last executing test programs: 36m48.958965851s ago: executing program 32 (id=127): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x9, 0x0) 35m13.914548351s ago: executing program 33 (id=373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x383, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aec110000060a0104000000000000000002000000c0110480bc1101800e000100696d6d656469617465000000a81102809c1102801600010058bc49c1118ce47114ee8a595eb997d63b060000e50001002ed05f89378c372e455861188104371f6ea53a13c046a60332c7878365eb78c59db9cea8c89d803309bc923e8bfeeb99bbad6b8f193acc0799386e256c4c1e1a85c965d3586824b09b7da33858b8fb1e98930debac3d6ee04f367a9f8dcf183e65417632108b40ee1017f581b26b8164ed7bde2ec62e33955e70413cd899aea54508a4eb3d5865d7e75c505aa08ed2657fb4b18106eaffe21a729be8253d4699cacf6e28dbbfb76f4030fd114694e980882d31919d6e6ca41ad8250858d038a4613521f07af39ca66ba5c768d62bc293ca2450c28b700d7c3232a81718188e8af2000000440002800900020073797a32000000000900020073797a320000000008000340000000040900020073797a31000000000900020073797a320000000008000340000000011800028008000340000000030900020073797a3000000000041001006f74361198f068c4254115fcde207e9cdc7a55e8cf66baf2fb77ce60e19863d2d10d0f9384e4d98bc013f2922876b13027f1eb28a73f0ce65058f639ffbc03f50c73a0a4225c15867fd4a3d43cfe8d8d157091b89ca097ea52fb61dffd09677674101c9cae2fd26ad3bef365cda7fba7c218e7fe1f7c5b8a19b7c337c3e157fc24642ff9ccb76ee1ff88cb03c4c4d0a3e26decbe86f1f1e0dae5ceb8c8af9081cfee19e2b585ff064b0830b2d2e8097d6b8656a3a6fe45902fedbf354d1667d4d6e6692b80375c4b99e3dc7d3e578b6b6e2155214d489a7ead2f01f02be8eaa240915898cc039ebcba5b08b60235572549bb8d1362501a39f15a4c423a7a898a0a2e8a409a9703f8958d7b23d666edf0279e467814c9f42609d0d327549a693fae695fc7fcbdf11351b50ea49be8c3447622f5f1c2544363c24d4a20d880d7c9b22b280a974d7920a796fef96cc644865bf8ec6541dc2abd4f1c55d6def991cc18145c2a74490b26048cc8697835788de3c02f36227795a6c33ce2a4014a4b34007a140696b38947375625a387f95bf789f47d6e5e0e2da0f18bc8b914dcba51554eee51ab01d01fa70918641638f1cc59689cbe28bd2aeb43a46e079a2e39641dfa59bb225bafc69719eda14fc0b24ff9142d03f650a68426589a4bbe6f559db2020bd6aa7a7a2b1c1b9ba50a030df3fa10cafcf902248e37aef7af21a8fcbffb747e20de86a0dcc46167c9746c22a0a322bc153343f81d26764633582710127c7451602576f21d10a8c9701af81c6c4e1e1c1f647be5b02807406bc8267ff2ca3ebb3a7016123ec9a289783eb8cbd5740a44d8228d7a7760532b3fc992c5b3fa91098456aaa04fff641833f65c966e476efc2b912e3c079ed2eda902db084a9bf254b41afc0256bab5cf0b1ab27b7225eba3bb45a39ada9f2d9025608bef686b2a999fca7494ad75945f05b7a169cfc1e7078af143ec221b09e8166d7eaf65dd76054aeefb28fda937093baf96d5fc7d05f978387de5c87e5b51b082a7bdd7b4290df9bb6431a50cf25b5f108e12380a9fc092c79b5b5511ead464559a84dce114f37f82f90870976761c9982b2568465117251f2317cfc98496b5e0db41f9870d4e3d4c8f8e920003f3858be3927e34d1969ea8c0f59f4c1198f559049a5cfda7b7e82203379f0b30bd42a01f4bc8ae57521e8a8a4f039816e4c4f3c843d503ff4bdf7026860f05dc7701a6b782ec52410a1e4e4bd0aa20d28b6dce609c45d7a635f8e982418dbdac778991c5207e6c91e417095e60c5a305d6a78cf17b2d9e4ef63a08bfc341719e26fceba4114a605790db7cf532e4c9ca6b3eff496e81e31e127bd4fd6af0aee472614ce60c93260dac28c284a2eb398cdc0a85fbcad676910c8f2cc2c51d1fa4fed8a9de9f47cb31976c08e8052330d5ab6f3bcadf6887f9f06c9397bb035e2a4eea9d4767de457ed31b3dace54c14056ffcf7d29043639f0d3a80cfeaafe8b625e675932b3a0eb510448df313b5ea9a4eb1f4e080448040a7401922eb11bbe8b7a2f866f8956cc7a4b0eb47916e4e02e0dfeb9ddf473d2c7830a52b66146400e058311668e7f8bf147f236843ad854c10cf28b6cafe61a3a130944068e153ea43a665ebcceb63f3c69973ce336a95fd183fb011b7eabd28cc542d1b9d29672d7e156057c7f038e32718c8833624959cdef08eb0580cdc69dce6851c453148e2fe619b95b7b6efdf49a4a9100508c39c8d743d5430a8867bc1c725c5da5ca10998f7bd016eefc1194d5133c69c644aafc95f6399460b7165d162e09c957bb890da6311a499a1508e83e2af7fbad70c4640bc684dad44544bc9c21766a98f831e411f92cdce0d495c1845b86697680a3967a88e326adf631bafcba9bf9820a746f95f4007188be341d26fdc7477fcfc8f4c0d3d7d43daaa604726aaf3b729d5b0cb780b1106259855529854bcfa3098fbb5c034720ff0f446fd610eb1fb43b079d19bb3bb34fecff74249f089e0b4f3ebdf9daaff47ca921adce89cab6e3e9a5240b95ffbd965420f4657df7c1e36404bf271dda42dcaf083c2973f4f923b010d9e84a7109daa4de6882a3156c76504d44fcdc137da8f5c24d73226eb9ec2b53a261f3a5dd39d396a92ca25858b7e6277b024e8392f0d3eb7545510f7080e0371abb50475e3a76201404d5713805f4523cfd9ac80267cbf630a58e01a7069bb7ea88ca275e0d45101738c46b951e31c6028c71a5ca3449e55ec44077d83b60d081211872e793610fb87b7b4afe3c9f553b635291f6f9f84d4ae65079878d6264a090000005c88597d7c85d2903fcb2f45acc34a9b5569c4a68fd3673e6be3e7bee12b535fad1da5058b8a542267e6deff2bc57b3300b53f77385c6cdb9b9b9caa8ed803a395b49236cbc8302e19bc417b322b563e421792bb3feb824690833620a42387468b268a0402e50082fd188711dcc73a710eff4eef161c6b99371a4f487ab5b88d233e8322be4b01595533c0cd7ad630f14890c505bfbfe5c2aff2abe08c117cb02967f065d01dd9471b9eaae1613a665c82c0113fe8c5699d45c94144846a6f6436155b0907b469e522330549f3e5e1d21d664f13c898512116f2edb457e6c8894c655eeca71f0ba4e2ce66d66876aacd39eb9be15d68544a2a9b5acfb6c8d9c2c0c02e08b65ee5c16f841c6706e23702e8b1d3234093eb7c1fc3e970643e9118a99ec5dcec473affa7751c4e67705ebe3e113954d1344aed430e2dd85e6bcc94bfe4f711e714d0e4d8972be9b8cb55477d3f14d95d76bbe758ef6c0df33d3d5d64db6ce55394a77d76297fece0d8969736806c87661197fbc6ad9159ac8f826f70def6903807a64b4e2a062fe525b50058b558600b5bf66f98f0860087d9d20a578ba00b5c9e3c04f8ef3e9e5169b5a97b1aebb3fc0f6c6b831dab4965094a0306d0a6996a191b3103499d911146a24af3933a333b2e9f07a8d76d2c682d43b57056d1e2ddee1edc9f78699ed9401ff7978a1db342b81713b2e540128c6cec8e759beddb2eb57cd5aa70be2aa96349ff3f802339609678552a2b03c5f3a85817d63ab247af864c3d603b2312377e9b345d48f4b221f3c5beb5b57e2f60ee9ed8f44e0cc10c86e42db73861e30d888b3c3443b8a577eeac49baffe1a4d30d6fb2d0d7bd905f2f06fbb3873418d03ed992c62982fcb8bad213605ee76118343843b4dc85f812bb34fee1a5adbd1f28c38325af562feda5e341e7ead59407e9c84ab4eaec24283b8a102bd96bb82cde181521ea46e0f6dfe5cd882f0fe3c1d9b041cf051fee98fd9269840b2e8710a07b590254bfbdb5d5b3534b53911846cad4c58876b5f97e3c88f53a68a5e802981f8b46355c90a2c3b1cdcf4b59f6af55f0495e87f0edd01bff32b25dc6a14cf2c86f4e86dbd5a19853c19eecb4429519c77f159b892aedc97c9a883074f7aad57b757e264d7be000a8622f4df07af9ff08e79abc349bd22c98a78c1c8be7a50abcd7c390306a2a60d10ec9120818ace64a4cfc634b6f035db01ccdd766e8870a105863a4fafd234bac25be9df79957615783318c066e44f3b97a897dad4fd176f27654ee31572d5da9770d0e7d0c29ecbc82671cc13d43bd89bcd812d38e605c304689c9c4499ae323e3ff98e65ff6693b7cf08ed099749e5c5cf6071cf0bc5870e7c13c8d850030f858171664db179310ec38f9e5f8c55c21027d5282773dfcca2c7be1d6c15575ac20e6c0682cc2d4a37716e641b92fdec7aabc0ee9aa5f65ff6b634a3becfd3d8683505da62cab97f5cf3ff51f45efbcc9560a3c7dc6893763ba1350cec5598dd12572f65cdd24ed8aebcc4f082b69fedd47db99ebc9ba18f69f72b76f7653e9404a8ccc2e175391993173b06c5e20a6357b7e873cb27bf5e68acc209cac067cb2db47d19c5a91df22e69315eba98470880c61e2b02e17f296b4cb253e276209b16f2f08ac0d3d6f4fe7c561af3ddd118b60b06ff28a94b428f1c620c2392cf00643bbbab7a69bd00f011e47592379a0dfd76a34b1b79dcffc01a6738a895447b2bcbade693424f49b25c34634a040342fdafdc4d38303db16359c8e28d29ea89d09ec53e6896006467f166805fefde085d7f95179950adae9c4625dc6389814ab50d9cbf2ab830fa6cf718238d4ea8fa60b8e7ee5b7cd26f0f824ffb3d51ba31015a99c55c4915dfdeb30c9494d02e1830c8d17de5e764379d02128dfaaee1acbad93348f9b1fab61552762a53f91531bf2a7526e7a091c00e7b74e860df67367d46733cad1cb4275fc25564b8a7683163b0bbcc8462f0c55a00ce190cbaa2cd3b859515da92e20d9307100c01054fab03e8bbbef5218f9471277f5cbd99eae1f5473b8889f71df002554128fc696dc0cd41a22a23fb1ab2972a518447d6f25c69d7562cd0819f4532d8eace1cf7c0ec23b3a672e3aab176af013f59d61fee9ac3de97ad0fc6fc05e7e525dcb6c902764761bc0e147e6914dd048dab1a0e221c38570e0b06ffe4557da5332f73ad6f470a258f5bbae03f3f6670bff073804e2e8be21f359fd4add1229f109f878313ca58d672b1493c05b8978cd078a9fc2ae0169cdf644a03319bb90b662e10f89b6c487bc7ddfef001e16c49f624ea27d18d66c504e7f1912ffeb40ddd79475cac0ca7211e5f953092efd884cf41ba41747a88932689aec34b9f821f0150cfaca8874ae52451b18c224bf4be7e07714f994443c0bbad343e4b12abac3e354eb80d4299edbaf6a03945869cd46f1bf964249b754a5b77c331ed392bc8890c1c8eef83128802690e5faafa81f52ccd343d82d7ef143e7756baafaff3052c3337b73894a5cacdb0565b198b1249e1497f85c976b2030d2677c17f5926b17a2fe2a41c1f82db921984d3ffb47fd4ddebb4b8289b12b81c12ae0a29f18baae409f486c34bde682f5775cd86113aeb71adc9621cf4592e14eb5759907dba0e0d305877f4786fbbb468b4e7b1dde1dee7d9a792335079e53ae2962ffa6ed8846d8373832232365ea36054c4002f80f4090adaf18dad5730f66aa8bb0061a2d5196411d859b5336a011c61030ae8a1949d0bffb15953508e3e2e03ac3237ae7ad8d2008681587ec8f7935dd5fe599e2094af14a5fe7a891d2a68136460a548e23917b35195985c3116efdac4074739f9e195c6cf5c1b08b7addcfbe05d4e0191f13dd273d886b0aad333a8d64f10d77251e9cd12993debd14347a7644b2be06372edb2dd4696c8642d3121828406737835b206e50085f6e908729b1429228d5a92ead375a44c4ec93affcd5f80d902caf4ca29e321971a66053f1e71d37e0650c83876dbe85456152c2959b06e7d7237b9273e7a842ccf6db6bb68a94d3f7314fe5b7716e94d75f930e5c2c56f60ef8874e103b1b1ae1455844335029532cea193909dfebbd683d9f24f96be63a7fe835dc3504cb8604202de5b1fa2aeb3f407b2bdf48b1d91cf285c2d1e158dae71949fc2f9d213e81d83b0f9347dd4b2676ba9dbfbb0b295ab976ccf98a654393a1833f35937dc1e2b72bab5b3266389564b4aa1326f4697003d095f591e3c51fc8fa9628d7bc82c577c480761e3f8facd05a790a1ca55332b96d7f380fcfad8005f7f6c41d778cbe123dbf0731ecbafdf0c845240e668130df94206d2360ebb17ba27d728665d83608d3081ba7cff73de3efe2c715277d751d8166b8a380cf5c7e7aa37be40529a57634ba3fad909953efc67abdb5a9a170861774b9f585dcd145100a280002800900020073797a31000000000900020073797a32000000000900020073797a300000000010000100b23d02e304f6cf2aaf314f4908000140000000030900010073797a30000000000900020073797a320000000014000000110001"], 0x1214}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61157800000000006113bc0000000000bfa000000000000007000000ee0016055e03010000000000640500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000040600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 35m13.229191462s ago: executing program 34 (id=374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x383, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x1214}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 28m52.899573262s ago: executing program 35 (id=1364): memfd_create(0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000558b000d0000000000da"], &(0x7f0000000100)=""/244, 0x26, 0xf4, 0xa, 0x0, 0x0, @void, @value}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90524fc600d00030009000100ff3582c137153e370248018010000000d1bd", 0x33fe0}], 0x1}, 0x0) write$binfmt_misc(r3, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x38, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) socket$nl_route(0x10, 0x3, 0x0) 25m4.237931201s ago: executing program 36 (id=1993): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$AUDIT_USER(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000001}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="10000000ed0301000fb77000ffdbceac1b37823471715fb569f8b8cf6f7c2ede3f4fcd68a0c14ab8fccd77971b0c5f95759f1ac9a5edbc9c7733e2e2eb758482533a7142254acf30d2548f918a1b91992763f6c1560309e5520ea1056d7c1d4db185822578c8dc752192f802db0843a9ff4304be31c02fca0d8b63ac9ba12bd1a6875bb7c8e367011ad9e2d02450b743391f00"/157], 0x10}, 0x1, 0x0, 0x0, 0x4088081}, 0x20000000) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x58, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) bpf$PROG_LOAD(0x5, 0x0, 0x0) 24m18.642304506s ago: executing program 37 (id=2102): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000026c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="029993440c7a0c95d3bb8cf253fd63c588ff06000ff0fced840da0b08cb6e72082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c06045346588e2620d36a3ed8e8f2aa891268a9b33d2d55cb92f17bc9e8aaf62f94fb1143a79e72dcd910f5f45125df1bb3dc406cadfaa693beb85c9bf8daf45ad0d332b59be2550079eff7ac51dbfd801482dc1eb8e6f36990dc6e78940d2a3d0c16c023569ec2303690b40379bea72128dc680a09963beb9733c72cf749fd9409998b8c34349408deff7bca6bb7eddba08fee894b588291054aba8b41ef633e6a284d3827b8299736f5a204982f78fcd45ecf5d0188eb4151ea8056e3aa5197f809d7dfd7691cda00a9c7a6bf9cdce8eea4963a082d1d2fce8ab2fb6953b6cada8d103eee8bc10ca67b74498b67d701e1daccb2fd5c262e3ddffa65e0bf0a82bd76b41c0531cbefcb132bf6dfb6c0f3cbaec42bc0a566159441dc5717a1912d24f1199bdcf2a53d2f57526f69c3fc00407824ac6b888092105e6c26189186f16bd79c3c45725b64adc9fbbe3a36bad0defec7d0c5e89e00874a93eed41a4d4550d7bd5dae1a6ef99860568427b941991851427ecce64e07b9cb77ca2b9b084be48e7146917f1a904fd06ea74a2b2a2dc565e45790820b5cb9", 0x1da}, {&(0x7f00000003c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57ca81aad8f73b3ffcd92b66abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58635fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235e10f2a2dbaea8bb4d87d7cac18eeab0984d181efde07edf9133e47b7", 0xea}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b", 0x64}, {&(0x7f0000000580)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb837033927039b7de06e09c0dfd89a9db1973eaeda928822aaa8d3a9677374a52305e2ad47d580", 0x42}], 0x4, 0x0, 0x0, 0x4102}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e4544", 0xa6}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff446b0004", 0x5c}, {&(0x7f0000000840)="fbdd17a812c727337dc6c74dcb077562b57a440dbf7711ba245a62b76d46b0f19e6ff608ef9e5fbb4a8cfb02e28403582ceb8031acc767f766772a93a2f00ddde52ce6f7a84db1c66feecdc4a028e7b9e5e27a0057957743cbf196c517bf3ad97859c31205e3a35f435ec338927f53a43fae1907b2c772d9b35b9b3aa61985ea", 0x80}, {&(0x7f0000000780)="8d75938ba9bc69841009f07eee392592a6014e55025d4c6612fbb793e3ed01000000", 0x22}, {&(0x7f0000001300)="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", 0x102}], 0x5}}], 0x3, 0x40400c0) 21m23.426209252s ago: executing program 38 (id=2615): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x20000400, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0xe62dbda0015a9986, 0xffffffffffffffff, 0xffffffffffffffff) 19m35.96087466s ago: executing program 39 (id=2856): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x26, 0x0, 0xb, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) setsockopt$inet_mreqsrc(r1, 0x3000000, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 18m43.46038676s ago: executing program 40 (id=3058): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001140)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x25, 0x40000000002, 0x8) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[]}, 0x78) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) prlimit64(r3, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000540)='id_legacy\x00', 0x0, &(0x7f00000005c0)='\x00', 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = syz_open_procfs(r4, &(0x7f0000000180)='net/snmp\x00') sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9, 0x10000000, 0x0, 0x0, 0x0, 0xd}, {0x0, 0xffff}, 0x0, 0x2, 0x1}, {{@in=@local, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffd}}, 0xe8) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000a00)='big_key\x00', 0x0) sendmmsg(r1, &(0x7f0000001100)=[{{&(0x7f0000000980)=@qipcrtr={0x2a, 0x2, 0x2}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000840)="47687b84f99a7e713e5bf3c2cb44d6550e4309d0c6cce605fde6931db745c1eb8266ab5e275a92", 0x27}, {&(0x7f0000000a40)="0c12e6521efa5cf8ad254a1fc59988404fefdf84409dd10684cb547bd8864f8049b1e4a7e68fe4237d4f7aa7b77112ac6a28c066e1f69bcff3dca4e75ec25d552d20c3061ca35b9e409544fc0be05427cca494b89afd906a815b7606990891ac043ee074e4c7393e39112a056671", 0x6e}, {&(0x7f0000000ac0)="6b2f8b56ab4312755f63919dcc37fa3ad48430631eab98c6094a87eb02111a8573e63f2f82ad5f8e6b8b030167b67c56c1f00746c0985361c0dbc4ef2aaad0eeb40b47a2c6e03f01c4a543a851a9c40dc02190c77c580e11014f5fe8", 0x5c}, {&(0x7f0000000b40)="862d7bd5f73a8f0d8461da872bb71430c0ff1898f4645f13c9de71d571203be70285633d397677c4435359715dbacd4417844caa95abdfde1a8a46d068c9c4d867ad51b507d269433f937a524dd7340336fa8fe879e0697a667a5f8860dadfbd1612174e33d74d37309e2b8f2f1519983e5c012b8012da6817df41440d84b75f7c45eba3976ca4ee8758d38eb0238a5777504e977672513d876216e77ea2ce9b2404c6c73e5c1b72f25858631e681846e7a0c803564cb6142ff9888ca5c82276c3ce16b874845c40104f1451dc52a75932f45f3925007abbb3604046", 0xdc}, {&(0x7f0000000900)="e9b667c3225ccab7590ae1", 0xb}, {&(0x7f0000000c40)="b8a06f9dd77506c466366653ac5f4a9d77d424d33dfd55f99817ac7e0d4995ccaead2612e2478c6c12d16f60a85daa3ee0ca7a9a48c7f2a865382e3f1006a25d7881ae90784887462f597e8cc80c2485efc6b9be53d2b61c", 0x58}], 0x6, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x3b8}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 17m7.361366825s ago: executing program 41 (id=3338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0bb74c0008000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811000056f9680aee1154adc6009c34666a8189d21ac72532cb767e99f3f277b67cbb29c0a8e00442e05d03e0c142a7a6ab5a31b9d60c8d4ea5cbc82d4d9b2ca04384851c2f9ea71832fa6df7cb993a742c56c3cbffffff7f000000005d6e7ff19082ab789586b5fb5bf68739a2bbb0d623d4af9d6ad890d7b61df33b98c0a55259b4fb192f974116eea92f92", @ANYRES32=r1, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_void(r3, 0x1, 0xe, 0x0, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x148, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6tnl0\x00', {0x0, 0x0, 0x1a, 0x0, 0x0, 0x9, 0x600000}}}, @common=@dst={{0x48}, {0x0, 0x0, 0x41}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f00000003c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000400)={r7, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee01}}, './file0\x00'}) ioctl$SIOCRSSL2CALL(r8, 0x89e2, &(0x7f0000000480)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000100)=0x1) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x18, 0x2a, 0x9, 0x0, 0x0, {0x16, 0x0, 0x2c00}, [@nested={0x4, 0xbb}]}, 0x18}, 0x1, 0x3000000}, 0x8040) syz_clone(0x900200, &(0x7f00000000c0)="2a1eb26540a4e3a27fa930c7870a55daffaa356ded702686b33bfd6c767346aacd5c46fb9f04befddb6fb7b9ad0ec7bcfe4c059135e5e10c68a9f124a3715cfe9f9b0b8575ac996a9edc0cb67a039c0cab", 0x51, &(0x7f0000000040), &(0x7f0000000180), &(0x7f0000000200)="3682d1ba6ceb8ec4cf26fb83c2bd4a5bb7c59d4b4492a876e62733fc1909ada66a9303adfd76bc4bba9600a905d47cfe0551e5d8a827bf6a137a7a86f85e6c807f0e316a9a725587f259a7e833e0740555e53ac9c09a8f6f410e4daad7ba8782a1334e21591a2aa5ffddcf7e98eba9095a323d515265697c92c8") r9 = semget$private(0x0, 0x4000000009, 0x0) semop(r9, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r10, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0003020000000003"], 0x0, 0x0}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) semop(r9, &(0x7f0000000100)=[{0x4, 0xd5db}], 0x2aea) 14m25.480127744s ago: executing program 42 (id=3817): modify_ldt$write2(0x11, &(0x7f0000000400)={0x5524, 0x20001000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}, r4}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000180)={{0x8, 0x0, 0xffffffff, 0x9, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x721, 0xc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x507e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x100000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc499, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1911, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x8000]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x80000004}, 0x0, &(0x7f00000003c0)={0x3ff}, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x0, r7}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x5412, &(0x7f00000000c0)=0x13) poll(&(0x7f0000000300)=[{r8, 0xe1a2}], 0x1, 0xe7f1) ioctl$TIOCL_GETMOUSEREPORTING(r8, 0x5412, &(0x7f00000006c0)=0x11) 12m33.610526233s ago: executing program 43 (id=4217): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) syz_clone(0x29382000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/200, 0xc8}], 0x1) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x7, @vbi={0x3, 0x3, 0x9, 0x32344d59, [0x4, 0x40], [0x40000003, 0x10001], 0x13a}}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], &(0x7f0000007d40)=[{}, {}, {}, {}, {}], &(0x7f00000000c0), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x3c3c3c3c3c3c49c, 0x0, 0x1}) mlockall(0x2) 12m31.200419638s ago: executing program 44 (id=4226): open(&(0x7f00000002c0)='./file0\x00', 0x10400, 0x20) socket$netlink(0x10, 0x3, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x22000c0, 0x0) close(0x3) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x3c}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}}, 0x0) close(0x3) chdir(&(0x7f0000000280)='./file0\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="890c2e2f", 0x4) socket$nl_route(0x10, 0x3, 0x0) 11m1.596570315s ago: executing program 45 (id=4486): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f000002c000/0x2000)=nil, 0x2000, 0x200000b, 0x11, 0xffffffffffffffff, 0x0) r4 = socket(0x28, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(r4, 0x0, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000003c0)="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", 0xfc) r6 = socket(0x840000000002, 0x80000, 0x0) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x0, @loopback}, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r7, 0x501, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) 10m57.302320867s ago: executing program 46 (id=4497): r0 = socket$inet(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0xf0, 0x0) 9m22.419670524s ago: executing program 3 (id=4817): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000240)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000300)=[{r2, 0x4}, {r2, 0x222}], 0x4f, 0x0, 0x0, 0xfffffffffffffe0c) connect$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x80040, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x2, 0x0, r4, 0x7, '\x00', 0x0, r0, 0x5, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) landlock_create_ruleset(&(0x7f0000000040)={0x2000, 0x1, 0x5}, 0x18, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3, 0x0, 0x0, 0x1}}, 0x80) setreuid(0x0, 0xee00) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000908", 0x4e}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r5]) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000037b000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 9m18.690443996s ago: executing program 3 (id=4828): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_setup(0x40, &(0x7f0000003fc0)=0x0) io_submit(r1, 0x1, &(0x7f0000001dc0)=[&(0x7f0000000280)={0x0, 0x0, 0x21, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffe88}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) getsockname$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e1e}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) ioctl$FS_IOC_GETFSMAP(r5, 0x40305839, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x42, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETS(r6, 0x5402, &(0x7f00000004c0)={0x1, 0xffffffff, 0x1, 0x80, 0x17, "f612ef1aef811651f7d7e20f43482dc4fa7bf8"}) fchdir(r0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000380)='./file0\x00', r7, &(0x7f0000000200)='./bus\x00', 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000420001bf0a00"/20], 0x14}}, 0x0) 9m17.621368687s ago: executing program 3 (id=4832): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') statx(r1, &(0x7f0000000680)='.\x00', 0x4000, 0x4, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xfe}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xdd}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x24040890) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r0, &(0x7f0000000000), 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r2, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x2b, 0xc5, "98989b58a8890187c5483ca32e7a7fbb676cfc95accf172a69a7d921e9355905987ea15a43d0f9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c890}, 0xc001) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newtclass={0x60, 0x28, 0xe00, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0x10}, {0xf, 0xf}}, [@tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x5d0}, @TCA_QFQ_LMAX={0x13, 0x2, 0xad6b}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}]}, 0x60}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c00018006000600800a000000010280f90014"], 0x124}}, 0xc000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) 9m16.135067703s ago: executing program 3 (id=4836): syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000400)={0xb, @capture={0x1000, 0x1, {0x3, 0x10000}, 0x7, 0xfffffffa}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) 9m14.892537704s ago: executing program 3 (id=4840): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1}, 0x6e) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x1) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x2}], 0x300) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r3, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000240)="60dbc0", 0x3}], 0x1}}], 0x1, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000008c0)=""/150, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000240)="000000a856cd35b40000008f69574fbfd27e4ed2dd606d1247099a4040837f9c0a250379e763f1b15a8fa2641ec321e14a38de0a544ff907ac2bb8be72283734577b774fcdebc2a5edde589dc0d2e2ed40eaae", 0x53) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000300)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$UHID_CREATE(r6, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000180)=""/32, 0x20, 0x0, 0x0, 0x3, 0x0, 0xa0}}, 0x120) write$UHID_DESTROY(r6, &(0x7f00000000c0), 0x4) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0x200000000000000}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x7) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'sit0\x00'}) 9m12.918987972s ago: executing program 3 (id=4845): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000100)=0x18, &(0x7f0000000140)}, 0x20) 8m57.459632265s ago: executing program 47 (id=4845): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000100)=0x18, &(0x7f0000000140)}, 0x20) 8m48.839166033s ago: executing program 0 (id=4920): modify_ldt$write2(0x11, &(0x7f0000000400)={0x5524, 0x20001000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x80000004}, 0x0, &(0x7f00000003c0)={0x3ff}, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000000c0)=0x13) poll(&(0x7f0000000300)=[{r6, 0xe1a2}], 0x1, 0xe7f1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000006c0)=0x11) 8m46.979524639s ago: executing program 0 (id=4922): r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fdatasync(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae535af2f0a70ddeb37f"}, @TCA_CT_ZONE={0x6, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f00000010c0)={0x2, 0x0, 0x0}) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000080)={0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4068aea3, &(0x7f0000000180)={0xdc, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_dccp(0xa, 0x6, 0x0) socket(0x200000000000011, 0x2, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000001500)=ANY=[], 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) 8m45.342865315s ago: executing program 0 (id=4925): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="028b3800040000173abd73517dbc46bb00010000008000"/36, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$llc(0xffffffffffffffff, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) syz_init_net_socket$llc(0x1a, 0x802, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, &(0x7f0000000040)=""/72, 0x48, &(0x7f0000000280)={&(0x7f00000000c0)={'sm3\x00'}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r5, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r5, &(0x7f00000008c0)}, 0x20) 8m43.457129962s ago: executing program 0 (id=4929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) personality(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001000000000000000539763b0fe45df00000022a7207200000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x0, 0x0, 0x1, 0x1, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mm_page_alloc\x00'}, 0x10) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/4096) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xfffffffffffffffc) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x7, 0x1, 0x0, 0x3, 0x5, 0x1, 0x6, 0x7, 0x7, 0xe1, 0x4, 0x0, 0xfffff001, 0x4, 0x0, 0xfc, 0x9, 0x6, '\x00', 0x5, 0x8}) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000070000040"]) 8m41.640923483s ago: executing program 0 (id=4931): modify_ldt$write2(0x11, &(0x7f0000000400)={0x5524, 0x20001000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}, r3}}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x80000004}, 0x0, &(0x7f00000003c0)={0x3ff}, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000000c0)=0x13) poll(&(0x7f0000000300)=[{r6, 0xe1a2}], 0x1, 0xe7f1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000006c0)=0x11) 8m37.995120028s ago: executing program 0 (id=4939): mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000003e0095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='afs_protocol_error\x00', r1, 0x0, 0x2}, 0x18) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x40) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_RECEIVE(r3, 0xc0386106, &(0x7f0000000000)={0x0, 0x5, 0x716, 0xffffffff, 0x0, 0xfffffffc, '&\x00', 0x0, 0xfe, 0xfc, 0x0, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x10, 0xffffffffffffffff, 0x2000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x91) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/56) openat2(r0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x800000, [[0x8, 0xfffffffe, 0xfffffffd], [0x3, 0x0, 0x4], [0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6]], '\x00', [{0x81, 0x3}, {0x20000000, 0x3}, {}, {0x0, 0x1, 0x0, 0x1}, {0x3}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = io_uring_setup(0x313f, &(0x7f0000000300)={0x0, 0xd993, 0x800, 0x3, 0x7}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, &(0x7f0000002180)="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", 0xf00) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, &(0x7f0000000240)=0x8) 8m22.535675769s ago: executing program 48 (id=4939): mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000003e0095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='afs_protocol_error\x00', r1, 0x0, 0x2}, 0x18) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x40) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_RECEIVE(r3, 0xc0386106, &(0x7f0000000000)={0x0, 0x5, 0x716, 0xffffffff, 0x0, 0xfffffffc, '&\x00', 0x0, 0xfe, 0xfc, 0x0, 0x1}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x10, 0xffffffffffffffff, 0x2000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x91) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/56) openat2(r0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x800000, [[0x8, 0xfffffffe, 0xfffffffd], [0x3, 0x0, 0x4], [0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6]], '\x00', [{0x81, 0x3}, {0x20000000, 0x3}, {}, {0x0, 0x1, 0x0, 0x1}, {0x3}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = io_uring_setup(0x313f, &(0x7f0000000300)={0x0, 0xd993, 0x800, 0x3, 0x7}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r5, 0x11, &(0x7f0000002180)="ab7c135172b41d83932604bd258f71fd0b3cfacc5c8a597a416b4a3bc23b0c024834871c2128c3a39f553f8a4337fa499d19c5e9bd863e341f60723b907cad3a504b82301b9701ff3eb554771c7f2e3d1f9b5c710b1e6c2da9dd7aea0bae7f99abf4656f172e98a59169840265cd7433271be513e48cad1385862ada388d4765e8ad6ead550d8353d532e8dc84b264c4db431f03337e89e9f5659b70df66fd44493e65b29256fadec8ad44a22cbc78b4b11104ae851f7b6deff8858444ee28e682e2ea5497d0da7da94d42eb9c15cca25fda087268a2d155571d2ec0540ef1ec3ee915b8f2f4620b509303cd69b44e16265590ebaa1e4bb53a42c33ca05eaa4b26956234ad84b6af01b69ad9078429a01f800827dd953d409d062e15c0176c12ca69942b6f8cc0318d966ae7b59fda6f76ebd99502162405bb1798cf53ffe0ed52b9ef90f8d1599f7e3d9ad67fa51acf3922377cd67bff6061cd8dccb0a356592953d501be7d3a81d44eb4602f8f98686ca50dff9b58606141dad812676087b4c4d3692642540f934bf49c54c8dab25f03369217ae0ed9820cc181f9ca077069be92b29eef7fccd7be277ad42b82992d4165377ec390272b96a27a7fb686a27540ab3e6d3f385595fc8b2cf44733f5c347d84d398549eeb97fd7cdccfc9401779f675467323c7eea672ebc7a2274a0e3604405adb8ef930d73b201915246e3f434edf90d6fe7aca636e295fbece764dbdeaee79c5ee9f955e534a4e5a2de366809cd2bbc8e9b40e919427c3279e2bc74327e3cd96dfa6958cddc3995dee029a5a03b589be958822962fa660f48e58e0241bfa73db4cc2eb8f1c9f71987ccd4c54c4d74aa30f3fe9386658bb25c21a06195231f318b17f87bec1f89769b3c92e19cf4c12f285ffc00b781651c4961a924ce8abd27ac80882ff4bd302dd0751502ab8666aeafaf0e183760399e79f94490051a03bdbd5cad75b439118682ab1c4521a7d44fad5b36b9951ba5df4d2abaca9125be23faec4cda1b276564818f99de70b586a347089dc3eb68b3517e6158ddbbbe6a87e6bc267350029e9ce01fb8ea21c6f69703b2cd5bbab7542e4dcbfa9505399b7e2ceb559b9fbc66d9ea15cde7bdc8037f6c3967a2a2272041fb6f8196431240945e5ff098064703d0416bcffb5d47362ececf05baecd0a9a34a2df74ffb312603b9340dbd6c2637076df331b498a4f454c16b7c306e8ba3fe9eb16cf4465574513f6e349b99b47b4ccac8346bcb2a4f8ebd4b49861257063e1675ab08cd7589c4454c64b8185050b81b2a4ffcdebd1ab5f80520076c8e93afd2ea454f25e2033c2aae106fe6c52ce942cf526ee3da1bc23bf7dd81c4689941151b1388ea2fa66fa70ebd77946e2d0c40d4df7e9dfa4c0178098097cfb87b2e3f34ef9c1403cd35b2208aa9856d617e59efca166f6d5d5a07b293e49bcbd7c91e7a4cfa4f5944ba282bde64fe35370bb4f0403b4043a6dab682805127cbb1ae0ce0d815c00b0189c95bf2e77a70f41cd5fde621fe977a72d1dd4a57c7c3c22544e24f2f3f62f5ef1d61dc796cee61fce92e212c3df43e96ea66da449f012123eed2ce0f638040523ebbc06165137146ddd41976c1721103ec80584dde16e7f42f863c66e90803bc8927a416624bede41f3f1b4c442511721cc876c6b37f5f989eaa2c91bc85face8127be12d064a81b7ba7b0929d998d3330294296d57278890be331e791030ba7da3473caa04ddf347da7fdb07dac5ecfcfa40f74f9f98a776eeaf9ad085b21f88201387454ffe54ba354369a237bb27de5c039c20abe0cdb779e7fcf31732b1ab6b528481eac5159753bbf6ea123a8f1155ee4747fa41584366ebbd161ff66a1c7025d9c788d2f323ea5be49cb47ae4892661ede4f2dc1737d2ddaa1e0681f602ff7519b5a6560a245fdcc70f536faf8a2ebbd9631c11cafc7e4c32665d8736b8140027a0106da0c38bcb98cd867ffad8ca65e628985546cb55f6a5c8802067063dd185f95e2e62960fe8299ae2037d18b8fe290e70cee3711168f177d6b28cba72a86e2edea86cc8bcf5fc535b1dabc39fe572d9d746246cce79bf7e811eacca264c5dc4b50bf42513f4ffd12e091c9f323ba8521a68cf5aa28b0ca260770a41c335c27c449b1a5a1bee7d76a22101afea308a503e8afb836e9a45c7d26b7dc2bf530208736a74eabc90c63aa4c3567129436ecb0b7ed677588c3aa9e489350ffd3d678e2adb1555815ec58ccad00dfaa47992c54f4bc6e672d42d24c997c60691d0fa34cb1ab1b6248444a0f3dc32713c2dcec67312f7e1d91f71bca3af022248050bccb68cdd0a00720046a0cb329ed01922a45b2b4e7ec11d27a97d9f0c8087e8dd8d27da12a6a9b8068f40375d74eae35df2357072b0baf2ec1fca30f543267084f7e4908d8653342cc0bbc011332826f25e40f0d749e5adfc24575041877f95fbc400eba401be55e5d69fa15d74cfab1a4f23345eec98da53805159d1bf0973a1dd00e8bac35c675f4f0387a8d6d92fa0fa624e25050ce4fa35d65f19241bcb5d909ac032a5fe77b41f60a5ae7066d8c0592ffbfb231ddb19d66b5f40f9c855ed73a90ec6b0e72394157fd1762f40e47cf716c241f4051c3f5b3eea683e0e3bcee2c3a405fc39dc8654dff166221a3df1962588c23b9e21875bd3b587adc3b0afa99b98ba4b9dd00983e722c068108f4d060e0ec033f5bd98203d1ad7a2c4b9d0bb874e5f38cab5a9dc14622822e275ddd0694f11f58443c60d11363a4cf9f498f4583fa4d28d82024f8f79cb140f0fd39109af9cfbd295aa8a57e27835435fc712cbe1b463158e6b72a452390bfd65ce841957b6f9f8642e65f706a78b4645a4786d85ca5ed4b2753593ce628aad3272129bf469dc2c5ddf35f180321b8f375e7f92df06e1faf94845437212b9098ea524d6cf3cf12fade6353e0d6fc4ccb4ad855514211f280dac37ef87fe733560a807ec7859793be3c6048c7a1349650360c192312c6dd27292e18c408a426e888bfd6dbf2764968fa458c05db425751c3675009a738edc545c2c2f3a36a0e1328bbb18720002d7d889ee1d2c22cd95880d77d113644192cb4a53003b058c2c677f2ff74e34c20cf7ea7373da78b9f3ecaaa8eb2af54679c8f4c9e953a7767ab8cb1c0740118de1ff3ea5ee919c03291acc9a1de6b99d7de2dc4b558a81585e65f4124e1a6085703d27e911a0d2b0e4cae2f66e3bfe60a1fef36e9d548b926e9447d9f8e0467541b0c23f76991198fb222a66b3298acd00592e8af612c35a328195af607a28fc8fe72d9fa58509824ef542a6108ac0eb57157485d69b823f7fd6f3c0b9a400b9e98b9dfd91b13707f6d73db8f0973bb5d09b32c98c2550fc69160dd30fb7363952ccb869309564961dbc1916cd906525ec4aaf050e6ede1b0e456566710bcd9159e63ab78b7033fef6dea634b9ef22f7366bfdf9bf934b63b2128f144a2317796dc216894d686903b7eb4a42c3fd4a6eae834cca64d9fc82e7f582c031bd568367f124d87f60f17b372a5256b4c19bbf6dfb8325c8aef9bc827610daa8ee1aaf5b060309562d3d56022f217b609d433b3b2a093c5b39d3c526c29b4c45702172b4780c1494d7918587078890099db2d3f743f051a931bd1098dec3340640255d52aad3767d7e5816a9f994518124dd3e7afb69c1f1de80f6e81d896c0dd774b95f757b7b9c8e16c885145f515673f2d56c5ec131cbf43bd43a68f9d9bd5a736803afc13459be30d023c785a0a2169931229b120beb434e7e24b2e0ffe5fa9194d3d28fdd126e239adfabcaca8a921af59ef62e1a3f79e3695faed682ad13586eeb0c707a73d2dca07712d411557690f9fbf0a3a2c9c7bad78c43e8a801fb61d0ee52ec0d1828ff719f2e6a936aa53c22e7c42d5412b601d2adb2e57ac8b4d46397e7d9a041fb6c9f348fedf1fe1d3fad7aa56903446bb959bd815f18c9956f4023259d8d16c3f3d7b1d17b86674ac6ab4ba941e5684c4e1c3e42139fe02b2ba4c335e9eee34534d63b6578e11acfed93402ef629010ec6a67cae1bd26bf1ba4d6ba2e47b72c49f75c1db13f7980c3826b852d418c02810756cccee48419cf944963e9e37cadd9d370654dfad03481783b1223ac7572d186361b966f61acb032928403ab790e4d59d636769017aa6e5e8aa5868666894ada371c36c847e8b4c04713cf3bfdb6671ea309d67c729e8c928fa1dd5fc9fc4cf45c684e5e3d88baff3b6a469d4383e6dd883a56aa64877214e2b8d57ea7bf643fdc70484db9f38369619127ba8c446a508a143f7af69ebbc0adf85e199339d5f1ea1c3a4281505869d7f913ea67bbd6f714507d4231603f41dd37fe002571346ebcd34a1ad33cdde3eac6071c14669c7853690a8c8518bea8990566bb29decf1c74c4c3011cf257f48a943385c564e54d8d59e297c7faf2cf56774ef3fa55699c6486d275977c98efcaec46778f061ada78cf56cf7e5f460f0889680477977fe2615d988e5ed28957a2e9498b835af33c26cf61af82ae7f98e1482122c9621ebcdbafcd376e8ff60455e25c404e48f5d22b7d124b2f87160b853426ebfb4174abc532a7725219d40ccd8cb523fbad0a4f30d4c2597fa61bcc29ec8b0452786ac829b74a540a0da1bf520ab6a6a58af9113a991df0f7dba2dd58c473cbb12b7a004a787d694b2b25a97174ff0556c104dd63185d5099eb5ff728e2333f87e2684fbc53dafd62e77e4e260bf8d083b5684e60a37c81c427fe0b5f2c9c48477583c65382c1b718d25ff72617a06adae0a7c36572a3e2e2efed2e9ee12567cb80fa8125a24b6e301eeff401b04f1f5f3a92e5b97b3e38ea43e64ca95f0b9dfc54e7debe990855d1301a934267275739cae4e298b8ebaa3a5cacbe59924cda9b6fc45b07078d876e9d5256530f8fd84f125a7ad98cee46b7321162898224e942d0504c9ffa619765ff1b5f6e6f18a399d415e410122c77a6d491101ff1382a96cc33416bc74423062fd9ad512c9804129fd141ffa04762ff786b2c64d8911d30ef64312e706164d9ac9beaf02800718219491e0921f4f008d8beb44b4ed4c902a3b56045b2779ad853ea9b626e7f77c36dc0f18a12fe3e85d4fc6007fc899f8fe7f445bfa8f136744790609d87e6288db2c50edb92fcb755d4930cf0853033a3b0d192df9fb525323b59c427b1cc8c23a1780ed1a3e47dcf7060cc2bffb0749093a84fb804951275c726d113b17b200398cc3b47c9268e6d8fd8b399a822503509e659a65bb9089c915137528c17113e81bc51b5e99e5582606ca9cda1028a2db9aebe01ab0286c34f21dc4ecff9b4ef5daac81bf6c9e0f6ac0e24e8d7748f3a18b77641a9a08b4a302b34f9697cbb8489095a10cc77c6d186c8baf6724f61", 0xf00) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, &(0x7f0000000240)=0x8) 5m52.618951592s ago: executing program 1 (id=5402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) socketpair(0x24, 0x0, 0x0, &(0x7f0000000340)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000050000000100000007"], 0x48) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x606100, 0x0) close(r5) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0xd5b8, 0x9, 0x0, 0x1, 0x6, 0x1, 0x100000ff, 0x3, 0x0}, &(0x7f0000000280)=0x20) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000340)={r7, 0x9}, &(0x7f00000003c0)=0x8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000c00)="89b1ee2c7cf3d9b4b473", 0xa}, {&(0x7f0000000180)="c2c10b270d05", 0x6}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 5m49.47487036s ago: executing program 1 (id=5409): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @remote}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd, 0x4, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x4, 0x20000000, 0x4) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xffffffff, 0x2, 0x10, 0x80, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0xd, @void, @value, @void, @value}, 0x50) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000000000007000900ffffffff"]) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r10, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r10, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r11, 0x10f, 0x84, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x20, 0x10, 0x2, {0x2, 0x7e8e703122aff25f}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5m45.932884168s ago: executing program 1 (id=5420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000080)=0xe8) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r5 = accept(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000001f80)="47ad0c26cfd2d14cc8be067907b9d5afc711c0f567f711b03156edf65d1b9d87e1488176eef95d82f840af8a20ef16d9666a9b5b3677f6e63b88114984ca31d169e3088816a7bdb86bd6bc18986f52401d28ded5755b9d43e2847204c0026c95f46c7323e79b4f166acbc15b21aacf2e6ead6933552a0737c27b29ad18ddb59a7a", 0x81}], 0x1, 0x0, 0x0, 0x20004840}}], 0x1, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0x110, {0x8, 0x2, 0x7}, 0x10, r2, r3, 0x5, 0x8, 0xd63, 0x8d7f, 0x3ff, 0x3, 0x0, 0x5, 0x690, 0x7, 0xff, 0xffffffffffffffff, 0x2, 0x5, 0xc4ab}}, 0xa0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef) 5m42.967378023s ago: executing program 1 (id=5423): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0xe6) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r1, 0x89f0, 0x1000000000000) mknodat$loop(r0, &(0x7f00000001c0)='./file1\x00', 0x100, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x9800, &(0x7f0000000180)={0x5, 0x0, 0x100000}, 0x20) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000040)='./bus/file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 5m42.065634815s ago: executing program 1 (id=5426): gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5f4ac7c4216632f8bdb81e2058edd7db", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="5f4a57db0200002de7000008a800", 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) io_uring_setup(0x5fb5, &(0x7f0000000300)={0x0, 0xfa29, 0x400, 0x0, 0x4}) socket$pppoe(0x18, 0x1, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000380)=0x1, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)={0x40, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x40}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) 5m41.739227277s ago: executing program 1 (id=5428): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$USERIO_CMD_REGISTER(r6, &(0x7f0000000000), 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0xa) 5m41.324534485s ago: executing program 49 (id=5428): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$USERIO_CMD_REGISTER(r6, &(0x7f0000000000), 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x3}) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0xa) 4m39.471629195s ago: executing program 5 (id=5605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) prctl$PR_GET_TSC(0x19, &(0x7f0000000300)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(0x0, &(0x7f0000002e40)='./bus\x00', &(0x7f0000002e80)='nilfs2\x00', 0x0, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r4 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x8641) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f000000a400)={0x1, 0x0, 0x5, &(0x7f000000a3c0)={0x0, "fd5a44512b7e1b3c20ec2a3ba53b31dd770000000004002000000400"}}) getpid() socket$kcm(0x11, 0x200000000000002, 0x300) socket(0x10, 0x3, 0xfffffffe) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000003c0)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ftruncate(0xffffffffffffffff, 0xc17a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1600000000000000028400000100000000000000", @ANYRES32, @ANYBLOB='s\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x50) 4m38.453450585s ago: executing program 5 (id=5608): modify_ldt$write2(0x11, &(0x7f0000000400)={0x5524, 0x20001000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x80000004}, 0x0, &(0x7f00000003c0)={0x3ff}, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000000c0)=0x13) poll(&(0x7f0000000300)=[{r5, 0xe1a2}], 0x1, 0xe7f1) 4m37.487285319s ago: executing program 5 (id=5619): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf250c000000080001000200000008000100000000030c0006000100000001"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40004) 4m37.337509175s ago: executing program 5 (id=5620): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00224f00000015a8407a330b93bf"], 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x2d) (async) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x9e97, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x54}}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async) r10 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(r10, 0x0, &(0x7f0000000e00)) (async) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) 4m36.382918148s ago: executing program 5 (id=5626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000300)={0x2, r0}) sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0xffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000080), 0xc) bind$llc(0xffffffffffffffff, &(0x7f0000000380)={0x1a, 0x321, 0x40, 0x7, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x10) read(r6, &(0x7f0000000040)=""/49, 0x31) ioctl$sock_qrtr_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000000)={'tunl0\x00'}) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1}, 0xc) write$binfmt_script(r7, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000040)={0x0, [0xffffffff, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0xffffffff}, {}, {}, {}, {0x0, 0xfffffffc}], 0x20}) syz_genetlink_get_family_id$tipc(0x0, r4) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r9, r4, &(0x7f0000002080)=0x64, 0x10000) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f0000000180), 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, 0x0) 4m36.044335303s ago: executing program 5 (id=5627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x7ff, @private2, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x4, &(0x7f0000000b40)) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, ','}]}, 0xd) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, 0x0, 0x0) shutdown(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000200)={0x0, 0x2710}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@getchain={0x3c, 0x66, 0x300, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0x73e341aa07234d65}, {0x6, 0xffff}, {0x3, 0xffff}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000480)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000180)={0x30}, 0x30) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x']) 4m35.701160127s ago: executing program 50 (id=5627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x7ff, @private2, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x4, &(0x7f0000000b40)) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, ','}]}, 0xd) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, 0x0, 0x0) shutdown(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000200)={0x0, 0x2710}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@getchain={0x3c, 0x66, 0x300, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0x73e341aa07234d65}, {0x6, 0xffff}, {0x3, 0xffff}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000480)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000180)={0x30}, 0x30) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x']) 2m51.679912038s ago: executing program 7 (id=5947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x8, 0x1}]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = io_uring_setup(0x17ba, &(0x7f00000002c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40), 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0xffff8000}, 0x0) 2m50.775049596s ago: executing program 7 (id=5948): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]}, 0x78) 2m50.315035405s ago: executing program 7 (id=5949): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x80010, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m48.739937868s ago: executing program 7 (id=5957): modify_ldt$write2(0x11, &(0x7f0000000400)={0x5524, 0x20001000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x80000004}, 0x0, &(0x7f00000003c0)={0x3ff}, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000000c0)=0x13) poll(&(0x7f0000000300)=[{r5, 0xe1a2}], 0x1, 0xe7f1) 2m47.620386553s ago: executing program 7 (id=5961): sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x323, 0x40000001, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}], 0x1c) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f0000000280)='./file1\x00', 0x4c4c0, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', 0x0}) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) 2m46.238913406s ago: executing program 7 (id=5963): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r1 = syz_open_dev$radio(&(0x7f0000000580), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000050000000100000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x606100, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000c00)="89b1ee2c7cf3d9b4b473", 0xa}, {&(0x7f0000000180)="c2c10b270d05", 0x6}], 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x0, @empty}}, 0xffffffff, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r8, 0x9306, 0x8, 0x1, 0xfff, 0x6}, 0x14) r9 = syz_io_uring_setup(0x7f54, &(0x7f0000000100)={0x0, 0x0, 0x3e00, 0x0, 0x3b}, &(0x7f0000000000), &(0x7f00000000c0)) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r10, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ppoll(&(0x7f00000002c0)=[{r9}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000180)=0x941, 0x4) 2m30.325758416s ago: executing program 51 (id=5963): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r1 = syz_open_dev$radio(&(0x7f0000000580), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000050000000100000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x606100, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000c00)="89b1ee2c7cf3d9b4b473", 0xa}, {&(0x7f0000000180)="c2c10b270d05", 0x6}], 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x0, @empty}}, 0xffffffff, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r8, 0x9306, 0x8, 0x1, 0xfff, 0x6}, 0x14) r9 = syz_io_uring_setup(0x7f54, &(0x7f0000000100)={0x0, 0x0, 0x3e00, 0x0, 0x3b}, &(0x7f0000000000), &(0x7f00000000c0)) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r10, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ppoll(&(0x7f00000002c0)=[{r9}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000180)=0x941, 0x4) 2m6.321734301s ago: executing program 9 (id=6053): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = socket(0x2, 0x2, 0x0) r7 = dup(r6) setsockopt$inet_opts(r7, 0x0, 0x15, &(0x7f0000000240), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file1/file4/file7\x00', 0x0) setresgid(0x0, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000004680)={0x3f0, 0x0, 0x0, [{{0x2, 0x3, 0x6, 0x2, 0x2, 0x1, {0x1, 0x6d3cb3da, 0x9, 0x6000000000000000, 0x2, 0x9, 0xa, 0x3, 0x8, 0x8000, 0x7fff, 0x0, 0x0, 0x6, 0x96}}, {0x2, 0x8, 0x3, 0x7f, '%+$'}}, {{0x0, 0x2, 0x8001, 0x4, 0x4b, 0x5, {0x0, 0x0, 0x9, 0x8, 0x0, 0xfff, 0x9, 0x6, 0xad, 0x8000, 0x2, 0xee01, 0x0, 0x3, 0x3}}, {0x3, 0x1, 0x3, 0xefc8, ')^]'}}, {{0x4, 0x2, 0x80, 0x5, 0x1, 0x0, {0x4, 0x9, 0x6, 0x5, 0xe8, 0x5, 0x539c, 0x8, 0x8, 0xc000, 0x7, 0x0, 0x0, 0x8d, 0x6}}, {0x0, 0xb, 0xd, 0x2, '/dev/video36\x00'}}, {{0x4, 0x1, 0x3f38, 0xa, 0x3, 0x87, {0x5, 0x1, 0x6, 0xfffffffffffffffb, 0xfffffffeffffffff, 0x3, 0x3, 0x1ff, 0x48, 0xc000, 0x2, 0x0, 0x0, 0x4433, 0x7}}, {0x6, 0xfffffffffffffffb, 0x4, 0x1, 'GPL\x00'}}, {{0x3, 0x3, 0x2, 0x4, 0x3, 0x80, {0x4, 0xffffffffffffffc0, 0x9, 0x3, 0xf6a, 0x5, 0x4, 0x7, 0x6, 0x1000, 0x2, 0x0, 0xffffffffffffffff, 0x1, 0xac}}, {0x6, 0x100000001, 0x18, 0x6, '%\x1a/{{\\%,\\o[*)]@[\x82\"!)\x14*}\v'}}, {{0x4, 0x1, 0xffff, 0x81b, 0x1, 0x2a11, {0x1, 0xd26, 0x6, 0x80, 0x7fffffffffffffff, 0x9, 0x3ff, 0xfffffffd, 0x4, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x800}}, {0x6, 0x0, 0xd, 0x1, '/dev/video36\x00'}}]}, 0x3f0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2m5.3757671s ago: executing program 9 (id=6056): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x1000000}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x303b01, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x24fa, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) futex_waitv(&(0x7f0000000180)=[{0x3, &(0x7f0000000040)=0x3, 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fffffe) openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2000) r4 = getpid() ioprio_set$pid(0x1, r4, 0x4007) 2m4.719078458s ago: executing program 9 (id=6059): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000d000000000000000000000061120000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m24.816904769s ago: executing program 9 (id=6059): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000d000000000000000000000061120000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 49.354749625s ago: executing program 9 (id=6059): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000d000000000000000000000061120000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 28.699056069s ago: executing program 9 (id=6059): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000d000000000000000000000061120000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 27.323214042s ago: executing program 8 (id=6327): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x11013, 0xffffffffffffffff, 0x4d05b000) 26.589624021s ago: executing program 8 (id=6329): socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x1cb}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 26.253410128s ago: executing program 4 (id=6331): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0xfffffffc}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x388, &(0x7f0000000040)={0x0, 0x1a3f, 0x100, 0x2, 0x3c, 0x0, r2}, &(0x7f00000000c0), &(0x7f0000000100)) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 25.585348074s ago: executing program 2 (id=6332): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000010000000e00000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000088500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast2}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469676573745f6e756c6c2d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500"/196], 0xe0}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@pci={{0x8}, {0x11}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 25.464249713s ago: executing program 4 (id=6334): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1716, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) (async) write$cgroup_int(r2, &(0x7f0000000040)=0x1, 0x12) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001b00)={'syz_tun\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfffffffc}}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000300)='caif0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000300)='caif0\x00', 0x10) connect$phonet_pipe(r4, 0x0, 0x0) (async) connect$phonet_pipe(r4, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x500) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x30}}, 0x0) close_range(r5, r2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 25.198555313s ago: executing program 2 (id=6335): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$media(0x0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') statx(r1, 0x0, 0x4000, 0x4, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xfe}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x24040890) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r0, &(0x7f0000000000), 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r2, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x2b, 0xc5, "98989b58a8890187c5483ca32e7a7fbb676cfc95accf172a69a7d921e9355905987ea15a43d0f9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c890}, 0xc001) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newtclass={0x58, 0x28, 0xe00, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0x10}, {0xf, 0xf}}, [@tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x5d0}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c00018006000600800a000000010280f90014"], 0x124}}, 0xc000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) 23.582255995s ago: executing program 8 (id=6337): unshare(0x28000600) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0xa, 0xd0e0000, 0x130, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@mac={{0x30}, {@random="16f9a936c886"}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa0003"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000052eacd3ef32832afa82810adb9a2e6153ce5526cda8e1a3f34f72d8838c753937fe494381e4b30299b76889e513dc8e3becac1e6599ab2061ed092c9295c16361529fed4579c7a68d6fabfa0b32de8a2263b077b0f8980c501f8c58e33ebfa3f85ecf0c2775ebda42f2c8350c94a78a6e99c5a7a4e78479b85", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12d59d74722b5e01020301fd11c7090900000000000000000000f9bb56f5f8cfed7092ba0f919be8d6cdcc28117057489bb0de0c83def4417b3102420e48bbd209ebce8caf8e89016d6b77b588cfaf493564a4b864b4e1ae12a547d4ab86cd00"/108], &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r5}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r6, 0x114, 0x2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x7, 0x40, 0x400, r0, 0x400, '\x00', 0x0, r0, 0x3, 0x5, 0x5, 0x5, @void, @value, @void, @value}, 0x50) 23.464948553s ago: executing program 2 (id=6338): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) io_uring_setup(0x4e93, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x2, 0x3}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) unshare(0x20000400) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r1, 0x0, 0x0, 0x2040, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = accept4(r0, 0x0, 0x0, 0x0) write(r3, &(0x7f00000002c0)="6b89c67f1008219caef371154902f5de9af89356569acefdda55221ee423c3b8db4251de324d90d8574360fd4f9c68afe70b753b1720c947518a25ed6d8acf5e58146153efac11eb740e7fa5846d1312ba55c236f9cb67e322d7884a9c2936c31abd18921e7d4e5c02c3f6351b48b95298a04a9850729d30d2376be0a540640b460c459bceee50e5f0d53b7501bdd1da143c4327819062a3ec61ee92ff518a", 0x9f) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00037c0000007c03"], 0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x18) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r1}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000740000/0x4000)=nil, 0x4000}, 0x4}) 23.283150238s ago: executing program 4 (id=6340): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1, 0x0, 0x67}, 0x0) 22.34320242s ago: executing program 4 (id=6344): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x10000000}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x7f}}]}]}]}, 0x50}}, 0x0) 22.308345279s ago: executing program 4 (id=6345): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000010000000e00000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000088500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast2}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469676573745f6e756c6c2d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500"/196], 0xe0}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@pci={{0x8}, {0x11}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 22.171416796s ago: executing program 4 (id=6346): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000e2c000/0x4000)=nil, 0x4000}, 0x3}) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00'], 0x28}}], 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f000000c3c0)={0x2020}, 0x2020) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7f) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) write$binfmt_script(r4, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'mountinfo\x00'}, {0x20, '/dev/virtual_nci\x00'}, {0x20, ':'}, {}, {0x20, '/dev/nullb0\x00'}, {0x20, '@'}], 0xa, "3820874c09c5f4eacdef003e6be9e2c98cd9fa771e8e00fadc274596fa78005adad36d25ef6ed945e09cd11579f50a6163528c4d677edaf599fb6247ea9130cb8a9fa52de83d4a471430f5cb184a16ddbc4afa29f7c5de0062426957182dcab8dd4dc8af9a1ee5e26a0244661037fc98886ffd9d062e92b2d390ec9e2c7c8522b17e552e2e4774a63be9b8e6b6e1b3d897de00462b748a1fe0575b0498345a3e3c296b396e4a43bf9ff3901d89840275"}, 0xea) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r8, 0x1, 0x123, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000003c0)={@nfc={0x27, r6, 0xffffffffffffffff, 0x6}, {&(0x7f0000000140)=""/212, 0xd4}, &(0x7f0000000040)}, 0xa0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21.200592428s ago: executing program 6 (id=6347): socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x1cb}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 20.106514869s ago: executing program 6 (id=6348): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x79540, 0x0) r0 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (fail_nth: 2) 20.105621591s ago: executing program 2 (id=6349): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$media(0x0, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') statx(r1, 0x0, 0x4000, 0x4, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xfe}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x24040890) setsockopt(r0, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r0, &(0x7f0000000000), 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r2, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x2b, 0xc5, "98989b58a8890187c5483ca32e7a7fbb676cfc95accf172a69a7d921e9355905987ea15a43d0f9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c890}, 0xc001) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newtclass={0x58, 0x28, 0xe00, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0x10}, {0xf, 0xf}}, [@tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x5d0}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c00018006000600800a000000010280f90014"], 0x124}}, 0xc000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) 20.053032732s ago: executing program 8 (id=6350): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40044000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000080)={0xb90, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x9}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xb38, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x14d}]}, {0x4d4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x661, @remote, 0x7}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "56353adfc58276931b9074c972235c1d26b59d7dba2ab4a991b6138a50c5d942"}, @WGPEER_A_ALLOWEDIPS={0x464, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10}}]}, {0x5b8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "842a371be23a1364d19df25d3a2cb959a709fefe6aeae800938b446704de4ad1"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0d37d994ee9886cf06feaa089820c7b9259ed563f6a5ed97f5e6bea140a62b5e"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_ALLOWEDIPS={0x52c, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0xc}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xed}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x200, @private1, 0x8}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3e42873b12f4c18b3f471800d2041685d17810783ff669d873f2078985971049"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000}}]}]}]}, 0xb90}, 0x1, 0x0, 0x0, 0x240448c1}, 0x8000) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588d0000000109022d00010000000009040000030b08000009058d67c87d2a00000905050200"], 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 19.794452218s ago: executing program 2 (id=6351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x81a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4091}, 0x20044004) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x79540, 0x0) r1 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 19.591096861s ago: executing program 6 (id=6352): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000040)={0x8, r2}) r3 = syz_usb_connect$hid(0x0, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000008d1d001ed97438f6e05fd0000017e77a8df6e14a79c2d58ce5e00000000090400000103000200092100000003000000000000000000549b88af931109bdd0778e2f3313f1eaccb7899a5e50f097d4dcb9284e17cb7472378b459c2201db18b822e6ba866e4209cf0d9c118781d1102988ff8172594cd9f9685b0cb06c95b874ee31b3de3ad162d114a8da6bde724fb3473d4bc3a478b7e85cda3ceccd5d2866b26c2fda78cd4a03b75b0935ea31ee6a4a5d952dfa"], 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r4 = getpgrp(0x0) r5 = syz_clone(0x40a2400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000065c0), 0x3, 0x610400) kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) stat(&(0x7f00000066c0)='.\x00', &(0x7f00000055c0)) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600000000018210000000000000000000000fffffffffffffe8000000000000000000000000000aa11000000000000000000ffff0401907800114f84fc8e269ce081d262dbf89d8d8cc2924fa343a52785ae93ee19fe20344ad713bb515224b6719b3384861feb31174d28aad68ae091380d9fcc22d32e7e1ea5fa20f598d5fc7d723b0a048240a6d83e138a80a30b282b6a72e542eb5a25abcfe7390024139de3f6da0f29571a65817e7171b353318270b51658d158a73bae378e24fe05d745e73892a32d48c29799ba6c6b875977c08437d111989236cf8dab65caae6e28357fff6e61ab"], 0x0) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000006640)='/sys/fs/smackfs/load\x00', 0x2, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev(r6, &(0x7f0000000680)=[{&(0x7f0000000100)='\b', 0x1}], 0x1) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000861a1820830447374320010203010902120001002000000904"], 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x80) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x1b) writev(r7, &(0x7f00000003c0)=[{&(0x7f00000002c0)=':', 0x1}], 0x1) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x7, {0x7, 0x0, "a725ebbd1b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 19.552561913s ago: executing program 2 (id=6353): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20001) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f00000001c0)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "5ea17689b60aadee4ec41a660eb76dd3ac80c30611557c19b4ea3f9d8027111c", 0xfffffff7, 0x9f76, 0x0, 0x7}, 0x3c) socket$inet(0x2, 0x2, 0x1) syz_emit_ethernet(0x76, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa010184}, {@private}, {@local}, {@remote}, {@private}, {@dev}]}]}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6ea4, @empty}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x9a02, 0x0, 0x90, [0x0, 0x20001130], 0x10d, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffffffffffff00"/140]}, 0x104) 17.489639304s ago: executing program 8 (id=6354): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1, 0x0, 0x67}, 0x0) 16.563239835s ago: executing program 8 (id=6355): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="0117"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="000049000000f5ecd97e203483851080720f1806ed5aef771e7f853105e5eb2b190cc398f83f3a44f9b8a8b13fd4fc6ec7408a7973590e6584eecca6e2a7bf5d7c9e730fa7ec70dcd976"], 0x0, 0x0}) 16.555265899s ago: executing program 6 (id=6356): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0600000004000000010000000e00000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000088500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast2}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469676573745f6e756c6c2d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500"/196], 0xe0}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@pci={{0x8}, {0x11}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 16.480808976s ago: executing program 6 (id=6357): socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x1cb}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 15.326628651s ago: executing program 6 (id=6358): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0), 0x20480, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0xfdfd, {0xee96, 0xf8, 0xffffffff}}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0xc040, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) semget$private(0x0, 0x3, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) gettid() fcntl$setlease(r0, 0x400, 0x2) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r5, 0x3b64) socket(0x848000000015, 0x805, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) 7.009120571s ago: executing program 52 (id=6346): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000e2c000/0x4000)=nil, 0x4000}, 0x3}) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00'], 0x28}}], 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r4, &(0x7f000000c3c0)={0x2020}, 0x2020) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7f) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) write$binfmt_script(r4, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'mountinfo\x00'}, {0x20, '/dev/virtual_nci\x00'}, {0x20, ':'}, {}, {0x20, '/dev/nullb0\x00'}, {0x20, '@'}], 0xa, "3820874c09c5f4eacdef003e6be9e2c98cd9fa771e8e00fadc274596fa78005adad36d25ef6ed945e09cd11579f50a6163528c4d677edaf599fb6247ea9130cb8a9fa52de83d4a471430f5cb184a16ddbc4afa29f7c5de0062426957182dcab8dd4dc8af9a1ee5e26a0244661037fc98886ffd9d062e92b2d390ec9e2c7c8522b17e552e2e4774a63be9b8e6b6e1b3d897de00462b748a1fe0575b0498345a3e3c296b396e4a43bf9ff3901d89840275"}, 0xea) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r8, 0x1, 0x123, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000003c0)={@nfc={0x27, r6, 0xffffffffffffffff, 0x6}, {&(0x7f0000000140)=""/212, 0xd4}, &(0x7f0000000040)}, 0xa0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.008175497s ago: executing program 53 (id=6353): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20001) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f00000001c0)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "5ea17689b60aadee4ec41a660eb76dd3ac80c30611557c19b4ea3f9d8027111c", 0xfffffff7, 0x9f76, 0x0, 0x7}, 0x3c) socket$inet(0x2, 0x2, 0x1) syz_emit_ethernet(0x76, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa010184}, {@private}, {@local}, {@remote}, {@private}, {@dev}]}]}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6ea4, @empty}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x9a02, 0x0, 0x90, [0x0, 0x20001130], 0x10d, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffffffffffff00"/140]}, 0x104) 1.505631668s ago: executing program 54 (id=6355): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_vif\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="0117"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="000049000000f5ecd97e203483851080720f1806ed5aef771e7f853105e5eb2b190cc398f83f3a44f9b8a8b13fd4fc6ec7408a7973590e6584eecca6e2a7bf5d7c9e730fa7ec70dcd976"], 0x0, 0x0}) 0s ago: executing program 55 (id=6358): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000006c0), 0x20480, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0xfdfd, {0xee96, 0xf8, 0xffffffff}}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0xc040, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) semget$private(0x0, 0x3, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) mmap(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x62ebccfc0b6865e9, 0x10, 0xffffffffffffffff, 0x7b5de000) gettid() fcntl$setlease(r0, 0x400, 0x2) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$IOMMU_VFIO_GET_API_VERSION(r5, 0x3b64) socket(0x848000000015, 0x805, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.8.6007'. [ 2202.489981][T17136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2202.512849][T17136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2202.529894][T28870] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6008'. [ 2202.545893][T17136] bond0 (unregistering): Released all slaves [ 2202.575681][T28818] chnl_net:caif_netlink_parms(): no params data found [ 2202.646985][T22686] Bluetooth: hci4: command tx timeout [ 2203.308168][T28886] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2203.701969][T17136] IPVS: stopping master sync thread 24237 ... [ 2203.841847][T28818] bridge0: port 1(bridge_slave_0) entered blocking state [ 2203.878957][T28818] bridge0: port 1(bridge_slave_0) entered disabled state [ 2203.893619][T28818] bridge_slave_0: entered allmulticast mode [ 2203.906615][T28818] bridge_slave_0: entered promiscuous mode [ 2203.948865][T28818] bridge0: port 2(bridge_slave_1) entered blocking state [ 2203.960322][T28818] bridge0: port 2(bridge_slave_1) entered disabled state [ 2204.000251][T28818] bridge_slave_1: entered allmulticast mode [ 2204.269340][T28818] bridge_slave_1: entered promiscuous mode [ 2204.688381][T22686] Bluetooth: hci4: command tx timeout [ 2205.152250][T28818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2205.429829][T28818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2205.605967][T17136] hsr_slave_0: left promiscuous mode [ 2205.613667][T17136] hsr_slave_1: left promiscuous mode [ 2205.628872][T17136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2205.646709][T17136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2205.709572][T17136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2205.726232][T17136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2205.910857][T17136] veth1_macvtap: left promiscuous mode [ 2205.943472][T17136] veth0_macvtap: left promiscuous mode [ 2205.965870][T17136] veth1_vlan: left promiscuous mode [ 2205.987206][T17136] veth0_vlan: left promiscuous mode [ 2206.293901][T17136] pimreg (unregistering): left allmulticast mode [ 2206.714119][T19812] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2206.778378][T22686] Bluetooth: hci4: command tx timeout [ 2206.883269][T19812] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2206.930559][T19812] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2206.940790][T19812] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 2206.985747][T19812] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.012068][T19812] usb 10-1: config 0 descriptor?? [ 2207.479145][T19812] pyra 0003:1E7D:2CF6.0040: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.9-1/input0 [ 2207.505048][T17136] team0 (unregistering): Port device team_slave_1 removed [ 2207.675499][T17136] team0 (unregistering): Port device team_slave_0 removed [ 2208.467769][ T5876] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2208.597606][ T5876] usb 3-1: device descriptor read/64, error -71 [ 2208.847589][ T5876] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2208.977536][ T5876] usb 3-1: device descriptor read/64, error -71 [ 2209.096470][ T5876] usb usb3-port1: attempt power cycle [ 2209.250638][T19812] pyra 0003:1E7D:2CF6.0040: couldn't init struct pyra_device [ 2209.251949][T28818] team0: Port device team_slave_0 added [ 2209.266074][T19812] pyra 0003:1E7D:2CF6.0040: couldn't install mouse [ 2209.316231][T19812] pyra 0003:1E7D:2CF6.0040: probe with driver pyra failed with error -71 [ 2209.485128][T28929] overlay: filesystem on ./bus not supported as upperdir [ 2209.688979][T28818] team0: Port device team_slave_1 added [ 2209.700601][T19812] usb 10-1: USB disconnect, device number 17 [ 2209.718947][ T5876] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2209.737054][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 2209.737077][ T29] audit: type=1326 audit(2209.696:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28931 comm="syz.4.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2209.765814][ T5876] usb 3-1: device descriptor read/8, error -71 [ 2209.828129][ T29] audit: type=1326 audit(2209.726:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28931 comm="syz.4.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2209.849853][T28818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2209.883167][T28818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2209.912228][ T29] audit: type=1326 audit(2209.736:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28931 comm="syz.4.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2209.934475][T28818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2209.945343][ T29] audit: type=1326 audit(2209.736:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28931 comm="syz.4.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2209.969041][T28818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2209.976030][T28818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2210.029674][ T29] audit: type=1326 audit(2209.736:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28931 comm="syz.4.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2210.061555][T28818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2210.077576][ T5876] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2210.077759][ T29] audit: type=1326 audit(2209.736:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28931 comm="syz.4.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2210.077804][ T29] audit: type=1326 audit(2209.736:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28931 comm="syz.4.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2210.077842][ T29] audit: type=1326 audit(2209.736:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28931 comm="syz.4.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2210.077878][ T29] audit: type=1326 audit(2209.736:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28931 comm="syz.4.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2210.077910][ T29] audit: type=1326 audit(2209.736:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28931 comm="syz.4.6023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2210.113861][ T5876] usb 3-1: device descriptor read/8, error -71 [ 2210.237808][ T5876] usb usb3-port1: unable to enumerate USB device [ 2210.444672][T28937] sch_tbf: burst 168 is lower than device lo mtu (65550) ! [ 2210.533911][T28818] hsr_slave_0: entered promiscuous mode [ 2210.561386][T28942] openvswitch: netlink: Actions may not be safe on all matching packets [ 2210.588458][T28818] hsr_slave_1: entered promiscuous mode [ 2210.595017][T28818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2210.607728][T28818] Cannot create hsr debugfs directory [ 2210.947695][ T5876] usb 9-1: new high-speed USB device number 100 using dummy_hcd [ 2211.152708][ T5876] usb 9-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=bf.93 [ 2211.195063][ T5876] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.232744][T28957] binder: 28956:28957 ioctl c00c620f 20000340 returned -22 [ 2211.265092][ T5876] usb 9-1: Product: syz [ 2211.277211][ T5876] usb 9-1: Manufacturer: syz [ 2211.283605][ T5876] usb 9-1: SerialNumber: syz [ 2211.293638][T28957] sp0: Synchronizing with TNC [ 2211.311091][ T5876] usb 9-1: config 0 descriptor?? [ 2211.719932][T28818] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2211.777136][T28818] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2211.851194][T28818] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2211.917192][T28818] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2212.131009][ T5876] usb 9-1: USB disconnect, device number 100 [ 2212.858730][T28818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2212.936944][T28818] 8021q: adding VLAN 0 to HW filter on device team0 [ 2213.009767][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 2213.016984][ T8389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2213.072574][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 2213.079828][ T8389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2213.357581][ T5877] usb 9-1: new high-speed USB device number 101 using dummy_hcd [ 2213.519328][ T5877] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2213.528305][ T5877] usb 9-1: config 0 has no interface number 0 [ 2213.565997][ T5877] usb 9-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96 [ 2213.680661][ T5877] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2213.720110][ T5877] usb 9-1: Product: syz [ 2214.439400][ T5877] usb 9-1: Manufacturer: syz [ 2214.444110][ T5877] usb 9-1: SerialNumber: syz [ 2214.508684][ T5877] usb 9-1: config 0 descriptor?? [ 2214.553728][ T5877] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (2013:0259) with 1 interfaces [ 2214.563157][ T5877] cx231xx 9-1:0.1: Not found matching IAD interface [ 2214.584568][T28818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2214.871770][ T5877] usb 9-1: USB disconnect, device number 101 [ 2215.704661][T28818] veth0_vlan: entered promiscuous mode [ 2215.720460][T28818] veth1_vlan: entered promiscuous mode [ 2215.743459][T28818] veth0_macvtap: entered promiscuous mode [ 2215.752373][T28818] veth1_macvtap: entered promiscuous mode [ 2215.766740][T28818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2215.777360][T28818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2215.813727][T28818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2215.824544][T28818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2215.834700][T28818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2216.136111][T28818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2216.146270][T28818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2216.157008][T28818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2216.167080][T28818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2216.177778][T28818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2216.187808][T28818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2216.198528][T28818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2216.208805][T28818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2216.219527][T28818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2216.221113][T29004] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6040'. [ 2216.229872][T28818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2216.249992][T28818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2216.283799][T28818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2216.448839][T28818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2216.477380][T28818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2216.505040][T28818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2216.548371][T28818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2216.572960][T28818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2216.604099][T28818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2216.637531][T28818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2216.649279][T28818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2216.707145][T28818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2216.725181][T28818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2216.735221][T28818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2216.747305][T28818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2216.757479][T28818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2216.768091][T28818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2216.778056][T28818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2216.788617][T28818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2216.808490][T28818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2216.843534][T28818] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.854230][T28818] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.877574][T28818] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.886360][T28818] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2217.073459][T29017] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2217.377528][T29011] openvswitch: netlink: Actions may not be safe on all matching packets [ 2217.393401][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 2217.393435][ T29] audit: type=1326 audit(2217.346:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29015 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2217.427834][ T29] audit: type=1326 audit(2217.366:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29015 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2217.565602][ T29] audit: type=1326 audit(2217.526:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29015 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2217.610296][ T29] audit: type=1326 audit(2217.576:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29015 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2217.660111][ T6043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2217.668508][ T6043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2217.680334][ T29] audit: type=1326 audit(2217.596:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29015 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2217.727537][ T29] audit: type=1326 audit(2217.616:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29015 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2217.767937][ T29] audit: type=1326 audit(2217.616:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29015 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2217.783133][T17136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2217.816109][T17136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2217.827829][ T9] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2217.896876][ T29] audit: type=1326 audit(2217.616:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29015 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2217.987810][ T9] usb 10-1: device descriptor read/64, error -71 [ 2218.037841][ T29] audit: type=1326 audit(2217.616:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29015 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2218.169056][T29031] libceph: resolve '0' (ret=-3): failed [ 2218.671838][ T9] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 2218.938665][ T9] usb 10-1: device descriptor read/64, error -71 [ 2219.059452][ T9] usb usb10-port1: attempt power cycle [ 2219.497957][ T9] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 2219.643050][ T9] usb 10-1: device descriptor read/8, error -71 [ 2219.887710][ T9] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 2219.947610][T22601] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2220.160222][T29053] netlink: 5300 bytes leftover after parsing attributes in process `syz.8.6049'. [ 2220.169592][T29053] openvswitch: netlink: IP tunnel dst address not specified [ 2221.074079][T22601] usb 3-1: Using ep0 maxpacket: 8 [ 2221.145562][T29055] netlink: 'syz.8.6051': attribute type 7 has an invalid length. [ 2221.154416][T29055] binder: BINDER_SET_CONTEXT_MGR already set [ 2221.160656][T29055] binder: 29054:29055 ioctl 4018620d 20000040 returned -16 [ 2221.288540][ T9] usb 10-1: device descriptor read/8, error -71 [ 2221.327670][T22601] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 2221.335934][T22601] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 2221.344827][T22601] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 2221.353738][T22601] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2221.363980][T22601] usb 3-1: config 0 has no interface number 0 [ 2221.370199][T22601] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0xC has invalid maxpacket 57391, setting to 64 [ 2221.381390][T22601] usb 3-1: config 0 interface 186 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 2221.392200][T22601] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 2221.403498][T22601] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2221.415098][T22601] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 2221.426363][T22601] usb 3-1: config 0 interface 186 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 13 [ 2221.439678][T22601] usb 3-1: New USB device found, idVendor=0609, idProduct=0338, bcdDevice=57.f1 [ 2221.448860][T22601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.463029][T22601] usb 3-1: config 0 descriptor?? [ 2221.468218][T22601] usb 3-1: Interface #186 referenced by multiple IADs [ 2221.475971][ T9] usb usb10-port1: unable to enumerate USB device [ 2221.986929][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.259874][T22601] usb 3-1: USB disconnect, device number 59 [ 2222.377537][ T9] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 2222.562145][T29066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6055'. [ 2222.688830][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 2222.700055][ T9] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 2222.709146][ T9] usb 9-1: config 0 has no interface number 0 [ 2222.782911][ T9] usb 9-1: config 0 interface 12 has no altsetting 0 [ 2222.845414][ T9] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2222.960073][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.040074][ T9] usb 9-1: Product: syz [ 2223.082125][ T9] usb 9-1: Manufacturer: syz [ 2223.112430][ T9] usb 9-1: SerialNumber: syz [ 2223.250534][ T9] usb 9-1: config 0 descriptor?? [ 2223.525543][T29064] netlink: 80 bytes leftover after parsing attributes in process `syz.8.6054'. [ 2224.752718][T14252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2224.768843][T14252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2224.788316][T14252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2224.799365][T14252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2224.807222][T14252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2224.815089][T14252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2224.898592][T29066] team0 (unregistering): Port device team_slave_0 removed [ 2224.949772][T29066] team0 (unregistering): Port device team_slave_1 removed [ 2225.178567][T16372] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.226265][T29085] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 2225.322012][ T9] f81534 9-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71 [ 2225.338845][ T9] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 2225.346650][ T9] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2225.354713][ T9] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 2225.370755][ T9] usb 9-1: USB disconnect, device number 102 [ 2225.516931][T29103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2225.536219][T29103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2225.630881][T16372] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.757658][T22601] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 2226.097543][T22601] usb 7-1: Using ep0 maxpacket: 8 [ 2226.217617][T22601] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2226.267613][T22601] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.279779][T22601] usb 7-1: Product: syz [ 2226.289394][T22601] usb 7-1: Manufacturer: syz [ 2226.300235][T22601] usb 7-1: SerialNumber: syz [ 2226.314979][T16372] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.326457][T22601] usb 7-1: config 0 descriptor?? [ 2226.340893][T22601] gspca_main: se401-2.14.0 probing 047d:5003 [ 2226.799723][T16372] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.852246][T14252] Bluetooth: hci1: command tx timeout [ 2227.125132][T29116] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2227.364814][T29117] Process accounting resumed [ 2227.598392][T16372] bridge_slave_1: left allmulticast mode [ 2227.604542][T16372] bridge_slave_1: left promiscuous mode [ 2227.627925][T16372] bridge0: port 2(bridge_slave_1) entered disabled state [ 2227.674014][T16372] bridge_slave_0: left allmulticast mode [ 2227.690126][T16372] bridge_slave_0: left promiscuous mode [ 2227.698812][T16372] bridge0: port 1(bridge_slave_0) entered disabled state [ 2228.649773][T22601] gspca_se401: read req failed req 0x06 error -19 [ 2228.658386][T22601] usb 7-1: USB disconnect, device number 115 [ 2228.683672][T29128] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2228.799314][T22601] usb 7-1: new low-speed USB device number 116 using dummy_hcd [ 2228.927749][T14252] Bluetooth: hci1: command tx timeout [ 2228.959263][T22601] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 2228.977603][T22601] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 2228.992207][T22601] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2229.012784][T22601] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2229.035735][T22601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 2229.058424][T22601] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2229.079632][T22601] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2229.109898][T22601] usb 7-1: string descriptor 0 read error: -22 [ 2229.116583][T22601] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2229.117685][T25257] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2229.137516][T22601] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2229.149123][T22601] usb 7-1: config 0 descriptor?? [ 2229.156084][T22601] hub 7-1:0.0: bad descriptor, ignoring hub [ 2229.164800][T22601] hub 7-1:0.0: probe with driver hub failed with error -5 [ 2229.191152][T22601] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input150 [ 2229.314233][T25257] usb 3-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=bf.93 [ 2229.327636][T25257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2229.335685][T25257] usb 3-1: Product: syz [ 2229.357536][T25257] usb 3-1: Manufacturer: syz [ 2229.362198][T25257] usb 3-1: SerialNumber: syz [ 2229.370331][T25257] usb 3-1: config 0 descriptor?? [ 2229.895719][ T5878] usb 7-1: USB disconnect, device number 116 [ 2230.405208][T29156] FAULT_INJECTION: forcing a failure. [ 2230.405208][T29156] name failslab, interval 1, probability 0, space 0, times 0 [ 2230.418564][T29156] CPU: 0 UID: 0 PID: 29156 Comm: syz.4.6082 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 2230.429408][T29156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2230.439527][T29156] Call Trace: [ 2230.442851][T29156] [ 2230.445831][T29156] dump_stack_lvl+0x241/0x360 [ 2230.450575][T29156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2230.455836][T29156] ? __pfx__printk+0x10/0x10 [ 2230.460561][T29156] ? __kmalloc_noprof+0xb0/0x400 [ 2230.465564][T29156] ? __pfx___might_resched+0x10/0x10 [ 2230.470906][T29156] should_fail_ex+0x3b0/0x4e0 [ 2230.475639][T29156] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 2230.481955][T29156] should_failslab+0xac/0x100 [ 2230.486690][T29156] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 2230.492991][T29156] __kmalloc_noprof+0xd8/0x400 [ 2230.497817][T29156] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 2230.503944][T29156] genl_rcv_msg+0x802/0xec0 [ 2230.508509][T29156] ? mark_lock+0x9a/0x360 [ 2230.512912][T29156] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2230.518026][T29156] ? __pfx_lock_acquire+0x10/0x10 [ 2230.523125][T29156] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2230.528547][T29156] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 2230.534330][T29156] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2230.539842][T29156] ? __pfx___might_resched+0x10/0x10 [ 2230.545199][T29156] netlink_rcv_skb+0x1e3/0x430 [ 2230.550027][T29156] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2230.555135][T29156] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2230.560499][T29156] ? __netlink_deliver_tap+0x77e/0x7c0 [ 2230.566027][T29156] genl_rcv+0x28/0x40 [ 2230.570097][T29156] netlink_unicast+0x7f6/0x990 [ 2230.574914][T29156] ? __pfx_netlink_unicast+0x10/0x10 [ 2230.580244][T29156] ? __virt_addr_valid+0x183/0x530 [ 2230.585401][T29156] ? __check_object_size+0x48e/0x900 [ 2230.590734][T29156] netlink_sendmsg+0x8e4/0xcb0 [ 2230.595564][T29156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2230.600899][T29156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2230.606234][T29156] __sock_sendmsg+0x221/0x270 [ 2230.610954][T29156] ____sys_sendmsg+0x52a/0x7e0 [ 2230.615791][T29156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2230.621145][T29156] __sys_sendmsg+0x292/0x380 [ 2230.625775][T29156] ? __pfx___sys_sendmsg+0x10/0x10 [ 2230.630946][T29156] ? __pfx_vfs_write+0x10/0x10 [ 2230.635807][T29156] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2230.642197][T29156] ? do_syscall_64+0x100/0x230 [ 2230.647010][T29156] ? do_syscall_64+0xb6/0x230 [ 2230.651744][T29156] do_syscall_64+0xf3/0x230 [ 2230.656291][T29156] ? clear_bhb_loop+0x35/0x90 [ 2230.661006][T29156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2230.666950][T29156] RIP: 0033:0x7fc26177e719 [ 2230.671406][T29156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2230.691076][T29156] RSP: 002b:00007fc262594038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2230.699557][T29156] RAX: ffffffffffffffda RBX: 00007fc261935f80 RCX: 00007fc26177e719 [ 2230.707580][T29156] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000005 [ 2230.715604][T29156] RBP: 00007fc262594090 R08: 0000000000000000 R09: 0000000000000000 [ 2230.723623][T29156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2230.731735][T29156] R13: 0000000000000000 R14: 00007fc261935f80 R15: 00007ffd071c7978 [ 2230.739779][T29156] [ 2231.137543][T14252] Bluetooth: hci1: command tx timeout [ 2231.865074][T16372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2231.878752][T16372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2231.899654][T16372] bond0 (unregistering): Released all slaves [ 2232.083315][T29087] chnl_net:caif_netlink_parms(): no params data found [ 2232.458673][T25257] usb 3-1: USB disconnect, device number 60 [ 2233.407567][T14252] Bluetooth: hci1: command tx timeout [ 2233.779824][T29087] bridge0: port 1(bridge_slave_0) entered blocking state [ 2234.516866][T29191] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2234.543092][T29087] bridge0: port 1(bridge_slave_0) entered disabled state [ 2234.607540][T29087] bridge_slave_0: entered allmulticast mode [ 2234.672270][T29087] bridge_slave_0: entered promiscuous mode [ 2234.717765][T29191] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2234.741268][T29087] bridge0: port 2(bridge_slave_1) entered blocking state [ 2234.748749][T29087] bridge0: port 2(bridge_slave_1) entered disabled state [ 2234.768303][T29087] bridge_slave_1: entered allmulticast mode [ 2234.809101][T29087] bridge_slave_1: entered promiscuous mode [ 2235.029266][T16372] hsr_slave_0: left promiscuous mode [ 2235.072351][T16372] hsr_slave_1: left promiscuous mode [ 2235.138032][T16372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2235.145634][T16372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2235.211430][T16372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2235.230939][T16372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2235.241834][T29215] openvswitch: netlink: Actions may not be safe on all matching packets [ 2235.369894][T16372] veth1_macvtap: left promiscuous mode [ 2235.400259][T16372] veth0_macvtap: left promiscuous mode [ 2235.421544][T16372] veth1_vlan: left promiscuous mode [ 2235.440189][T16372] veth0_vlan: left promiscuous mode [ 2236.462114][T29221] overlayfs: failed to resolve './file1': -2 [ 2236.793059][T29223] netlink: 5312 bytes leftover after parsing attributes in process `syz.8.6100'. [ 2236.817784][T29223] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2238.286500][T16372] team0 (unregistering): Port device team_slave_1 removed [ 2238.512709][T29237] netlink: 5300 bytes leftover after parsing attributes in process `syz.8.6103'. [ 2238.522107][T29237] openvswitch: netlink: IP tunnel dst address not specified [ 2239.380572][T16372] team0 (unregistering): Port device team_slave_0 removed [ 2240.936570][T29087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2241.003085][T29087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2241.273635][T29087] team0: Port device team_slave_0 added [ 2241.669020][T29251] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2241.688718][T29087] team0: Port device team_slave_1 added [ 2241.843985][T29258] netlink: 5312 bytes leftover after parsing attributes in process `syz.6.6111'. [ 2241.880982][T29087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2241.897485][T29087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2241.931578][T29258] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2241.940668][T29087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2241.976358][T29087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2242.074650][T29087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2242.687139][T29087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2242.954670][T29087] hsr_slave_0: entered promiscuous mode [ 2242.988434][T29277] openvswitch: netlink: Duplicate or invalid key (type 0). [ 2242.996144][T29277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2243.077166][T29087] hsr_slave_1: entered promiscuous mode [ 2243.088652][T29087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2243.117662][T22601] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 2243.485488][T29087] Cannot create hsr debugfs directory [ 2243.707618][T22601] usb 9-1: Using ep0 maxpacket: 32 [ 2243.715860][T22601] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2243.797906][T22601] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2243.807742][T22601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2243.820953][T22601] usb 9-1: Product: syz [ 2243.849998][T16372] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2244.049102][T22601] usb 9-1: Manufacturer: syz [ 2244.054481][T22601] usb 9-1: SerialNumber: syz [ 2244.061101][T22601] usb 9-1: config 0 descriptor?? [ 2244.067941][T22601] usb 9-1: bad CDC descriptors [ 2244.073902][T22601] usb 9-1: unsupported MDLM descriptors [ 2244.109508][T16372] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2244.580628][T29270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.988483][T29270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2245.000123][T29270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2245.011370][T29270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2245.046734][T29024] usb 9-1: USB disconnect, device number 103 [ 2245.217048][T16372] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2245.526895][T16372] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2246.100142][T16372] gretap0: left allmulticast mode [ 2246.119273][T16372] gretap0: left promiscuous mode [ 2246.145941][T16372] bridge0: port 3(gretap0) entered disabled state [ 2246.208408][T16372] bridge_slave_1: left allmulticast mode [ 2246.214173][T16372] bridge_slave_1: left promiscuous mode [ 2246.231778][T16372] bridge0: port 2(bridge_slave_1) entered disabled state [ 2246.242095][T29315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6124'. [ 2246.292239][T16372] bridge_slave_0: left allmulticast mode [ 2246.320072][T16372] bridge_slave_0: left promiscuous mode [ 2246.339530][T16372] bridge0: port 1(bridge_slave_0) entered disabled state [ 2249.616313][T29024] IPVS: starting estimator thread 0... [ 2249.709950][T16372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2249.727763][T29341] IPVS: using max 18 ests per chain, 43200 per kthread [ 2249.739532][T16372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2249.752634][T16372] bond0 (unregistering): Released all slaves [ 2250.061234][T16372] bond1 (unregistering): Released all slaves [ 2250.357772][T29338] syz_tun (unregistering): left promiscuous mode [ 2250.389523][T29087] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2250.468348][T16372] IPVS: stopping master sync thread 25904 ... [ 2250.572796][T29087] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2250.751909][T29355] netlink: 5312 bytes leftover after parsing attributes in process `syz.8.6132'. [ 2250.761527][T29355] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2251.401274][T29087] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2251.467768][T25257] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2251.628640][T25257] usb 3-1: Using ep0 maxpacket: 8 [ 2251.646785][T25257] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2251.672220][T25257] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2251.715421][T25257] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2251.756314][T29087] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2251.774461][T25257] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 2251.805450][T25257] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2251.834909][T25257] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2251.901859][T25257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2252.034245][T16372] hsr_slave_0: left promiscuous mode [ 2252.073047][T16372] hsr_slave_1: left promiscuous mode [ 2252.099928][T16372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2252.124747][T16372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2252.155578][T16372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2252.207818][T16372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2252.224781][T25257] usb 3-1: GET_CAPABILITIES returned 0 [ 2252.234860][T25257] usbtmc 3-1:16.0: can't read capabilities [ 2252.281148][T16372] veth1_macvtap: left promiscuous mode [ 2252.290048][T16372] veth0_macvtap: left promiscuous mode [ 2252.357579][T16372] veth1_vlan: left promiscuous mode [ 2252.373425][T16372] veth0_vlan: left promiscuous mode [ 2252.436411][ T9] usb 3-1: USB disconnect, device number 61 [ 2252.509345][T29369] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2253.313030][T29372] overlayfs: failed to resolve './file1': -2 [ 2255.039688][T16372] team0 (unregistering): Port device team_slave_1 removed [ 2255.123183][T16372] team0 (unregistering): Port device team_slave_0 removed [ 2255.917202][T29379] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 2255.929022][T29379] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 2255.986475][T29087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2256.059285][T29087] 8021q: adding VLAN 0 to HW filter on device team0 [ 2256.083797][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 2256.091000][ T8389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2256.223051][ T8392] bridge0: port 2(bridge_slave_1) entered blocking state [ 2256.230331][ T8392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2256.504335][T29398] netlink: 'syz.4.6146': attribute type 17 has an invalid length. [ 2256.553531][T16372] IPVS: stop unused estimator thread 0... [ 2256.849442][T29087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2257.590901][T29408] Process accounting paused [ 2257.825481][T29416] libceph: resolve '0' (ret=-3): failed [ 2258.731980][T29433] overlayfs: failed to resolve './file0': -2 [ 2260.297435][T29087] veth0_vlan: entered promiscuous mode [ 2260.428804][T29453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6158'. [ 2260.648235][T29087] veth1_vlan: entered promiscuous mode [ 2260.976885][T29087] veth0_macvtap: entered promiscuous mode [ 2261.015865][T29087] veth1_macvtap: entered promiscuous mode [ 2261.118001][T29087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2261.128576][T29087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2261.138525][T29087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2261.148995][T29087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2261.158909][T29087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2261.169772][T29087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2261.179678][T29087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2261.190531][T29087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2261.200444][T29087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2261.212704][T29087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2261.222660][T29087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2261.233186][T29087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2261.243428][T29087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2261.254829][T29087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2261.310972][T29087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2261.383038][T29087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2261.397945][T29087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2261.429226][T29087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2261.440135][T29087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2261.450212][T29087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2261.460801][T29087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2261.470760][T29087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2261.481307][T29087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2261.491382][T29087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2261.502187][T29087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2261.512225][T29087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2261.522782][T29087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2261.537962][T29087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2261.548530][T29087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2261.559885][T29087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2261.570424][T29087] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2261.579269][T29087] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2261.588100][T29087] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2261.596835][T29087] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2261.638736][T29468] Smack: duplicate mount options [ 2261.644981][T29464] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 2261.770143][T29468] netdevsim netdevsim6: Direct firmware load for ./bus failed with error -2 [ 2261.807303][T14794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2261.832540][T14794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2261.890792][T29468] netdevsim netdevsim6: Falling back to sysfs fallback for: ./bus [ 2261.899096][T14794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2261.906957][T14794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2262.177567][T29024] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2262.331649][T29024] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2262.342413][T29024] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2262.361951][T29024] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2262.386241][T29024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.410347][T29024] usb 5-1: config 0 descriptor?? [ 2263.049999][T29024] Bluetooth: Can't get version to change to load ram patch err [ 2263.057811][T29024] Bluetooth: Loading patch file failed [ 2263.063873][T29024] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 2263.073568][T29024] usb 5-1: USB disconnect, device number 108 [ 2263.141913][ T8399] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2263.172908][T29480] libceph: resolve '0' (ret=-3): failed [ 2264.382071][ T8399] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2264.415991][T29494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6168'. [ 2264.458562][T29492] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2264.560109][ T8399] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2264.637818][T29024] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2264.688802][T29499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6169'. [ 2264.780325][T22686] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2264.794519][T22686] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2264.803479][T22686] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2264.810990][T29024] usb 5-1: Using ep0 maxpacket: 32 [ 2264.818074][T22686] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2264.828199][T22686] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2264.858657][T22686] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2264.868282][T29024] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 2264.877251][T29024] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2264.886319][T29024] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2264.896707][T29024] usb 5-1: config 1 has no interface number 0 [ 2264.903876][T29024] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2265.118271][T29024] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2265.131817][T29024] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2265.141042][T29024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.179993][T29024] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 2265.180290][ T8399] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2265.288798][T29505] netlink: 5312 bytes leftover after parsing attributes in process `syz.2.6170'. [ 2265.298237][T29505] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2266.138226][T29024] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 2266.287537][T29511] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2266.557507][ T9] usb 5-1: USB disconnect, device number 109 [ 2266.775551][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 2266.927658][T22686] Bluetooth: hci1: command tx timeout [ 2266.963752][ T8399] bridge_slave_1: left allmulticast mode [ 2267.002273][ T8399] bridge_slave_1: left promiscuous mode [ 2267.020672][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state [ 2267.079339][ T8399] bridge_slave_0: left allmulticast mode [ 2267.085050][ T8399] bridge_slave_0: left promiscuous mode [ 2267.108190][ T8399] bridge0: port 1(bridge_slave_0) entered disabled state [ 2268.532315][T29532] libceph: resolve '0' (ret=-3): failed [ 2269.367208][T22686] Bluetooth: hci1: command tx timeout [ 2269.790742][T29535] libceph: resolve '0' (ret=-3): failed [ 2270.600309][ T8399] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2270.614843][ T8399] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2270.635761][ T8399] bond0 (unregistering): Released all slaves [ 2270.820655][T29500] chnl_net:caif_netlink_parms(): no params data found [ 2270.932290][T29540] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6179'. [ 2271.539893][T22686] Bluetooth: hci1: command tx timeout [ 2271.686052][T29543] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2271.745811][T29541] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2272.204180][T29500] bridge0: port 1(bridge_slave_0) entered blocking state [ 2272.212508][T29500] bridge0: port 1(bridge_slave_0) entered disabled state [ 2272.220219][T29500] bridge_slave_0: entered allmulticast mode [ 2272.227327][T29500] bridge_slave_0: entered promiscuous mode [ 2272.236558][T29500] bridge0: port 2(bridge_slave_1) entered blocking state [ 2272.244069][T29500] bridge0: port 2(bridge_slave_1) entered disabled state [ 2272.251404][T29500] bridge_slave_1: entered allmulticast mode [ 2272.258658][T29500] bridge_slave_1: entered promiscuous mode [ 2273.071937][T29500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2273.204867][T29500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2273.309601][ T8399] hsr_slave_0: left promiscuous mode [ 2273.315890][ T8399] hsr_slave_1: left promiscuous mode [ 2273.341360][ T8399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2273.358245][ T8399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2273.384781][ T8399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2273.408227][ T8399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2273.503469][ T5878] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 2273.511592][T29571] syz.4.6188(29571): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 2273.552401][ T8399] veth1_macvtap: left promiscuous mode [ 2273.567593][T14252] Bluetooth: hci1: command tx timeout [ 2273.576627][ T8399] veth0_macvtap: left promiscuous mode [ 2273.583533][ T8399] veth1_vlan: left promiscuous mode [ 2273.598452][ T8399] veth0_vlan: left promiscuous mode [ 2273.677752][ T5878] usb 9-1: Using ep0 maxpacket: 32 [ 2273.694753][ T5878] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2274.081494][ T5878] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 2274.110494][ T5878] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2274.121045][ T5878] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2274.129524][ T5878] usb 9-1: Product: syz [ 2274.133870][ T5878] usb 9-1: Manufacturer: syz [ 2274.138785][ T5878] usb 9-1: SerialNumber: syz [ 2274.159417][ T5878] usb 9-1: config 0 descriptor?? [ 2275.228146][T29593] libceph: resolve '0' (ret=-3): failed [ 2275.466228][T29595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6192'. [ 2276.248119][ T5878] usb 9-1: USB disconnect, device number 104 [ 2276.493413][ T8399] team0 (unregistering): Port device team_slave_1 removed [ 2276.568581][ T8399] team0 (unregistering): Port device team_slave_0 removed [ 2277.342591][T29500] team0: Port device team_slave_0 added [ 2277.351458][T29500] team0: Port device team_slave_1 added [ 2277.376503][T29500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2277.398255][T29500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2277.424363][ C0] vkms_vblank_simulate: vblank timer overrun [ 2277.465648][T29500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2277.481654][T29500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2277.488953][T29500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2277.515843][T29500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2277.540136][T29601] bridge2: entered promiscuous mode [ 2278.868933][T29624] hugetlbfs: Bad value 'g' for mount option 'size' [ 2278.868933][T29624] [ 2279.187551][T29629] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2279.463605][T29500] hsr_slave_0: entered promiscuous mode [ 2279.653047][T29500] hsr_slave_1: entered promiscuous mode [ 2279.751606][T29500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2279.779453][T29500] Cannot create hsr debugfs directory [ 2280.247492][T29640] libceph: resolve '0' (ret=-3): failed [ 2280.387165][T29636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6206'. [ 2281.022397][T29645] 9pnet_fd: Insufficient options for proto=fd [ 2281.432433][T29647] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2283.566028][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2285.080014][T29681] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6217'. [ 2285.322892][T29687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6220'. [ 2285.789124][T29500] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2285.827147][T29685] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6219'. [ 2285.836319][T29685] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6219'. [ 2285.873004][T29500] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2285.909309][T29500] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2285.948560][T29500] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2286.225781][T29694] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2287.176847][T29500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2287.220804][T29500] 8021q: adding VLAN 0 to HW filter on device team0 [ 2287.252499][T17136] bridge0: port 1(bridge_slave_0) entered blocking state [ 2287.259778][T17136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2287.269899][T17136] bridge0: port 2(bridge_slave_1) entered blocking state [ 2287.277059][T17136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2288.218214][T29500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2289.383313][T29724] Process accounting resumed [ 2289.533383][T29734] mkiss: ax0: crc mode is auto. [ 2290.723643][T29751] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6235'. [ 2290.736013][T29746] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6233'. [ 2290.742662][T29751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6235'. [ 2290.754721][T29751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6235'. [ 2290.764736][T29751] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6235'. [ 2290.798504][T29500] veth0_vlan: entered promiscuous mode [ 2290.820677][T29500] veth1_vlan: entered promiscuous mode [ 2290.884171][T29500] veth0_macvtap: entered promiscuous mode [ 2290.896912][T29500] veth1_macvtap: entered promiscuous mode [ 2290.915157][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2290.926235][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2290.937151][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2290.948336][T22601] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 2290.957939][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2290.968854][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2290.979698][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.030952][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2291.072624][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.101951][T22601] usb 7-1: Using ep0 maxpacket: 8 [ 2291.109097][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2291.137044][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.139931][T22601] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2291.147349][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2291.166950][T22601] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=d3.dd [ 2291.168768][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.188037][T22601] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2291.196086][T22601] usb 7-1: Product: syz [ 2291.197897][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2291.252551][T25257] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2291.348442][T29761] o2cb: This node has not been configured. [ 2291.354917][T29761] o2cb: Cluster check failed. Fix errors before retrying. [ 2291.362444][T29761] (syz.2.6238,29761,1):user_dlm_register:674 ERROR: status = -22 [ 2291.370401][T29761] (syz.2.6238,29761,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 2291.654580][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2291.880040][T22601] usb 7-1: Manufacturer: syz [ 2291.884709][T22601] usb 7-1: SerialNumber: syz [ 2291.891546][T22601] usb 7-1: config 0 descriptor?? [ 2291.899695][T22601] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 2291.917462][T22601] dvb-usb: bulk message failed: -22 (2/0) [ 2291.928546][T22601] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2291.949451][T29500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2291.966546][T22601] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 2291.971572][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2292.008746][T29024] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2292.048785][T22601] usb 7-1: media controller created [ 2292.049641][T25257] usb 5-1: Using ep0 maxpacket: 16 [ 2292.060523][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2292.062439][T25257] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2292.083876][T25257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2292.098417][T25257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2292.119181][T25257] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2292.131379][T25257] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2292.144659][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2292.144684][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2292.202993][T29024] usb 3-1: Using ep0 maxpacket: 8 [ 2292.255892][T29024] usb 3-1: config 0 has an invalid interface number: 154 but max is 2 [ 2292.258735][T22601] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2292.354725][T29024] usb 3-1: config 0 has an invalid interface number: 98 but max is 2 [ 2292.355891][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2292.411605][T25257] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2292.411734][T29024] usb 3-1: config 0 has an invalid interface number: 126 but max is 2 [ 2292.416254][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2292.518557][T22601] cxusb: set interface failed [ 2292.571270][T22601] dvb-usb: bulk message failed: -22 (1/0) [ 2292.651761][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2292.705186][T25257] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2292.757210][T29024] usb 3-1: config 0 has no interface number 0 [ 2292.770963][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2292.778260][T22601] DVB: Unable to find symbol mt352_attach() [ 2292.786887][T25257] usb 5-1: Manufacturer: syz [ 2292.791034][T22601] dvb-usb: bulk message failed: -22 (5/0) [ 2292.797269][T22601] zl10353_read_register: readreg error (reg=127, ret==-121) [ 2292.797426][T29024] usb 3-1: config 0 has no interface number 1 [ 2292.817468][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2292.818403][T25257] usb 5-1: config 0 descriptor?? [ 2292.847823][T22601] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 2292.853966][T29024] usb 3-1: config 0 has no interface number 2 [ 2292.857228][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2292.875951][T29024] usb 3-1: config 0 interface 154 altsetting 14 has an invalid endpoint descriptor of length 5, skipping [ 2292.897880][T29024] usb 3-1: config 0 interface 154 altsetting 14 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2292.902326][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2292.915342][T29024] usb 3-1: config 0 interface 154 altsetting 14 has a duplicate endpoint with address 0x3, skipping [ 2292.955895][T29024] usb 3-1: config 0 interface 154 altsetting 14 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 2292.967494][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2292.968706][T29024] usb 3-1: config 0 interface 154 altsetting 14 endpoint 0x2 has invalid maxpacket 11289, setting to 64 [ 2292.987503][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2293.007886][T22601] rc_core: IR keymap rc-dvico-mce not found [ 2293.016165][T22601] Registered IR keymap rc-empty [ 2293.022779][T22601] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 2293.033869][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2293.067799][T22601] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input152 [ 2293.081341][T29500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2293.108307][T22601] dvb-usb: schedule remote query interval to 100 msecs. [ 2293.117010][T22601] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 2293.219812][T29024] usb 3-1: config 0 interface 154 altsetting 14 bulk endpoint 0x9 has invalid maxpacket 16 [ 2293.230384][T29024] usb 3-1: config 0 interface 154 altsetting 14 has a duplicate endpoint with address 0xC, skipping [ 2293.241284][T29024] usb 3-1: config 0 interface 154 altsetting 14 has a duplicate endpoint with address 0x9, skipping [ 2293.257553][T29024] usb 3-1: config 0 interface 154 altsetting 14 has a duplicate endpoint with address 0x2, skipping [ 2293.257579][ T5877] dvb-usb: bulk message failed: -22 (1/0) [ 2293.268628][T29024] usb 3-1: config 0 interface 154 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 2293.268661][T29024] usb 3-1: config 0 interface 154 altsetting 14 has a duplicate endpoint with address 0x3, skipping [ 2293.268689][T29024] usb 3-1: config 0 interface 154 altsetting 14 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 2293.268744][T29024] usb 3-1: config 0 interface 98 altsetting 15 has a duplicate endpoint with address 0xD, skipping [ 2293.268771][T29024] usb 3-1: config 0 interface 98 altsetting 15 has a duplicate endpoint with address 0xC, skipping [ 2293.280995][T29500] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2293.285591][T29024] usb 3-1: config 0 interface 98 altsetting 15 endpoint 0xA has an invalid bInterval 185, changing to 11 [ 2293.776339][T29770] netlink: 5300 bytes leftover after parsing attributes in process `syz.6.6241'. [ 2293.785729][T29770] openvswitch: netlink: Message has 8 unknown bytes. [ 2293.795783][T29024] usb 3-1: config 0 interface 98 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 2293.899608][T29024] usb 3-1: config 0 interface 98 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 2294.292708][T29500] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2294.312864][T29500] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2294.324939][T29500] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2294.600896][T29024] usb 3-1: config 0 interface 98 altsetting 15 has a duplicate endpoint with address 0xC, skipping [ 2294.614114][T29024] usb 3-1: config 0 interface 98 altsetting 15 has a duplicate endpoint with address 0x8, skipping [ 2294.627139][T29024] usb 3-1: config 0 interface 98 altsetting 15 has a duplicate endpoint with address 0xE, skipping [ 2294.629501][T11963] dvb-usb: bulk message failed: -22 (1/0) [ 2294.646114][T29024] usb 3-1: config 0 interface 98 altsetting 15 has a duplicate endpoint with address 0xD, skipping [ 2294.659419][T29024] usb 3-1: config 0 interface 98 altsetting 15 has a duplicate endpoint with address 0xA, skipping [ 2294.672643][T29024] usb 3-1: config 0 interface 98 altsetting 15 has a duplicate endpoint with address 0xE, skipping [ 2294.684717][T29024] usb 3-1: config 0 interface 98 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 2294.697938][T29024] usb 3-1: config 0 interface 126 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2294.711087][T29024] usb 3-1: config 0 interface 126 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 2294.724442][T29024] usb 3-1: config 0 interface 126 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2294.737641][T29024] usb 3-1: config 0 interface 126 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 2294.750817][T29024] usb 3-1: config 0 interface 126 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 2294.762954][T29024] usb 3-1: config 0 interface 126 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2294.776201][T29024] usb 3-1: config 0 interface 126 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2294.789551][T29024] usb 3-1: config 0 interface 126 altsetting 4 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 2294.799583][T22601] usb 7-1: USB disconnect, device number 117 [ 2294.814454][T29024] usb 3-1: config 0 interface 126 altsetting 4 endpoint 0xF has an invalid bInterval 151, changing to 7 [ 2294.828045][T29024] usb 3-1: config 0 interface 126 altsetting 4 endpoint 0xF has invalid maxpacket 1536, setting to 1024 [ 2294.841424][T29024] usb 3-1: config 0 interface 126 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 2294.854368][T29024] usb 3-1: config 0 interface 126 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 2294.867434][T29024] usb 3-1: config 0 interface 126 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 2294.878400][T29024] usb 3-1: config 0 interface 126 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 2294.890423][T29024] usb 3-1: config 0 interface 154 has no altsetting 0 [ 2295.859174][T29024] usb 3-1: config 0 interface 98 has no altsetting 0 [ 2295.866011][T29024] usb 3-1: config 0 interface 126 has no altsetting 0 [ 2295.983408][T22601] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 2296.067785][T29024] usb 3-1: string descriptor 0 read error: -71 [ 2296.074095][T29024] usb 3-1: Dual-Role OTG device on HNP port [ 2296.119732][T29024] usb 3-1: can't set HNP mode: -71 [ 2296.419468][T16372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2296.428897][T16372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2296.437522][T25257] rc_core: IR keymap rc-hauppauge not found [ 2296.445881][T25257] Registered IR keymap rc-empty [ 2296.465274][T25257] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2296.595291][T25257] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2296.626495][ T8403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2296.634566][ T8403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2296.651372][T25257] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 2296.672165][T25257] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input153 [ 2296.997795][T25257] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2297.107519][T25257] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2297.153536][T25257] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2297.181762][ T29] audit: type=1326 audit(2297.126:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29789 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8417e719 code=0x7ffc0000 [ 2297.214190][ T29] audit: type=1326 audit(2297.126:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29789 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e8417d0b0 code=0x7ffc0000 [ 2297.238716][T25257] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2297.250286][ T29] audit: type=1326 audit(2297.126:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29789 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e8417e31b code=0x7ffc0000 [ 2297.272422][ T29] audit: type=1326 audit(2297.126:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29789 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e8417e31b code=0x7ffc0000 [ 2297.293687][T25257] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2297.304595][ T29] audit: type=1326 audit(2297.136:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29789 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e8417e31b code=0x7ffc0000 [ 2297.394024][T25257] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2297.518332][T29024] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2297.722295][T29799] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6247'. [ 2297.731760][T29024] usb 3-1: Using ep0 maxpacket: 32 [ 2297.742675][ T29] audit: type=1326 audit(2297.136:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29789 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e8417e31b code=0x7ffc0000 [ 2297.767855][T25257] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2297.775877][T29024] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 2297.797991][T29024] usb 3-1: config 0 has no interface number 0 [ 2297.808802][T29024] usb 3-1: config 0 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2297.820472][T25257] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2297.837538][ T29] audit: type=1326 audit(2297.206:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29789 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e8417e31b code=0x7ffc0000 [ 2297.859131][T25257] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2297.877058][T29024] usb 3-1: config 0 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 2297.890813][T25257] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2297.907840][T29024] usb 3-1: config 0 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 2297.918418][ T29] audit: type=1326 audit(2297.416:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29789 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e8417e31b code=0x7ffc0000 [ 2297.933208][T29024] usb 3-1: config 0 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2297.940444][ T29] audit: type=1326 audit(2297.506:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29789 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e8417e31b code=0x7ffc0000 [ 2297.940493][ T29] audit: type=1326 audit(2297.506:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29789 comm="syz.2.6245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e8417e31b code=0x7ffc0000 [ 2297.995614][T25257] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 2298.004325][T25257] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2298.017277][T29024] usb 3-1: config 0 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 16 [ 2298.027689][T29024] usb 3-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2298.042905][T25257] usb 5-1: USB disconnect, device number 110 [ 2298.057000][T29024] usb 3-1: New USB device found, idVendor=04fc, idProduct=0031, bcdDevice=6f.00 [ 2298.066415][T29024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2298.074715][T29024] usb 3-1: Product: syz [ 2298.079401][T29024] usb 3-1: Manufacturer: syz [ 2298.084184][T29024] usb 3-1: SerialNumber: syz [ 2298.103225][T29024] usb 3-1: config 0 descriptor?? [ 2298.121006][T29794] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2298.147841][T29794] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2298.338761][T29805] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2298.508147][ T8403] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2298.598793][T25257] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 2298.752724][ T8403] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2298.788772][T25257] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=51.d4 [ 2298.807698][T25257] usb 5-1: New USB device strings: Mfr=231, Product=37, SerialNumber=191 [ 2298.822043][T25257] usb 5-1: Product: syz [ 2298.826281][T25257] usb 5-1: Manufacturer: syz [ 2298.831825][ T9] usb 3-1: USB disconnect, device number 63 [ 2298.882794][T25257] usb 5-1: SerialNumber: syz [ 2298.912538][T25257] usb 5-1: config 0 descriptor?? [ 2299.142025][ T8403] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2299.385889][T25257] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 2299.629733][T25257] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 2299.730971][T25257] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 2299.841247][T11963] usb 5-1: USB disconnect, device number 111 [ 2299.892945][T22686] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2299.904815][ T8403] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2299.937958][T22686] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2299.948268][T22686] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2299.964963][T22686] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2299.973032][T22686] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2299.980470][T22686] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2300.269012][T29833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6255'. [ 2301.180605][T29825] chnl_net:caif_netlink_parms(): no params data found [ 2301.306032][ T8403] bridge_slave_1: left allmulticast mode [ 2301.312545][ T8403] bridge_slave_1: left promiscuous mode [ 2301.334386][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state [ 2301.397189][ T8403] bridge_slave_0: left allmulticast mode [ 2301.410337][ T8403] bridge_slave_0: left promiscuous mode [ 2301.416120][ T8403] bridge0: port 1(bridge_slave_0) entered disabled state [ 2301.496049][T29847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6259'. [ 2301.807540][T11963] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2301.969782][T11963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2301.996336][T11963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2302.029662][T11963] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 2302.040408][T11963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2302.048940][T14252] Bluetooth: hci1: command tx timeout [ 2302.060119][T11963] usb 5-1: config 0 descriptor?? [ 2302.491996][T29860] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2302.698719][T11963] logitech-djreceiver 0003:046D:C513.0041: unknown main item tag 0x0 [ 2302.722742][T11963] logitech-djreceiver 0003:046D:C513.0041: hidraw0: USB HID v0.00 Device [HID 046d:c513] on usb-dummy_hcd.4-1/input0 [ 2302.789678][T11963] usb 5-1: USB disconnect, device number 112 [ 2303.242653][T29866] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2303.272518][ T8403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2303.478653][ T8403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2303.497270][ T8403] bond0 (unregistering): Released all slaves [ 2303.701131][T29825] bridge0: port 1(bridge_slave_0) entered blocking state [ 2303.741721][T29825] bridge0: port 1(bridge_slave_0) entered disabled state [ 2303.752814][T29871] libceph: resolve '0' (ret=-3): failed [ 2303.758950][T29825] bridge_slave_0: entered allmulticast mode [ 2303.765441][T29872] loop7: detected capacity change from 0 to 7 [ 2303.783330][T29872] buffer_io_error: 6 callbacks suppressed [ 2303.783355][T29872] Buffer I/O error on dev loop7, logical block 0, async page read [ 2303.793757][T29825] bridge_slave_0: entered promiscuous mode [ 2303.816408][T29872] Buffer I/O error on dev loop7, logical block 0, async page read [ 2303.839630][T29872] Buffer I/O error on dev loop7, logical block 0, async page read [ 2303.935517][T29876] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2304.137600][T14252] Bluetooth: hci1: command tx timeout [ 2304.195577][T29872] Buffer I/O error on dev loop7, logical block 0, async page read [ 2304.379346][T29872] Buffer I/O error on dev loop7, logical block 0, async page read [ 2304.488137][T29872] Buffer I/O error on dev loop7, logical block 0, async page read [ 2304.496406][T29825] bridge0: port 2(bridge_slave_1) entered blocking state [ 2304.517128][T29825] bridge0: port 2(bridge_slave_1) entered disabled state [ 2304.535411][T29872] Buffer I/O error on dev loop7, logical block 0, async page read [ 2304.546139][T29825] bridge_slave_1: entered allmulticast mode [ 2304.568485][T29872] ldm_validate_partition_table(): Disk read failed. [ 2304.569276][T29825] bridge_slave_1: entered promiscuous mode [ 2304.586368][T29872] Buffer I/O error on dev loop7, logical block 0, async page read [ 2304.607041][T29872] Buffer I/O error on dev loop7, logical block 0, async page read [ 2304.622381][T29872] Buffer I/O error on dev loop7, logical block 0, async page read [ 2304.631039][T29872] Dev loop7: unable to read RDB block 0 [ 2304.637126][T29872] loop7: unable to read partition table [ 2304.644048][T29872] loop7: partition table beyond EOD, truncated [ 2304.655184][T29872] loop_reread_partitions: partition scan of loop7 (uڌLK&O^EeDZхY1ݳ˷?ͼLV\_\CXL) failed (rc=-5) [ 2304.752188][T29825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2304.765477][T29825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2304.774813][T11963] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 2304.777699][T25257] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 2304.864869][ T8403] hsr_slave_0: left promiscuous mode [ 2304.888727][ T8403] hsr_slave_1: left promiscuous mode [ 2304.914673][ T8403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2304.922792][ T8403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2304.930025][T11963] usb 9-1: Using ep0 maxpacket: 8 [ 2304.937013][T11963] usb 9-1: config 0 has an invalid interface number: 211 but max is 0 [ 2304.946025][ T8403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2304.964159][ T8403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2304.971635][T11963] usb 9-1: config 0 has no interface number 0 [ 2304.978156][T11963] usb 9-1: config 0 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2304.989339][T11963] usb 9-1: config 0 interface 211 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 2305.005238][T11963] usb 9-1: config 0 interface 211 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 2305.015875][T25257] usb 3-1: config 0 has no interfaces? [ 2305.022955][T25257] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2305.035727][ T8403] veth1_macvtap: left promiscuous mode [ 2305.040916][T25257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2305.041454][T11963] usb 9-1: config 0 interface 211 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 2305.064160][T25257] usb 3-1: config 0 descriptor?? [ 2305.068376][ T8403] veth0_macvtap: left promiscuous mode [ 2305.075414][ T8403] veth1_vlan: left promiscuous mode [ 2305.085262][ T8403] veth0_vlan: left promiscuous mode [ 2305.095754][T11963] usb 9-1: config 0 interface 211 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2305.131297][T11963] usb 9-1: New USB device found, idVendor=07c0, idProduct=1506, bcdDevice=15.ab [ 2305.147925][T11963] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2305.167779][T11963] usb 9-1: Product: syz [ 2305.172130][T11963] usb 9-1: Manufacturer: syz [ 2305.176764][T11963] usb 9-1: SerialNumber: syz [ 2305.201472][T11963] usb 9-1: config 0 descriptor?? [ 2305.212648][T11963] iowarrior 9-1:0.211: no interrupt-out endpoint found [ 2305.330396][T29872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2305.348817][T29872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2305.362909][T29898] openvswitch: netlink: Actions may not be safe on all matching packets [ 2305.434407][ T5878] usb 9-1: USB disconnect, device number 105 [ 2305.448978][T29875] loop8: detected capacity change from 0 to 7 [ 2305.477715][T29875] Dev loop8: unable to read RDB block 7 [ 2305.487506][T29875] loop8: unable to read partition table [ 2305.493473][T29875] loop8: partition table beyond EOD, truncated [ 2305.506250][T29875] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 2305.506250][T29875] ) failed (rc=-5) [ 2305.659435][T25257] usb 3-1: string descriptor 0 read error: -71 [ 2305.679804][T25257] usb 3-1: USB disconnect, device number 64 [ 2306.102572][T29902] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2306.219468][T14252] Bluetooth: hci1: command tx timeout [ 2306.542930][T29906] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2307.468960][T29920] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6278'. [ 2308.149923][ T8403] team0 (unregistering): Port device team_slave_1 removed [ 2308.289204][T14252] Bluetooth: hci1: command tx timeout [ 2308.323113][ T8403] team0 (unregistering): Port device team_slave_0 removed [ 2309.704305][T29825] team0: Port device team_slave_0 added [ 2309.714708][T29825] team0: Port device team_slave_1 added [ 2309.734448][T29911] @: renamed from vlan0 (while UP) [ 2309.845099][T29825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2309.872115][T29825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2309.938667][T29825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2309.964910][T29825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2309.994736][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 2309.994758][ T29] audit: type=1326 audit(2309.946:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.4.6284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2310.032446][T29825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2310.035429][ T29] audit: type=1326 audit(2309.946:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.4.6284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2310.109024][T29825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2310.127449][ T29] audit: type=1326 audit(2309.956:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.4.6284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2310.226448][ T29] audit: type=1326 audit(2309.956:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.4.6284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2310.280685][ T29] audit: type=1326 audit(2309.956:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.4.6284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2310.307504][ T29] audit: type=1326 audit(2309.956:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.4.6284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2310.344928][ T29] audit: type=1326 audit(2309.956:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.4.6284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2310.391008][ T29] audit: type=1326 audit(2309.956:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.4.6284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2310.413000][ T29] audit: type=1326 audit(2309.956:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.4.6284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2310.480422][ T29] audit: type=1326 audit(2309.956:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29933 comm="syz.4.6284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26177e719 code=0x7ffc0000 [ 2310.822970][T29825] hsr_slave_0: entered promiscuous mode [ 2310.868817][T29825] hsr_slave_1: entered promiscuous mode [ 2310.896096][T29825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2310.927707][T29825] Cannot create hsr debugfs directory [ 2311.107697][ T5878] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 2311.649756][ T5878] usb 7-1: Using ep0 maxpacket: 16 [ 2311.659474][ T5878] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 2311.698106][ T5878] usb 7-1: config 0 has no interface number 0 [ 2311.730448][ T5878] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 2311.744082][ T5878] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 2311.761411][T29956] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 2311.777289][ T5878] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 2311.790907][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 2311.799128][ T5878] usb 7-1: Manufacturer: syz [ 2311.803866][ T5878] usb 7-1: SerialNumber: syz [ 2311.821931][ T5878] usb 7-1: config 0 descriptor?? [ 2311.831472][T29943] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2312.073913][T29943] IPv6: Can't replace route, no match found [ 2312.083212][T29967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6292'. [ 2312.688938][T29825] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2312.714785][T29825] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2312.741506][T29825] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2312.760581][T29825] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2312.938733][T29825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2312.947623][T29024] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2312.977708][T29982] FAULT_INJECTION: forcing a failure. [ 2312.977708][T29982] name failslab, interval 1, probability 0, space 0, times 0 [ 2312.991908][T29982] CPU: 1 UID: 0 PID: 29982 Comm: syz.8.6299 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 2313.002734][T29982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2313.012830][T29982] Call Trace: [ 2313.016150][T29982] [ 2313.019205][T29982] dump_stack_lvl+0x241/0x360 [ 2313.023941][T29982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2313.029196][T29982] ? __pfx__printk+0x10/0x10 [ 2313.033833][T29982] ? fs_reclaim_acquire+0x93/0x130 [ 2313.038994][T29982] ? __pfx___might_resched+0x10/0x10 [ 2313.044332][T29982] should_fail_ex+0x3b0/0x4e0 [ 2313.049089][T29982] should_failslab+0xac/0x100 [ 2313.053805][T29982] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 2313.060180][T29982] ? smk_import_entry+0x18d/0x610 [ 2313.065241][T29982] ? __pfx_sscanf+0x10/0x10 [ 2313.069785][T29982] kstrndup+0x41/0xb0 [ 2313.073809][T29982] smk_import_entry+0x18d/0x610 [ 2313.078727][T29982] smk_write_net4addr+0x37f/0x1000 [ 2313.083902][T29982] ? __pfx_smk_write_net4addr+0x10/0x10 [ 2313.089490][T29982] ? rcu_read_lock_any_held+0xb7/0x160 [ 2313.094996][T29982] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2313.101027][T29982] ? __pfx_smk_write_net4addr+0x10/0x10 [ 2313.106624][T29982] vfs_write+0x2a3/0xd30 [ 2313.110930][T29982] ? fdget_pos+0x24e/0x320 [ 2313.115392][T29982] ? __pfx_vfs_write+0x10/0x10 [ 2313.120202][T29982] ? __fget_files+0x3f3/0x470 [ 2313.124935][T29982] ? fdget_pos+0x24e/0x320 [ 2313.129409][T29982] ksys_write+0x183/0x2b0 [ 2313.133781][T29982] ? __pfx_ksys_write+0x10/0x10 [ 2313.138675][T29982] ? do_syscall_64+0x100/0x230 [ 2313.143489][T29982] ? do_syscall_64+0xb6/0x230 [ 2313.148216][T29982] do_syscall_64+0xf3/0x230 [ 2313.152949][T29982] ? clear_bhb_loop+0x35/0x90 [ 2313.157671][T29982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2313.163602][T29982] RIP: 0033:0x7f51c777e719 [ 2313.168051][T29982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2313.187710][T29982] RSP: 002b:00007f51c85d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2313.196170][T29982] RAX: ffffffffffffffda RBX: 00007f51c7935f80 RCX: 00007f51c777e719 [ 2313.204178][T29982] RDX: 000000000000005c RSI: 0000000020000080 RDI: 0000000000000003 [ 2313.212207][T29982] RBP: 00007f51c85d4090 R08: 0000000000000000 R09: 0000000000000000 [ 2313.220243][T29982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2313.228230][T29982] R13: 0000000000000000 R14: 00007f51c7935f80 R15: 00007ffdb96e2038 [ 2313.236225][T29982] [ 2313.274156][T29825] 8021q: adding VLAN 0 to HW filter on device team0 [ 2313.362215][ T8403] bridge0: port 1(bridge_slave_0) entered blocking state [ 2313.369440][ T8403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2313.388482][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state [ 2313.395641][ T8403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2313.408273][T29024] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2313.419795][T29024] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2313.430154][T29024] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2313.439782][T29024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2313.452773][T29975] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2313.491731][T29024] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2313.636086][ T5878] usbtouchscreen 7-1:0.214: Failed to read FW rev: -71 [ 2313.648266][ T5878] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 2313.675077][ T5878] usb 7-1: USB disconnect, device number 118 [ 2313.709599][ T5837] usb 5-1: USB disconnect, device number 113 [ 2313.879250][T29825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2314.258043][ T5837] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2314.756441][ T5837] usb 3-1: device descriptor read/64, error -71 [ 2314.854644][T30014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6304'. [ 2314.912270][T29825] veth0_vlan: entered promiscuous mode [ 2314.952180][T29825] veth1_vlan: entered promiscuous mode [ 2314.995675][T29825] veth0_macvtap: entered promiscuous mode [ 2315.006410][T29825] veth1_macvtap: entered promiscuous mode [ 2315.024456][T29825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2315.035507][T29825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.045721][T29825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2315.056602][T29825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.066934][T29825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2315.077750][T29825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.088310][T29825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2315.098993][T29825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.108985][T29825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2315.119510][T29825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.129425][T29825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2315.140009][T29825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.150035][T29825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2315.160617][T29825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.172462][T29825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2315.182930][T29825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2315.193572][T29825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.203588][T29825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2315.214154][T29825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.224082][T29825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2315.234692][T29825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.244626][T29825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2315.255268][T29825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.265963][T29825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2315.281413][T29825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.291520][T29825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2315.302122][T29825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.312085][T29825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2315.322642][T29825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2315.333988][T29825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2315.599266][T29825] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2315.643315][T29825] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2315.994535][T29825] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2316.093492][T29825] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2316.105491][ T5837] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2316.237482][ T5837] usb 3-1: device descriptor read/64, error -71 [ 2316.313801][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2316.437558][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2316.506317][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2316.531239][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2316.654798][T30042] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 2317.282948][ T5837] usb usb3-port1: attempt power cycle [ 2317.307916][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 2317.307939][ T29] audit: type=1326 audit(2316.686:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30026 comm="syz.8.6308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c777e719 code=0x7ffc0000 [ 2317.476460][ T29] audit: type=1326 audit(2316.686:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30026 comm="syz.8.6308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51c777e719 code=0x7ffc0000 [ 2317.692370][ T29] audit: type=1326 audit(2317.656:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30049 comm="syz.2.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8417e719 code=0x7ffc0000 [ 2317.716910][ T29] audit: type=1326 audit(2317.666:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30049 comm="syz.2.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e8417e719 code=0x7ffc0000 [ 2317.739235][T30026] delete_channel: no stack [ 2317.744656][ T29] audit: type=1326 audit(2317.666:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30049 comm="syz.2.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8417e719 code=0x7ffc0000 [ 2317.766270][ T29] audit: type=1326 audit(2317.666:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30049 comm="syz.2.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e8417e719 code=0x7ffc0000 [ 2317.787602][ T29] audit: type=1326 audit(2317.666:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30049 comm="syz.2.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8417e719 code=0x7ffc0000 [ 2317.791929][T30050] overlay: Unknown parameter 'y^\@\+\' [ 2317.808948][ T29] audit: type=1326 audit(2317.666:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30049 comm="syz.2.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e8417e719 code=0x7ffc0000 [ 2317.835708][ T29] audit: type=1326 audit(2317.666:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30049 comm="syz.2.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8417e719 code=0x7ffc0000 [ 2317.857122][ T29] audit: type=1326 audit(2317.756:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30049 comm="syz.2.6313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8417e719 code=0x7ffc0000 [ 2317.861630][T30053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6313'. [ 2318.727212][T30062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6318'. [ 2318.830860][T30069] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6321'. [ 2319.057528][ T5876] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 2319.078261][T29024] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 2319.154317][T25273] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2319.219300][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2319.229257][ T5876] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2319.247738][T29024] usb 5-1: Using ep0 maxpacket: 16 [ 2319.248882][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2319.264438][T29024] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 2319.272978][T29024] usb 5-1: config 0 has an invalid interface number: 205 but max is 0 [ 2319.282183][T29024] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 2319.291611][T29024] usb 5-1: config 0 has no interface number 0 [ 2319.297851][T29024] usb 5-1: config 0 has no interface number 1 [ 2319.304000][T29024] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 2319.315214][T29024] usb 5-1: config 0 interface 107 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2319.331093][T29024] usb 5-1: config 0 interface 107 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 2319.340828][ T5876] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2319.341108][T29024] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0xB has an invalid bInterval 223, changing to 7 [ 2319.362520][T29024] usb 5-1: config 0 interface 107 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 2319.373483][T29024] usb 5-1: config 0 interface 107 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2319.384582][T29024] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 2319.384671][ T5876] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2319.405750][T29024] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x6 has invalid maxpacket 1439, setting to 1024 [ 2319.417638][T29024] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 2319.429152][T29024] usb 5-1: config 0 interface 107 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 2319.440308][T29024] usb 5-1: config 0 interface 107 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 2319.453068][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2319.480073][T29024] usb 5-1: too many endpoints for config 0 interface 205 altsetting 0: 82, using maximum allowed: 30 [ 2319.490241][ T5876] usb 7-1: config 0 descriptor?? [ 2319.503780][T29024] usb 5-1: config 0 interface 205 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 2319.515642][T29024] usb 5-1: config 0 interface 205 altsetting 0 endpoint 0x8 has an invalid bInterval 255, changing to 11 [ 2319.518183][T25273] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2319.527298][T29024] usb 5-1: config 0 interface 205 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 82 [ 2319.553830][T29024] usb 5-1: New USB device found, idVendor=0421, idProduct=010e, bcdDevice=dc.00 [ 2319.563387][T29024] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2319.571943][T29024] usb 5-1: Product: syz [ 2319.576517][T29024] usb 5-1: Manufacturer: syz [ 2319.581259][T29024] usb 5-1: SerialNumber: syz [ 2319.592732][T29024] usb 5-1: config 0 descriptor?? [ 2319.599540][T30071] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2319.608008][T30071] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2319.615820][T30071] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2319.661498][T25273] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2319.715093][ T5876] hdpvr 7-1:0.0: firmware version 0x1d dated [ 2319.724292][ T5876] hdpvr 7-1:0.0: untested firmware, the driver might not work. [ 2320.214861][T29024] rndis_host 5-1:0.107: skipping garbage [ 2320.220687][T29024] usb 5-1: bad CDC descriptors [ 2320.225932][T29024] cdc_acm 5-1:0.107: skipping garbage [ 2320.252444][T29024] usb 5-1: USB disconnect, device number 114 [ 2320.325597][T25273] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2320.363852][T30090] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.6325'. [ 2320.373600][T30090] openvswitch: netlink: IP tunnel dst address not specified [ 2320.426979][T30089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2320.444855][T30089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2320.464026][T30089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2320.478981][T30089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2320.498170][T30089] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2320.507177][T30089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2321.094604][ T5876] hdpvr 7-1:0.0: Could not setup controls [ 2321.117920][ T5876] hdpvr 7-1:0.0: registering videodev failed [ 2321.150030][ T5876] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -71 [ 2321.161828][ T5876] usb 7-1: USB disconnect, device number 119 [ 2321.217722][T25273] bridge_slave_1: left allmulticast mode [ 2321.223432][T25273] bridge_slave_1: left promiscuous mode [ 2321.229652][T25273] bridge0: port 2(bridge_slave_1) entered disabled state [ 2321.240285][T25273] bridge_slave_0: left allmulticast mode [ 2321.245983][T25273] bridge_slave_0: left promiscuous mode [ 2321.254879][T25273] bridge0: port 1(bridge_slave_0) entered disabled state [ 2321.328704][T14252] Bluetooth: hci4: command 0x0406 tx timeout [ 2321.380990][T30071] Process accounting paused [ 2322.133954][T30106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6332'. [ 2322.848872][T30112] input: syz0 as /devices/virtual/input/input155 [ 2322.929710][T22686] Bluetooth: hci1: command tx timeout [ 2323.135025][T30124] openvswitch: netlink: Actions may not be safe on all matching packets [ 2323.903543][T25273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2323.915838][T25273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2323.926988][T25273] bond0 (unregistering): Released all slaves [ 2324.114501][T30130] Cannot find add_set index 0 as target [ 2324.192870][T30084] chnl_net:caif_netlink_parms(): no params data found [ 2324.464611][T30144] bridge0: port 2(bridge_slave_1) entered disabled state [ 2324.475292][T30144] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2324.491945][ T5877] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2324.499663][ T9] usb 9-1: new full-speed USB device number 106 using dummy_hcd [ 2324.501984][T30084] bridge0: port 1(bridge_slave_0) entered blocking state [ 2324.519855][T30084] bridge0: port 1(bridge_slave_0) entered disabled state [ 2324.527165][T30084] bridge_slave_0: entered allmulticast mode [ 2324.548656][T30084] bridge_slave_0: entered promiscuous mode [ 2324.558416][T30084] bridge0: port 2(bridge_slave_1) entered blocking state [ 2324.565531][T30084] bridge0: port 2(bridge_slave_1) entered disabled state [ 2324.573697][T30084] bridge_slave_1: entered allmulticast mode [ 2324.581745][T30084] bridge_slave_1: entered promiscuous mode [ 2324.637078][T30144] netlink: 'syz.6.6342': attribute type 1 has an invalid length. [ 2324.637624][ T9] usb 9-1: device descriptor read/64, error -71 [ 2324.651405][ T5877] usb 3-1: device descriptor read/64, error -71 [ 2324.652953][T30144] netlink: 200 bytes leftover after parsing attributes in process `syz.6.6342'. [ 2324.683911][T30146] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 2324.694510][T30084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2324.708222][T30084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2324.803553][T30084] team0: Port device team_slave_0 added [ 2324.824191][T30084] team0: Port device team_slave_1 added [ 2324.852910][T30084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2324.859998][T30084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2324.886373][T30084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2324.898332][ T5877] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2324.907815][ T9] usb 9-1: new full-speed USB device number 107 using dummy_hcd [ 2324.918550][T30084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2324.925829][T30084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2324.929519][T30149] netlink: 'syz.6.6343': attribute type 13 has an invalid length. [ 2324.952667][T30084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2325.018533][T22686] Bluetooth: hci1: command tx timeout [ 2325.027950][ T5877] usb 3-1: device descriptor read/64, error -71 [ 2325.050885][T30084] hsr_slave_0: entered promiscuous mode [ 2325.068177][T30084] hsr_slave_1: entered promiscuous mode [ 2325.074660][T30084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2325.082595][ T9] usb 9-1: device descriptor read/64, error -71 [ 2325.097736][T30084] Cannot create hsr debugfs directory [ 2325.138700][ T5877] usb usb3-port1: attempt power cycle [ 2325.228739][ T9] usb usb9-port1: attempt power cycle [ 2325.410457][T30154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6345'. [ 2325.499258][ T5877] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2325.535174][ T5877] usb 3-1: device descriptor read/8, error -71 [ 2326.061494][ T9] usb 9-1: new full-speed USB device number 108 using dummy_hcd [ 2326.207671][T22686] Bluetooth: hci4: command 0x0406 tx timeout [ 2326.233071][T11963] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 2326.245961][T11963] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 2326.303548][T30084] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2326.310809][ T9] usb 9-1: device descriptor read/8, error -71 [ 2326.332731][T30084] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2326.377730][ T5877] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2326.405016][T30084] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2326.412953][ T5877] usb 3-1: device descriptor read/8, error -71 [ 2326.446121][T30084] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2326.539055][ T5877] usb usb3-port1: unable to enumerate USB device [ 2326.547588][ T9] usb 9-1: new full-speed USB device number 109 using dummy_hcd [ 2326.590391][ T9] usb 9-1: device descriptor read/8, error -71 [ 2326.698001][ T9] usb usb9-port1: unable to enumerate USB device [ 2326.700321][T30084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2326.724066][T30084] 8021q: adding VLAN 0 to HW filter on device team0 [ 2326.739042][T29512] bridge0: port 1(bridge_slave_0) entered blocking state [ 2326.746266][T29512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2327.104038][T22686] Bluetooth: hci1: command tx timeout [ 2327.555544][ T8399] bridge0: port 2(bridge_slave_1) entered blocking state [ 2327.562783][ T8399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2327.645834][T30172] FAULT_INJECTION: forcing a failure. [ 2327.645834][T30172] name failslab, interval 1, probability 0, space 0, times 0 [ 2327.682971][T30168] openvswitch: netlink: Actions may not be safe on all matching packets [ 2327.698285][T30172] CPU: 0 UID: 0 PID: 30172 Comm: syz.6.6348 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 2327.709130][T30172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2327.719240][T30172] Call Trace: [ 2327.722564][T30172] [ 2327.725525][T30172] dump_stack_lvl+0x241/0x360 [ 2327.730229][T30172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2327.735518][T30172] ? __pfx__printk+0x10/0x10 [ 2327.740139][T30172] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 2327.745637][T30172] ? __pfx___might_resched+0x10/0x10 [ 2327.750989][T30172] should_fail_ex+0x3b0/0x4e0 [ 2327.755717][T30172] should_failslab+0xac/0x100 [ 2327.760438][T30172] ? alloc_super+0x59/0x9d0 [ 2327.764998][T30172] __kmalloc_cache_noprof+0x6c/0x2c0 [ 2327.770333][T30172] alloc_super+0x59/0x9d0 [ 2327.774683][T30172] ? __pfx_test_meta_super+0x10/0x10 [ 2327.779985][T30172] sget_fc+0x34c/0x9c0 [ 2327.784068][T30172] ? __pfx_set_meta_super+0x10/0x10 [ 2327.789302][T30172] gfs2_meta_get_tree+0x1d0/0x3c0 [ 2327.794365][T30172] ? __pfx_gfs2_meta_get_tree+0x10/0x10 [ 2327.799935][T30172] ? vfs_write+0x730/0xd30 [ 2327.804404][T30172] ? cap_capable+0x1b4/0x250 [ 2327.809040][T30172] ? safesetid_security_capable+0xb2/0x1d0 [ 2327.814877][T30172] vfs_get_tree+0x90/0x2b0 [ 2327.819317][T30172] vfs_cmd_create+0xa0/0x1f0 [ 2327.823940][T30172] ? __se_sys_fsconfig+0xa15/0xf70 [ 2327.829093][T30172] __se_sys_fsconfig+0xa1f/0xf70 [ 2327.834073][T30172] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 2327.839552][T30172] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2327.845550][T30172] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2327.851915][T30172] ? do_syscall_64+0x100/0x230 [ 2327.856821][T30172] ? __x64_sys_fsconfig+0x20/0xc0 [ 2327.861893][T30172] do_syscall_64+0xf3/0x230 [ 2327.866457][T30172] ? clear_bhb_loop+0x35/0x90 [ 2327.871190][T30172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2327.877161][T30172] RIP: 0033:0x7f5e73f7e719 [ 2327.881616][T30172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2327.901273][T30172] RSP: 002b:00007f5e74e3c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 2327.909749][T30172] RAX: ffffffffffffffda RBX: 00007f5e74135f80 RCX: 00007f5e73f7e719 [ 2327.917760][T30172] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 2327.925747][T30172] RBP: 00007f5e74e3c090 R08: 0000000000000000 R09: 0000000000000000 [ 2327.933734][T30172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2327.941729][T30172] R13: 0000000000000000 R14: 00007f5e74135f80 R15: 00007ffef4737858 [ 2327.949750][T30172] [ 2327.968377][T30172] gfs2: gfs2 mount does not exist [ 2328.008810][T30175] gfs2: gfs2 mount does not exist [ 2328.134235][T30183] netlink: 'syz.2.6353': attribute type 9 has an invalid length. [ 2328.156166][T30084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2328.168181][T30183] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6353'. [ 2328.422842][T30084] veth0_vlan: entered promiscuous mode [ 2328.439839][T30084] veth1_vlan: entered promiscuous mode [ 2328.501880][T30084] veth0_macvtap: entered promiscuous mode [ 2328.514998][T30084] veth1_macvtap: entered promiscuous mode [ 2328.529074][T11963] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2328.541053][T11963] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 2328.564694][T30084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2328.578596][T30084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2328.588885][T30084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2328.599859][T30084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2328.610892][T30084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2328.626824][T30084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2328.640122][T30084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2328.652022][T30084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2328.662326][T30084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2328.673012][T30084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2328.683088][T30084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2328.693905][T30084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2328.704070][T30084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2328.714751][T30084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2328.724871][T30084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2328.735694][T30084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2328.771822][T30084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2328.820177][T30186] netlink: 'syz.2.6353': attribute type 9 has an invalid length. [ 2328.833319][T30186] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6353'. [ 2328.875949][T30084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2328.889167][T30084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2328.899779][T30084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2328.910581][T30084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2328.921095][T30084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2328.932039][T30084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2328.943281][T30084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2328.954496][T30084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2328.965846][T30084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2328.976776][T30084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2328.989697][T30084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2329.000359][ T5876] usb 9-1: new high-speed USB device number 110 using dummy_hcd [ 2329.008805][T30084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2329.019084][T30084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2329.028122][T29024] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 2329.030242][T30084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2329.047260][T30084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2329.058018][T30084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2329.086160][T30084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2329.182143][T30084] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2329.192150][ T5876] usb 9-1: Using ep0 maxpacket: 8 [ 2329.198945][T30084] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2329.208069][T30084] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2329.217031][T30084] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2329.226164][T29024] usb 7-1: Using ep0 maxpacket: 8 [ 2329.233513][T29024] usb 7-1: too many configurations: 253, using maximum allowed: 8 [ 2329.234834][ T5876] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2329.243857][T29024] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2329.261814][T29024] usb 7-1: can't read configurations, error -61 [ 2329.273251][ T5876] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2329.294878][ T5876] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 2329.337189][ T5876] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2329.361742][ T5876] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2329.372232][ T5876] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2329.385409][ T5876] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 2329.395044][ T5876] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2329.405346][ T5876] usb 9-1: config 0 descriptor?? [ 2329.411262][T30173] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2329.418934][T29024] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 2329.588990][T29024] usb 7-1: Using ep0 maxpacket: 8 [ 2329.595915][T29024] usb 7-1: too many configurations: 253, using maximum allowed: 8 [ 2329.605740][T29024] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2329.614372][T29024] usb 7-1: can't read configurations, error -61 [ 2329.621864][T29024] usb usb7-port1: attempt power cycle [ 2329.637135][T30145] usb 9-1: USB disconnect, device number 110 [ 2329.977872][T29024] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 2329.998306][T29024] usb 7-1: Using ep0 maxpacket: 8 [ 2330.004247][T29024] usb 7-1: too many configurations: 253, using maximum allowed: 8 [ 2330.014401][T29024] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2330.022233][T29024] usb 7-1: can't read configurations, error -61 [ 2330.157980][T29024] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 2330.178828][T29024] usb 7-1: Using ep0 maxpacket: 8 [ 2330.194956][T29024] usb 7-1: too many configurations: 253, using maximum allowed: 8 [ 2330.204694][T29024] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2330.213135][T29024] usb 7-1: can't read configurations, error -61 [ 2330.219891][T29024] usb usb7-port1: unable to enumerate USB device [ 2331.128691][T30198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6356'. [ 2344.861202][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.291148][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.730347][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2472.208030][ T30] INFO: task syz.4.6346:30158 blocked for more than 143 seconds. [ 2472.215828][ T30] Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 2472.228192][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2472.236933][ T30] task:syz.4.6346 state:D stack:25008 pid:30158 tgid:30155 ppid:22527 flags:0x00004006 [ 2472.247456][ T30] Call Trace: [ 2472.250783][ T30] [ 2472.253764][ T30] __schedule+0x17fa/0x4bd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2472.258513][ T30] ? __pfx___schedule+0x10/0x10 [ 2472.263632][ T30] ? __pfx_lock_release+0x10/0x10 [ 2472.268954][ T30] ? schedule+0x90/0x320 [ 2472.273471][ T30] schedule+0x14b/0x320 [ 2472.278000][ T30] schedule_timeout+0xb0/0x310 [ 2472.282809][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 2472.288524][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2472.294570][ T30] ? wait_for_completion+0x2fe/0x620 [ 2472.337410][ T30] ? wait_for_completion+0x2fe/0x620 [ 2472.342782][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2472.371407][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2472.376683][ T30] ? wait_for_completion+0x2fe/0x620 [ 2472.382083][ T30] wait_for_completion+0x355/0x620 [ 2472.387257][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 2472.393205][ T30] ? __flush_work+0xe7/0xc50 [ 2472.397978][ T30] __flush_work+0xa37/0xc50 [ 2472.402521][ T30] ? __flush_work+0xe7/0xc50 [ 2472.407159][ T30] ? __pfx___flush_work+0x10/0x10 [ 2472.412286][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 2472.418011][ T30] ? __pfx___cancel_work+0x10/0x10 [ 2472.423168][ T30] ? nfc_unregister_device+0x63/0x2a0 [ 2472.428824][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2472.433906][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 2472.439974][ T30] __cancel_work_sync+0xbc/0x110 [ 2472.444942][ T30] rfkill_unregister+0x96/0x230 [ 2472.450066][ T30] nfc_unregister_device+0x96/0x2a0 [ 2472.455348][ T30] virtual_ncidev_close+0x56/0x90 [ 2472.460503][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 2472.466290][ T30] __fput+0x23f/0x880 [ 2472.470504][ T30] task_work_run+0x24f/0x310 [ 2472.475144][ T30] ? __pfx_task_work_run+0x10/0x10 [ 2472.481714][ T30] ? switch_task_namespaces+0xe4/0x110 [ 2472.487236][ T30] do_exit+0xa2f/0x28e0 [ 2472.491484][ T30] ? __pfx_do_exit+0x10/0x10 [ 2472.496107][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2472.502725][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2472.509816][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2472.516207][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 2472.521682][ T30] do_group_exit+0x207/0x2c0 [ 2472.526318][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2472.532903][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2472.538375][ T30] get_signal+0x16a3/0x1740 [ 2472.542952][ T30] ? __pfx_get_signal+0x10/0x10 [ 2472.549389][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 2472.554298][ T30] arch_do_signal_or_restart+0x96/0x860 [ 2472.560065][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2472.566259][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2472.572364][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 2472.578310][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 2472.583909][ T30] do_syscall_64+0x100/0x230 [ 2472.589495][ T30] ? clear_bhb_loop+0x35/0x90 [ 2472.594239][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2472.600372][ T30] RIP: 0033:0x7fc26177e719 [ 2472.604829][ T30] RSP: 002b:00007fc262552038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2472.613583][ T30] RAX: 0000000000000008 RBX: 00007fc261936130 RCX: 00007fc26177e719 [ 2472.621776][ T30] RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 2472.630744][ T30] RBP: 00007fc2617f175e R08: 0000000000000000 R09: 0000000000000000 [ 2472.639214][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2472.647240][ T30] R13: 0000000000000000 R14: 00007fc261936130 R15: 00007ffd071c7978 [ 2472.655302][ T30] [ 2472.658520][ T30] [ 2472.658520][ T30] Showing all locks held in the system: [ 2472.666346][ T30] 1 lock held by khungtaskd/30: [ 2472.671411][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 2472.681456][ T30] 2 locks held by getty/5580: [ 2472.686150][ T30] #0: ffff8880313cb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2472.696202][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 2472.706639][ T30] 4 locks held by kworker/0:2/11963: [ 2472.712215][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2472.723346][ T30] #1: ffffc9000fbc7d00 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2472.735808][ T30] #2: ffffffff8ff98ce8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_sync_work+0x23/0x220 [ 2472.746054][ T30] #3: ffff88802c922100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 [ 2472.756175][ T30] 1 lock held by syz-executor/22527: [ 2472.761635][ T30] #0: ffffffff8ff98ce8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 2472.771958][ T30] 3 locks held by kworker/1:5/25257: [ 2472.777392][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2472.788594][ T30] #1: ffffc9000af27d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2472.802252][ T30] #2: ffffffff8ff98ce8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 2472.813702][ T30] 4 locks held by kworker/u8:6/25273: [ 2472.819596][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2472.831017][ T30] #1: ffffc9000ae97d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2472.841757][ T30] #2: ffffffff8fcb4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 2472.854343][ T30] #3: ffffffff8ff98ce8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 2472.864879][ T30] 2 locks held by syz-executor/30084: [ 2472.870578][ T30] #0: ffffffff8f17e048 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 2472.879176][ T30] #1: ffffffff8ff98ce8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x131/0x850 [ 2472.889472][ T30] 1 lock held by syz.4.6346/30158: [ 2472.894613][ T30] #0: ffff88802c922100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 2472.904511][ T30] 3 locks held by syz.2.6353/30186: [ 2472.910083][ T30] #0: ffffffff8fd27610 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 2472.918509][ T30] #1: ffffffff8fd274c8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 2472.927765][ T30] #2: ffffffff8ff98ce8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 2472.938034][ T30] 1 lock held by syz.8.6355/30196: [ 2472.943180][ T30] #0: ffffffff8f17e048 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 2472.951984][ T30] 1 lock held by syz.6.6358/30206: [ 2472.957119][ T30] #0: ffffffff8f17e048 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 2472.965697][ T30] 1 lock held by syz-executor/30209: [ 2472.971239][ T30] #0: ffffffff8f17e048 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 2472.979823][ T30] 1 lock held by syz-executor/30211: [ 2472.985144][ T30] #0: ffffffff8f17e048 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 2472.993875][ T30] 1 lock held by syz-executor/30213: [ 2472.999243][ T30] #0: ffffffff8f17e048 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 2473.007854][ T30] 1 lock held by syz-executor/30215: [ 2473.013174][ T30] #0: ffffffff8f17e048 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 2473.021738][ T30] 1 lock held by syz-executor/30217: [ 2473.027039][ T30] #0: ffffffff8f17e048 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 2473.035654][ T30] 1 lock held by syz-executor/30219: [ 2473.041069][ T30] #0: ffffffff8f17e048 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 2473.049749][ T30] 1 lock held by syz-executor/30221: [ 2473.055057][ T30] #0: ffffffff8f17e048 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 2473.063618][ T30] 1 lock held by syz-executor/30223: [ 2473.069071][ T30] #0: ffffffff8f17e048 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 2473.078970][ T30] 1 lock held by syz-executor/30225: [ 2473.084299][ T30] #0: ffffffff8f17e048 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 2473.093494][ T30] 1 lock held by syz-executor/30227: [ 2473.098857][ T30] #0: ffffffff8f17e048 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 2473.108427][ T30] 1 lock held by syz-executor/30229: [ 2473.113742][ T30] #0: ffffffff8f17e048 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 2473.122281][ T30] 1 lock held by syz-executor/30231: [ 2473.127712][ T30] #0: ffffffff8f17e048 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 2473.136232][ T30] 1 lock held by syz-executor/30233: [ 2473.141653][ T30] #0: ffffffff8f17e048 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 2473.150484][ T30] 1 lock held by syz-executor/30235: [ 2473.155812][ T30] #0: ffffffff8f17e048 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 2473.164433][ T30] [ 2473.166777][ T30] ============================================= [ 2473.166777][ T30] [ 2473.176490][ T30] NMI backtrace for cpu 0 [ 2473.180848][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 2473.191410][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2473.201501][ T30] Call Trace: [ 2473.204814][ T30] [ 2473.207777][ T30] dump_stack_lvl+0x241/0x360 [ 2473.212495][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2473.217717][ T30] ? __pfx__printk+0x10/0x10 [ 2473.222326][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 2473.227309][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2473.232803][ T30] ? _printk+0xd5/0x120 [ 2473.236972][ T30] ? __pfx__printk+0x10/0x10 [ 2473.241593][ T30] ? __wake_up_klogd+0xcc/0x110 [ 2473.246461][ T30] ? __pfx__printk+0x10/0x10 [ 2473.251073][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 2473.256135][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2473.262132][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2473.268146][ T30] watchdog+0xff4/0x1040 [ 2473.272410][ T30] ? watchdog+0x1ea/0x1040 [ 2473.276848][ T30] ? __pfx_watchdog+0x10/0x10 [ 2473.281541][ T30] kthread+0x2f0/0x390 [ 2473.286055][ T30] ? __pfx_watchdog+0x10/0x10 [ 2473.290752][ T30] ? __pfx_kthread+0x10/0x10 [ 2473.295358][ T30] ret_from_fork+0x4b/0x80 [ 2473.299796][ T30] ? __pfx_kthread+0x10/0x10 [ 2473.304403][ T30] ret_from_fork_asm+0x1a/0x30 [ 2473.309198][ T30] [ 2473.312805][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2473.318352][ C1] NMI backtrace for cpu 1 [ 2473.318367][ C1] CPU: 1 UID: 0 PID: 29512 Comm: kworker/u8:9 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 2473.318390][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2473.318403][ C1] Workqueue: bat_events batadv_nc_worker [ 2473.318428][ C1] RIP: 0010:__lock_acquire+0xb2f/0x2050 [ 2473.318459][ C1] Code: a9 11 00 00 83 3d 60 ab ab 0e 00 0f 84 13 09 00 00 83 7c 24 60 00 48 8b 6c 24 40 0f 84 ff 00 00 00 48 8b 5c 24 20 0f b6 04 13 <84> c0 0f 85 d7 0d 00 00 41 8b 0f f7 c1 00 80 00 00 0f 85 c5 00 00 [ 2473.318477][ C1] RSP: 0018:ffffc9000358f850 EFLAGS: 00000002 [ 2473.318493][ C1] RAX: 0000000000000000 RBX: 1ffff1100575fcaa RCX: ffffffff81706620 [ 2473.318509][ C1] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff9429b8d8 [ 2473.318523][ C1] RBP: ffff88802bafe530 R08: ffffffff9429b8df R09: 1ffffffff285371b [ 2473.318538][ C1] R10: dffffc0000000000 R11: fffffbfff285371c R12: ffff88802bafda00 [ 2473.318552][ C1] R13: ffff88802bafe4d8 R14: 0000000000000002 R15: ffff88802bafe550 [ 2473.318567][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 2473.318583][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2473.318596][ C1] CR2: 00007ffb8c8272f4 CR3: 000000000e734000 CR4: 00000000003526f0 [ 2473.318614][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2473.318626][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2473.318640][ C1] Call Trace: [ 2473.318647][ C1] [ 2473.318656][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2473.318685][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2473.318714][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2473.318749][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2473.318774][ C1] ? nmi_handle+0x14f/0x5a0 [ 2473.318794][ C1] ? nmi_handle+0x2a/0x5a0 [ 2473.318814][ C1] ? __lock_acquire+0xb2f/0x2050 [ 2473.318840][ C1] ? default_do_nmi+0x63/0x160 [ 2473.318859][ C1] ? exc_nmi+0x123/0x1f0 [ 2473.318877][ C1] ? end_repeat_nmi+0xf/0x53 [ 2473.318903][ C1] ? __lock_acquire+0x890/0x2050 [ 2473.318930][ C1] ? __lock_acquire+0xb2f/0x2050 [ 2473.318957][ C1] ? __lock_acquire+0xb2f/0x2050 [ 2473.318984][ C1] ? __lock_acquire+0xb2f/0x2050 [ 2473.319011][ C1] [ 2473.319019][ C1] [ 2473.319033][ C1] lock_acquire+0x1ed/0x550 [ 2473.319059][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 2473.319084][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2473.319110][ C1] ? __local_bh_disable_ip+0x187/0x220 [ 2473.319135][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 2473.319157][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 2473.319178][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 2473.319202][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 2473.319226][ C1] ? batadv_nc_purge_paths+0x312/0x3b0 [ 2473.319246][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2473.319279][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 2473.319300][ C1] _raw_spin_lock_bh+0x35/0x50 [ 2473.319320][ C1] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 2473.319339][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 2473.319362][ C1] batadv_nc_purge_paths+0xe8/0x3b0 [ 2473.319388][ C1] batadv_nc_worker+0x328/0x610 [ 2473.319407][ C1] ? batadv_nc_worker+0xcb/0x610 [ 2473.319426][ C1] ? process_scheduled_works+0x976/0x1850 [ 2473.319452][ C1] process_scheduled_works+0xa63/0x1850 [ 2473.319489][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2473.319518][ C1] ? assign_work+0x364/0x3d0 [ 2473.319544][ C1] worker_thread+0x870/0xd30 [ 2473.319573][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2473.319595][ C1] ? __kthread_parkme+0x169/0x1d0 [ 2473.319622][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2473.319648][ C1] kthread+0x2f0/0x390 [ 2473.319664][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2473.319689][ C1] ? __pfx_kthread+0x10/0x10 [ 2473.319707][ C1] ret_from_fork+0x4b/0x80 [ 2473.319733][ C1] ? __pfx_kthread+0x10/0x10 [ 2473.319751][ C1] ret_from_fork_asm+0x1a/0x30 [ 2473.319783][ C1] [ 2473.320899][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2473.713663][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 2473.724171][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2473.734244][ T30] Call Trace: [ 2473.737545][ T30] [ 2473.740505][ T30] dump_stack_lvl+0x241/0x360 [ 2473.745226][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2473.750459][ T30] ? __pfx__printk+0x10/0x10 [ 2473.755114][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2473.761175][ T30] ? vscnprintf+0x5d/0x90 [ 2473.765634][ T30] panic+0x349/0x880 [ 2473.769564][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2473.775806][ T30] ? __pfx_panic+0x10/0x10 [ 2473.780241][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 2473.785644][ T30] ? __irq_work_queue_local+0x137/0x410 [ 2473.791217][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2473.796618][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2473.802813][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2473.809119][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2473.815328][ T30] watchdog+0x1033/0x1040 [ 2473.819686][ T30] ? watchdog+0x1ea/0x1040 [ 2473.824158][ T30] ? __pfx_watchdog+0x10/0x10 [ 2473.828856][ T30] kthread+0x2f0/0x390 [ 2473.832960][ T30] ? __pfx_watchdog+0x10/0x10 [ 2473.837680][ T30] ? __pfx_kthread+0x10/0x10 [ 2473.842305][ T30] ret_from_fork+0x4b/0x80 [ 2473.846752][ T30] ? __pfx_kthread+0x10/0x10 [ 2473.851359][ T30] ret_from_fork_asm+0x1a/0x30 [ 2473.856188][ T30] [ 2473.859567][ T30] Kernel Offset: disabled [ 2473.863903][ T30] Rebooting in 86400 seconds..