006680)) (async) setresuid(0x0, 0x0, 0x0) (async, rerun: 64) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="9ff58f1ab660ed6cc7c9f00368ea500b5eb97bc6df7cf82519cdd1846d1898a9196c812c0fc832df91e49744360356bab18881ac65d57de56dbab631dbd6adf5f2d0a62b2ebfc1d58c2bd8c624816a7eb4c38705821bf7ecb3238c6246cce4055414a9412ad1dc05c5f050bf9c429fa65db45ae1b5db52840266fb480a857b84832c14e844acce1d367d48aa2e9a48291b880b4dbac5e267"], 0x0) (async, rerun: 64) close_range(r10, 0xffffffffffffffff, 0x200000000000000) 17m13.580991729s ago: executing program 4 (id=933): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="019800000000000020001280080001006772650014"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x0, [0xfffffffffffffff8, 0x0, 0x8, 0x200003f0, 0x20000420], 0x0, 0x0, 0x0}, 0x1f0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x1, 0x1005}}) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x7f, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000180)={0x23, 0x1, 0x13, 0x1, 0x0, 0x2, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaa07000180c200000208004500004cfffe0000fd06907864010101ac1414aa00004e227f7a1bb250921a42ffc22ebe79c225da73ead533b89254a54d94c209ba611b568a94d7366e95be02c48944620e23146d61cc2918ec8659e4638b5e5645279034a164911de41d2ddfe6133bf905473580dbe54bfd5a6de4b76efa8c48253885c80021895b99c3d0e06b9bfab71c83237e6e6eed5e64540c9b8574ecef2dd7e6afbb9caf38dd1ba87bde2209549b8ef25e4fdbc735ea4f745b857d8d4265e3237bbb96d40f28c737a75ae7ace510e82f91ff1720ab19250c2d3ed90455a1fb30664adf249fe296", @ANYRES32=0x41424344, @ANYRES32=r5, @ANYBLOB="ec04000290780932080a000002000000000bfe06e2d4c3d90512000000050000007f00007723000000010000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, r5, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) 17m13.248210213s ago: executing program 0 (id=935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}}, 0x0) r1 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r1, 0x80079a0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0xa}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x4}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x50}}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r3, r3, 0x0, 0x548) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f00000002c0)={{0x77359400}, {0x0, 0x3938700}}, 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) 17m12.31323707s ago: executing program 4 (id=938): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x26, 0x3, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000100)=0x64) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x800000000002) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) prlimit64(r5, 0x4, &(0x7f00000000c0)={0xfffffffffffffff1, 0x9}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020400) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r7, 0x7, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r7, 0x7, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x20000000000, 0x100000000}) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000b05000000d5ed3671272100000908000100753332004f00"/44], 0x1c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) r8 = shmget$private(0x0, 0x13000, 0x40, &(0x7f0000feb000/0x13000)=nil) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) syz_usb_connect(0x3, 0x2d, &(0x7f0000000300)=ANY=[@ANYRES32=r8], 0x0) 17m12.11993703s ago: executing program 0 (id=940): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)={0x48, r1, 0x607, 0xfffffffd, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x2400c007}, 0x22eec1d228f1b171) 17m11.213113056s ago: executing program 0 (id=942): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x100, 0x0, 0xffff, 0x100000200, 0x10, 0x6db, 0x0, 0x7fffffffffffd, 0x3, 0x0, 0xc83, 0x8, 0x5, 0x4000, 0xbdb], 0x1, 0x3c4210}) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc", 0x29}], 0x1}, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000180)=ANY=[], 0x5c}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 17m9.129740293s ago: executing program 5 (id=944): syz_usb_connect$uac1(0x5, 0x8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000206b1d01014000010203010902780003010000060904000000010100000a24010200000201020a24080304004000000009040100000102000009040101010102000009050109100001fc0b0725018107010809040200000102000009040201010102000008240201f10547ba0724010604021009058209000410"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x28}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000840), 0x20042, 0x0) getsockname(r0, &(0x7f00000002c0)=@nfc, &(0x7f0000000380)=0x80) r1 = socket(0x2b, 0x80801, 0x1) rt_sigaction(0x1, &(0x7f0000000140)={&(0x7f0000000080)="2437460f1c2bdfd5c4a2f10027460f38e7418f69d8909ca3000810ffa5c43b3be5c436fe0d4e486df513bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="8001000010000100feffffffffdbdf2500000000000000000000ffffe0000002fc0100000000000000000020000000010001071c4e2300050000000021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d36c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff00000000000001000000000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff0000000026bd700000350000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004800020073616c7361323000"/312], 0x180}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0xfffff491, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x2000c090}, 0x4044080) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000200)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="1b2e056d986ded26d98666bdb382ae9536217ca4c5366d860b70ddfa0e89a799aa8d5b59c7538c", 0x27}) 17m8.99816404s ago: executing program 0 (id=946): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xdf) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r4, 0x1, 0x3, &(0x7f0000000300)=0xf, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80280, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x197, &(0x7f0000000100)={0x0, 0xd462, 0x0, 0xfffffffc, 0x3aa}, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) close(0x3) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000010401010000000000000000070000060500010001000000080003400000001f0800054080000001"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) 17m8.9101696s ago: executing program 4 (id=947): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prctl$PR_GET_THP_DISABLE(0x2a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfefb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='rcu_utilization\x00', r1}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x7, 0x1}, 0x0, {0xfd, 0x8}, 0xfe, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0xc0bc5310, &(0x7f0000000040)={0x87, @time={0xbc, 0x7}, 0x0, {0x71, 0x6}, 0x6, 0x0, 0x1}) tkill(0x0, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @local}, 0x10) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r4, &(0x7f0000000280)={0xe, {0x8, 0x7, 0x1e, 0x6f, "a0f271c0ed219c4a2de74ff82e0e709eb957a8409b8a4cd545d792ff5ccc708de679849f674afe715867247fd1197ca602fb515c4c2597bc2c9a0970a1a703fdd4961a0d98ced9a3d8d9196c426ad681cbede14a03e6dcdd7dcf56b1a20031f28fac661acd208e6dfafcc637127cb4"}}, 0x7b) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={r3, 0x1, 0x6, @local}, 0x10) 17m8.908549767s ago: executing program 1 (id=948): mkdir(0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000740), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x22, 0x1, 0x2, "3e611f99e29d14fa2cd831350097034ac234e00aa8117cde27303a9b317c0956", 0x38415262}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x3, 0xfffffffe}, 0xc) 17m6.163386681s ago: executing program 0 (id=950): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) 17m5.935667982s ago: executing program 4 (id=952): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_io_uring_setup(0xf6f, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x3b8, 0xffffffff, 0x238, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8000, 0x3ff, 0x89f0, 0xfeb9, 0x3f, 0x7f, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) inotify_init() r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r3}) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x80049370, &(0x7f00000000c0)) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r3, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18, r3}) 17m5.750336026s ago: executing program 1 (id=953): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) r1 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) times(&(0x7f0000000180)) mknod(&(0x7f0000000080)='./bus\x00', 0x4, 0x6) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='cramfs\x00', 0x8080, &(0x7f00000001c0)='discard') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000010240), 0x5a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x200008, 0xb}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x35, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 17m5.749619582s ago: executing program 5 (id=954): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80040}, 0x40880) syz_io_uring_setup(0x24fe, 0x0, &(0x7f0000000040), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000006cce3ee1"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r1], &(0x7f0000000080)='GPL\x00'}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x0, 0x61, 0x1e]}}, 0x0, 0x29, 0x0, 0x0, 0x3}, 0x28) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x6, 0x6, 0x4}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000001c0)={@my=0x1}) r3 = syz_open_dev$video(&(0x7f0000000100), 0x12, 0x101102) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f00000000c0)) 17m4.661373884s ago: executing program 2 (id=955): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400120038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x1ab340, 0x1) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x1ab340, 0x1) finit_module(r3, 0x0, 0x0) (async) finit_module(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x20}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}, @FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @remote}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x20}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e24}}, @FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @remote}]}, 0x4c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x4000010) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xfc}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x363200, 0x0) (async) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x363200, 0x0) ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f0000000140)) (async) ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x150056, r10}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000006c0)={0x0, 0xfa, "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"}, &(0x7f0000000800)=0x102) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000840)={0x3, 0x8001, 0x202, 0x4, 0x3, 0x9, 0x5, 0x5, r12}, &(0x7f0000000880)=0x20) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000840)={0x3, 0x8001, 0x202, 0x4, 0x3, 0x9, 0x5, 0x5, r12}, &(0x7f0000000880)=0x20) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020022000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000008080002400000001b0900020073797a320000000005000740"], 0x84}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)=@delsa={0x258, 0x11, 0x1, 0x70bd2a, 0x25dfdbfb, {@in6=@loopback, 0x4d4, 0x2, 0x2b}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}, @policy_type={0xa, 0x10, {0x1}}, @mark={0xc, 0x15, {0x350759, 0x4}}, @migrate={0x134, 0x11, [{@in=@private=0xa010100, @in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x1a}, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x6c, 0x4, 0x0, 0x3505, 0xa, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, @in=@loopback, 0x3c, 0x1, 0x0, 0x3501, 0xa, 0x2}, {@in6=@private1, @in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, @in6=@mcast1, 0xff, 0x3, 0x0, 0x3507, 0xa, 0x2}, {@in6=@remote, @in6=@local, @in6=@mcast1, @in6=@remote, 0xff, 0x2, 0x0, 0x3507, 0x2}]}, @replay_thresh={0x8, 0xb, 0x5}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x70bd2b, 0x2, [0x4ae, 0x8]}}, @encap={0x1c, 0x4, {0x1, 0x4e23, 0x4e22, @in6=@dev={0xfe, 0x80, '\x00', 0x33}}}, @offload={0xc, 0x1c, {r10, 0x2}}, @lastused={0xc, 0xf, 0x3}, @algo_auth={0x7b, 0x1, {{'ghash-clmulni\x00'}, 0x198, "b2015a198d69b38e10355654cb19c6487ee490ebdb17fe3e5bf306d4fa7a1c66bff815f9b8a904c8d63f5cf25d2dd51299269a"}}]}, 0x258}, 0x1, 0x0, 0x0, 0x4800}, 0x40) r13 = epoll_create1(0x0) r14 = epoll_create1(0x0) fcntl$dupfd(r13, 0x0, r13) (async) r15 = fcntl$dupfd(r13, 0x0, r13) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r15, &(0x7f0000000040)) 17m4.660656106s ago: executing program 4 (id=956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000ffff27bd01000000df2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a05004c0012800e000100697036677265746170000000380002801400070000", @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc000802) fsetxattr$security_ima(r0, &(0x7f0000000300), &(0x7f0000000340)=@v1={0x2, "da662cb5aa"}, 0x6, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x3, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f000055a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000003000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x222600, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1000905", @ANYRES8=r6], 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@mcast1, 0x4, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x0, 0x0, 0x0, 0xe}, {{@in=@empty, 0x4d2, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x3c}, 0x0, @in=@empty, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r9 = socket(0x2a, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) setgroups(0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newtclass={0x0, 0x28, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x18}, {0x9, 0xfffd}}, [@tclass_kind_options=@c_netem, @TCA_RATE={0x0, 0x5, {0x81, 0xd}}, @tclass_kind_options=@c_taprio, @TCA_RATE={0x0, 0x5, {0x0, 0x4}}]}, 0xfffffd9c}, 0x1, 0x0, 0x0, 0x24044081}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c0d4}, 0x4000084) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0) 17m3.524042601s ago: executing program 1 (id=957): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001280)="f78d9c0000ff48f3be52", 0x29}]}], 0x1, 0x40800) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r5, 0x0, 0x0) r6 = memfd_create(&(0x7f0000002180)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb8w&\xdfP\xba\xdf%\x7f\xb7\xac\x952\x8d\xa0\x15\xbc\xf4nS\x11X\x95\xc0~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7Z\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1\v\xb9\xad\xb7}l\xbe\x95p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b\xe4}\xe3\x7f\x06\xce\xe1D\x94&\xac\x88\x95\xff\xda\x14d\xcbx\x93x\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x7f\x81X)s\xc8\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-', 0xb) fchmod(r6, 0x100) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) 17m2.887136239s ago: executing program 5 (id=958): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$COMEDI_CANCEL(r0, 0x6407) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x0, 0x3, 0x2, 0x2, 0x8000}, 0x1c00000000000000, 0xfb4, 0x3e9}) r1 = accept$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback, @local}, &(0x7f0000000180)=0xc) ioctl$int_in(r1, 0x5421, &(0x7f00000001c0)=0xb6e) splice(r1, &(0x7f0000000200)=0x250, r0, &(0x7f0000000240)=0x91a, 0x9, 0x8) write$evdev(r0, &(0x7f0000000280)=[{{0x0, 0xea60}, 0x15, 0x9e35, 0x9}, {{}, 0x1f, 0x4, 0xfffffffa}], 0x30) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f00000002c0)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000500)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000440)=[{0x1, 0x0, [0x8, 0xa35, 0x7, 0x6, 0x3, 0x0, 0x3, 0x0, 0x1ac2, 0x76, 0xcdb2, 0x702a, 0x9, 0x2, 0x0, 0x3]}, {0x0, 0x0, [0x6, 0x2, 0x80000001, 0x5c6e, 0x7, 0x9, 0x4b9, 0x214c, 0x3, 0x6, 0x1, 0x1ff, 0x8, 0x5, 0x8, 0xb]}], r3, 0x1, 0x1, 0x90}}, 0x20) pread64(r1, &(0x7f00000005c0)=""/7, 0x7, 0x9) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x5, 0x8}, 0xc) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file1\x00', 0x0, 0x18}, 0x18) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd}, [@jmp={0x5, 0x0, 0x0, 0xa, 0x8, 0xfffffffffffffffc, 0x10}]}, &(0x7f0000000640)='GPL\x00', 0x400, 0x3b, &(0x7f0000000680)=""/59, 0x40f00, 0x18, '\x00', r2, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x4, 0xb, 0x0, 0x96}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r0, r0, r0, r4, r5, r0, r0, r0], 0x0, 0x10, 0x4}, 0x94) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'gretap0\x00', r2, 0x7, 0x7, 0xb7, 0xab62, {{0x14, 0x4, 0x3, 0x2c, 0x50, 0x66, 0x0, 0x6, 0x29, 0x0, @local, @broadcast, {[@timestamp={0x44, 0x14, 0x4d, 0x0, 0x3, [0x3, 0x2, 0x1000, 0xbf]}, @generic={0x44, 0xc, "e83fea5b01ce85ae1cfe"}, @ssrr={0x89, 0x17, 0x9e, [@remote, @rand_addr=0x64010101, @private=0xa010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0xfab93a5f73e72df9, 0x5, "1a5a78"}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000ec0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000a00)={0x444, r7, 0x0, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x120, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7c, 0x5, "891586df1a144ed47e2ffcb0a804b9c0f3d326c91ad658c786084986d125b9aba8793f9d5e3a095f2591e5f016b38bcd7c340f46a0741841ba05c5fdd271b2ebdf094bbd99e0e2cbda455bc28aaf3c40abe2ae63725a2230ccd588efbe9b159df52756fc223dc0893245160c1187c0155b05cb342d77887c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_MASK={0x8d, 0x5, "a44ce93b2d9cc910177a908a6c5de06f70e3907b31c227f11e1f89d3367cfc3819454b20b0100e8aa70f111e2530d31b72bcfb40bc4aa3185a35857c4d6a3b4627fe4afbc1f80f53375b3d2761e8ad457f439a881a1dc32d842a13dcde9f625724c38479806fef65686b83e714170961a8a93f227c5f5adb0d53bba0e8f3de2fc7e9e8069e129406d7"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x110, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{-^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x74c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1b1d4159}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "f896e7e8ab4463ae7ccfdb127a32ecb0009df3d32211d0f5d27249abc21ccc5dacb363cf4b30d8b1b4fbe863acb270f7a5418742ca61a89207d2a4911403b2af62ba478ebf36d7ec61b9370988a34eccab5a197d18916661a25e3e8260aae821ec80670d8716b145d1e9adc3ebde29f8fcedf65cc98090139daaf8b7c4415bc0f31c10364a3dee6b9f2407cadcfc261175cb61530671d14d3bcbee465957beb2f881dfacb1f875736fbe5beb0e7b36411bd86d1a15c58f517e451f4767ba1ff0fc43e114bf263ae7348b409100c571b1cbcc2364eadc329ae45caa8cecc3aa"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}]}]}]}, 0x444}, 0x1, 0x0, 0x0, 0x90}, 0x40000) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f00)='/sys/kernel/kexec_crash_loaded', 0x5d5500, 0x5) ioctl$SNDCTL_DSP_GETIPTR(r9, 0x800c5011, &(0x7f0000000f40)) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000f80)={{r9}, "c32224175f99e723377bfcac85f35227648bcfd6104d52c7f02dfd017be1dd718f3369a020219742650dd8133f5ac85329d3c80b04b68ee279380873a96a8ed8bdaa4d9cb723a628064bec859bf5fd360eb825a3ea5770e81daa0d0deed9d3049bb604ed0b07fb500bd5480499444d4b570c373ac79da6884c8c79c2a12cfd3dbd6258590e51dbb8bcfd39c38bf1e5030ca4d53834686a0bc78b430133f16586506295f84164cbebba3cbebd8e14ae3a2ebe3274739d51a1330aeffb53a68a1836869043a78b1d9b9c0b7f1dacc9c01d64cb81115d5a868d77003159db768917663b00ee5b3ef775844c4f717382aecd3662f9252392a15d25c6add20ef1f0d31a17ced9b89dc997785fe293abff2d8eb00885d3932e75fa9d6967adad23e72549765bc4a98397fe890dfa5bad2f44acbcc00c1b551c09faef177ed0b881e10a1e8a7c5b13d75b20f67cebb7d563b21c97f38239fd715bb0b0a99ab831f60e7b4e9f1e86454896f248c7932ef96e40e18bb16849bef5b5be3beaff4101873aaa15d89d4bd872965d4d8de73ab5bd3d3388fb50c3f93359a694b8244a395652380a7d762373ff57b0651e49f5fab5d0113748d70867ffbfb6f9367200d96782c950f34d83f3b9bc9909ed29dff896889ed85cc0777832ccaf9b627d30e979ed250841fd1bf5ba05137a3aaa2e8996c6d5c791cc09a9ae427c06e8de3c2cee01bc251d17166609af46eca82d96706d661f84b71238a698eae236367465d374499e98ba4ed210f66530a9365876aab745cd56946a61b50500fbf048ae41ae348098c59d3fbf9b80a0bef4ff174b2c0b14f0acfa61d7c531901b70aa2f54fd7b68763fbc0ae1d2e595922bac5620ac831d73061e762fd3980f862046c90f10d6e0d014f552886a56371acc14fd3f9bc9da647ddee4a20267540f95560090a44396faded69708e79f5b5ff1813ebf3f368d60f12f21607be4e7745b722b37cecdb96bc83b36e310624fcb8c423a0c4426b2dad5882d15209942082582b0ca0cf5d4460030b6cfc853eb88acd4250821ce7cfac9de7931845fc6cc9ebd3cde20ee1c17375d8a0d6e7599fcb8c5a66c51db292f7a57928bb4b8abe350dba4803cfa869da514fab9c3c33387edb554212f9492ad6919cbab2c9784dd31da9034ec34cfac095683c59fac7b854740ba21c45c01b7fabfc263513cddc585a1d1263c1cdf2e087ad319748fc8087b523eda532b0a187fc48f9e1047df33fb935a044393a967e961e220b36b9699941aa1763e55839d902110a8a5745127314ae4b5c07dd4f9effa39f7795d874b8c800ed6f457602dee600f957942500c098c3a6fb64eb2dc000fb567a811d7303beea125a60faf451d3184f4d8c5218bb68b833c937fd1c7b373d30587b7f68f960dbc66884a295d4151f4b00222fa7f41d11e5f5f740786783f01ed30db102bebe8b23694f00054600e66f20c2e2b93332bc57fd3d4a47a22c8da85447152b4d17abb9c17c5985ffa668b73ec8f73cfea6be63d9a1db99aee6635c16632abfe18db0919cab309973ed5602c74e229826d257ce610c51926d412d6296c0183ca6db2384294a33c63e51ab37ab15f71ff3fefb8114f9dcaa2d3cd96a09476788969540905bb8961fffc53c39725b36687e1425c50abbfee493ad0e0ab2845334526499511c1d46d80f350d1ff280a78f7f5bcd50c515dce9feaf842e27a0fd57bb95face6f3d3c2b8fa773f89ffb898f77604feb2fc86dfc43a70baef4b10e0eea0b3ca1f056ee34fa69815d66cdbc78ce6979d61aa1e450733d859db4f5e82eb0080915e96edd5f8b5999f7cd118506b9e172080044d5cc99096f176555cf9b8d66e380aa686ae7a0250ddfb1e867a77378144c891ec0b998fb13554c6d71820a31074080c161782786798ba212cfe4abb54ba2907e7ca40f4c8e3cea10edfe2471492cec23af5947e679d8be218e4d3a61133753c1b40e277e0d4763de5e75fb49410e7a5e24a33bb9e79c3381853a964fa88f6398a356a567f196344a138aec89b6420acac76e809fc3332e8060bb8e7f86fd22ea00276fbc769468ef113f44a339728375b754d647a96522a5a42d00e1363ef799c3bab19dc97f2f496512c12187b3c077f2370e54a195f649c37113884698a9cda67d249df908f33f426530df46d92b80a4c3367436dd31ea06a8b783af047ad48c9d5086b00488ea9488c5a3f3cc68fb4937afa148bca3c76e8af4359aacb89774e62edd65665b315161084f3e7cd12ba494cea84613776c0565af1c26fd47c149d8fc27a55c9963157ea326d8b4e1a073c2a4f5abaf0fccda2120d0d9365a266b4185d59ece1fc34ccb54e61ae4a3ad57a3b480353c006b1b4d1ca9bd2ab045f7c389af160dff5e3166b856d1353aa42227340b6ac8e456d23a6d3448274e6c6d34bfae0269f336bd0796a1f3a04756a04e890ae411ba600f052e40245e7c501fd481bfb1a2bc8a2e3ac2518181e79da9c38ffdd74bca55b1e336f6f6826fbf5c95e40c6f641a597e25d5bce962a5e0a5a5b231bdfb899acec1c10e200bfef87aa362baa26e8e3f31b23ea2421e31a6f00c34c48f4ff0126a1bf9158f2384d6f78cdebb404d6da1c6488630d78b0396dc7f4fa03acc3407aa1fca8225491ec58c27d254460b196f9ac57da822105c1510d532962f727e2e69df60153ee909c76d0ccc041d10f4cf6857881451739eb51e1b7683b550b6876ab0437922a4036456e0aec7d581a971fd158e23ea3dec21ce2f5a032ab810cf42dd2c040971b3a7483163c23854d9d24506aba651345afdc5a52b2986b08b8183f768b9e94771fb64d7cc865257e018d5fa5e6f5e9eac91035b9e794be52431c4c47a6ad0f51a9ae45f2b71841b85dde0ae6ced39015d372ded25a73f9df47b050ca56cba0c4cb618056228c616eaaaca0364fa70b381a65d40fb0c2fc504225c42a374e149a80561b1aa0e33ae9965252b4d70c95f9b871df5e1804146873122e9d0dcc98158aa14010d48a92e0b767ceaff015b40d9c388b2ac092187e5100842592cac9cf4e8a2715be29ab85d02b72f7353d1a7d452ff1cbe14b0b0e8635a6c8d12b11a1b13ab4ce8dbfa008207e8730f71e603dfa8091598e4db5cfdbee79c21a51121ff25faba46ff5fc41b364de603f4b8eb122769ed271f613821a3f375e784dcbb6ab63f5b8ab9f7a683c85ce8dd839e8cf4c99f195801c252b30b65f2940b8a0ee4a4548cfab4874b3365a87d1b4b900b994cb2285a963a786268084dd2b514877dca6bdd9b381132d4b1829bbea90cf162ed049110463a8076e9bff8439958ed03918aeef0acbedc5f325d1e9434f6c8d751c8e1af714a0e045b485c123403391ef81cf20250e45b90056708a6ca3f7f61fe4fc632bb3432b8ca383de91f0d4a494476fb6d4e67bfb726d246f49b3aee43f4e4e745db329acab72ea034f287668edbefcdc7fe522e62aebbe09d64adb4b0e782eaed23a82e182c27b2f524cb04c95bdfdb69eeefe4bc8884553443b57d371ffb3d407661dde28505adfb32ddc2b28f3425f1342066078a0b8b8a38f87b7078c1a5df301aae2dfe889052002791f14bba3dd13d836bd4b010e4168e397620a2c3be90257ca80a8632c47114bd43b2e17e25ea92fb144ab76eb3f433e96f75336f970711f89cb458a8eb4597e07eecc7b4c127629e2a995cd40e57a238057e16fd29584c81e31e23f6c779752a1163cbb0f463338ccfebe4f9a5495b3560603ce542a941eed8d6a5020c6550d67c258a03b1eef8d22edd82ddad3869c29ef0969562079d136bd2137975bbd5d4e2e3a5a68ee58989dbffefe26c210e5212ed9cd1c15e1944e96f85988cbd66e6065ec4f890239641a394850726b45075a4c8520e7bd49b76d504c4cadd81d0e0ba55e981572feb2eced099a48901dceab215b19be23ab1f508c951f688ae4b53139f1bc5ba81d9309cb61671980238140749fa615322bc9a711abc4c429937a038ac2b6d0aadffe997de586c36c93a0fdf7b1cce95355bdb1cc83e2d4638d0ff4425b48efa40feb87c650131867ee424e5488bd11cc2e9c55125ff4f7819e1a11ca9d2a3e7dddf87c548b69112131970c35e25f40b8aadabff37f432dc5a6dd2b32adc1a708aba74b39a5930c0a5725239693a1b23f8197949089d7b21369146d6307b75960eb67972ae2f221daab2aebc34ac9746002f878e27384c04903437611b0a8ed4123274d4fec69e4f56fcd65804ae8b2b5b67c90a7ddcc2f035c1aabef93f4d7bba4c4b3dfbd71bbf68bccf24af3ac0d7326275e975ff49e98b8933699df57f63e09ce057b7853293fd4bf0040b2206a2de39f748c8edc966bccd4cdd5319d5db42029156f9af1180964ea4e7589768bd811fcddc1ce3f66779a70cc25ebf42cfd965b1d2a6c3b9b78f314c6fccf76a6e2a5b9ce67aed91939696761620f2b9b24a46559a0136d365f65367d1cf6d81340d4a87924b7b8b1226d06d33a4cc5bdeae75b1e6b696a8271033dd57f69a6311927347390c4344865895e14f012dfb4296863412a5ec9bd2c36e96c4ed2d94ddd29099879694f6ab82d4c40287e590fa799cef637320dd955fd594a79e005d2815f11b4b7a00c2f3902d790bd208507a242d86a68d4b7a0b5a08509b458ea15508cdb82d41754cc7854dafa2da45c9a650cc3e65d9685b7af7ddac20f66fc6dd8d25864fed5011f00ad3425ec8f3b23a492fdd9bddc0048dc73272052f6185ba76c8e7961bc47c936176f90ad0e9fe8898afeeae65c16cf83464691273faa18d81ce7e8b349d4c57f2d244eb8b82b1ec376af852fcec75a3dbaa9db0109255dc6ed4c770564d896cada69c040d2c783f23f6e255fab7b2444c36afd8507361913a79928a24d3ece0f80f87f30c8584b4004aefbc4a4dc9b36a7d7b29cae23ace2c5bd75a01f554b5c4748b30a7810572ad6a55e24e27a709b5039822387bf12ba8159c1757a5fd38032288bf83b870d7d29aa4a5a4bac17865f266e235fd2c4883ad769f34086cb09ca0de8116bb24b01b8230564c7382f78a23f9e44f619bd9c5d84a65ae256cfbaf3f3eb72b7533e90ff20a75067b9f68fcd12b470d542f0d92123a4b68a0c03a5f61e16b447cdd4ff6c1f6e36d2773e550209ba84591b130eb1e99549dbfbaf87177cdf717f36e822a62163600773139a3f2e6500d823580263ea3b130c65332711877f0d9f66d97ef002bb11f67de1fbb428de4ab65e9f95ef1c2ff49e12f3bfb59090e87a3333af6ec5c394dee9b6c12446f54fa66e3af1fad315aa9ebd16059e093ac2c8494851471f5d890e55b4b092c465a9e28c512cd350ca16dd949ddda12373cfe845aafa16a0c42be0fdd0d7bd07a7f49e6ca034b29d3b0f8f9411a1e57316800313fb2deb7b01c7bdfdb202f2375cbbebb88f740b509c6eb331f05cc5e3681c9e06c0576b54bcd867bcabcd143d6dcb788ad59ea2b3d8485d97f3f9665ed0d5f5dce432b28b8c796e2ac1a32b00d36e9e5c1e61dbeef4858b9ff0922ffc375ee0f4801fd197462bcf93aa2c62d98c456eec0ebb7a0a1f38612673c1cf641af43bfbc7ebff3ca818135441a64e31da7526fa0e450c69647758bfb3f96b44d6ece99fe72993d9038c0b6e963a0547b7d092920c509757780d69a368e4e672ffae7ac532b0a07f02e472f9fad0af790b43e7260f369dbf24c262a51f8e1952053770667f909af8af769102d961489fa87b05025851933e421269ae0d51"}) pipe2$9p(&(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r11, &(0x7f0000001fc0)={0x4e, 0x7d, 0x1, {0x0, 0x47, 0x7, 0x3, {0x20, 0x1, 0x2}, 0x0, 0x4, 0x3, 0xc2, 0x8, 'gretap0\x00', 0x4, 'GPL\x00', 0x6, ':!(**,', 0x2, '$-'}}, 0x4e) ioctl$VIDIOC_DBG_G_REGISTER(r11, 0xc0385650, &(0x7f0000002040)={{0x2, @addr=0x100}, 0x8, 0x2ace, 0xa6c}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000002100)={r12, 0x2, r0, 0x6, 0x4bc8fc72bec651f1}) recvmsg(r0, &(0x7f0000002500)={&(0x7f0000002140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000023c0)=[{&(0x7f00000021c0)=""/63, 0x3f}, {&(0x7f0000002200)=""/212, 0xd4}, {&(0x7f0000002300)=""/156, 0x9c}], 0x3, &(0x7f0000002400)=""/251, 0xfb}, 0x10000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002580)=@o_path={&(0x7f0000002540)='./file0\x00', r6, 0x4000, r10}, 0x18) io_uring_setup(0x550d, &(0x7f00000025c0)={0x0, 0x38a4, 0x20, 0x1, 0x12a, 0x0, r9}) 17m2.113278707s ago: executing program 1 (id=959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6c) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0), 0x0, 0x2000c850, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001340)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002f40)=""/4121, 0x1019, 0x0, 0x0}, &(0x7f0000001300)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000564000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 17m2.011444096s ago: executing program 5 (id=960): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001000330002"], 0xa0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xdf) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r4, 0x1, 0x3, &(0x7f0000000300)=0xf, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80280, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x197, &(0x7f0000000100)={0x0, 0xd462, 0x0, 0xfffffffc, 0x3aa}, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) close(0x3) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000010401010000000000000000070000060500010001000000080003400000001f0800054080000001"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) 17m1.759168053s ago: executing program 2 (id=961): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="d9", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24008080) 16m59.697232332s ago: executing program 1 (id=962): fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) ioctl$COMEDI_POLL(0xffffffffffffffff, 0x640f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) gettid() ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x202) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x7fffffe, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x108) 16m59.419878911s ago: executing program 4 (id=963): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/32]}, 0x98) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000779000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r5, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000040)={0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102393, 0xffffffd1) timer_create(0x4, &(0x7f0000000380)={0x0, 0x3a, 0x1, @thr={&(0x7f0000000300)="9d33074e10ad3cfd55afb5ee845168bc87260b6fc46d4393f1e00207b66237b5", &(0x7f0000000340)="91e3c1e6d2ca"}}, &(0x7f00000003c0)) mknodat$loop(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc) fstat(r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="30ae7877ce7746480fb819b6ff4cee0852a0959565f387799de648c38e685ab54c0d9bc7c08d7d73e78303d2f02363ce29a96b6850f3a9354ad43a1443a19db2a85ec23c22bc71c10000b5"], 0x6ac}, 0x1, 0x0, 0x0, 0x20000044}, 0x4) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000000)={&(0x7f00000004c0)={{@hyper, 0x5}, {@host, 0xed82}, 0x430, "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"}, 0x448, 0xb34}) chdir(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0000802800018023"], 0xe8}, 0x1, 0x0, 0x0, 0x8080}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 16m59.27265599s ago: executing program 1 (id=964): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x0, 0x3, 0x9, 0x0, 0xffff}, 0x20) (async, rerun: 32) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async, rerun: 32) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000000047"], 0x10}}], 0x1, 0x0) (async) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc9, 0xff}}}}}]}}]}}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002207000000a1"], 0x0}, 0x0) 16m59.143155663s ago: executing program 5 (id=965): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x98, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x440}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x50, 0xa00, &(0x7f00000005c0)="c6c45262e30db324a66735125d0af6b7338edfdef5579b7df065bcba0767d1fd499544191fbfa751b6c021b605fcac40bf6089cef17a7c752bb6646e01e9ae2dcc4f8b42693df3ccdb282ef0b20edde9"}) 16m59.069248897s ago: executing program 2 (id=966): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000005580)={0x0, 0x0, 0x0}, 0x40400d4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r4, 0x9}, &(0x7f0000000040)=0x8) 16m58.956283383s ago: executing program 2 (id=967): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@size={'size', 0x3d, [0x65]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x32]}}]}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 16m57.53154194s ago: executing program 5 (id=968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000ac0)={0x1d}) quotactl$Q_GETINFO(0xffffffff80000501, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x3, 0x0, &(0x7f0000000280)=0x0) timer_delete(r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x195, &(0x7f00000003c0)=ANY=[@ANYRES16=r0], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 16m57.433828694s ago: executing program 0 (id=969): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}}) r2 = dup2(r1, r1) write(r2, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x8}) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0xffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000022c0)=ANY=[@ANYBLOB, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017", @ANYRESDEC=r0], 0x44}}, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x6, 0x8c}, 0x0) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x1, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}}, @in=@multicast2, {@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x80}, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x70bd25}}, 0x128}}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 16m57.429955413s ago: executing program 2 (id=970): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) 16m57.20905921s ago: executing program 2 (id=971): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x7, 0x12) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) lseek(r2, 0xffffffffffffffb7, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wg2\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000900)=[{{&(0x7f00000004c0)=@file={0x0, './cgroup\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000540)="14bc8d51f784b63e3e7d9cab9bf315aea300c43f2282ceea464dab9d09ed862ffdda343f74a01b13c2ef5dd7bfd99d661661f17343d5894e4408f4b083a96e6a91932c5d68cf7b35f8cbec725c222155fa07b0d9672db18170bc27c9ac43aa36aa08460bd0bec0afaa10cf2475d942438ee68082a28920ba9510727d91cf69d42e03", 0x82}, {&(0x7f0000000600)="7b33d0601ee0d3039cffddb667e3ecd14c3d8fc125d5b49e7ed6f1851ae06731b077abdce0f4bd67a762f55b40e30e4540972cf173b6dd4ad47ca88072fc7ade6d21762d8e5388f643ca14ba0f7cd6a0818c3306977100a963e7d291172657dea5661ede7f9eac4352238494f9c9a48e85cb846fa724bb7412ff34a4343b011241faf7d8e3512371666abb6b3417fbf8b00cbf53ea8b2fea87bb901351973bddf62398fdd680a0cbde58a959bbe05e7b1f3355ab8e8f48e3a278cf2f777d1786bdb837932746eaaf810d8cf5371e15e317961028773622200264abd187", 0xdd}], 0x2, &(0x7f0000000740)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r0, r5, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, r5, r3, r6, r1, 0xffffffffffffffff, r5]}}], 0x78, 0x40000}}, {{&(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000980)="9af8538e79ddb43a40469bfa826b2239571e1938fab9ebc61926ad6ed128205ccf7ac2eb5a2b66260e88cd0a1479dca068dc897e8724c60ed3a2b3c9509798f65b3955ec", 0x44}, {&(0x7f0000000d40)="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", 0x1000}], 0x2}}], 0x2, 0x20004094) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) timer_create(0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) write$FUSE_IOCTL(r7, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_getattr(0x0, &(0x7f0000000c00)={0x38}, 0x38, 0x0) read$dsp(r7, &(0x7f0000000400)=""/110, 0x6e) socket$inet_smc(0x2b, 0x1, 0x0) 16m1.871599619s ago: executing program 33 (id=969): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}}) r2 = dup2(r1, r1) write(r2, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x8}) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0xffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000022c0)=ANY=[@ANYBLOB, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017", @ANYRESDEC=r0], 0x44}}, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x6, 0x8c}, 0x0) r3 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x1, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}}, @in=@multicast2, {@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x80}, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x70bd25}}, 0x128}}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 15m44.456732984s ago: executing program 34 (id=964): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x0, 0x3, 0x9, 0x0, 0xffff}, 0x20) (async, rerun: 32) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async, rerun: 32) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000000047"], 0x10}}], 0x1, 0x0) (async) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x9, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc9, 0xff}}}}}]}}]}}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002207000000a1"], 0x0}, 0x0) 15m44.228675758s ago: executing program 35 (id=971): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x7, 0x12) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) lseek(r2, 0xffffffffffffffb7, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wg2\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x8044) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000900)=[{{&(0x7f00000004c0)=@file={0x0, './cgroup\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000540)="14bc8d51f784b63e3e7d9cab9bf315aea300c43f2282ceea464dab9d09ed862ffdda343f74a01b13c2ef5dd7bfd99d661661f17343d5894e4408f4b083a96e6a91932c5d68cf7b35f8cbec725c222155fa07b0d9672db18170bc27c9ac43aa36aa08460bd0bec0afaa10cf2475d942438ee68082a28920ba9510727d91cf69d42e03", 0x82}, {&(0x7f0000000600)="7b33d0601ee0d3039cffddb667e3ecd14c3d8fc125d5b49e7ed6f1851ae06731b077abdce0f4bd67a762f55b40e30e4540972cf173b6dd4ad47ca88072fc7ade6d21762d8e5388f643ca14ba0f7cd6a0818c3306977100a963e7d291172657dea5661ede7f9eac4352238494f9c9a48e85cb846fa724bb7412ff34a4343b011241faf7d8e3512371666abb6b3417fbf8b00cbf53ea8b2fea87bb901351973bddf62398fdd680a0cbde58a959bbe05e7b1f3355ab8e8f48e3a278cf2f777d1786bdb837932746eaaf810d8cf5371e15e317961028773622200264abd187", 0xdd}], 0x2, &(0x7f0000000740)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r0, r5, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01}}}, @rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, r5, r3, r6, r1, 0xffffffffffffffff, r5]}}], 0x78, 0x40000}}, {{&(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000980)="9af8538e79ddb43a40469bfa826b2239571e1938fab9ebc61926ad6ed128205ccf7ac2eb5a2b66260e88cd0a1479dca068dc897e8724c60ed3a2b3c9509798f65b3955ec", 0x44}, {&(0x7f0000000d40)="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", 0x1000}], 0x2}}], 0x2, 0x20004094) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) timer_create(0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) write$FUSE_IOCTL(r7, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_getattr(0x0, &(0x7f0000000c00)={0x38}, 0x38, 0x0) read$dsp(r7, &(0x7f0000000400)=""/110, 0x6e) socket$inet_smc(0x2b, 0x1, 0x0) 15m43.986274445s ago: executing program 36 (id=968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000ac0)={0x1d}) quotactl$Q_GETINFO(0xffffffff80000501, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x3, 0x0, &(0x7f0000000280)=0x0) timer_delete(r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x195, &(0x7f00000003c0)=ANY=[@ANYRES16=r0], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 15m43.814095599s ago: executing program 37 (id=963): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/32]}, 0x98) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000779000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f00000002c0)={0xc, r4}) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r5, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000040)={0x30, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102393, 0xffffffd1) timer_create(0x4, &(0x7f0000000380)={0x0, 0x3a, 0x1, @thr={&(0x7f0000000300)="9d33074e10ad3cfd55afb5ee845168bc87260b6fc46d4393f1e00207b66237b5", &(0x7f0000000340)="91e3c1e6d2ca"}}, &(0x7f00000003c0)) mknodat$loop(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000240)=0xc) fstat(r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="30ae7877ce7746480fb819b6ff4cee0852a0959565f387799de648c38e685ab54c0d9bc7c08d7d73e78303d2f02363ce29a96b6850f3a9354ad43a1443a19db2a85ec23c22bc71c10000b5"], 0x6ac}, 0x1, 0x0, 0x0, 0x20000044}, 0x4) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000000)={&(0x7f00000004c0)={{@hyper, 0x5}, {@host, 0xed82}, 0x430, "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"}, 0x448, 0xb34}) chdir(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0000802800018023"], 0xe8}, 0x1, 0x0, 0x0, 0x8080}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 11.962977209s ago: executing program 3 (id=4354): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x321840, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x38, r8, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}}, 0x0) 10.767186295s ago: executing program 3 (id=4356): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00030246c3be0c6259ac0203000000000000"], 0x0, 0x0}, 0x0) 10.539993854s ago: executing program 9 (id=4358): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000001b00)={'syz_tun\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x2, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}) socket$kcm(0xa, 0x1, 0x106) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4) ioprio_set$pid(0x2, r6, 0x7) sendto$inet6(r8, &(0x7f0000000040)='H', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)}], 0x1}, 0x0) 10.386146162s ago: executing program 6 (id=4361): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) syz_open_dev$loop(0x0, 0x1, 0x698200) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r4 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='smackfstransmute', &(0x7f0000000040)='u+\x1d\x00\x00.\x00', 0x0) 9.853080329s ago: executing program 8 (id=4363): setresgid(0xee00, 0xee01, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x305040, 0x0) sendmmsg$unix(r1, &(0x7f00000081c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee00, 0xee01}}}], 0x20}}], 0x1, 0x48800) r2 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_io_uring_setup(0x7dca, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2000000002) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x0, 0x3, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0xfc}, {0x2000, 0x0, 0x0, 0x0, 0x7, 0x4, 0x2, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x10, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x0, 0x4}, {0xeeee0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfc, 0x0, 0x7f}, {0x80a0000, 0x3000, 0x10, 0x0, 0xfd, 0x1, 0x10, 0xa, 0x26}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0xeeee0000, 0xf0, 0x8, 0xdd00, 0x0, [0xe, 0xffffffffffffffff, 0x1]}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000000c0)) r7 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f00000000c0)='$\x00', 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x20, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d8"], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, &(0x7f0000000180)={0x4, 0x6, 0x200, 0x0, 0x1}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 9.38447532s ago: executing program 7 (id=4364): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0), 0x111, 0x3}}, 0x42) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) getsockopt$inet_buf(r2, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) 9.133333317s ago: executing program 6 (id=4365): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x16) r0 = userfaultfd(0x801) r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x486}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x28) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f00005b0000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000b80000/0x2000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 8.366569244s ago: executing program 8 (id=4366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}}, 0x8004) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setreuid(0xee00, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) 8.296115368s ago: executing program 3 (id=4367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000a00)={{r0}, "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"}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x58}, 0x1, 0x0, 0x0, 0x4004055}, 0x44041) 8.295365039s ago: executing program 7 (id=4368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) 8.07416761s ago: executing program 6 (id=4369): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$FITHAW(r1, 0xc0045878) r2 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_QBUF(r2, 0xc0585611, &(0x7f0000001140)=@multiplanar_fd={0x80, 0xa, 0x4, 0x4, 0x3ff, {0x77359400}, {0x5, 0x8, 0x1, 0x5, 0x4, 0x8, "177bc7bb"}, 0xfffffff9, 0x4, {&(0x7f00000000c0)=[{0x9, 0x2c9, {}, 0x4}, {0x80000001, 0x1, {}, 0x7}]}, 0x6}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x77, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x9, '\x00', r4, r5, 0x2, 0xa}, 0x50) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009042900000202010005240200000524", @ANYRES8=r6], 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r9 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000100)=0x21) ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000140)=0xd0) setsockopt$inet_mreqn(r5, 0x0, 0x8caa904b76a899c9, &(0x7f0000000b00)={@loopback, @empty, r4}, 0xc) ioctl$DRM_IOCTL_MODE_GETFB(r7, 0xc01c64ad, &(0x7f00000001c0)={r8}) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000a80)=@broute={'broute\x00', 0x20, 0x4, 0x660, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000400], 0x0, &(0x7f00000003c0), &(0x7f0000000400)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x10, 0x0, 'pim6reg\x00', 'bond_slave_0\x00', 'veth0_vlan\x00', '\x00', @random="13c1e1479422", [0x0, 0x7f, 0xff], @local, [0xff, 0xff, 0x0, 0xff], 0xf6, 0x16e, 0x29e, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x1}}}, @cluster={{'cluster\x00', 0x0, 0x10}, {{0x1, 0x2, 0x782, 0x1}}}], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}, @common=@ERROR={'ERROR\x00', 0x20, {"a820b38e7529769cdfc5a4461ae78fd70544b8c02173b34c1b69a4d98188"}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0xc, 0x3, 'system_u:object_r:su_exec_t:s0\x00'}}}}, {0x9, 0x8, 0x883e, 'pim6reg\x00', 'nr0\x00', 'ipvlan0\x00', 'lo\x00', @empty, [0x0, 0x0, 0x0, 0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0x101], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x6790, 0xff00, 0x101, 0x0, 0x0, "5f7a0648bb59673781c5a93186a1ac906346d0962c87373c79280678941303f21df4e730a910643d134040b5ac396f8652846f3efa73a7329d749e700d0acaaf"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x11, 0x28, 0x8917, 'syzkaller0\x00', 'veth1_to_bridge\x00', 'pim6reg0\x00', 'veth1_to_bond\x00', @empty, [0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, [0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}, {0x9, 0x63, 0x6c03, 'batadv_slave_0\x00', 'batadv0\x00', 'veth0_to_bridge\x00', 'veth1_macvtap\x00', @random="f4f37a3ad019", [0x0, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x0, 0x0, 0xff], 0x116, 0x146, 0x17e, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x6, 0x1}}}, @ip6={{'ip6\x00', 0x0, 0x50}, {{@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xffffffff, 0xff000000, 0xffffff00], 0xd, 0x62, 0x88, 0x10, 0x4e20, 0x4e20, 0x4e24, 0x4e20}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}], @common=@mark={'mark\x00', 0x10, {{0x0, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x6d8) 7.528237277s ago: executing program 9 (id=4370): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.294807002s ago: executing program 7 (id=4371): syz_io_uring_complete(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x0, 0xfffffff9, 0x5a, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x0, 0x7800, 0x5, 0x2}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRESHEX=r6, @ANYRESDEC=r4], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r8}, 0x20) read(r0, &(0x7f0000001b00)=""/194, 0xc2) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 7.187224416s ago: executing program 8 (id=4372): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="be", 0x1}], 0x1, 0x0, 0x0, 0x4080}, 0x8000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x8044010) 7.117963102s ago: executing program 9 (id=4373): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000000)=0x4, 0x4) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) read(r1, &(0x7f0000000240)=""/146, 0x92) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000340)=0xffe02, 0x66) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000006800010000000000fed0df25020000000000000008000600ffffffff04000b0017a091261e0dc62f2a2809df6c4323251ef51d81271592a5562e36279c8822752fc6b7f8022e0d7f64b81d2aad81d37ffd0a6dccc2011fa31d09955412f77b0652a99201be99637c72cd79e546729240ac3307b2e93ffd81a530cbef648f5faace1b21f84b"], 0x24}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='smackfstransmute', &(0x7f0000000040)='u+\x1d\x00\x00.\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setsig(0x4203, r5, 0xffffffffffffffc0, &(0x7f0000000380)={0x35, 0xf986, 0x2}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) 6.993297584s ago: executing program 3 (id=4374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) 6.837261594s ago: executing program 8 (id=4375): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x6, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x2, 0x2) preadv(0xffffffffffffffff, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x81, r2}, 0x38) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'geneve1\x00', 0x2000}) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000240)) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x20040, &(0x7f0000000340)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x60}}, 0x800) 6.104730682s ago: executing program 7 (id=4376): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mremap(&(0x7f0000328000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000a18000/0x3000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@private2, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r7, 0x2f, 0x51, 0x5, 0xffffff00, 0x4, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x10, 0x2, 0x401}}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x6, 0x0, 0x0, &(0x7f0000000000)='\x00', 0x1, 0x7fff800000000002}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, 0x0) 5.23970437s ago: executing program 9 (id=4377): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') read$FUSE(r4, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001b00)={'syz_tun\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x2, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}) socket$kcm(0xa, 0x1, 0x106) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4) ioprio_set$pid(0x2, r5, 0x7) sendto$inet6(r7, &(0x7f0000000040)='H', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)}], 0x1}, 0x0) 4.244448065s ago: executing program 7 (id=4378): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x40, 0x80, 0x2, 0x90000, {{0x2f, 0x4, 0x2, 0x6, 0xbc, 0x68, 0x0, 0x80, 0x29, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x39, 0x3, [{0x2, 0xb, "390ed5349f8fb3dd14"}, {0x5, 0xb, "0dd80333af858f4ec5"}, {0x7, 0xc, "5f258f3ea17648785358"}, {0x0, 0x11, "67c2b5524bda0ec56bf7afd1de0bad"}]}, @timestamp={0x44, 0x18, 0x1b, 0x0, 0xa, [0x2, 0x3, 0x2ee, 0x1, 0x6]}, @generic={0x7, 0xf, "728c1fe231212483898ebda6e6"}, @noop, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x2, 0x2}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0xa0, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote]}, @end, @cipso={0x86, 0x22, 0xffffffffffffffff, [{0x2, 0xc, "d729030494295cbe41e6"}, {0x5, 0x4, "d9c7"}, {0x5, 0xc, "49a186d9c57153b964c5"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6tnl0\x00', r7, 0x29, 0xbc, 0x42, 0x7, 0x74, @mcast1, @loopback, 0x8f, 0x0, 0x6, 0x1}}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000002c0)={@my=0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r8, &(0x7f0000000000)="fa", 0xfffffdef) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r9, 0xfff}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r10, &(0x7f0000000100)}, 0x20) 4.13789412s ago: executing program 8 (id=4379): geteuid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000040000095"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0xfffffffffffffff8, 0x160) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 3.885356563s ago: executing program 6 (id=4380): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) dup(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net\x00') munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) getdents64(r3, &(0x7f0000000000)=""/55, 0x37) getdents64(r3, &(0x7f0000002080)=""/170, 0xaa) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x25) r4 = socket$packet(0x11, 0x3, 0x300) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r5, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r6 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r6, &(0x7f0000002400)=[{0x0}], 0x1) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 3.697346125s ago: executing program 3 (id=4381): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x321840, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x38, r8, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}}, 0x0) 1.389426038s ago: executing program 3 (id=4382): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0), 0x2, 0x2) r2 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r2, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000000)=[{&(0x7f00000002c0)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4802) recvmsg(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x10000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r7, 0x40044583, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) 1.213252119s ago: executing program 6 (id=4383): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/psched\x00') pread64(r0, 0x0, 0x0, 0x4eb) gettid() r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x21, @time={0x3, 0x6a5e34f2}, 0x0, {0x0, 0x22}, 0x0, 0x0, 0x4}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000000c0)) socket(0x200000000000011, 0x4000000000080002, 0x0) mknodat(r2, &(0x7f00000000c0)='./file2\x00', 0x400, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_genetlink_get_family_id$devlink(0x0, r2) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$nl_generic(0x10, 0x3, 0x10) getpid() r6 = io_uring_setup(0x30a7, &(0x7f0000001440)={0x0, 0x9dd9, 0x2000, 0x2000002, 0x373}) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, &(0x7f0000000280)={0x0}, 0x1) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES16=r6], 0x400001) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000002c0)=@e={0xff, 0xc, 0xc, 0x68, @SEQ_NOTEON=@special, 0x1, 0xc, 0x51}) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8005}, 0x4800) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001380)={'macvtap0\x00', 0x1}) 1.152632066s ago: executing program 8 (id=4384): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="37ffffff0b060103000600"/20], 0x28}, 0x1, 0x0, 0x0, 0x4c080}, 0x4000002) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001480)=@newtfilter={0x860, 0x2c, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xd, 0x5}, {0x10, 0x8}, {0x10, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x101}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}, @filter_kind_options=@f_u32={{0x8}, {0x824, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x5, 0x4a12}}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0x1}}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0x7b}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x6b}, @TCA_U32_MARK={0x10, 0xa, {0x6, 0x1}}, @TCA_U32_SEL={0x354, 0x5, {0xf, 0x5, 0x4, 0x400, 0x6c3d, 0x6, 0x92e4, 0x6, [{0x4, 0x5b, 0x87}, {0x1, 0x2b, 0x1, 0x5}, {0xffc0, 0x3, 0x0, 0xfff}, {0x8, 0x1, 0x4, 0x9}, {0x6, 0x7, 0x7, 0x30}, {0x3, 0x5, 0x2, 0x3}, {0x7f, 0xfffffff9, 0xffffffff, 0x9}, {0x3ff, 0x6, 0x8, 0x1e5f}, {0xfff, 0x66, 0x9, 0xd0}, {0x8, 0x6, 0x0, 0x5}, {0x7cba, 0x5, 0x1, 0x7}, {0x2, 0x19, 0x9, 0x3}, {0x1, 0x80000000, 0x1646, 0xb}, {0x80000001, 0x17, 0x1}, {0x2, 0xa, 0xff, 0x2}, {0x7, 0x4, 0x3, 0x3d}, {0x0, 0x5, 0x200, 0xffffb944}, {0xba, 0x80000001, 0x7, 0xfffffff7}, {0x4, 0xffffffff, 0x5, 0x50}, {0x8, 0x7fffffff, 0x5, 0x78}, {0xfff, 0x1, 0x80000000, 0x7}, {0x6, 0x1000, 0x2, 0x5}, {0x1, 0x0, 0x3}, {0xfffffffa, 0x0, 0xa, 0x9}, {0x3, 0xd, 0x1, 0x200}, {0x1, 0x2, 0x3, 0x8}, {0x63b9, 0xf, 0x352605e4, 0x5}, {0x2, 0x5, 0x7, 0x101}, {0x7, 0xb, 0x3, 0x8}, {0x10000, 0xffffffff, 0x2, 0x8}, {0x1ff, 0x3, 0x6, 0x99}, {0x7, 0x2, 0x3ff, 0x80000001}, {0x0, 0xd2, 0x3}, {0x8, 0x800, 0x4, 0x3}, {0xffff, 0x7fffffff, 0x0, 0x3}, {0xb, 0x6, 0x2, 0x7}, {0x1, 0x0, 0x10000, 0x4}, {0x6, 0x3, 0xfa, 0x1}, {0x1, 0x40, 0x19, 0x2}, {0x6, 0x6, 0x0, 0xd}, {0x2, 0x8, 0x0, 0x7163}, {0xc15, 0x4e45ff87, 0xffff9b01, 0x7}, {0x40, 0x4, 0x5, 0xe9}, {0x1, 0x1dc, 0x10, 0x80000000}, {0x7, 0x9, 0xffff0f19, 0x69}, {0x6, 0x4, 0x200, 0x7}, {0x219, 0xe626, 0x2, 0x7}, {0x7f, 0x3, 0xcd7, 0x8}, {0x10001, 0xfff, 0x7, 0x401}, {0x1ff, 0xffffffff, 0x5, 0x9}, {0x0, 0x1, 0x4, 0x1fffe0}, {0x9, 0x4, 0x8, 0x8}]}}, @TCA_U32_SEL={0x474, 0x5, {0x5, 0xdb, 0x1, 0x6, 0xcf3, 0x6, 0x100, 0x2, [{0x7, 0x1, 0x200e6, 0xdc0}, {0x6, 0x3ef, 0x313f}, {0x7, 0x9, 0xa, 0x6}, {0x8, 0xf4c, 0x9, 0x732}, {0x9, 0x6, 0x0, 0x200}, {0x200, 0x8, 0x7}, {0x7, 0x3, 0xe, 0x6}, {0xffff, 0x1, 0x4, 0x1}, {0x100, 0xe8, 0x7ff, 0x8}, {0x3, 0x7, 0x2}, {0xff, 0x8, 0x0, 0x9}, {0x5, 0x1, 0x8c, 0x5}, {0x4, 0x55fd, 0x7f, 0xffffeab4}, {0x0, 0x4, 0xbb2, 0x4}, {0x8, 0x401, 0x7}, {0x2, 0x7, 0x8, 0x3}, {0x8, 0x2, 0x1, 0xa}, {0x85e, 0x7ff, 0x4, 0xbe7}, {0x9, 0x2, 0x9, 0xfffffffb}, {0x0, 0x5, 0x646c, 0x4}, {0x0, 0xfffffffd, 0x9cb4, 0x10001}, {0x9, 0x8, 0x7, 0xffff}, {0x992c, 0x9, 0xe9b, 0x7}, {0x7ff, 0x0, 0xe6, 0x7f}, {0x101, 0x6, 0x1, 0x67}, {0xb, 0x2, 0x7, 0xfff}, {0x1, 0x1, 0x4b4, 0xc4}, {0x3, 0xfffff3e7, 0xffff8000, 0x800}, {0x5037, 0xffffffff, 0x80000000}, {0x3, 0x30bf632, 0x1, 0x10001}, {0x9, 0x4, 0x1, 0x4}, {0x2}, {0x3, 0x5e, 0x0, 0x5}, {0x5, 0x3, 0x4, 0x10}, {0x7, 0x10001, 0x1, 0x7}, {0xa40, 0x6, 0x4, 0xf}, {0x7fffffff, 0x2, 0x521e, 0x4}, {0x4, 0x0, 0xe, 0x4b253419}, {0x2, 0x8, 0xfffffffc, 0x9}, {0x8, 0x9, 0xa, 0x5e15}, {0x627, 0x9, 0x980, 0x8}, {0x10002, 0x7fffffff, 0x7, 0x8}, {0x7, 0xffffffff, 0x36}, {0x7, 0xfffffffd, 0x7, 0x1}, {0x6, 0x80000001, 0x2, 0x81}, {0x10000, 0x0, 0x1, 0x2}, {0x9, 0x2, 0x7, 0x1}, {0xd, 0x9, 0x5, 0x7}, {0x2, 0x5, 0x0, 0xfffffffe}, {0x3, 0x6, 0x7, 0x37a}, {0xb6a2, 0x9, 0x1, 0xb}, {0xd, 0x3, 0xfffffff7, 0x2}, {0x7fffffff, 0x5, 0x200, 0x10000}, {0xd, 0x1ff, 0x3, 0x7fffffff}, {0x7ff, 0x0, 0xdd19, 0x7fff}, {0x5, 0x3, 0x4, 0x4}, {0x12, 0x800, 0xb}, {0x343ac70b, 0xff, 0x8, 0x9}, {0x7fffffff, 0x7, 0x9, 0x5}, {0x4, 0x10001, 0x80000001, 0x7}, {0x5, 0x4, 0x1, 0x2}, {0x3, 0x4, 0x7f, 0x4}, {0x7, 0x8, 0x2, 0x2}, {0x8905, 0x4, 0x80000000, 0xb23}, {0x4, 0x3, 0xa22b, 0x5d}, {0x60000, 0x935f, 0x0, 0xb}, {0x2, 0x1, 0x2, 0x10}, {0x8, 0x8, 0x1, 0xff}, {0xf4a2, 0x5, 0xf, 0xde49}, {0x0, 0xffff, 0xffffffff, 0x3}]}}, @TCA_U32_HASH={0x8, 0x2, 0x6}]}}]}, 0x860}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0xc8) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, 0x0, 0x0) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, 0x0, 0x0) r5 = syz_io_uring_setup(0x6705, 0x0, &(0x7f0000000400)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000850000b7d8e6d1d0a44329002300000095000000000000000e83d86023cf97ca9b89b1eab78ea9324f313933c44f1002c4515580214c910de309000000000000002e23733d79211dd5b55979e84ae0a7e2e63e968bfdce97341ea5c026eda64b6d41dc27840f3e5d4de1cc86c00089f11415e06e51825d9ac2941f86feb8a8b959e8ef0000000093323ce885bd701b363c8777"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000850000b7d8e6d1d0a44329002300000095000000000000000e83d86023cf97ca9b89b1eab78ea9324f313933c44f1002c4515580214c910de309000000000000002e23733d79211dd5b55979e84ae0a7e2e63e968bfdce97341ea5c026eda64b6d41dc27840f3e5d4de1cc86c00089f11415e06e51825d9ac2941f86feb8a8b959e8ef0000000093323ce885bd701b363c8777"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) io_uring_enter(r5, 0x5830, 0x0, 0x41, 0x0, 0x0) (async) io_uring_enter(r5, 0x5830, 0x0, 0x41, 0x0, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r8, &(0x7f0000001540), 0x0, 0x0, 0x3b2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r9}, 0x94) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) 992.470787ms ago: executing program 9 (id=4385): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="be", 0x1}], 0x1, 0x0, 0x0, 0x4080}, 0x8000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x8044010) 145.247251ms ago: executing program 7 (id=4386): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x80, 0x0, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004580)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x2, {0x6, 0x0, 0x0, 0x3, 0x4000, 0x0, {0x3, 0x7ff, 0x1, 0xffffffffffffffff, 0x403, 0x6, 0x20, 0x1, 0x2, 0x8000, 0x6, 0x0, 0x0, 0x800, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) flistxattr(r9, 0x0, 0x0) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') openat(0xffffffffffffff9c, 0x0, 0x4a300, 0xcd) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x40084) ioctl$int_in(r0, 0x4b65, 0x0) 144.882247ms ago: executing program 9 (id=4387): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f00000039c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000240)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$NBD_DO_IT(r2, 0xab03) 0s ago: executing program 6 (id=4388): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDADDIO(r0, 0x4b34, 0x8001) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) io_setup(0x2, 0x0) syz_emit_ethernet(0x68, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) write(r2, &(0x7f0000000000)="29000000140005d8ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) sendmsg$kcm(r1, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x18, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x212f) socket$kcm(0x2, 0x3, 0x84) sendto(0xffffffffffffffff, 0x0, 0x0, 0x48000, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x11) ioctl$TCFLSH(r3, 0x540b, 0x1) kernel console output (not intermixed with test programs): [ 1213.237163][T17596] ptrace attach of "./syz-executor exec"[9622] was attempted by " [ 1213.973899][T17613] bpf: Bad value for 'uid' [ 1214.065234][ C0] vkms_vblank_simulate: vblank timer overrun [ 1214.101544][T17601] xt_CT: No such helper "snmp" [ 1220.980965][T17677] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3400'. [ 1222.554051][T17706] hsr0: entered promiscuous mode [ 1222.560028][T17706] macvtap1: entered promiscuous mode [ 1222.565926][T17706] macvtap1: entered allmulticast mode [ 1222.580298][T17706] hsr0: entered allmulticast mode [ 1222.585885][T17706] hsr_slave_0: entered allmulticast mode [ 1222.593514][T17706] hsr_slave_1: entered allmulticast mode [ 1222.604793][T17706] hsr0: left allmulticast mode [ 1222.610851][T17706] hsr_slave_0: left allmulticast mode [ 1222.625098][T17706] hsr_slave_1: left allmulticast mode [ 1222.632070][T17709] tmpfs: Unknown parameter 'quotaOҒ`_' [ 1225.942212][T17745] Invalid source name [ 1225.946236][T17745] UBIFS error (pid: 17745): cannot open "/dev/sg0", error -22 [ 1225.998104][T17745] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3415'. [ 1230.626907][T17789] syz.9.3438 (17789) used greatest stack depth: 17960 bytes left [ 1233.559754][ T30] audit: type=1326 audit(1755599425.996:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17830 comm="syz.3.3453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3be98ebe9 code=0x80000000 [ 1243.186575][T17909] ptrace attach of "./syz-executor exec"[9619] was attempted by " [ 1243.920154][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.011433][ C0] vkms_vblank_simulate: vblank timer overrun [ 1244.392243][T17928] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3479'. [ 1244.641163][ C1] vcan0: j1939_tp_rxtimer: 0xffff888044347000: rx timeout, send abort [ 1246.381015][T17949] netlink: 'syz.8.3488': attribute type 29 has an invalid length. [ 1246.389864][T17949] netlink: 'syz.8.3488': attribute type 29 has an invalid length. [ 1251.926078][T18007] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1252.724990][T18007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1254.736047][T18033] wg1 speed is unknown, defaulting to 1000 [ 1256.010801][T18064] 9pnet_fd: Insufficient options for proto=fd [ 1256.806020][T18079] ptrace attach of "./syz-executor exec"[9619] was attempted by " [ 1256.846695][T18080] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3529'. [ 1256.937909][ C0] vkms_vblank_simulate: vblank timer overrun [ 1264.067922][ T5941] libceph: connect (1)[c::]:6789 error -101 [ 1264.081052][ T5941] libceph: mon0 (1)[c::]:6789 connect error [ 1264.256817][T18160] ceph: No mds server is up or the cluster is laggy [ 1266.895089][T18181] 9pnet_fd: Insufficient options for proto=fd [ 1266.979530][T18181] netlink: 6 bytes leftover after parsing attributes in process `syz.9.3559'. [ 1268.755765][T18209] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3569'. [ 1271.713239][T18233] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3573'. [ 1271.722931][T18233] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3573'. [ 1272.672364][T18243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1272.702139][T18244] overlayfs: failed to clone upperpath [ 1272.946517][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3580'. [ 1273.005492][T18250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3580'. [ 1273.072661][T18251] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3580'. [ 1273.132405][T18250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3580'. [ 1273.254998][T18254] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3581'. [ 1276.479433][T18288] netlink: 'syz.3.3593': attribute type 21 has an invalid length. [ 1277.064597][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3596'. [ 1277.150569][T18299] netlink: 'syz.9.3598': attribute type 1 has an invalid length. [ 1277.547544][T18299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1278.532850][T18323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.540751][T18323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.611641][T18327] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1278.988666][T18332] wg1 speed is unknown, defaulting to 1000 [ 1283.474253][T18392] tls_set_device_offload_rx: netdev not found [ 1286.914424][T18418] ceph: No mds server is up or the cluster is laggy [ 1291.586795][T18454] ptrace attach of "./syz-executor exec"[9626] was attempted by " [ 1291.587561][T18454] syz_tun: entered allmulticast mode [ 1291.734690][T18458] netlink: 'syz.7.3637': attribute type 1 has an invalid length. [ 1291.798957][T18458] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1291.820208][T18463] bond2: (slave gretap1): making interface the new active one [ 1291.829892][T18463] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1291.895551][T18453] syz_tun: left allmulticast mode [ 1292.796011][T18476] 9pnet_fd: Insufficient options for proto=fd [ 1293.410449][ T30] audit: type=1326 audit(1755599485.856:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18484 comm="syz.8.3648" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b7558ebe9 code=0x0 [ 1293.931358][T18497] ptrace attach of "./syz-executor exec"[9626] was attempted by " [ 1293.944690][T18497] syz_tun: entered allmulticast mode [ 1294.151997][T18496] syz_tun: left allmulticast mode [ 1297.872932][T18547] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3669'. [ 1299.692434][T18567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3675'. [ 1299.757391][T18573] 9pnet_fd: Insufficient options for proto=fd [ 1300.249418][T18590] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3678'. [ 1301.114558][T18587] ptrace attach of "./syz-executor exec"[9619] was attempted by " [ 1301.168404][T18593] sock: sock_timestamping_bind_phc: sock not bind to device [ 1301.259527][ C0] vkms_vblank_simulate: vblank timer overrun [ 1301.331492][T18593] overlayfs: failed to clone upperpath [ 1301.369983][T18593] o2cb: This node has not been configured. [ 1301.376061][T18593] o2cb: Cluster check failed. Fix errors before retrying. [ 1301.383300][T18593] (syz.9.3682,18593,1):user_dlm_register:674 ERROR: status = -22 [ 1301.391197][T18593] (syz.9.3682,18593,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1301.513799][T18600] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3686'. [ 1303.788019][T18626] netlink: 'syz.7.3695': attribute type 23 has an invalid length. [ 1305.333651][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.432768][T18646] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3698'. [ 1305.479518][T18646] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3698'. [ 1305.562243][T18646] overlayfs: missing 'lowerdir' [ 1307.282450][T18660] xt_hashlimit: max too large, truncated to 1048576 [ 1307.440012][T18667] fuse: Bad value for 'group_id' [ 1307.445054][T18667] fuse: Bad value for 'group_id' [ 1309.162261][T18685] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1311.812450][T18687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1311.827515][T18687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1312.182559][T18687] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.207499][T18687] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.263633][T18687] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.297844][T18687] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.859021][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3733'. [ 1314.880214][T18761] pim6reg: entered allmulticast mode [ 1315.105958][T18766] pim6reg: left allmulticast mode [ 1318.564735][T18778] wg1 speed is unknown, defaulting to 1000 [ 1318.820734][T18806] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1321.681302][T18828] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3751'. [ 1324.173098][T18850] ptrace attach of "./syz-executor exec"[9622] was attempted by " [ 1324.174624][T18850] syz_tun: entered allmulticast mode [ 1324.304604][T18849] syz_tun: left allmulticast mode [ 1324.674625][T18867] ptrace attach of "./syz-executor exec"[9621] was attempted by " [ 1326.787101][T18896] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3770'. [ 1326.878318][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.963973][T18899] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3771'. [ 1327.156711][T18901] openvswitch: netlink: IP tunnel TTL not specified. [ 1335.057508][T18979] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3798'. [ 1335.418085][T18991] overlayfs: failed to clone upperpath [ 1337.869015][T18072] syz_tun (unregistering): left allmulticast mode [ 1337.901891][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1337.913330][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1337.924262][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1337.938600][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1337.946423][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1337.962462][ T9606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1337.970357][ T9606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1337.978673][ T9606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1337.996659][T18072] syz_tun (unregistering): left promiscuous mode [ 1338.022509][T18072] bridge0: port 4(syz_tun) entered disabled state [ 1338.027035][ T9606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1338.048180][ T9606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1338.345776][T19030] wg1 speed is unknown, defaulting to 1000 [ 1338.363575][ T30] audit: type=1326 audit(1755599530.826:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19038 comm="syz.9.3817" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa56e98ebe9 code=0x0 [ 1338.457593][ T2207] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.725936][ T2207] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.192323][ T2207] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.131364][ T5155] Bluetooth: hci2: command tx timeout [ 1340.381346][ T2207] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.508617][T19065] ptrace attach of "./syz-executor exec"[9622] was attempted by " [ 1340.609778][T18720] wg1 speed is unknown, defaulting to 1000 [ 1340.714370][T19066] syz_tun: entered allmulticast mode [ 1340.757315][T19063] syz_tun: left allmulticast mode [ 1340.869373][T18720] syz0: Port: 1 Link DOWN [ 1341.155850][T19073] pimreg: entered allmulticast mode [ 1341.624541][T19090] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1341.821214][T19030] chnl_net:caif_netlink_parms(): no params data found [ 1341.860551][ T2207] team0: left allmulticast mode [ 1341.890082][ T2207] team_slave_0: left allmulticast mode [ 1341.926378][ T2207] team_slave_1: left allmulticast mode [ 1341.981770][ T2207] bridge0: port 3(team0) entered disabled state [ 1342.000397][ T2207] bridge_slave_1: left allmulticast mode [ 1342.006189][ T2207] bridge_slave_1: left promiscuous mode [ 1342.168793][ T2207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.190089][ T2207] bridge_slave_0: left allmulticast mode [ 1342.200359][ T5155] Bluetooth: hci2: command tx timeout [ 1342.207117][ T2207] bridge_slave_0: left promiscuous mode [ 1342.225514][ T2207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.158151][T19112] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3837'. [ 1344.293228][ T5155] Bluetooth: hci2: command tx timeout [ 1345.775333][T19125] 9pnet_fd: Insufficient options for proto=fd [ 1346.221558][T19131] ptrace attach of "./syz-executor exec"[9621] was attempted by " [ 1346.359478][ T5155] Bluetooth: hci2: command tx timeout [ 1346.729021][ T2207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1346.757852][ T2207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1346.781192][ T2207] bond0 (unregistering): Released all slaves [ 1347.256341][ T2207] tipc: Disabling bearer [ 1347.359682][ T2207] tipc: Left network mode [ 1347.800475][T19030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.807881][T19030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.825015][T19030] bridge_slave_0: entered allmulticast mode [ 1347.855070][T19030] bridge_slave_0: entered promiscuous mode [ 1347.907102][T19030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.926226][T19030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.968947][T19030] bridge_slave_1: entered allmulticast mode [ 1348.001525][T19030] bridge_slave_1: entered promiscuous mode [ 1349.074436][T19030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.092847][T19030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.179274][ T2207] hsr_slave_0: left promiscuous mode [ 1349.199550][ T2207] hsr_slave_1: left promiscuous mode [ 1349.220195][ T2207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1349.240774][ T2207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1349.314354][ T2207] veth1_macvtap: left promiscuous mode [ 1349.320556][ T2207] veth0_macvtap: left promiscuous mode [ 1349.326264][ T2207] veth1_vlan: left promiscuous mode [ 1349.331786][ T2207] veth0_vlan: left promiscuous mode [ 1350.652963][T19201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3863'. [ 1350.683720][T19201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'. [ 1351.266376][ T2207] team_slave_1 (unregistering): left promiscuous mode [ 1351.286952][ T2207] team0 (unregistering): Port device team_slave_1 removed [ 1351.345755][ T2207] team_slave_0 (unregistering): left promiscuous mode [ 1351.355893][ T2207] team0 (unregistering): Port device team_slave_0 removed [ 1351.740102][ T30] audit: type=1326 audit(1755599544.206:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19202 comm="syz.7.3864" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ac4f8ebe9 code=0x0 [ 1352.283411][T19030] team0: Port device team_slave_0 added [ 1352.295274][T19030] team0: Port device team_slave_1 added [ 1352.405102][T19030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1352.415454][T19030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.477576][T19030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1352.768065][T19030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.821774][T19030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1353.034246][T19030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1353.056404][T19213] overlayfs: failed to clone upperpath [ 1353.268979][T19030] hsr_slave_0: entered promiscuous mode [ 1353.306497][T19030] hsr_slave_1: entered promiscuous mode [ 1353.363547][ T2207] IPVS: stop unused estimator thread 0... [ 1354.396830][T19030] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1354.610919][T19030] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1355.147778][T19030] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1355.228922][T19030] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1355.360802][T19030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1355.456350][T19030] 8021q: adding VLAN 0 to HW filter on device team0 [ 1355.500250][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.507421][ T9595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.563933][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.571114][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.069959][T19030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1357.815329][T19030] veth0_vlan: entered promiscuous mode [ 1357.882302][T19030] veth1_vlan: entered promiscuous mode [ 1357.898621][T19290] tipc: Enabling of bearer rejected, failed to enable media [ 1357.937137][T19290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3887'. [ 1357.952566][T19290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 1357.988788][T19030] veth0_macvtap: entered promiscuous mode [ 1358.014043][T19030] veth1_macvtap: entered promiscuous mode [ 1358.308507][T19030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1358.378990][T19030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1358.432638][T19030] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.458442][T19030] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.489511][T19030] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.498743][T19030] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.507949][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3891'. [ 1358.850435][T19317] fuse: Unknown parameter 'pd' [ 1359.133849][T19325] binder: Bad value for 'stats' [ 1359.655169][ T9595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.721733][ T9595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.848060][ T9595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.891315][ T9595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.782245][ T9606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1363.819398][ T9606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1363.828094][ T9606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1363.889338][ T9606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1363.907130][ T9606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1364.079822][T19386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3916'. [ 1364.342973][T19386] bridge0: port 3(macvlan2) entered blocking state [ 1364.375692][T19386] bridge0: port 3(macvlan2) entered disabled state [ 1364.382906][T19386] macvlan2: entered allmulticast mode [ 1364.390508][T19386] bridge0: entered allmulticast mode [ 1364.406774][T19386] macvlan2: left allmulticast mode [ 1364.414364][T19386] bridge0: left allmulticast mode [ 1365.555799][ T30] audit: type=1326 audit(1755599558.016:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19398 comm="syz.7.3921" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ac4f8ebe9 code=0x0 [ 1365.908692][T19405] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3920'. [ 1365.960146][ T5155] Bluetooth: hci3: command tx timeout [ 1365.980389][T19405] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3920'. [ 1366.407280][T19378] chnl_net:caif_netlink_parms(): no params data found [ 1367.184192][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.233311][ T1004] bridge_slave_1: left allmulticast mode [ 1367.246756][ T1004] bridge_slave_1: left promiscuous mode [ 1367.252685][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.376042][ T1004] bridge_slave_0: left allmulticast mode [ 1367.400151][ T1004] bridge_slave_0: left promiscuous mode [ 1367.414681][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.803093][T19439] 9pnet_fd: Insufficient options for proto=fd [ 1368.044440][ T5155] Bluetooth: hci3: command tx timeout [ 1368.549337][T18722] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1368.729450][T18722] usb 7-1: Using ep0 maxpacket: 16 [ 1368.816255][T18722] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1368.837287][T18722] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1368.985246][T18722] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1369.021814][T18722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.039487][T18722] usb 7-1: Product: syz [ 1369.043929][T18722] usb 7-1: Manufacturer: syz [ 1369.049077][T18722] usb 7-1: SerialNumber: syz [ 1369.064819][T18722] usb 7-1: config 0 descriptor?? [ 1369.093977][T18722] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1369.113711][T18722] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1370.239550][ T5155] Bluetooth: hci3: command tx timeout [ 1370.378083][T18722] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1370.394217][T18722] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1370.515635][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1370.547832][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1370.565925][ T1004] bond0 (unregistering): Released all slaves [ 1370.612255][T18722] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1370.628260][T18722] em28xx 7-1:0.0: No AC97 audio processor [ 1370.687012][T18722] usb 7-1: USB disconnect, device number 2 [ 1370.724636][T18722] em28xx 7-1:0.0: Disconnecting em28xx [ 1370.804168][T18722] em28xx 7-1:0.0: Freeing device [ 1371.253173][ T1004] tipc: Disabling bearer [ 1371.262657][ T1004] tipc: Left network mode [ 1372.279430][ T5155] Bluetooth: hci3: command tx timeout [ 1373.438182][T19378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.499408][T19378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.445590][T19497] Invalid source name [ 1374.449880][T19497] UBIFS error (pid: 19497): cannot open "/dev/sg0", error -22 [ 1374.514126][T19378] bridge_slave_0: entered allmulticast mode [ 1374.892677][T19378] bridge_slave_0: entered promiscuous mode [ 1374.958705][ T5837] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1374.970694][T19378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.970871][T19378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.149240][ T5837] usb 7-1: device descriptor read/64, error -71 [ 1375.223418][T19378] bridge_slave_1: entered allmulticast mode [ 1375.231956][T19378] bridge_slave_1: entered promiscuous mode [ 1375.253094][ T1004] hsr_slave_0: left promiscuous mode [ 1376.035423][ T1004] hsr_slave_1: left promiscuous mode [ 1376.049665][ T5837] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1376.049940][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1376.105819][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1376.209511][ T5837] usb 7-1: device descriptor read/64, error -71 [ 1376.319961][ T5837] usb usb7-port1: attempt power cycle [ 1377.805317][ T1004] team0 (unregistering): Port device team_slave_1 removed [ 1377.875988][ T1004] team0 (unregistering): Port device team_slave_0 removed [ 1378.797568][T19378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.844840][T19378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1379.990495][T19378] team0: Port device team_slave_0 added [ 1380.003157][T19378] team0: Port device team_slave_1 added [ 1380.783350][T19378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1380.826698][T19378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.853570][ C0] vkms_vblank_simulate: vblank timer overrun [ 1381.489192][T19378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1381.613693][T19378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1381.629348][T19378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1381.655409][ C0] vkms_vblank_simulate: vblank timer overrun [ 1381.697784][T19378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1381.780451][ T1004] IPVS: stop unused estimator thread 0... [ 1381.940641][T19378] hsr_slave_0: entered promiscuous mode [ 1381.959585][T19378] hsr_slave_1: entered promiscuous mode [ 1381.967766][T19378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1381.980916][T19378] Cannot create hsr debugfs directory [ 1382.247760][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3964'. [ 1383.626888][T19572] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3967'. [ 1385.088270][T19581] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3970'. [ 1385.145442][T19581] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3970'. [ 1385.296250][T19597] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1386.081766][T19378] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1386.117081][T19378] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1386.194078][T19378] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1386.214036][T19378] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1386.541336][T19378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.605071][T19378] 8021q: adding VLAN 0 to HW filter on device team0 [ 1386.688337][ T6351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.695570][ T6351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1386.751245][ T6351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.760176][ T6351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.997690][T19378] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1387.009511][T19378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1388.110924][T19646] program syz.6.3987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1388.274923][T19378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1388.394482][T19378] veth0_vlan: entered promiscuous mode [ 1388.426371][T19378] veth1_vlan: entered promiscuous mode [ 1388.495795][T19378] veth0_macvtap: entered promiscuous mode [ 1388.512224][T19378] veth1_macvtap: entered promiscuous mode [ 1388.555188][T19378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1388.598442][T19378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1388.614270][T19651] batadv_slave_1: entered promiscuous mode [ 1388.650461][T19378] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.672904][T19378] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.693835][T19664] sctp: [Deprecated]: syz.7.3992 (pid 19664) Use of int in max_burst socket option deprecated. [ 1388.693835][T19664] Use struct sctp_assoc_value instead [ 1388.710268][T19378] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.730322][T19378] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.755993][T19651] batadv_slave_1: left promiscuous mode [ 1389.095157][ T9595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.138834][ T9595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.211502][ T6016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.223820][ T6016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.776831][ T9606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1392.805016][ T9606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1392.817223][ T9606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1392.829760][ T9606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1392.838284][ T9606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1394.065448][T19706] [U]  [ 1394.068265][T19706] [U] K{ [ 1394.082135][T12925] syz_tun (unregistering): left allmulticast mode [ 1394.088537][T19706] [U] T 1ŠFFˊ`GJǘGO/MC [ 1394.113071][T19706] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1394.130317][T19706] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1394.304682][T19706] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1394.340421][ C0] vkms_vblank_simulate: vblank timer overrun [ 1395.116615][ T9606] Bluetooth: hci6: command tx timeout [ 1395.213397][T19706] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1395.237136][ C0] vkms_vblank_simulate: vblank timer overrun [ 1395.296290][T19706] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1395.313918][T19706] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1395.327324][T19706] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/< [ 1401.746330][T19799] dump_stack_lvl+0x189/0x250 [ 1401.746353][T19799] ? __pfx____ratelimit+0x10/0x10 [ 1401.746370][T19799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1401.746387][T19799] ? __pfx__printk+0x10/0x10 [ 1401.746417][T19799] should_fail_ex+0x414/0x560 [ 1401.746438][T19799] strncpy_from_user+0x36/0x290 [ 1401.746466][T19799] path_setxattrat+0x150/0x3a0 [ 1401.746496][T19799] ? __pfx_path_setxattrat+0x10/0x10 [ 1401.746516][T19799] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1401.746554][T19799] ? ksys_write+0x22a/0x250 [ 1401.746570][T19799] ? __pfx_ksys_write+0x10/0x10 [ 1401.746589][T19799] __x64_sys_lsetxattr+0xbf/0xe0 [ 1401.746612][T19799] do_syscall_64+0xfa/0x3b0 [ 1401.746631][T19799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.746645][T19799] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1401.746661][T19799] ? clear_bhb_loop+0x60/0xb0 [ 1401.746680][T19799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.746694][T19799] RIP: 0033:0x7efca6d8ebe9 [ 1401.746708][T19799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1401.746722][T19799] RSP: 002b:00007efca7c13038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1401.746738][T19799] RAX: ffffffffffffffda RBX: 00007efca6fb5fa0 RCX: 00007efca6d8ebe9 [ 1401.746750][T19799] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000200000000040 [ 1401.746760][T19799] RBP: 00007efca7c13090 R08: 0000000000000000 R09: 0000000000000000 [ 1401.746770][T19799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1401.746778][T19799] R13: 00007efca6fb6038 R14: 00007efca6fb5fa0 R15: 00007ffc5e33a318 [ 1401.746802][T19799] [ 1402.225966][T19693] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.408159][T19693] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.427201][T19812] Falling back ldisc for ptm0. [ 1403.482395][T19812] ucma_write: process 31 (syz.3.4030) changed security contexts after opening file descriptor, this is not allowed. [ 1403.616435][T19693] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.727258][T19693] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.751094][T19833] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4040'. [ 1404.783992][T19693] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1404.812026][T19693] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1404.858087][T19693] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1405.987057][T19693] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1406.217991][T19846] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4043'. [ 1406.520316][T19693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1406.924287][T19693] 8021q: adding VLAN 0 to HW filter on device team0 [ 1406.972774][ T2207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.979989][ T2207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.030966][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.038553][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.171136][T19867] FAULT_INJECTION: forcing a failure. [ 1407.171136][T19867] name failslab, interval 1, probability 0, space 0, times 0 [ 1407.231866][T19867] CPU: 1 UID: 0 PID: 19867 Comm: syz.6.4047 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1407.231897][T19867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1407.231910][T19867] Call Trace: [ 1407.231920][T19867] [ 1407.231929][T19867] dump_stack_lvl+0x189/0x250 [ 1407.231960][T19867] ? __pfx____ratelimit+0x10/0x10 [ 1407.231984][T19867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1407.232009][T19867] ? __pfx__printk+0x10/0x10 [ 1407.232044][T19867] ? __pfx___might_resched+0x10/0x10 [ 1407.232068][T19867] ? fs_reclaim_acquire+0x7d/0x100 [ 1407.232100][T19867] should_fail_ex+0x414/0x560 [ 1407.232130][T19867] should_failslab+0xa8/0x100 [ 1407.232157][T19867] __kmalloc_noprof+0xcb/0x4f0 [ 1407.232177][T19867] ? kfree+0x4d/0x440 [ 1407.232207][T19867] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1407.232242][T19867] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1407.232274][T19867] ? tomoyo_domain+0xda/0x130 [ 1407.232309][T19867] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1407.232333][T19867] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1407.232361][T19867] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1407.232404][T19867] ? __lock_acquire+0xab9/0xd20 [ 1407.232448][T19867] ? __fget_files+0x2a/0x420 [ 1407.232476][T19867] ? __fget_files+0x2a/0x420 [ 1407.232500][T19867] ? __fget_files+0x3a0/0x420 [ 1407.232530][T19867] ? __fget_files+0x2a/0x420 [ 1407.232559][T19867] security_file_ioctl+0xcb/0x2d0 [ 1407.232587][T19867] __se_sys_ioctl+0x47/0x170 [ 1407.232623][T19867] do_syscall_64+0xfa/0x3b0 [ 1407.232646][T19867] ? lockdep_hardirqs_on+0x9c/0x150 [ 1407.232670][T19867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.232692][T19867] ? clear_bhb_loop+0x60/0xb0 [ 1407.232720][T19867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.232741][T19867] RIP: 0033:0x7fc8ecb8ebe9 [ 1407.232761][T19867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1407.232781][T19867] RSP: 002b:00007fc8eda06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1407.232804][T19867] RAX: ffffffffffffffda RBX: 00007fc8ecdb6090 RCX: 00007fc8ecb8ebe9 [ 1407.232820][T19867] RDX: 0000000000000000 RSI: 0000000040049366 RDI: 0000000000000003 [ 1407.232834][T19867] RBP: 00007fc8eda06090 R08: 0000000000000000 R09: 0000000000000000 [ 1407.232848][T19867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1407.232860][T19867] R13: 00007fc8ecdb6128 R14: 00007fc8ecdb6090 R15: 00007fff3c05d888 [ 1407.232900][T19867] [ 1407.232970][T19867] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1409.539521][T19888] mkiss: ax0: crc mode is auto. [ 1410.668935][T19693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1411.057842][T19901] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1412.007179][T19916] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4060'. [ 1412.294387][T19693] veth0_vlan: entered promiscuous mode [ 1412.341392][T19693] veth1_vlan: entered promiscuous mode [ 1412.662761][T19693] veth0_macvtap: entered promiscuous mode [ 1412.687609][T19693] veth1_macvtap: entered promiscuous mode [ 1412.729663][T19693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1412.758097][T19693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1412.795489][T19693] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.811373][T19693] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.832589][T19693] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.860234][T19693] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.124952][ T9608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.152722][ T9608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.273877][T16743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.303076][T16743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.829613][T18722] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1414.079394][T18722] usb 8-1: Using ep0 maxpacket: 8 [ 1414.101002][T18722] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1414.130047][T19944] binder: transaction release 49 bad handle 1, ret = -22 [ 1414.239417][T18722] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1414.284501][T18722] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.330093][T18722] usb 8-1: config 0 descriptor?? [ 1414.552759][T18722] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1414.767233][T18722] usb 8-1: USB disconnect, device number 14 [ 1416.880387][T19986] netlink: 'syz.8.4082': attribute type 1 has an invalid length. [ 1418.201540][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1418.214443][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1418.223666][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1418.249371][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1418.259452][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1418.377964][T20004] ptrace attach of "./syz-executor exec"[9622] was attempted by " [ 1418.378715][T20004] syz_tun: entered allmulticast mode [ 1418.573726][T20003] syz_tun: left allmulticast mode [ 1419.312165][T20014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4088'. [ 1419.500099][T20001] chnl_net:caif_netlink_parms(): no params data found [ 1420.261381][T20001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.313689][T20001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.358730][T20001] bridge_slave_0: entered allmulticast mode [ 1420.364965][ T5155] Bluetooth: hci4: command tx timeout [ 1420.394651][T20001] bridge_slave_0: entered promiscuous mode [ 1420.405061][T20001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.412826][T20001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.420822][T20001] bridge_slave_1: entered allmulticast mode [ 1420.428943][T20001] bridge_slave_1: entered promiscuous mode [ 1420.867394][T20001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1421.618873][T20001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1422.440610][ T5155] Bluetooth: hci4: command tx timeout [ 1422.729198][T20038] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4094'. [ 1422.791470][T20001] team0: Port device team_slave_0 added [ 1422.800540][T20001] team0: Port device team_slave_1 added [ 1423.069298][T20047] ptrace attach of "./syz-executor exec"[19378] was attempted by " [ 1423.151150][T20001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.117667][T20054] devtmpfs: Too few inodes for current use [ 1424.385370][T20001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.416791][T20001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.465955][T20055] syz_tun: entered allmulticast mode [ 1424.476371][T20055] syz_tun: left allmulticast mode [ 1424.487353][T20001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.503922][T20001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.539732][ T5155] Bluetooth: hci4: command tx timeout [ 1424.561855][T20001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.682988][T20001] hsr_slave_0: entered promiscuous mode [ 1424.700063][T20001] hsr_slave_1: entered promiscuous mode [ 1424.714140][T20001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1424.726606][T20001] Cannot create hsr debugfs directory [ 1426.033121][ T5837] IPVS: starting estimator thread 0... [ 1426.154999][T20070] IPVS: using max 22 ests per chain, 52800 per kthread [ 1426.602482][ T5155] Bluetooth: hci4: command tx timeout [ 1426.796486][T20001] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.340084][T20079] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4102'. [ 1428.349806][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.875993][T20001] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.917083][T20080] xt_CT: No such helper "snmp_trap" [ 1429.342859][T20001] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.502019][T20101] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4107'. [ 1430.347059][T20001] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1430.724173][T20113] ptrace attach of "./syz-executor exec"[9622] was attempted by " [ 1430.724818][T20113] syz_tun: entered allmulticast mode [ 1430.874862][T20112] syz_tun: left allmulticast mode [ 1431.120465][T20123] overlay: Bad value for 'workdir' [ 1432.062511][T20001] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1432.141004][T20001] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1432.217776][T20001] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1432.249578][T20001] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1433.225361][T20001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.391925][T20001] 8021q: adding VLAN 0 to HW filter on device team0 [ 1433.441849][ T6351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.449132][ T6351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1433.527249][ T6351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.534620][ T6351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1433.605565][T20001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1433.660640][T14354] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1433.822875][T20153] batadv_slave_1: entered promiscuous mode [ 1433.862735][T20153] batadv_slave_1: left promiscuous mode [ 1434.015657][T14354] usb 4-1: config 0 has an invalid descriptor of length 151, skipping remainder of the config [ 1434.098253][T14354] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1434.403306][T14354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1435.479172][T14354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1435.489037][T14354] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1435.499381][T20001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1435.504028][T14354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 33774, setting to 64 [ 1435.511719][T14354] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1435.511750][T14354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.511772][T14354] usb 4-1: Product: syz [ 1435.511789][T14354] usb 4-1: Manufacturer: syz [ 1435.511807][T14354] usb 4-1: SerialNumber: syz [ 1435.547310][T14354] usb 4-1: config 0 descriptor?? [ 1436.505983][T20175] 9pnet: Unknown protocol version 9p [ 1437.129868][T14354] usb 4-1: can't set config #0, error -71 [ 1437.139758][T14354] usb 4-1: USB disconnect, device number 26 [ 1437.500040][T14354] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1437.674691][T14354] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1437.696229][T20001] veth0_vlan: entered promiscuous mode [ 1437.709510][T14354] usb 4-1: config 0 has no interface number 0 [ 1437.726936][T14354] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.742308][T20001] veth1_vlan: entered promiscuous mode [ 1437.779247][T14354] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.809640][T14354] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1437.834119][T14354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.845106][T20001] veth0_macvtap: entered promiscuous mode [ 1437.873602][T14354] usb 4-1: config 0 descriptor?? [ 1437.897857][T20001] veth1_macvtap: entered promiscuous mode [ 1437.976218][T20001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1438.013266][T20001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1438.049780][T20001] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.068806][T20001] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.087907][T20178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.098138][T20001] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.106333][T20178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.114763][T20001] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.152440][T20178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.179880][T20178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.279829][T20195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.309942][T20195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.330709][T20195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.354038][T20195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.367757][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.418960][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.432260][T14354] uclogic 0003:256C:006D.0004: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input1 [ 1439.454813][ T2207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.529446][ T2207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.602496][ T5915] usb 4-1: USB disconnect, device number 27 [ 1439.755551][T20202] fido_id[20202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1440.618205][T20213] batadv_slave_1: entered promiscuous mode [ 1440.815045][T20211] batadv_slave_1: left promiscuous mode [ 1442.729871][T20233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1444.299583][T14354] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1444.617058][ T9606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1444.628791][ T9606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1444.641447][ T9606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1444.649524][T14354] usb 8-1: Using ep0 maxpacket: 8 [ 1444.657030][T14354] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1444.668670][T14354] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1444.679444][ T9606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1444.686572][T14354] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1444.698289][T14354] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1444.712002][ T9606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1444.719160][T14354] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1444.730284][T14354] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.957289][T14354] usb 8-1: GET_CAPABILITIES returned 0 [ 1444.967417][T14354] usbtmc 8-1:16.0: can't read capabilities [ 1445.193072][T14354] usb 8-1: USB disconnect, device number 15 [ 1445.372957][T20255] loop8: detected capacity change from 0 to 16384 [ 1445.481594][T20255] loop8: detected capacity change from 16384 to 16383 [ 1446.844784][ T5155] Bluetooth: hci1: command tx timeout [ 1446.906834][T20248] chnl_net:caif_netlink_parms(): no params data found [ 1447.298360][T20272] No such timeout policy "syz0" [ 1449.199233][ T5155] Bluetooth: hci1: command tx timeout [ 1449.525136][T20248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.566635][T20248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.594249][T20248] bridge_slave_0: entered allmulticast mode [ 1449.654914][T20248] bridge_slave_0: entered promiscuous mode [ 1449.712383][T20248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.758628][T20248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.810154][T20248] bridge_slave_1: entered allmulticast mode [ 1449.844603][T20248] bridge_slave_1: entered promiscuous mode [ 1450.923646][T20298] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4160'. [ 1451.174588][T20248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1451.241945][ T5155] Bluetooth: hci1: command tx timeout [ 1451.386151][T20248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1451.772547][T20248] team0: Port device team_slave_0 added [ 1451.793591][T20248] team0: Port device team_slave_1 added [ 1451.859225][T18724] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1451.962544][T20248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1451.979218][T20248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.051317][T18724] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 1452.060376][T18724] usb 4-1: config 5 has no interface number 0 [ 1452.068540][T20248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1452.094985][T18724] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1452.210060][T18724] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1452.220401][T20248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1452.227609][T20248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.254296][T18724] usb 4-1: config 5 interface 123 has no altsetting 0 [ 1452.299272][T18724] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1452.314694][T18724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.369156][T18724] usb 4-1: Product: syz [ 1452.373515][T20248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.009177][T20316] ALSA: mixer_oss: invalid OSS volume 'LI' [ 1453.015998][T20316] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4163'. [ 1453.032538][T20316] openvswitch: netlink: Flow key attr not present in new flow. [ 1453.101010][T18724] usb 4-1: Manufacturer: syz [ 1453.105907][T18724] usb 4-1: SerialNumber: syz [ 1453.319198][ T5155] Bluetooth: hci1: command tx timeout [ 1454.546936][T18717] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1454.608281][T20248] hsr_slave_0: entered promiscuous mode [ 1454.624134][T20248] hsr_slave_1: entered promiscuous mode [ 1454.803719][T20248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1454.894635][T20248] Cannot create hsr debugfs directory [ 1455.429207][T18717] usb 7-1: Using ep0 maxpacket: 8 [ 1455.453320][T18717] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1455.469511][T18717] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1455.489315][T18717] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1455.515012][T18717] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1455.542429][T18717] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1455.579251][T18717] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1455.658191][T18717] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.762303][T18724] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1455.781009][T18724] usb 4-1: USB disconnect, device number 28 [ 1455.873049][T20248] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1456.102797][T18717] usb 7-1: GET_CAPABILITIES returned 0 [ 1456.108376][T18717] usbtmc 7-1:16.0: can't read capabilities [ 1456.139429][T20248] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.530022][T20341] [U] [ 1456.653087][T18717] usb 7-1: USB disconnect, device number 6 [ 1456.922437][T20248] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1456.956732][T20248] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.044013][T20318] ip6gre1: entered allmulticast mode [ 1457.054036][ T6351] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1457.704948][T20248] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1457.792647][T20248] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.736213][T20248] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1458.781693][T20248] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.150297][ T5837] IPVS: starting estimator thread 0... [ 1459.239468][T20363] IPVS: using max 16 ests per chain, 38400 per kthread [ 1460.132289][ T30] audit: type=1326 audit(1755599652.446:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20361 comm="syz.9.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1436b8ebe9 code=0x7ffc0000 [ 1460.155293][ T30] audit: type=1326 audit(1755599652.446:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20361 comm="syz.9.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f1436b8ebe9 code=0x7ffc0000 [ 1460.227353][ T30] audit: type=1326 audit(1755599652.446:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20361 comm="syz.9.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1436b8ebe9 code=0x7ffc0000 [ 1460.249126][ C0] vkms_vblank_simulate: vblank timer overrun [ 1460.478459][ T30] audit: type=1326 audit(1755599652.446:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20361 comm="syz.9.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1436b8ebe9 code=0x7ffc0000 [ 1460.500086][ C0] vkms_vblank_simulate: vblank timer overrun [ 1460.650749][ T30] audit: type=1326 audit(1755599652.446:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20361 comm="syz.9.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1436b8ebe9 code=0x7ffc0000 [ 1460.989581][ T30] audit: type=1326 audit(1755599652.446:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20361 comm="syz.9.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1436b8ebe9 code=0x7ffc0000 [ 1461.001445][ T9606] Bluetooth: hci2: command 0x0406 tx timeout [ 1461.109333][ T30] audit: type=1326 audit(1755599652.446:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20361 comm="syz.9.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1436b8ebe9 code=0x7ffc0000 [ 1461.140699][ T30] audit: type=1326 audit(1755599652.456:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20361 comm="syz.9.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1436b8ebe9 code=0x7ffc0000 [ 1461.214121][T20248] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1461.252257][ T30] audit: type=1326 audit(1755599652.456:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20361 comm="syz.9.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1436b8ebe9 code=0x7ffc0000 [ 1461.322362][T20248] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1461.359695][ T30] audit: type=1326 audit(1755599652.456:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20361 comm="syz.9.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1436b8ebe9 code=0x7ffc0000 [ 1461.381447][ C0] vkms_vblank_simulate: vblank timer overrun [ 1461.398343][T20248] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1461.615648][T20248] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1461.719592][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1463.480372][T20248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.551194][T20248] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.592300][T13266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.599530][T13266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.784227][T13266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.791440][T13266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.580122][T20401] cramfs: Unknown parameter 'discard' [ 1464.662026][T20248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1464.692748][T20248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1466.874582][T20248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1467.929407][ T5915] IPVS: starting estimator thread 0... [ 1468.040619][T20428] IPVS: using max 23 ests per chain, 55200 per kthread [ 1468.349259][T18717] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1468.530360][T20248] veth0_vlan: entered promiscuous mode [ 1468.540150][T18717] usb 10-1: Using ep0 maxpacket: 16 [ 1468.552462][T18717] usb 10-1: config 1 has an invalid interface number: 230 but max is 0 [ 1468.578840][T20248] veth1_vlan: entered promiscuous mode [ 1468.596690][T18717] usb 10-1: config 1 has no interface number 0 [ 1468.629018][T18717] usb 10-1: config 1 interface 230 has no altsetting 0 [ 1468.680257][T18717] usb 10-1: New USB device found, idVendor=093a, idProduct=2628, bcdDevice=55.d0 [ 1468.700444][T18717] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.710078][T18717] usb 10-1: Product: syz [ 1468.714531][T18717] usb 10-1: Manufacturer: syz [ 1468.762182][T20248] veth0_macvtap: entered promiscuous mode [ 1468.770269][T18717] usb 10-1: SerialNumber: syz [ 1468.847194][T18717] gspca_main: gspca_pac7302-2.14.0 probing 093a:2628 [ 1468.880796][T20248] veth1_macvtap: entered promiscuous mode [ 1469.035894][T20248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1469.107568][T20248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1469.186163][T20248] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.196711][T20248] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.207267][T20248] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.216609][T20248] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.236363][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1469.236382][ T30] audit: type=1326 audit(1755599661.696:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20431 comm="syz.9.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1436b8ebe9 code=0x7ffc0000 [ 1469.264601][ C0] vkms_vblank_simulate: vblank timer overrun [ 1469.306601][ T30] audit: type=1326 audit(1755599661.696:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20431 comm="syz.9.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f1436b8ebe9 code=0x7ffc0000 [ 1469.329008][ T30] audit: type=1326 audit(1755599661.696:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20431 comm="syz.9.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1436b8ebe9 code=0x7ffc0000 [ 1469.350672][ C0] vkms_vblank_simulate: vblank timer overrun [ 1469.363787][ T30] audit: type=1326 audit(1755599661.696:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20431 comm="syz.9.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1436b8e7eb code=0x7ffc0000 [ 1469.398346][ T30] audit: type=1326 audit(1755599661.696:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20431 comm="syz.9.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1436b8e7eb code=0x7ffc0000 [ 1469.421517][ T5837] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1469.435722][ T30] audit: type=1326 audit(1755599661.696:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20431 comm="syz.9.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1436bc14a5 code=0x7ffc0000 [ 1469.589757][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 1469.604666][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 23305, setting to 1024 [ 1469.627405][ T30] audit: type=1326 audit(1755599661.896:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20431 comm="syz.9.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1436b8ebe9 code=0x7ffc0000 [ 1469.649046][ C0] vkms_vblank_simulate: vblank timer overrun [ 1469.660262][ T5837] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1469.719569][ T5837] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1469.729958][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.738038][ T5837] usb 4-1: Product: syz [ 1469.739453][T18717] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1469.756876][ T5837] usb 4-1: Manufacturer: syz [ 1469.761692][T18717] gspca_pac7302 10-1:1.230: probe with driver gspca_pac7302 failed with error -110 [ 1469.773007][ T30] audit: type=1326 audit(1755599661.896:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20431 comm="syz.9.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1436b8ebe9 code=0x7ffc0000 [ 1469.794887][ T6351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1469.839743][ T6351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1469.849642][ T5837] usb 4-1: SerialNumber: syz [ 1470.300612][ T5837] usb 4-1: config 0 descriptor?? [ 1470.312197][T20442] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1470.364696][ T5837] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 1470.439347][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1470.553710][ T6351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.587358][ T6351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1470.791285][ T30] audit: type=1326 audit(1755599663.256:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20431 comm="syz.9.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1436b8ebe9 code=0x7ffc0000 [ 1470.908468][ T30] audit: type=1326 audit(1755599663.276:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20431 comm="syz.9.4190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1436b8ebe9 code=0x7ffc0000 [ 1470.990072][T18718] usb 10-1: USB disconnect, device number 13 [ 1471.201025][T18700] usb 4-1: USB disconnect, device number 29 [ 1471.207029][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1475.342420][T20489] ptrace attach of "./syz-executor exec"[19693] was attempted by " [ 1475.343332][T20489] syz_tun: entered allmulticast mode [ 1475.507170][T20488] syz_tun: left allmulticast mode [ 1475.738602][T18716] IPVS: starting estimator thread 0... [ 1475.839240][T20499] IPVS: using max 27 ests per chain, 64800 per kthread [ 1475.950179][ T6016] Bluetooth: Error in BCSP hdr checksum [ 1476.029403][ T5837] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1476.218683][T20504] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4208'. [ 1476.235748][T20504] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4208'. [ 1476.575185][T20504] input: syz0 as /devices/virtual/input/input15 [ 1476.636859][ T5837] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1476.650738][ T5837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.668529][ T5837] usb 8-1: config 0 descriptor?? [ 1477.417153][ T5837] usb 8-1: Cannot set autoneg [ 1477.423009][ T5837] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1477.465405][ T5837] usb 8-1: USB disconnect, device number 16 [ 1477.667151][T20509] ISOFS: Unable to identify CD-ROM format. [ 1477.959892][ T9606] Bluetooth: hci5: command 0x1003 tx timeout [ 1477.969580][ T5155] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1478.539161][ T5837] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1478.715327][ T5837] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.777726][T20533] ptrace attach of "./syz-executor exec"[20001] was attempted by " [ 1478.778397][T20533] syz_tun: entered allmulticast mode [ 1478.878923][ T5837] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1479.382205][T20530] syz_tun: left allmulticast mode [ 1479.388720][ T5837] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1479.421359][ T5837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.473165][ T5837] usb 9-1: config 0 descriptor?? [ 1479.487314][ T5837] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1479.502616][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 1479.530646][ T5837] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1479.552722][ T5837] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1479.570469][ T5837] usb 9-1: media controller created [ 1479.577981][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1479.739948][T20521] dvb-usb: bulk message failed: -22 (2/0) [ 1480.548175][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 1480.554225][ T5837] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1480.564578][ T5837] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input16 [ 1480.581554][ T5837] dvb-usb: schedule remote query interval to 150 msecs. [ 1480.588644][ T5837] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1480.666548][ T5837] usb 9-1: USB disconnect, device number 4 [ 1480.692960][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1480.692979][ T30] audit: type=1326 audit(1755599673.146:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20547 comm="syz.7.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1858ebe9 code=0x7ffc0000 [ 1481.045702][T14354] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1481.442811][ T30] audit: type=1326 audit(1755599673.146:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20547 comm="syz.7.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1858ebe9 code=0x7ffc0000 [ 1481.464445][ C0] vkms_vblank_simulate: vblank timer overrun [ 1481.509397][T18700] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 1481.609173][T14354] usb 4-1: Using ep0 maxpacket: 16 [ 1481.630977][ T5837] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1481.712572][ T30] audit: type=1326 audit(1755599673.156:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20547 comm="syz.7.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7faa1858ebe9 code=0x7ffc0000 [ 1481.734196][ C0] vkms_vblank_simulate: vblank timer overrun [ 1481.799931][T18700] usb 8-1: config 0 has an invalid interface number: 3 but max is 0 [ 1481.808056][T18700] usb 8-1: config 0 has no interface number 0 [ 1481.830129][T18700] usb 8-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1481.859576][ T30] audit: type=1326 audit(1755599673.156:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20547 comm="syz.7.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1858ebe9 code=0x7ffc0000 [ 1481.881169][ C0] vkms_vblank_simulate: vblank timer overrun [ 1481.897738][T18700] usb 8-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1481.941293][T18700] usb 8-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1481.969371][ T30] audit: type=1326 audit(1755599673.156:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20547 comm="syz.7.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1858ebe9 code=0x7ffc0000 [ 1481.991340][T18700] usb 8-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1482.033782][T18700] usb 8-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1482.053381][ T30] audit: type=1326 audit(1755599673.156:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20547 comm="syz.7.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7faa1858ebe9 code=0x7ffc0000 [ 1482.079096][T18700] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.147159][T18700] usb 8-1: config 0 descriptor?? [ 1482.178602][T18700] hub 8-1:0.3: bad descriptor, ignoring hub [ 1482.205273][ T30] audit: type=1326 audit(1755599673.156:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20547 comm="syz.7.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1858ebe9 code=0x7ffc0000 [ 1482.247458][T18700] hub 8-1:0.3: probe with driver hub failed with error -5 [ 1482.269004][T18700] sierra 8-1:0.3: Sierra USB modem converter detected [ 1482.326834][ T30] audit: type=1326 audit(1755599673.156:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20547 comm="syz.7.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1858ebe9 code=0x7ffc0000 [ 1482.348443][ C0] vkms_vblank_simulate: vblank timer overrun [ 1482.401128][T20550] [U]  [ 1482.404070][T20550] [U] K{ [ 1482.407282][T20550] [U] T 1ŠFFˊ`GJǘGO/MC [ 1482.416557][T20550] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1482.432581][T20550] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1482.444048][T20550] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1482.481713][T20550] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1482.505967][T20550] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1482.518822][T20550] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1482.531517][T20550] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1482.626324][T20550] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1482.635406][T20550] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1482.649146][T20550] [U] 22Ʃ۩X?0;3U [ 1482.654148][T20550] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1482.680322][T20550] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1482.690003][T20550] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1482.698852][T20550] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1482.705504][T20550] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1482.717946][T20550] [U] EC [ 1482.722954][T20550] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1482.741928][T20547] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1482.875804][T18700] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 1482.883520][ T30] audit: type=1326 audit(1755599673.156:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20547 comm="syz.7.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7faa1858ebe9 code=0x7ffc0000 [ 1482.908790][T14354] usb 4-1: device descriptor read/all, error -71 [ 1482.953415][T20560] netlink: 'syz.8.4221': attribute type 3 has an invalid length. [ 1483.047728][T20560] netlink: 'syz.8.4221': attribute type 1 has an invalid length. [ 1483.113185][ T30] audit: type=1326 audit(1755599673.156:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20547 comm="syz.7.4219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1858ebe9 code=0x7ffc0000 [ 1483.138876][T18700] usb 8-1: Sierra USB modem converter now attached to ttyUSB1 [ 1483.160587][T20560] netlink: 193500 bytes leftover after parsing attributes in process `syz.8.4221'. [ 1483.217010][T18700] usb 8-1: USB disconnect, device number 17 [ 1483.260503][T18700] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1483.301756][T18700] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1483.347918][T18700] sierra 8-1:0.3: device disconnected [ 1483.619392][T14354] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1484.229216][T14354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.299256][T14354] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1484.308366][T14354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.394556][T14354] usb 4-1: config 0 descriptor?? [ 1484.746386][T20576] xt_SECMARK: invalid mode: 2 [ 1485.619912][T14354] usbhid 4-1:0.0: can't add hid device: -71 [ 1485.659521][T14354] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1485.823187][T14354] usb 4-1: USB disconnect, device number 31 [ 1485.912844][T20582] [U]  [ 1485.925719][T20582] [U] K{ [ 1485.934492][T20581] ptrace attach of "./syz-executor exec"[19693] was attempted by " [ 1485.935415][T20581] syz_tun: entered allmulticast mode [ 1486.077859][T20582] [U] T 1ŠFFˊ`GJǘGO/MC [ 1486.085617][T20580] syz_tun: left allmulticast mode [ 1486.094755][T20582] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1486.137778][T20582] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1486.177508][T20582] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1486.242776][T20587] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4229'. [ 1486.292259][T14354] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1486.336942][T20582] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1486.379523][T20582] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1486.399494][T20582] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1486.437351][T20582] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/< [ 1491.050840][T20627] dump_stack_lvl+0x189/0x250 [ 1491.050873][T20627] ? __pfx____ratelimit+0x10/0x10 [ 1491.050898][T20627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1491.050924][T20627] ? __pfx__printk+0x10/0x10 [ 1491.050953][T20627] ? __might_fault+0xb0/0x130 [ 1491.050988][T20627] should_fail_ex+0x414/0x560 [ 1491.051017][T20627] _copy_from_iter+0x1db/0x16f0 [ 1491.051050][T20627] ? rcu_is_watching+0x15/0xb0 [ 1491.051083][T20627] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1491.051108][T20627] ? __pfx__copy_from_iter+0x10/0x10 [ 1491.051138][T20627] ? __build_skb_around+0x257/0x3e0 [ 1491.051174][T20627] ? netlink_sendmsg+0x642/0xb30 [ 1491.051204][T20627] ? skb_put+0x11b/0x210 [ 1491.051244][T20627] netlink_sendmsg+0x6b2/0xb30 [ 1491.051287][T20627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1491.051329][T20627] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1491.051350][T20627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1491.051384][T20627] __sock_sendmsg+0x21c/0x270 [ 1491.051414][T20627] ____sys_sendmsg+0x505/0x830 [ 1491.051454][T20627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1491.051499][T20627] ? import_iovec+0x74/0xa0 [ 1491.051534][T20627] ___sys_sendmsg+0x21f/0x2a0 [ 1491.051572][T20627] ? __pfx____sys_sendmsg+0x10/0x10 [ 1491.051656][T20627] ? __fget_files+0x2a/0x420 [ 1491.051681][T20627] ? __fget_files+0x3a0/0x420 [ 1491.051717][T20627] __x64_sys_sendmsg+0x19b/0x260 [ 1491.051755][T20627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1491.051821][T20627] do_syscall_64+0xfa/0x3b0 [ 1491.051845][T20627] ? lockdep_hardirqs_on+0x9c/0x150 [ 1491.051869][T20627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.051891][T20627] ? clear_bhb_loop+0x60/0xb0 [ 1491.051918][T20627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.051940][T20627] RIP: 0033:0x7faa1858ebe9 [ 1491.051959][T20627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1491.051978][T20627] RSP: 002b:00007faa193ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1491.052002][T20627] RAX: ffffffffffffffda RBX: 00007faa187b5fa0 RCX: 00007faa1858ebe9 [ 1491.052019][T20627] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1491.052033][T20627] RBP: 00007faa193ed090 R08: 0000000000000000 R09: 0000000000000000 [ 1491.052047][T20627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1491.052060][T20627] R13: 00007faa187b6038 R14: 00007faa187b5fa0 R15: 00007ffd313a2c18 [ 1491.052094][T20627] [ 1491.311155][T18717] usb 7-1: config 127 has an invalid interface number: 221 but max is 1 [ 1491.318449][ C0] vkms_vblank_simulate: vblank timer overrun [ 1491.536805][T18717] usb 7-1: config 127 has 3 interfaces, different from the descriptor's value: 2 [ 1491.559979][T18717] usb 7-1: config 127 has no interface number 0 [ 1491.738866][T18717] usb 7-1: config 127 has no interface number 1 [ 1491.745749][T18717] usb 7-1: config 127 has no interface number 2 [ 1491.752156][T18717] usb 7-1: config 127 interface 233 altsetting 223 has a duplicate endpoint with address 0x8, skipping [ 1491.769209][T18717] usb 7-1: config 127 interface 233 altsetting 223 endpoint 0x3 has invalid maxpacket 80, setting to 64 [ 1491.959564][ T5907] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1492.484686][T18720] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1492.526780][T18717] usb 7-1: config 127 interface 233 altsetting 223 has a duplicate endpoint with address 0xE, skipping [ 1492.560555][T18717] usb 7-1: config 127 interface 233 altsetting 223 has a duplicate endpoint with address 0xE, skipping [ 1492.621024][T18717] usb 7-1: config 127 interface 233 altsetting 223 endpoint 0xC has an invalid bInterval 128, changing to 11 [ 1492.670860][T18720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1492.689148][T18717] usb 7-1: config 127 interface 233 altsetting 223 has an invalid descriptor for endpoint zero, skipping [ 1492.704141][T18720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1492.725748][T18717] usb 7-1: config 127 interface 164 altsetting 179 has an invalid descriptor for endpoint zero, skipping [ 1492.737436][T18720] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1492.750507][ T5907] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1492.761151][T18717] usb 7-1: config 127 interface 164 altsetting 179 has an invalid descriptor for endpoint zero, skipping [ 1492.761182][T18717] usb 7-1: config 127 interface 164 altsetting 179 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1492.786507][T18720] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1492.795226][ T5907] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.818917][ T5907] usb 10-1: config 0 descriptor?? [ 1492.831510][T18720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.838141][ T5907] cp210x 10-1:0.0: cp210x converter detected [ 1493.065112][T18717] usb 7-1: too many endpoints for config 127 interface 221 altsetting 135: 94, using maximum allowed: 30 [ 1493.078118][T18720] usb 4-1: config 0 descriptor?? [ 1493.083923][T18717] usb 7-1: config 127 interface 221 altsetting 135 has a duplicate endpoint with address 0xC, skipping [ 1493.095334][T18717] usb 7-1: config 127 interface 221 altsetting 135 has 1 endpoint descriptor, different from the interface descriptor's value: 94 [ 1493.108977][T18717] usb 7-1: config 127 interface 233 has no altsetting 0 [ 1493.120049][T18717] usb 7-1: config 127 interface 164 has no altsetting 0 [ 1493.127285][T18717] usb 7-1: config 127 interface 221 has no altsetting 0 [ 1493.137835][T18717] usb 7-1: string descriptor 0 read error: -71 [ 1493.145497][T18717] usb 7-1: New USB device found, idVendor=0644, idProduct=0000, bcdDevice= 1.00 [ 1493.154759][T18717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.414657][T18717] usb 7-1: can't set config #127, error -71 [ 1493.485509][T18717] usb 7-1: USB disconnect, device number 7 [ 1493.819504][T18720] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1493.879319][ T5907] cp210x 10-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1493.888370][ T5907] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 1493.919472][ T5907] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1494.141278][ T5907] usb 10-1: USB disconnect, device number 14 [ 1494.247604][ T5907] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1494.452292][ T5907] cp210x 10-1:0.0: device disconnected [ 1498.951724][T20662] sch_fq: defrate 65535 ignored. [ 1498.981753][T18700] usb 4-1: reset high-speed USB device number 33 using dummy_hcd [ 1499.456382][T20672] netlink: 'syz.6.4255': attribute type 4 has an invalid length. [ 1500.165013][ T5907] usb 4-1: USB disconnect, device number 33 [ 1500.808242][T20688] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1503.714325][T18718] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1503.977583][T18718] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1503.999242][T18718] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1504.044250][T18718] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1504.099254][T18718] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1504.379869][T20727] netlink: 'syz.3.4267': attribute type 1 has an invalid length. [ 1504.387734][T20727] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4267'. [ 1504.396990][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4267'. [ 1505.056256][T18718] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.210429][T18718] usb 10-1: config 0 descriptor?? [ 1505.729316][T18718] usbhid 10-1:0.0: can't add hid device: -71 [ 1505.739486][T18718] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1505.833588][T18718] usb 10-1: USB disconnect, device number 15 [ 1505.923952][T20735] xt_l2tp: unknown flags: 17 [ 1506.019659][T20736] syzkaller1: entered promiscuous mode [ 1506.039517][T20736] syzkaller1: entered allmulticast mode [ 1506.063670][T20738] comedi comedi0: Minor -2147450880 is invalid! [ 1506.107083][T20735] fuse: Bad value for 'fd' [ 1507.026705][T20750] loop9: detected capacity change from 0 to 7 [ 1507.063887][T20750] Dev loop9: unable to read RDB block 7 [ 1507.083982][T20750] loop9: unable to read partition table [ 1507.139445][T20750] loop9: partition table beyond EOD, truncated [ 1507.145841][T20750] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1510.818357][T20793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4284'. [ 1510.831127][T20793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1515.141986][T20793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1517.319529][ T9606] Bluetooth: hci6: command 0x0406 tx timeout [ 1518.172052][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1518.172071][ T30] audit: type=1400 audit(1755599710.636:359): lsm=SMACK fn=smack_inet_conn_request action=denied subject="?" object="_" requested=w pid=20834 comm="syz.7.4298" saddr=172.20.20.187 daddr=172.20.20.170 dest=20002 [ 1520.971735][T20865] [U]  [ 1520.974635][T20865] [U] K{ [ 1520.979713][T20865] [U] T 1ŠFFˊ`GJǘGO/MC [ 1520.989701][T20865] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1521.010364][T20865] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1521.042883][T20865] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1521.078703][ C0] vkms_vblank_simulate: vblank timer overrun [ 1521.123728][T20865] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1521.147474][ C0] vkms_vblank_simulate: vblank timer overrun [ 1521.159735][T20865] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1521.174090][T20865] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1521.190053][T20865] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1521.312107][ C0] vkms_vblank_simulate: vblank timer overrun [ 1521.321513][T20865] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1521.332374][T20865] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1521.347082][T20865] [U] 22Ʃ۩X?0;3U [ 1521.361558][T20865] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1521.389737][T20865] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1521.403619][T20865] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1521.413785][T20865] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1521.424556][T20865] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1521.439191][T20865] [U] EC [ 1521.446217][T20865] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1522.196384][T20862] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1522.279722][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1523.599485][T18724] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1524.111129][T18724] usb 10-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 1524.150197][T18724] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.158352][T18724] usb 10-1: Product: syz [ 1524.189977][T18724] usb 10-1: Manufacturer: syz [ 1524.221506][T18724] usb 10-1: SerialNumber: syz [ 1524.844474][T20891] ptrace attach of "./syz-executor exec"[19030] was attempted by " [ 1524.847993][T20891] syz_tun: entered allmulticast mode [ 1524.871281][T18724] usb 10-1: config 0 descriptor?? [ 1524.939908][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.382879][T20885] syz_tun: left allmulticast mode [ 1525.690517][T18724] usb 10-1: can't set config #0, error -71 [ 1525.699415][T18724] usb 10-1: USB disconnect, device number 16 [ 1527.845556][T20922] Cannot find add_set index 4 as target [ 1529.573739][T20937] ptrace attach of "./syz-executor exec"[19693] was attempted by ""[20937] [ 1529.605568][T20937] syz_tun: entered allmulticast mode [ 1529.923217][T18718] IPVS: starting estimator thread 0... [ 1529.940583][T20928] syz_tun: left allmulticast mode [ 1530.039599][T20938] IPVS: using max 24 ests per chain, 57600 per kthread [ 1531.319792][T20952] FAULT_INJECTION: forcing a failure. [ 1531.319792][T20952] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.372153][T20952] CPU: 1 UID: 0 PID: 20952 Comm: syz.8.4331 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1531.372185][T20952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1531.372199][T20952] Call Trace: [ 1531.372207][T20952] [ 1531.372217][T20952] dump_stack_lvl+0x189/0x250 [ 1531.372247][T20952] ? __pfx____ratelimit+0x10/0x10 [ 1531.372271][T20952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1531.372297][T20952] ? __pfx__printk+0x10/0x10 [ 1531.372329][T20952] ? __pfx___might_resched+0x10/0x10 [ 1531.372354][T20952] ? fs_reclaim_acquire+0x7d/0x100 [ 1531.372387][T20952] should_fail_ex+0x414/0x560 [ 1531.372415][T20952] should_failslab+0xa8/0x100 [ 1531.372441][T20952] __kmalloc_noprof+0xcb/0x4f0 [ 1531.372461][T20952] ? __vb2_queue_alloc+0x29d/0x15a0 [ 1531.372496][T20952] __vb2_queue_alloc+0x29d/0x15a0 [ 1531.372554][T20952] vb2_core_create_bufs+0x765/0xde0 [ 1531.372598][T20952] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 1531.372625][T20952] ? __mutex_trylock_common+0x153/0x260 [ 1531.372661][T20952] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 1531.372695][T20952] vb2_create_bufs+0x5b9/0xae0 [ 1531.372732][T20952] ? __pfx_vb2_create_bufs+0x10/0x10 [ 1531.372763][T20952] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 1531.372815][T20952] vb2_ioctl_create_bufs+0x285/0x3f0 [ 1531.372858][T20952] v4l_create_bufs+0x193/0x2a0 [ 1531.372891][T20952] __video_do_ioctl+0xc9b/0xdb0 [ 1531.372936][T20952] ? __pfx___video_do_ioctl+0x10/0x10 [ 1531.372985][T20952] video_usercopy+0x871/0x14f0 [ 1531.373027][T20952] ? __pfx___video_do_ioctl+0x10/0x10 [ 1531.373058][T20952] ? __pfx_video_usercopy+0x10/0x10 [ 1531.373086][T20952] ? smack_file_ioctl+0x2a9/0x340 [ 1531.373123][T20952] ? __fget_files+0x2a/0x420 [ 1531.373145][T20952] ? __fget_files+0x3a0/0x420 [ 1531.373170][T20952] v4l2_ioctl+0x18a/0x1e0 [ 1531.373205][T20952] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1531.373235][T20952] __se_sys_ioctl+0xfc/0x170 [ 1531.373269][T20952] do_syscall_64+0xfa/0x3b0 [ 1531.373294][T20952] ? lockdep_hardirqs_on+0x9c/0x150 [ 1531.373317][T20952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.373341][T20952] ? clear_bhb_loop+0x60/0xb0 [ 1531.373368][T20952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.373389][T20952] RIP: 0033:0x7f4b2f78ebe9 [ 1531.373409][T20952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1531.373429][T20952] RSP: 002b:00007f4b306d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1531.373453][T20952] RAX: ffffffffffffffda RBX: 00007f4b2f9b5fa0 RCX: 00007f4b2f78ebe9 [ 1531.373469][T20952] RDX: 0000200000000080 RSI: 00000000c100565c RDI: 0000000000000003 [ 1531.373484][T20952] RBP: 00007f4b306d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1531.373498][T20952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1531.373510][T20952] R13: 00007f4b2f9b6038 R14: 00007f4b2f9b5fa0 R15: 00007ffdc37b08d8 [ 1531.373546][T20952] [ 1531.734351][T20961] netlink: 384 bytes leftover after parsing attributes in process `syz.9.4326'. [ 1531.743726][T20961] netlink: 'syz.9.4326': attribute type 2 has an invalid length. [ 1532.399191][T20972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4335'. [ 1533.046485][T20982] bio_check_eod: 2 callbacks suppressed [ 1533.046506][T20982] syz.8.4337: attempt to access beyond end of device [ 1533.046506][T20982] loop17: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1533.065643][T20982] FAT-fs (loop17): unable to read boot sector [ 1533.120364][T18700] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1533.279609][T18700] usb 7-1: Using ep0 maxpacket: 32 [ 1533.299960][T18700] usb 7-1: config 0 has an invalid interface number: 63 but max is 0 [ 1533.322214][T18700] usb 7-1: config 0 has no interface number 0 [ 1533.328424][T18700] usb 7-1: config 0 interface 63 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1533.357839][T18700] usb 7-1: config 0 interface 63 has no altsetting 0 [ 1533.385010][T18700] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0023, bcdDevice=40.69 [ 1533.401495][T18718] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1533.404190][T18700] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.457953][T18700] usb 7-1: Product: syz [ 1533.484660][T18700] usb 7-1: Manufacturer: syz [ 1533.495395][T18700] usb 7-1: SerialNumber: syz [ 1533.566556][T18718] usb 9-1: device descriptor read/64, error -71 [ 1533.612584][T18700] usb 7-1: config 0 descriptor?? [ 1533.634031][T18700] kvaser_usb 7-1:0.63: error -ENODEV: Cannot get usb endpoint(s) [ 1533.839344][T18718] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1533.839566][T18700] usb 7-1: USB disconnect, device number 8 [ 1534.019986][T18718] usb 9-1: device descriptor read/64, error -71 [ 1534.175149][T18718] usb usb9-port1: attempt power cycle [ 1534.589868][T18718] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1534.630352][T18718] usb 9-1: device descriptor read/8, error -71 [ 1534.939376][T18718] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1535.042288][T21007] netlink: 'syz.7.4346': attribute type 21 has an invalid length. [ 1535.141067][T18718] usb 9-1: device descriptor read/8, error -71 [ 1535.275034][T21010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4347'. [ 1535.364450][T18718] usb usb9-port1: unable to enumerate USB device [ 1535.997037][T21016] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1537.252417][T21032] [U] V3Fپ"S/4:XTZWTLW= [ 1537.270086][T21032] [U] J"E:" [ 1538.210412][T21038] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1538.248405][T21038] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1538.419570][T18700] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1538.588758][T18700] usb 4-1: Using ep0 maxpacket: 16 [ 1538.599580][T18700] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1538.607911][T18700] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.623031][T18700] usb 4-1: config 0 has no interface number 0 [ 1538.634628][T18700] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1538.645440][T18700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.665746][T18700] usb 4-1: Product: syz [ 1538.674249][T21052] FAULT_INJECTION: forcing a failure. [ 1538.674249][T21052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1538.697989][T18700] usb 4-1: Manufacturer: syz [ 1538.702845][T18700] usb 4-1: SerialNumber: syz [ 1538.715323][T21052] CPU: 0 UID: 0 PID: 21052 Comm: syz.8.4362 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1538.715362][T21052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1538.715376][T21052] Call Trace: [ 1538.715385][T21052] [ 1538.715394][T21052] dump_stack_lvl+0x189/0x250 [ 1538.715426][T21052] ? __pfx____ratelimit+0x10/0x10 [ 1538.715449][T21052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1538.715474][T21052] ? __pfx__printk+0x10/0x10 [ 1538.715518][T21052] should_fail_ex+0x414/0x560 [ 1538.715547][T21052] _copy_from_user+0x2d/0xb0 [ 1538.715580][T21052] __copy_msghdr+0x3c5/0x5b0 [ 1538.715619][T21052] ___sys_sendmsg+0x1a5/0x2a0 [ 1538.715656][T21052] ? __pfx____sys_sendmsg+0x10/0x10 [ 1538.715731][T21052] ? __fget_files+0x2a/0x420 [ 1538.715756][T21052] ? __fget_files+0x3a0/0x420 [ 1538.715792][T21052] __sys_sendmmsg+0x227/0x430 [ 1538.715834][T21052] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1538.715866][T21052] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1538.715921][T21052] ? ksys_write+0x22a/0x250 [ 1538.715945][T21052] ? __pfx_ksys_write+0x10/0x10 [ 1538.715963][T21052] ? rcu_is_watching+0x15/0xb0 [ 1538.715995][T21052] __x64_sys_sendmmsg+0xa0/0xc0 [ 1538.716032][T21052] do_syscall_64+0xfa/0x3b0 [ 1538.716056][T21052] ? lockdep_hardirqs_on+0x9c/0x150 [ 1538.716078][T21052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.716101][T21052] ? clear_bhb_loop+0x60/0xb0 [ 1538.716128][T21052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.716150][T21052] RIP: 0033:0x7f4b2f78ebe9 [ 1538.716169][T21052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1538.716188][T21052] RSP: 002b:00007f4b306d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1538.716212][T21052] RAX: ffffffffffffffda RBX: 00007f4b2f9b5fa0 RCX: 00007f4b2f78ebe9 [ 1538.716228][T21052] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 1538.716242][T21052] RBP: 00007f4b306d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1538.716256][T21052] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 1538.716269][T21052] R13: 00007f4b2f9b6038 R14: 00007f4b2f9b5fa0 R15: 00007ffdc37b08d8 [ 1538.716308][T21052] [ 1538.936551][ C0] vkms_vblank_simulate: vblank timer overrun [ 1538.983810][T18700] usb 4-1: config 0 descriptor?? [ 1539.508439][T18700] usb 4-1: Found UVC 0.00 device syz (046d:08d3) [ 1539.515233][T18700] usb 4-1: No valid video chain found. [ 1539.531006][T18700] usb 4-1: USB disconnect, device number 34 [ 1541.909160][T18700] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1542.849507][T18700] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1542.922516][ T5155] Bluetooth: hci4: command 0x0406 tx timeout [ 1543.357341][T18700] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.369830][T18700] usb 7-1: config 0 has no interface number 0 [ 1543.380448][T18700] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1543.424905][T18700] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.589322][T18700] usb 7-1: Product: syz [ 1543.599353][T18700] usb 7-1: Manufacturer: syz [ 1543.617382][T18700] usb 7-1: SerialNumber: syz [ 1544.470782][T18700] usb 7-1: config 0 descriptor?? [ 1544.605898][T18700] ims_pcu 7-1:0.41: Missing CDC union descriptor [ 1544.612460][T18700] ims_pcu 7-1:0.41: probe with driver ims_pcu failed with error -22 [ 1544.757864][T18700] usb 7-1: USB disconnect, device number 9 [ 1548.943649][T21141] [ 1548.946030][T21141] ====================================================== [ 1548.953140][T21141] WARNING: possible circular locking dependency detected [ 1548.960169][T21141] 6.16.0-syzkaller #0 Not tainted [ 1548.965192][T21141] ------------------------------------------------------ [ 1548.972225][T21141] syz.9.4387/21141 is trying to acquire lock: [ 1548.978344][T21141] ffff8880256c3988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1548.989428][T21141] [ 1548.989428][T21141] but task is already holding lock: [ 1548.996801][T21141] ffff8880256c3a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 1549.005721][T21141] [ 1549.005721][T21141] which lock already depends on the new lock. [ 1549.005721][T21141] [ 1549.016129][T21141] [ 1549.016129][T21141] the existing dependency chain (in reverse order) is: [ 1549.025164][T21141] [ 1549.025164][T21141] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 1549.032996][T21141] lock_acquire+0x120/0x360 [ 1549.038025][T21141] __mutex_lock+0x182/0xe80 [ 1549.043057][T21141] refcount_dec_and_mutex_lock+0x30/0xa0 [ 1549.049254][T21141] nbd_config_put+0x2c/0x790 [ 1549.054376][T21141] nbd_release+0xfe/0x140 [ 1549.059253][T21141] bdev_release+0x533/0x650 [ 1549.064289][T21141] blkdev_release+0x15/0x20 [ 1549.069323][T21141] __fput+0x449/0xa70 [ 1549.073847][T21141] fput_close_sync+0x119/0x200 [ 1549.079174][T21141] __x64_sys_close+0x7f/0x110 [ 1549.084417][T21141] do_syscall_64+0xfa/0x3b0 [ 1549.089452][T21141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.096053][T21141] [ 1549.096053][T21141] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 1549.103902][T21141] lock_acquire+0x120/0x360 [ 1549.108935][T21141] __mutex_lock+0x182/0xe80 [ 1549.113982][T21141] __del_gendisk+0x129/0x9e0 [ 1549.119109][T21141] del_gendisk+0xe8/0x160 [ 1549.123985][T21141] loop_remove+0x42/0xc0 [ 1549.128851][T21141] loop_control_ioctl+0x4ac/0x5a0 [ 1549.134404][T21141] __se_sys_ioctl+0xfc/0x170 [ 1549.139529][T21141] do_syscall_64+0xfa/0x3b0 [ 1549.144744][T21141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.151256][T21141] [ 1549.151256][T21141] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1549.159703][T21141] validate_chain+0xb9b/0x2140 [ 1549.165009][T21141] __lock_acquire+0xab9/0xd20 [ 1549.170212][T21141] lock_acquire+0x120/0x360 [ 1549.175238][T21141] down_write+0x96/0x1f0 [ 1549.180035][T21141] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1549.186332][T21141] nbd_start_device+0x16c/0xac0 [ 1549.191755][T21141] nbd_ioctl+0x636/0xeb0 [ 1549.196533][T21141] blkdev_ioctl+0x5a8/0x6d0 [ 1549.201568][T21141] __se_sys_ioctl+0xfc/0x170 [ 1549.206726][T21141] do_syscall_64+0xfa/0x3b0 [ 1549.211785][T21141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.218220][T21141] [ 1549.218220][T21141] other info that might help us debug this: [ 1549.218220][T21141] [ 1549.228459][T21141] Chain exists of: [ 1549.228459][T21141] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 1549.228459][T21141] [ 1549.242658][T21141] Possible unsafe locking scenario: [ 1549.242658][T21141] [ 1549.250119][T21141] CPU0 CPU1 [ 1549.255590][T21141] ---- ---- [ 1549.260972][T21141] lock(&nbd->config_lock); [ 1549.265580][T21141] lock(&disk->open_mutex); [ 1549.272714][T21141] lock(&nbd->config_lock); [ 1549.279930][T21141] lock(&set->update_nr_hwq_lock); [ 1549.285155][T21141] [ 1549.285155][T21141] *** DEADLOCK *** [ 1549.285155][T21141] [ 1549.293309][T21141] 1 lock held by syz.9.4387/21141: [ 1549.298426][T21141] #0: ffff8880256c3a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 1549.307781][T21141] [ 1549.307781][T21141] stack backtrace: [ 1549.313681][T21141] CPU: 0 UID: 0 PID: 21141 Comm: syz.9.4387 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1549.313705][T21141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1549.313717][T21141] Call Trace: [ 1549.313726][T21141] [ 1549.313734][T21141] dump_stack_lvl+0x189/0x250 [ 1549.313760][T21141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1549.313780][T21141] ? __pfx__printk+0x10/0x10 [ 1549.313803][T21141] ? print_lock_name+0xde/0x100 [ 1549.313826][T21141] print_circular_bug+0x2ee/0x310 [ 1549.313849][T21141] check_noncircular+0x134/0x160 [ 1549.313874][T21141] validate_chain+0xb9b/0x2140 [ 1549.313895][T21141] ? stack_depot_save_flags+0x40/0x900 [ 1549.313923][T21141] __lock_acquire+0xab9/0xd20 [ 1549.313941][T21141] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1549.313965][T21141] lock_acquire+0x120/0x360 [ 1549.313979][T21141] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1549.314004][T21141] ? __mutex_trylock_common+0x153/0x260 [ 1549.314027][T21141] down_write+0x96/0x1f0 [ 1549.314048][T21141] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1549.314071][T21141] ? __pfx_down_write+0x10/0x10 [ 1549.314090][T21141] ? rcu_is_watching+0x15/0xb0 [ 1549.314108][T21141] ? trace_contention_end+0x39/0x120 [ 1549.314129][T21141] ? __mutex_lock+0x330/0xe80 [ 1549.314149][T21141] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1549.314172][T21141] ? blkdev_common_ioctl+0xfc3/0x2450 [ 1549.314193][T21141] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1549.314210][T21141] ? nbd_ioctl+0x131/0xeb0 [ 1549.314233][T21141] ? __pfx___mutex_lock+0x10/0x10 [ 1549.314254][T21141] nbd_start_device+0x16c/0xac0 [ 1549.314276][T21141] ? security_capable+0x7e/0x2e0 [ 1549.314300][T21141] nbd_ioctl+0x636/0xeb0 [ 1549.314324][T21141] ? __pfx_nbd_ioctl+0x10/0x10 [ 1549.314345][T21141] ? __asan_memset+0x22/0x50 [ 1549.314369][T21141] ? smack_file_ioctl+0x24a/0x340 [ 1549.314385][T21141] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1549.314402][T21141] ? __pfx_nbd_ioctl+0x10/0x10 [ 1549.314424][T21141] blkdev_ioctl+0x5a8/0x6d0 [ 1549.314444][T21141] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1549.314462][T21141] ? __fget_files+0x2a/0x420 [ 1549.314482][T21141] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1549.314502][T21141] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1549.314522][T21141] __se_sys_ioctl+0xfc/0x170 [ 1549.314548][T21141] do_syscall_64+0xfa/0x3b0 [ 1549.314567][T21141] ? lockdep_hardirqs_on+0x9c/0x150 [ 1549.314584][T21141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.314601][T21141] ? clear_bhb_loop+0x60/0xb0 [ 1549.314626][T21141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.314643][T21141] RIP: 0033:0x7f1436b8ebe9 [ 1549.314659][T21141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1549.314674][T21141] RSP: 002b:00007f1437922038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1549.314692][T21141] RAX: ffffffffffffffda RBX: 00007f1436db5fa0 RCX: 00007f1436b8ebe9 [ 1549.314706][T21141] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 1549.314717][T21141] RBP: 00007f1436c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1549.314727][T21141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1549.314738][T21141] R13: 00007f1436db6038 R14: 00007f1436db5fa0 R15: 00007ffd8d4cda18 [ 1549.314757][T21141] [ 1549.634621][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1549.918685][ T9606] block nbd9: Receive control failed (result -32) [ 1549.983109][T21141] block nbd9: shutting down sockets [ 1550.665337][ T6351] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.736823][ T6351] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.894535][ T6351] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.964609][ T6351] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.042886][ T6351] bridge_slave_1: left allmulticast mode [ 1551.048575][ T6351] bridge_slave_1: left promiscuous mode [ 1551.054383][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.063522][ T6351] bridge_slave_0: left allmulticast mode [ 1551.069467][ T6351] bridge_slave_0: left promiscuous mode [ 1551.075238][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.084440][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.207890][ T6351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1551.218437][ T6351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1551.230388][ T6351] bond0 (unregistering): Released all slaves [ 1551.398415][ T6351] hsr_slave_0: left promiscuous mode [ 1551.404311][ T6351] hsr_slave_1: left promiscuous mode [ 1551.410255][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1551.417675][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1551.426524][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1551.434946][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1551.445682][ T6351] veth1_macvtap: left promiscuous mode [ 1551.451413][ T6351] veth0_macvtap: left promiscuous mode [ 1551.456997][ T6351] veth1_vlan: left promiscuous mode [ 1551.462408][ T6351] veth0_vlan: left promiscuous mode [ 1551.612186][ T6351] team0 (unregistering): Port device team_slave_1 removed [ 1551.642862][ T6351] team0 (unregistering): Port device team_slave_0 removed [ 1551.975687][ T6351] IPVS: stop unused estimator thread 0... [ 1552.037918][ T6351] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.095852][ T6351] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.143861][ T6351] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.194195][ T6351] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.255647][ T6351] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.294422][ T6351] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.355484][ T6351] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.414975][ T6351] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.484267][ T6351] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.524938][ T6351] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.574673][ T6351] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.613878][ T6351] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.677346][ T6351] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.765660][ T6351] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.823701][ T6351] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.884796][ T6351] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.951871][ T6351] bridge_slave_1: left allmulticast mode [ 1552.957670][ T6351] bridge_slave_1: left promiscuous mode [ 1552.963693][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.975204][ T6351] bridge_slave_0: left allmulticast mode [ 1552.981689][ T6351] bridge_slave_0: left promiscuous mode [ 1552.987415][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.997563][ T6351] bridge_slave_1: left allmulticast mode [ 1553.005044][ T6351] bridge_slave_1: left promiscuous mode [ 1553.011802][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.020445][ T6351] bridge_slave_0: left allmulticast mode [ 1553.026130][ T6351] bridge_slave_0: left promiscuous mode [ 1553.032255][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.041519][ T6351] bridge_slave_1: left allmulticast mode [ 1553.047289][ T6351] bridge_slave_1: left promiscuous mode [ 1553.053411][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.062376][ T6351] bridge_slave_0: left allmulticast mode [ 1553.068756][ T6351] bridge_slave_0: left promiscuous mode [ 1553.074762][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.084974][ T6351] bridge_slave_1: left allmulticast mode [ 1553.091257][ T6351] bridge_slave_1: left promiscuous mode [ 1553.096983][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.106102][ T6351] bridge_slave_0: left allmulticast mode [ 1553.112030][ T6351] bridge_slave_0: left promiscuous mode [ 1553.117797][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.315384][ T6351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1553.330441][ T6351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1553.340623][ T6351] bond0 (unregistering): Released all slaves [ 1553.407907][ T6351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1553.418053][ T6351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1553.430332][ T6351] bond0 (unregistering): Released all slaves [ 1553.505882][ T6351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1553.517429][ T6351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1553.526998][ T6351] bond0 (unregistering): Released all slaves [ 1553.616220][ T6351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1553.628041][ T6351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1553.637681][ T6351] bond0 (unregistering): Released all slaves [ 1554.190165][ T6351] hsr_slave_0: left promiscuous mode [ 1554.196588][ T6351] hsr_slave_1: left promiscuous mode [ 1554.202735][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1554.210247][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.218317][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1554.226688][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.238234][ T6351] hsr_slave_0: left promiscuous mode [ 1554.244133][ T6351] hsr_slave_1: left promiscuous mode [ 1554.250412][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1554.257850][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.267039][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1554.274553][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.286269][ T6351] hsr_slave_0: left promiscuous mode [ 1554.292353][ T6351] hsr_slave_1: left promiscuous mode [ 1554.298567][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1554.306085][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.313960][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1554.321511][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.332741][ T6351] hsr_slave_0: left promiscuous mode [ 1554.338558][ T6351] hsr_slave_1: left promiscuous mode [ 1554.345279][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1554.352804][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.372585][ T6351] veth1_macvtap: left promiscuous mode [ 1554.378113][ T6351] veth0_macvtap: left promiscuous mode [ 1554.383869][ T6351] veth1_vlan: left promiscuous mode [ 1554.389894][ T6351] veth0_vlan: left promiscuous mode [ 1554.396059][ T6351] veth1_macvtap: left promiscuous mode [ 1554.403186][ T6351] veth0_macvtap: left promiscuous mode [ 1554.408768][ T6351] veth1_vlan: left promiscuous mode [ 1554.414566][ T6351] veth0_vlan: left promiscuous mode [ 1554.422814][ T6351] veth1_macvtap: left promiscuous mode [ 1554.428344][ T6351] veth0_macvtap: left promiscuous mode [ 1554.433969][ T6351] veth1_vlan: left promiscuous mode [ 1554.439572][ T6351] veth0_vlan: left promiscuous mode [ 1554.445734][ T6351] veth1_macvtap: left promiscuous mode [ 1554.452319][ T6351] veth0_macvtap: left promiscuous mode [ 1554.457922][ T6351] veth1_vlan: left promiscuous mode [ 1554.463354][ T6351] veth0_vlan: left promiscuous mode [ 1554.753834][ T6351] team0 (unregistering): Port device team_slave_1 removed [ 1554.767351][ T6351] team0 (unregistering): Port device team_slave_0 removed [ 1554.974161][ T6351] team0 (unregistering): Port device team_slave_1 removed [ 1554.988469][ T6351] team0 (unregistering): Port device team_slave_0 removed [ 1555.166412][ T6351] team0 (unregistering): Port device team_slave_1 removed [ 1555.185146][ T6351] team0 (unregistering): Port device team_slave_0 removed [ 1555.387963][ T6351] team0 (unregistering): Port device team_slave_1 removed [ 1555.418531][ T6351] team0 (unregistering): Port device team_slave_0 removed [ 1556.365679][ T6351] IPVS: stop unused estimator thread 0... [ 1556.372462][ T6351] IPVS: stop unused estimator thread 0... [ 1556.379325][ T6351] IPVS: stop unused estimator thread 0... [ 1556.386053][ T6351] IPVS: stop unused estimator thread 0... [ 1556.400747][ T6351] ------------[ cut here ]------------ [ 1556.406253][ T6351] WARNING: CPU: 1 PID: 6351 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x270/0x2f0 [ 1556.417036][ T6351] Modules linked in: [ 1556.421024][ T6351] CPU: 1 UID: 0 PID: 6351 Comm: kworker/u8:14 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1556.431264][ T6351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1556.441407][ T6351] Workqueue: netns cleanup_net [ 1556.446229][ T6351] RIP: 0010:xfrm_state_fini+0x270/0x2f0 [ 1556.452335][ T6351] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d8 e3 10 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 f4 f1 f7 e8 81 fc b0 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 fc b0 f7 90 0f 0b 90 e9 60 fe ff ff [ 1556.472277][ T6351] RSP: 0018:ffffc9001af4f898 EFLAGS: 00010293 [ 1556.478422][ T6351] RAX: ffffffff8a0f293f RBX: ffff88804ea64100 RCX: ffff88805cb21e00 [ 1556.487846][ T6351] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff88805cb21e00 [ 1556.495865][ T6351] RBP: ffffc9001af4f9b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 1556.503882][ T6351] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffffff8f6054a0 [ 1556.511920][ T6351] R13: 1ffff920035e9f40 R14: ffff88804ea655c0 R15: dffffc0000000000 [ 1556.520026][ T6351] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 1556.529003][ T6351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1556.535685][ T6351] CR2: 0000001b32c17ff8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1556.543692][ T6351] Call Trace: [ 1556.546978][ T6351] [ 1556.550280][ T6351] xfrm_net_exit+0x2d/0x70 [ 1556.554728][ T6351] ops_undo_list+0x497/0x990 [ 1556.559631][ T6351] ? __pfx_ops_undo_list+0x10/0x10 [ 1556.564785][ T6351] cleanup_net+0x4c5/0x800 [ 1556.569282][ T6351] ? __pfx_cleanup_net+0x10/0x10 [ 1556.574254][ T6351] ? rcu_is_watching+0x15/0xb0 [ 1556.579102][ T6351] ? process_scheduled_works+0x9ef/0x17b0 [ 1556.584855][ T6351] ? process_scheduled_works+0x9ef/0x17b0 [ 1556.590655][ T6351] process_scheduled_works+0xade/0x17b0 [ 1556.596303][ T6351] ? __pfx_process_scheduled_works+0x10/0x10 [ 1556.602516][ T6351] worker_thread+0x8a0/0xda0 [ 1556.607135][ T6351] kthread+0x70e/0x8a0 [ 1556.611255][ T6351] ? __pfx_worker_thread+0x10/0x10 [ 1556.616383][ T6351] ? __pfx_kthread+0x10/0x10 [ 1556.621030][ T6351] ? _raw_spin_unlock_irq+0x23/0x50 [ 1556.626251][ T6351] ? lockdep_hardirqs_on+0x9c/0x150 [ 1556.631484][ T6351] ? __pfx_kthread+0x10/0x10 [ 1556.636086][ T6351] ret_from_fork+0x3fc/0x770 [ 1556.640740][ T6351] ? __pfx_ret_from_fork+0x10/0x10 [ 1556.645878][ T6351] ? __switch_to_asm+0x39/0x70 [ 1556.650783][ T6351] ? __switch_to_asm+0x33/0x70 [ 1556.655803][ T6351] ? __pfx_kthread+0x10/0x10 [ 1556.660639][ T6351] ret_from_fork_asm+0x1a/0x30 [ 1556.665474][ T6351] [ 1556.668531][ T6351] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1556.675814][ T6351] CPU: 1 UID: 0 PID: 6351 Comm: kworker/u8:14 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1556.685967][ T6351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1556.696147][ T6351] Workqueue: netns cleanup_net [ 1556.700954][ T6351] Call Trace: [ 1556.704252][ T6351] [ 1556.707639][ T6351] dump_stack_lvl+0x99/0x250 [ 1556.712274][ T6351] ? __asan_memcpy+0x40/0x70 [ 1556.716884][ T6351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1556.722106][ T6351] ? __pfx__printk+0x10/0x10 [ 1556.726734][ T6351] panic+0x2db/0x790 [ 1556.730647][ T6351] ? __pfx_panic+0x10/0x10 [ 1556.735085][ T6351] ? ret_from_fork_asm+0x1a/0x30 [ 1556.740049][ T6351] __warn+0x31b/0x4b0 [ 1556.744048][ T6351] ? xfrm_state_fini+0x270/0x2f0 [ 1556.749019][ T6351] ? xfrm_state_fini+0x270/0x2f0 [ 1556.753980][ T6351] report_bug+0x2be/0x4f0 [ 1556.758328][ T6351] ? xfrm_state_fini+0x270/0x2f0 [ 1556.763289][ T6351] ? xfrm_state_fini+0x270/0x2f0 [ 1556.768246][ T6351] ? xfrm_state_fini+0x272/0x2f0 [ 1556.773206][ T6351] handle_bug+0x84/0x160 [ 1556.777466][ T6351] exc_invalid_op+0x1a/0x50 [ 1556.781988][ T6351] asm_exc_invalid_op+0x1a/0x20 [ 1556.786864][ T6351] RIP: 0010:xfrm_state_fini+0x270/0x2f0 [ 1556.792453][ T6351] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d8 e3 10 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 f4 f1 f7 e8 81 fc b0 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 fc b0 f7 90 0f 0b 90 e9 60 fe ff ff [ 1556.812082][ T6351] RSP: 0018:ffffc9001af4f898 EFLAGS: 00010293 [ 1556.818171][ T6351] RAX: ffffffff8a0f293f RBX: ffff88804ea64100 RCX: ffff88805cb21e00 [ 1556.826179][ T6351] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff88805cb21e00 [ 1556.834172][ T6351] RBP: ffffc9001af4f9b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 1556.842165][ T6351] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffffff8f6054a0 [ 1556.850150][ T6351] R13: 1ffff920035e9f40 R14: ffff88804ea655c0 R15: dffffc0000000000 [ 1556.858155][ T6351] ? xfrm_state_fini+0x26f/0x2f0 [ 1556.863116][ T6351] ? xfrm_state_fini+0x26f/0x2f0 [ 1556.868080][ T6351] xfrm_net_exit+0x2d/0x70 [ 1556.872517][ T6351] ops_undo_list+0x497/0x990 [ 1556.877133][ T6351] ? __pfx_ops_undo_list+0x10/0x10 [ 1556.882352][ T6351] cleanup_net+0x4c5/0x800 [ 1556.886786][ T6351] ? __pfx_cleanup_net+0x10/0x10 [ 1556.891749][ T6351] ? rcu_is_watching+0x15/0xb0 [ 1556.896530][ T6351] ? process_scheduled_works+0x9ef/0x17b0 [ 1556.902265][ T6351] ? process_scheduled_works+0x9ef/0x17b0 [ 1556.908020][ T6351] process_scheduled_works+0xade/0x17b0 [ 1556.913587][ T6351] ? __pfx_process_scheduled_works+0x10/0x10 [ 1556.919590][ T6351] worker_thread+0x8a0/0xda0 [ 1556.924231][ T6351] kthread+0x70e/0x8a0 [ 1556.928318][ T6351] ? __pfx_worker_thread+0x10/0x10 [ 1556.933452][ T6351] ? __pfx_kthread+0x10/0x10 [ 1556.938062][ T6351] ? _raw_spin_unlock_irq+0x23/0x50 [ 1556.943275][ T6351] ? lockdep_hardirqs_on+0x9c/0x150 [ 1556.948496][ T6351] ? __pfx_kthread+0x10/0x10 [ 1556.953101][ T6351] ret_from_fork+0x3fc/0x770 [ 1556.957710][ T6351] ? __pfx_ret_from_fork+0x10/0x10 [ 1556.962924][ T6351] ? __switch_to_asm+0x39/0x70 [ 1556.967705][ T6351] ? __switch_to_asm+0x33/0x70 [ 1556.972501][ T6351] ? __pfx_kthread+0x10/0x10 [ 1556.977107][ T6351] ret_from_fork_asm+0x1a/0x30 [ 1556.981921][ T6351] [ 1556.985260][ T6351] Kernel Offset: disabled [ 1556.989620][ T6351] Rebooting in 86400 seconds..