last executing test programs: 5m59.162950719s ago: executing program 32 (id=145): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7581b53670646174652064656661756c7420747275737465643a747275737465"], 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xfffffeb5) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='nv\x00', 0x1a) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00'}) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) 5m3.550024005s ago: executing program 3 (id=435): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x217d, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) 5m1.535931764s ago: executing program 3 (id=439): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x39b0, 0x4) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x4e20, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e24, @broadcast}, 'xfrm0\x00'}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @remote}}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r4}, 0x18) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 4m57.669143393s ago: executing program 5 (id=452): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x2, 0x4000) 4m57.533116866s ago: executing program 5 (id=454): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbf9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x66f, @local, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000780)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000000c0)=[@hopopts_2292={{0x18, 0x29, 0x32, {0x21}}}], 0x18}}], 0x1, 0x4000010) (async, rerun: 32) socket(0x1d, 0x2, 0x6) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c000000010901010000000000000000090000070900010073797a3100000000080003400000000f0c000480080001400000000308000640b6d2598f"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x1e0000}, 0x18) (async) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000500)="fc1b7f2f586427740825a6069d42d854630080010000000000b57a9b8f19fff53b759ac0f90efc2abd63e751894c68eef6b6943dc8", 0x35) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f00000002c0)={0x200a}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r8}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 64) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 64) 4m57.330916616s ago: executing program 5 (id=456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010028a7eb5072c32e656b1100000000000000000700000a44000000090a01040000000000000000020000070800098004000280080005400000003a0900010073797a310000000008000a40000000000900010073797a310000000014000000110001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x4080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xa, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000800004000000", @ANYRES32, @ANYBLOB="0000000000000000000000efffffffffffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r5, 0x5410, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r6, &(0x7f0000000000)=""/90, 0x5a) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) write$binfmt_elf32(r8, &(0x7f0000001e80)=ANY=[], 0x38) fcntl$setpipe(r7, 0x407, 0x8001a0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) 4m56.748010466s ago: executing program 0 (id=458): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeffffffc}, [@call={0x85, 0x0, 0x0, 0x92}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x24050400) r0 = userfaultfd(0x80001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48004) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{0x0}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 4m56.465200361s ago: executing program 4 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00"], 0x80}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, 0x9, 0x1, 0xea, 0xf0, 0x1, 0x9, 0x2, 0x8, 0x3, 0x2, 0x74a, 0x1000, 0x400, 0x2}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000001c0)={{r2, 0xb2, 0x80000000, 0x1, 0x80000001, 0x0, 0x800, 0x7, 0x0, 0x2, 0xffff0000, 0x1, 0x98f, 0x1, 0x8}}) 4m54.636904708s ago: executing program 4 (id=462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) sendmsg$inet6(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x62}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r4, 0x0, 0x30}, 0xc) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0xc8}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getsig(0x4202, r5, 0x7, &(0x7f0000000040)) 4m54.576803432s ago: executing program 0 (id=463): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, &(0x7f00000002c0)=0x9b) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe84, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe70, 0x1, [@m_pedit={0xe6c, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x8, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6, 0x1}, {0x8ce, 0x8, 0x2, 0x4, 0xb6f, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x5, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8f, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x5, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x8, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0xc9c, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x1, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x100}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x400, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x3}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000800, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0x5, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x30000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x10001, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5ba, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0x3, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0x8, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x3, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0xee8, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0xd4bc, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x1c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe84}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000540)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x408) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) 4m54.325939101s ago: executing program 5 (id=464): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x217d, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) 4m54.289314856s ago: executing program 3 (id=465): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x5) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r2, r2, 0x2f}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) sched_setscheduler(0x0, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00007be000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f00007cf000/0x2000)=nil}) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) syslog(0x3, 0x0, 0x0) sendto$packet(r4, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63d, 0x1, 0x2, 0x10, 0x19f2, 0x8, 0x19ef, 0x3, 0xe, 0x4, 0x2800, 0x2, 0x2ba2, 0x2802, 0x3d, {0x8, 0xfffffffb}, 0xd1, 0xa}}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x0) r6 = syz_io_uring_setup(0x2f11, &(0x7f00000000c0)={0x0, 0x82eb, 0x10000, 0x3, 0x16e}, &(0x7f0000000200), &(0x7f0000000280)) r7 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffe, 0xbfdfffbc, 0x0, r6}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f00000002c0)=@phonet={0x23, 0x5, 0x9, 0x6}, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x32d7, 0x0, 0x46, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80703, 0x0) 4m53.603352593s ago: executing program 4 (id=466): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x89fc, &(0x7f00000002c0)={'ip6tnl0\x00', @remote}) 4m53.522368503s ago: executing program 0 (id=467): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) getpeername(r0, &(0x7f00000000c0)=@rc, &(0x7f0000000240)=0x80) 4m53.389174393s ago: executing program 3 (id=468): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeffffffc}, [@call={0x85, 0x0, 0x0, 0x92}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x24050400) r0 = userfaultfd(0x80001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48004) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 4m53.375596065s ago: executing program 4 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00fb000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000018110000a258dc1452cec704752b07bad90cfcdce23d1de81027c2090ee6bcb4c5437d5e99a0921de4a346265a1eb61bab0c15289912cf46fe09fd64aadac1dfce343a20c36e71a5d64d2737870778edcfcd09c748d36566f6a7fd8cae3b20dd76290c2c6e5a5f5a12a44ee77f38c85f56acbfd53d95b3bc3a6424f31318977cd5e8173c2ef6e5b358284aeeec54e73b04ffb98a402162e6f84228a7eabce4200233527d30700eaeae3df2b33dbc3fdcf6078056a737d63fe66ca9d8b6e10c9e455804213e6c576200c9e7ae38c0e64ac4", @ANYRES32=r2, @ANYRESDEC=r2, @ANYRESHEX=r3], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername(r1, &(0x7f00000000c0)=@rc, &(0x7f0000000240)=0x80) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000000000)) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xc) r8 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x4, 0x870, 0x870}}) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) 4m53.331089946s ago: executing program 0 (id=470): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x39b0, 0x4) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x4e20, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e24, @broadcast}, 'xfrm0\x00'}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @remote}}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r3}, 0x18) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') 4m53.328529165s ago: executing program 2 (id=471): r0 = openat$smackfs_ptrace(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_ptrace(r0, &(0x7f0000000000)=0x41, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$alg(0x26, 0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) socket$inet6(0xa, 0x80002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x5) 4m51.736732954s ago: executing program 5 (id=472): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800070000000000000000000500000085000000a400000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m51.726908335s ago: executing program 3 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00"], 0x80}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x54, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x7, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r7, r6, 0x7}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x80000000}) 4m47.618537744s ago: executing program 4 (id=476): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) close(0x3) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x129, @private0, 0xdfe}}, 0x3, 0x1ff}, &(0x7f0000000000)=0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = syz_usb_connect$hid(0x5, 0x59, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2179, 0x53, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "8a6e1ce4"}, @global=@item_012={0x1, 0x1, 0x1, "19"}]}}, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={r2, 0x0, &(0x7f00000003c0)}, &(0x7f0000000100)=0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r6, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4m43.445582855s ago: executing program 4 (id=477): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40008c4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) socket$inet(0x10, 0x3, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) unshare(0x22020600) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ppoll(&(0x7f0000000000)=[{r2, 0x81}], 0x1, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x10, 0x1411, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040c4) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa395e046d7c8e944613a407abbf4ed3e800000000000000082a850e79009e2905d2f98ba18f91f3c93686e9bee067f4e77d9ad6623805004100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9528c46178ed5f9192dae000e579c80eca35a58dc47d1d5e4ff6e216c724e88c70244858700", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 4m38.318330274s ago: executing program 33 (id=471): r0 = openat$smackfs_ptrace(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_ptrace(r0, &(0x7f0000000000)=0x41, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$alg(0x26, 0x5, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) socket$inet6(0xa, 0x80002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x5) 4m35.805641986s ago: executing program 34 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00"], 0x80}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x54, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0xffffffffffffffff, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x7, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r7, r6, 0x7}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x80000000}) 4m27.650575737s ago: executing program 37 (id=477): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40008c4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) socket$inet(0x10, 0x3, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) unshare(0x22020600) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ppoll(&(0x7f0000000000)=[{r2, 0x81}], 0x1, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x10, 0x1411, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040c4) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa395e046d7c8e944613a407abbf4ed3e800000000000000082a850e79009e2905d2f98ba18f91f3c93686e9bee067f4e77d9ad6623805004100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9528c46178ed5f9192dae000e579c80eca35a58dc47d1d5e4ff6e216c724e88c70244858700", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 1m31.621400468s ago: executing program 8 (id=837): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @ib={0x1b, 0x9, 0x9, {"5af407d080bef0d6ca9766edafbdcdbb"}, 0x5, 0x400, 0xfffffffffffffff7}}}, 0x118) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0xffffffff, 0x1f, 0x7, 0xfffffffa, 0x3, "a4c82192e6aed8e8950470331d04006c9957ed"}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x101400, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x108) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r7, 0x5, 0x1, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac00]}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x38}}, 0x10) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x80000001, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r9, 0x3b88, 0x0) bind$rds(r3, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x3) 1m28.209546159s ago: executing program 8 (id=851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001800010028bd7000fddbdf2502200600ff04ff0a0007000008000100ac14140a"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000000)) truncate(&(0x7f0000000040)='./file0\x00', 0x7fffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1m27.917309576s ago: executing program 8 (id=854): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0xff0a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f363b68090890e0878f0e1ac6e7049b3b46959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07440936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r3, &(0x7f0000000040)=""/61, 0x3d) getdents64(r3, &(0x7f00000014c0)=""/4105, 0x1009) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x405, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x80, 0xfe, 0x2, 0xfd, 0x7, 0x3200}, [@RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xb}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x4048864) 1m27.878999075s ago: executing program 8 (id=856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000018110000a258dc1452cec704752b07bad90cfcdce23d1de81027c2090ee6bcb4c5437d5e99a0921de4a346265a1eb61bab0c15289912cf46fe09fd64aadac1dfce343a20c36e71a5d64d2737870778edcfcd09c748d36566f6a7fd8cae3b20dd76290c2c6e5a5f5a12a44ee77f38c85f56acbfd53d95b3bc3a6424f31318977cd5e8173c2ef6e5b358284aeeec54e73b04ffb98a402162e6f84228a7eabce4200233527d30700eaeae3df2b33dbc3fdcf6078056a737d63fe66ca9d8b6e10c9e455804213e6c576200c9e7ae38c0e64ac4", @ANYRES32=r2, @ANYRESDEC=r2, @ANYRESHEX], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername(r1, &(0x7f00000000c0)=@rc, &(0x7f0000000240)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000000000)) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xc) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x4, 0x870, 0x870}}) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) 1m26.887978601s ago: executing program 8 (id=859): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x80000001, "36989037b780ed7d6019a173f7c1760100bf00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xec73, "b659f43dbe370e1cac31f98509c97b0ebfde0e36b74d4c5acd68bc9e5eafb51e"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xec73, "b659f43dbe370e1cac31f98509c97b0ebfde0e36b74d4c5acd68bc9e5eafb51e", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000780)={"d1ed39cf8b014076ab94c1021162000ddd5f307e56000000000000e3f5a800", r2}) (async) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000780)={"d1ed39cf8b014076ab94c1021162000ddd5f307e56000000000000e3f5a800", r2}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000e30902120001000080040904"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 1m23.310569938s ago: executing program 8 (id=873): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r0, 0x9, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r0, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x100000000}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r1, 0x4b30, 0x10000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000090}, 0x48091) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x1000156}, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x400007) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000000)={0x1d, r6, 0x3, {0x0, 0x0, 0x3}, 0x2}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000540)="81b651f1f3e7200923", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRESDEC], 0x0) 1m7.720352565s ago: executing program 38 (id=873): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r0, 0x9, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r0, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x100000000}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r1, 0x4b30, 0x10000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000090}, 0x48091) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x1000156}, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x400007) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000000)={0x1d, r6, 0x3, {0x0, 0x0, 0x3}, 0x2}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000540)="81b651f1f3e7200923", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRESDEC], 0x0) 1m4.491230467s ago: executing program 6 (id=927): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d074000010203010902240001010330"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = mq_open(&(0x7f0000000180)='\x00', 0x2, 0x0, &(0x7f00000001c0)={0x9, 0x97, 0xa, 0x7}) mq_timedreceive(r6, &(0x7f0000001300)=""/4096, 0x1000, 0x1000, &(0x7f0000000200)) sendmsg$nl_route_sched(r3, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003580)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x44) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r10 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r10, 0x400, 0x1) fcntl$setlease(r9, 0x400, 0x0) fcntl$setlease(r8, 0x400, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) 1m0.94718678s ago: executing program 1 (id=931): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x30, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x30}}, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x4}]}, 0x24}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) write$binfmt_format(r1, &(0x7f0000000100)='0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35b", 0x6) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000000c0)={0xc9, 0x0, 0xc}) 59.6990149s ago: executing program 7 (id=934): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x39b0, 0x4) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x4e20, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e24, @broadcast}, 'xfrm0\x00'}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @remote}}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r4}, 0x18) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) recvmmsg(r5, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') 59.497447485s ago: executing program 1 (id=935): syz_usb_connect(0x0, 0x3f, &(0x7f0000003240)=ANY=[@ANYBLOB="1201000033bc1840861246202ec10000000109022d0001000040000904d80403ff04010009058f02400009000109050d00100005ba81090501"], 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000440)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local, {[@rr={0x7, 0x13, 0x0, [@private, @empty, @empty, @private]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) ptrace(0x4207, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000140)={&(0x7f0000000500)=""/8, 0x8}) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/89) 58.508247142s ago: executing program 7 (id=937): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeffffffc}, [@call={0x85, 0x0, 0x0, 0x92}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x24050400) r0 = userfaultfd(0x80001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48004) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{0x0}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 57.7128784s ago: executing program 6 (id=939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00fb000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000018110000a258dc1452cec704752b07bad90cfcdce23d1de81027c2090ee6bcb4c5437d5e99a0921de4a346265a1eb61bab0c15289912cf46fe09fd64aadac1dfce343a20c36e71a5d64d2737870778edcfcd09c748d36566f6a7fd8cae3b20dd76290c2c6e5a5f5a12a44ee77f38c85f56acbfd53d95b3bc3a6424f31318977cd5e8173c2ef6e5b358284aeeec54e73b04ffb98a402162e6f84228a7eabce4200233527d30700eaeae3df2b33dbc3fdcf6078056a737d63fe66ca9d8b6e10c9e455804213e6c576200c9e7ae38c0e64ac4", @ANYRES32=r1, @ANYRESDEC=r1, @ANYRESHEX=r2], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername(r0, &(0x7f00000000c0)=@rc, &(0x7f0000000240)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1c, 0x0, &(0x7f0000000000)) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xc) r8 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x4, 0x870, 0x870}}) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) 56.758346429s ago: executing program 7 (id=940): r0 = getpid() setpriority(0x1, r0, 0x3) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000140)=0x3, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120101000800a64040200001000000000904000002214c6a0009050702000000da000905890e0000000000000000000000452f6e05e8cf7fb19700b64ec5465672739f7a0a8e1adae62b6ef7f9e7d8b238425772d51d9121fba4bf71022fd6093dd3306382074cee433cbcec631589c21e2aaf839e95ddbec43f4b0de6344354fe8f68dbafb59bde8efe3c03206eb576b0043745339bb24b0fe24d2123d2319e1a0a4a4cab116ac98b3e4f7ebd323496e0e5d6f178c41f111ceebca341ddb339f84bc009eea5ad94f3a72954"], 0x0) write$snddsp(0xffffffffffffffff, &(0x7f0000000100)="3bd06d7c67bc2d1d447114a0e369ca0ade25e45feee80eedf8bc950de222b1e25a4a616f0bc841ed25a9422b1e6ba44e8b15c5ab3911b1a94c325fdc8f1a8894bb49118f9f52d74d1ab7630a080ac8ae3ff616026a015a5fe6705cf1d94e0e676449e0abb9b405735c0eb8cde3786b58b80d6654c6469a691b4aa450948774e0e68955455485b75f99a3717fa23df6b8e90606f58e344672f36e287c0ab94934881b70cbbdc1cc71899ff7ad697199d3003575463279c51f368487e7db5f4b6618639284079648cf17a96cc5993eb56b253fa94b9ad701246e0c86cbc43a9f0ee7365b4d114839b7575b4d4cce8c8b696617886ff0", 0xf5) 56.568002727s ago: executing program 9 (id=941): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', &(0x7f0000000040)={0x0, 0x100, 0x20}, 0x18) r1 = openat(r0, &(0x7f0000000080)='./cgroup.net/devices.allow\x00', 0x10002, 0x49) write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='b *:* wrm'], 0x9) 56.441370844s ago: executing program 1 (id=942): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0xcc79, 0x1880, 0x5, 0x380}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) close_range(r2, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000180)=0x8) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0]) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000200000085000000ba000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) syz_open_dev$video4linux(&(0x7f0000000100), 0x4, 0x400) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4091}, 0x48800) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 56.372723179s ago: executing program 9 (id=943): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) recvmmsg(r0, &(0x7f0000006400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=""/19, 0x13}, 0xfff}], 0x1, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0xd, 0x1, 0x0, 0x0, 0x0, 0x20}, {0xd000, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x8}, {0x3000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0xdddd0000, 0xffff1000, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, {0x1, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x1, 0x8, 0x4}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfd, 0xfb, 0x0, 0x2, 0x6}, {0xe000, 0x5000, 0xa, 0x0, 0x7, 0xf9, 0x0, 0xfe, 0x3a, 0x2, 0xff}, {0x3000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x8080000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x100, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2, 0xd]}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) 55.647588024s ago: executing program 6 (id=944): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) close(0x3) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x129, @private0, 0xdfe}}, 0x3, 0x1ff}, &(0x7f0000000000)=0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = syz_usb_connect$hid(0x5, 0x59, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2179, 0x53, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "8a6e1ce4"}, @global=@item_012={0x1, 0x1, 0x1, "19"}]}}, 0x0}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r5, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 55.636937832s ago: executing program 9 (id=953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xa8}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000240)=0xffff7c00, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r7, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="901240c26659aa66cdbf4f8f9f57ad7070c857acb9e3d346635baf03a38eef5a4028", 0x22}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="a4ad4fcd2b7bfd0b2f4a75ccee9e3bd7cd3fb7c6ce850046ed2a07c53d86bdf1db172d", 0x23}], 0x1}}], 0x2, 0xc8040) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}}, 0x0) splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x6) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r3, 0x0) r11 = accept$inet6(r3, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYRES8=r11], 0x6c}}, 0x0) r12 = syz_open_pts(0xffffffffffffffff, 0x406002) ioctl$TIOCMIWAIT(r12, 0x545c, 0x0) fcntl$setlease(r0, 0x400, 0x2) 54.953139448s ago: executing program 1 (id=945): r0 = socket$inet(0x2, 0x4000000805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x200e00, 0x0) bind$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c206b065afaaaaaaaa7d9c03bb08004500fd08000000000000d80008907817148367d9c5f2175675010d2b5c5ab21611106c363cc9d88a7d8e1ee3fcfe7bbd233c72aa273b7f5e074be9d7c21d35fb49e941bbab31d45c4c11ef1a3a"], 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000012c0)=@nat={'nat\x00', 0x19, 0x5, 0x146, [0x200000000400, 0x0, 0x0, 0x20000000052e, 0x200000000732], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/326]}, 0x1be) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) userfaultfd(0x1) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f00000003c0)={0x5, 0x0, 0x1, 0x100}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x204}) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x75fa, 0xe475, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}]}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000180)=@buf={0xb0, &(0x7f0000000300)="3a8a190cd36b6cd6da2735531578ae4914ebb78281de081e5546d9bc9724090a9bbbb9db4eda7b39de75bbc61411b745136d4437365f57ede7ea671b8e62d5d0055cac1f152798659cb516c82a14c5cc053302152d27ab1b5da0160860f872c0bc5ae1ccef9e79bdb6ffe2c5fe13b6baeb9b79c6b2a2bfd821eb423ba3c261dd8d21e991dfae30b739c40968b823d5004ef55ee20be2d53daec38ae0378dc101745449ed32ca1a878135da2d6e6e184d"}) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 54.143606824s ago: executing program 9 (id=946): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03030000000000000000020000000c00024000000000000000020900010073797a30"], 0x54}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004e80)=ANY=[@ANYBLOB="3c0000001900000126bd7000fddbdf25022014040003fd0300000000080006000800000008000400", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080500110400"], 0x3c}}, 0x0) 53.645244537s ago: executing program 1 (id=947): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x39b0, 0x4) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x4e20, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e24, @broadcast}, 'xfrm0\x00'}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @remote}}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r3}, 0x18) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') 53.009304366s ago: executing program 9 (id=948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00fb000000000000000400000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000018110000a258dc1452cec704752b07bad90cfcdce23d1de81027c2090ee6bcb4c5437d5e99a0921de4a346265a1eb61bab0c15289912cf46fe09fd64aadac1dfce343a20c36e71a5d64d2737870778edcfcd09c748d36566f6a7fd8cae3b20dd76290c2c6e5a5f5a12a44ee77f38c85f56acbfd53d95b3bc3a6424f31318977cd5e8173c2ef6e5b358284aeeec54e73b04ffb98a402162e6f84228a7eabce4200233527d30700eaeae3df2b33dbc3fdcf6078056a737d63fe66ca9d8b6e10c9e455804213e6c576200c9e7ae38c0e64ac4", @ANYRES32=r2, @ANYRESDEC=r2, @ANYRESHEX=r3], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername(r1, &(0x7f00000000c0)=@rc, &(0x7f0000000240)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1c, 0x0, &(0x7f0000000000)) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0xc) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x4, 0x870, 0x870}}) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) 52.927595664s ago: executing program 7 (id=949): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@setneightbl={0x48, 0x43, 0x1, 0x70bd26, 0x25dfdbfe, {0xa}, [@NDTA_PARMS={0x18, 0x6, 0x0, 0x1, [@NDTPA_LOCKTIME={0xc, 0xf, 0x9}, @NDTPA_MCAST_REPROBES={0x8}]}, @NDTA_NAME={0x8, 0x1, '-}#\x00'}, @NDTA_NAME={0xb, 0x1, '9^]:\x11&\x00'}, @NDTA_THRESH1={0x8, 0x2, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000081}, 0x8080) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000030a010200000000000000000100000038000000050a01020000000000000000010020000c0002400000000000000f010900010073797a31000000000c0004800800014000000005140000001100010000000000000000000000000a6d2382ad95ec259fd2f39ca40375204fc8ea234a8045cb050b624e046b6d6a45e77e2aec3b6c193eac48d29a8fb4419e6b8b482c7be45dbb6a4b48271cb57ec7"], 0x74}}, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x1fffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = dup(r0) read$FUSE(r2, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="e7030014", 0x4, 0x8001) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x303}, "6a655398da858861", "f3f90db8daf3b815fde611e416c2c941", "cfb8fd1c", "98199ddca36070a2"}, 0x28) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r4, 0x0, 0x7800, 0x10000, 0x87, {{0x44, 0x4, 0x0, 0x5, 0x110, 0x68, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4c, 0x9d, 0x1, 0x5, [{@multicast1}, {@multicast1, 0x8}, {@broadcast, 0x2}, {@loopback, 0x7}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x2}, {@rand_addr=0x64010102, 0xfffffffb}, {@multicast2, 0xe8b}, {@empty, 0x6}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x71, [@multicast1, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0xd0, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8b6}, {@private=0xa010100, 0x4}, {@empty, 0x9}]}, @rr={0x7, 0x27, 0x6b, [@multicast2, @broadcast, @private=0xa010100, @broadcast, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, @multicast1]}, @rr={0x7, 0xf, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2]}, @timestamp_prespec={0x44, 0x3c, 0xa7, 0x3, 0x5, [{@empty, 0x7}, {@private=0x78c3, 0x4}, {@multicast2, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@local, 0x8591}, {@private=0xa010100, 0x8000}, {@local}]}, @ssrr={0x89, 0x7, 0x8d, [@empty]}, @timestamp_prespec={0x44, 0xc, 0x8b, 0x3, 0x1, [{@broadcast, 0x200}]}]}}}}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000ba00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @cgroup_sock_addr=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) wait4(0x0, 0x0, 0x6000000b, 0x0) 52.478501233s ago: executing program 7 (id=950): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xeffffffc}, [@call={0x85, 0x0, 0x0, 0x92}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x24050400) r0 = userfaultfd(0x80001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48004) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{0x0}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 52.433333717s ago: executing program 2 (id=915): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x39b0, 0x4) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x4e20, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e24, @broadcast}, 'xfrm0\x00'}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @remote}}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r3}, 0x18) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) 51.155082184s ago: executing program 9 (id=951): openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) (async) unshare(0x2040400) (async, rerun: 32) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' \n\a\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r4 = openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x240201, 0x1) (async, rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[]) (async) r5 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) writev(r5, &(0x7f0000000340), 0x0) (async) close(0xffffffffffffffff) setsockopt(r4, 0x80000000, 0x81, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) (rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7cfec1564c7b667eeac0da94eece87f2de5c2e06c84a6f4d000000", @ANYRES32=r4], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4048802) (async) r6 = syz_open_dev$media(&(0x7f0000000140), 0xc, 0x80d00) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, 0x0) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000680)={0x9, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34383b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) (async) r9 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCSFEATURE(r9, 0xc0404806, &(0x7f0000000000)="2fa18a8b09da5b938edde6d91a67ca3d714f") 51.044909491s ago: executing program 6 (id=952): gettid() r0 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x80) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGPGRP(r5, 0x8904, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, 0x0, 0x1003) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000300)={{0x84, @broadcast, 0x4e24, 0x3, 'wlc\x00', 0x6, 0x4, 0x7b}, {@private=0xa010101, 0x4e23, 0x10000, 0x4, 0x80012d5a, 0x7}}, 0x44) shmctl$SHM_LOCK(r1, 0xb) 50.909732539s ago: executing program 7 (id=954): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="c3180000000000006b17908d0000000085000000b40000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x531}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000630400000071979d5ec2000000000000000405000000a8000000000000009500a505000000000200"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) stat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x684, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r1, &(0x7f00000003c0)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, 0x0, 0x0) 50.546978022s ago: executing program 1 (id=955): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0xcc79, 0x1880, 0x5, 0x380}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) close_range(r2, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000180)=0x8) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0]) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000200000085000000ba000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) syz_open_dev$video4linux(&(0x7f0000000100), 0x4, 0x400) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4091}, 0x48800) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 49.873228418s ago: executing program 6 (id=956): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) close_range(r0, r3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013040000100000000000ac1414aa00000000000000000000000020010000000000000000000000000002000000004e2000000a00002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"/316], 0x184}, 0x1, 0x0, 0x0, 0x20040880}, 0x20040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sys_exit\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x18) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000080)="09000000010001", 0x7) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1008008, &(0x7f0000000040)={[{@max={'max', 0x3d, 0x1}}]}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth1_macvtap\x00', @ifru_addrs=@l2tp={0x2, 0x0, @broadcast, 0x80}}) ioctl$sock_netdev_private(r7, 0x89f5, &(0x7f0000000000)) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x832, 0x12) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000040)={0x0, 0x7e8e}) 49.759576107s ago: executing program 2 (id=957): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1e, 0x400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @local}, r2}, 0x14) sendto$inet6(r1, &(0x7f0000000000)="8000647dd38061ea", 0x8, 0x4004034, 0x0, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)='6', 0x1) setsockopt$inet_buf(r0, 0x0, 0x29, 0x0, 0x0) r3 = syz_io_uring_setup(0x3c2c, &(0x7f0000000080)={0x0, 0x75a2, 0x4000, 0x1, 0xd6}, &(0x7f0000000000), &(0x7f0000000100)) capset(&(0x7f0000000140)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x4, 0x5}) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) io_uring_enter(r3, 0x5116, 0x176a, 0x10, &(0x7f0000000140)={[0x3]}, 0x8) 49.535553261s ago: executing program 2 (id=958): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03030000000000000000020000000c00024000000000000000020900010073797a30"], 0x54}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1c, "f42a97b96d025891dd3f75fdda624457ad3d5c36389c308570204262"}}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004e80)=ANY=[@ANYBLOB="3c0000001900000126bd7000fddbdf25022014040003fd0300000000080006000800000008000400", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080500110400"], 0x3c}}, 0x0) 49.145564989s ago: executing program 2 (id=959): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) recvmmsg$unix(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000001880)=""/236, 0xec}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/232, 0xe8}, {&(0x7f0000001700)=""/188, 0xbc}], 0x5}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 48.958449252s ago: executing program 2 (id=960): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="c3180000000000006b17908d0000000085000000b40000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x531}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000630400000071979d5ec2000000000000000405000000a8000000000000009500a505000000000200"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) stat(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x684, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r1, &(0x7f00000003c0)='./file0\x00') readlinkat(r1, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/198, 0xc6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, 0x0, 0x0) 48.955980907s ago: executing program 6 (id=961): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@setneightbl={0x48, 0x43, 0x1, 0x70bd26, 0x25dfdbfe, {0xa}, [@NDTA_PARMS={0x18, 0x6, 0x0, 0x1, [@NDTPA_LOCKTIME={0xc, 0xf, 0x9}, @NDTPA_MCAST_REPROBES={0x8}]}, @NDTA_NAME={0x8, 0x1, '-}#\x00'}, @NDTA_NAME={0xb, 0x1, '9^]:\x11&\x00'}, @NDTA_THRESH1={0x8, 0x2, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000081}, 0x8080) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000030a010200000000000000000100000038000000050a01020000000000000000010020000c0002400000000000000f010900010073797a31000000000c0004800800014000000005140000001100010000000000000000000000000a6d2382ad95ec259fd2f39ca40375204fc8ea234a8045cb050b624e046b6d6a45e77e2aec3b6c193eac48d29a8fb4419e6b8b482c7be45dbb6a4b48271cb57ec7"], 0x74}}, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x1fffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = dup(r0) read$FUSE(r2, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="e7030014", 0x4, 0x8001) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x303}, "6a655398da858861", "f3f90db8daf3b815fde611e416c2c941", "cfb8fd1c", "98199ddca36070a2"}, 0x28) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', r4, 0x0, 0x7800, 0x10000, 0x87, {{0x44, 0x4, 0x0, 0x5, 0x110, 0x68, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4c, 0x9d, 0x1, 0x5, [{@multicast1}, {@multicast1, 0x8}, {@broadcast, 0x2}, {@loopback, 0x7}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x2}, {@rand_addr=0x64010102, 0xfffffffb}, {@multicast2, 0xe8b}, {@empty, 0x6}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x71, [@multicast1, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0xd0, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8b6}, {@private=0xa010100, 0x4}, {@empty, 0x9}]}, @rr={0x7, 0x27, 0x6b, [@multicast2, @broadcast, @private=0xa010100, @broadcast, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, @multicast1]}, @rr={0x7, 0xf, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2]}, @timestamp_prespec={0x44, 0x3c, 0xa7, 0x3, 0x5, [{@empty, 0x7}, {@private=0x78c3, 0x4}, {@multicast2, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@local, 0x8591}, {@private=0xa010100, 0x8000}, {@local}]}, @ssrr={0x89, 0x7, 0x8d, [@empty]}, @timestamp_prespec={0x44, 0xc, 0x8b, 0x3, 0x1, [{@broadcast, 0x200}]}]}}}}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000ba00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @cgroup_sock_addr=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) wait4(0x0, 0x0, 0x6000000b, 0x0) 0s ago: executing program 39 (id=951): openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) (async) unshare(0x2040400) (async, rerun: 32) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB=' \n\a\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r4 = openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x240201, 0x1) (async, rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000400)=ANY=[]) (async) r5 = openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) writev(r5, &(0x7f0000000340), 0x0) (async) close(0xffffffffffffffff) setsockopt(r4, 0x80000000, 0x81, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) (rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7cfec1564c7b667eeac0da94eece87f2de5c2e06c84a6f4d000000", @ANYRES32=r4], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4048802) (async) r6 = syz_open_dev$media(&(0x7f0000000140), 0xc, 0x80d00) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, 0x0) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000680)={0x9, {"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", 0x1000}}, 0x1006) (async) r9 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCSFEATURE(r9, 0xc0404806, &(0x7f0000000000)="2fa18a8b09da5b938edde6d91a67ca3d714f") kernel console output (not intermixed with test programs): : port 1(bridge_slave_0) entered disabled state [ 307.891385][ T8264] bridge_slave_0: entered allmulticast mode [ 307.899632][ T8264] bridge_slave_0: entered promiscuous mode [ 307.936657][ T8264] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.945000][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.953009][ T8264] bridge_slave_1: entered allmulticast mode [ 307.962758][ T8264] bridge_slave_1: entered promiscuous mode [ 308.034870][ T8236] hsr_slave_0: entered promiscuous mode [ 308.041617][ T8236] hsr_slave_1: entered promiscuous mode [ 308.048026][ T8236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.055591][ T8236] Cannot create hsr debugfs directory [ 308.092503][ T8264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.159790][ T8264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.282198][ T8264] team0: Port device team_slave_0 added [ 308.292708][ T8264] team0: Port device team_slave_1 added [ 308.395857][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.404699][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.431324][ T8264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.450917][ T8264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.458335][ T8264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.484873][ T8264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.655260][ T8195] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 308.691938][ T8195] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 308.748393][ T8264] hsr_slave_0: entered promiscuous mode [ 308.754844][ T8264] hsr_slave_1: entered promiscuous mode [ 308.761716][ T8264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.769374][ T8264] Cannot create hsr debugfs directory [ 308.774890][ T8195] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 308.781812][ T5841] Bluetooth: hci4: command tx timeout [ 308.828523][ T8195] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 309.239389][ T8195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.274460][ T8218] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 309.289340][ T8218] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 309.301426][ T8218] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 309.321409][ T8218] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 309.440717][ T8195] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.501454][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.508636][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.529461][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.536657][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.734563][ T8218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.854175][ T8218] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.941589][ T8223] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 309.999488][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.006693][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.030402][ T8223] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 310.151884][ T8223] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 310.165820][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.173417][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.207488][ T8223] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 310.255885][ T8195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.468838][ T3553] bridge_slave_1: left allmulticast mode [ 310.474624][ T3553] bridge_slave_1: left promiscuous mode [ 310.488630][ T3553] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.515915][ T3553] bridge_slave_0: left allmulticast mode [ 310.526502][ T3553] bridge_slave_0: left promiscuous mode [ 310.533165][ T3553] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.563169][ T3553] bridge_slave_1: left allmulticast mode [ 310.577962][ T3553] bridge_slave_1: left promiscuous mode [ 310.583736][ T3553] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.598416][ T3553] bridge_slave_0: left allmulticast mode [ 310.604072][ T3553] bridge_slave_0: left promiscuous mode [ 310.611601][ T3553] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.623031][ T3553] bridge_slave_1: left allmulticast mode [ 310.629319][ T3553] bridge_slave_1: left promiscuous mode [ 310.634994][ T3553] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.643584][ T3553] bridge_slave_0: left allmulticast mode [ 310.649334][ T3553] bridge_slave_0: left promiscuous mode [ 310.655001][ T3553] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.665611][ T3553] bridge_slave_1: left allmulticast mode [ 310.671588][ T3553] bridge_slave_1: left promiscuous mode [ 310.677492][ T3553] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.686010][ T3553] bridge_slave_0: left allmulticast mode [ 310.691826][ T3553] bridge_slave_0: left promiscuous mode [ 310.698564][ T3553] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.709983][ T3553] bridge_slave_1: left allmulticast mode [ 310.715642][ T3553] bridge_slave_1: left promiscuous mode [ 310.722540][ T3553] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.733111][ T3553] bridge_slave_0: left allmulticast mode [ 310.738960][ T3553] bridge_slave_0: left promiscuous mode [ 310.744646][ T3553] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.126321][ T3553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.138961][ T3553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.150801][ T3553] bond0 (unregistering): Released all slaves [ 311.392272][ T3553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.403219][ T3553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.413412][ T3553] bond0 (unregistering): Released all slaves [ 311.577822][ T3553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.589876][ T3553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.599872][ T3553] bond0 (unregistering): Released all slaves [ 311.879460][ T3553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.890254][ T3553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.901376][ T3553] bond0 (unregistering): Released all slaves [ 312.165850][ T3553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.179941][ T3553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.190356][ T3553] bond0 (unregistering): Released all slaves [ 312.475926][ T8223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.530142][ T3553] hsr_slave_0: left promiscuous mode [ 312.549289][ T3553] hsr_slave_1: left promiscuous mode [ 312.555423][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.565402][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.603898][ T3553] hsr_slave_0: left promiscuous mode [ 312.621771][ T3553] hsr_slave_1: left promiscuous mode [ 312.628234][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.641644][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.664496][ T3553] hsr_slave_0: left promiscuous mode [ 312.671193][ T3553] hsr_slave_1: left promiscuous mode [ 312.677321][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.685097][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.701697][ T3553] hsr_slave_0: left promiscuous mode [ 312.708040][ T3553] hsr_slave_1: left promiscuous mode [ 312.713842][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.722573][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.738389][ T3553] hsr_slave_0: left promiscuous mode [ 312.744308][ T3553] hsr_slave_1: left promiscuous mode [ 312.750247][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.760063][ T3553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.998117][ T3553] team0 (unregistering): Port device team_slave_1 removed [ 313.027869][ T3553] team0 (unregistering): Port device team_slave_0 removed [ 313.374963][ T3553] team0 (unregistering): Port device team_slave_1 removed [ 313.408005][ T3553] team0 (unregistering): Port device team_slave_0 removed [ 313.792457][ T3553] team0 (unregistering): Port device team_slave_1 removed [ 313.838562][ T3553] team0 (unregistering): Port device team_slave_0 removed [ 314.174242][ T3553] team0 (unregistering): Port device team_slave_1 removed [ 314.203401][ T3553] team0 (unregistering): Port device team_slave_0 removed [ 314.563214][ T3553] team0 (unregistering): Port device team_slave_1 removed [ 314.610569][ T3553] team0 (unregistering): Port device team_slave_0 removed [ 314.990247][ T8236] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 315.014100][ T8236] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 315.068176][ T8236] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 315.109327][ T8236] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 315.152250][ T8218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.168810][ T8223] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.309843][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.317043][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.330591][ T8195] veth0_vlan: entered promiscuous mode [ 315.375721][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.382983][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.450313][ T8195] veth1_vlan: entered promiscuous mode [ 315.783037][ T8195] veth0_macvtap: entered promiscuous mode [ 315.819167][ T8195] veth1_macvtap: entered promiscuous mode [ 315.942251][ T8236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.963709][ T8195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.974150][ T8218] veth0_vlan: entered promiscuous mode [ 315.984154][ T8264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 316.011805][ T8264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 316.025871][ T8264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 316.043848][ T8195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.071333][ T8264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 316.096315][ T8195] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.109224][ T8195] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.118011][ T8195] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.127078][ T8195] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.183858][ T8236] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.200328][ T8218] veth1_vlan: entered promiscuous mode [ 316.266150][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.273370][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.296002][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.303304][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.318515][ T8223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.427905][ T8218] veth0_macvtap: entered promiscuous mode [ 316.477933][ T8218] veth1_macvtap: entered promiscuous mode [ 316.544446][ T8236] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 316.567623][ T8236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.683450][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.724743][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.732565][ T8218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.744474][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.820727][ T8218] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.834202][ T8218] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.844876][ T8218] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.860433][ T8218] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.991982][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.002074][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.033374][ T8264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.130962][ T8236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.184632][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.191520][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.243049][ T8223] veth0_vlan: entered promiscuous mode [ 317.252735][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.286081][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.302160][ T8264] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.389988][ T8223] veth1_vlan: entered promiscuous mode [ 317.439050][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.446247][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.524047][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.654862][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.662148][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.681398][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.782125][ T8223] veth0_macvtap: entered promiscuous mode [ 317.798725][ T8223] veth1_macvtap: entered promiscuous mode [ 318.430106][ T8402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 318.533424][ T8236] veth0_vlan: entered promiscuous mode [ 318.647822][ T8223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.663616][ T8264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.704791][ T8236] veth1_vlan: entered promiscuous mode [ 318.730901][ T8223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.827502][ T8223] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.004341][ T8223] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.022794][ T8223] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.046496][ T8223] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.823893][ T8236] veth0_macvtap: entered promiscuous mode [ 319.871052][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.895949][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.930651][ T8236] veth1_macvtap: entered promiscuous mode [ 319.957548][ T8264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.971212][ T3553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.989624][ T3553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.050592][ T8236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.100950][ T8236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.117240][ T5962] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 320.126615][ T57] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 320.149333][ T8264] veth0_vlan: entered promiscuous mode [ 320.161241][ T8236] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.173535][ T8236] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.186311][ T8236] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.203765][ T8236] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.267955][ T8264] veth1_vlan: entered promiscuous mode [ 320.286729][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 320.294822][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.318633][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.329629][ T57] usb 7-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 320.360141][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.421111][ T57] usb 7-1: config 0 descriptor?? [ 320.477436][ T5962] usb 8-1: Using ep0 maxpacket: 32 [ 320.493243][ T5962] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.511415][ T5962] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.522275][ T5962] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 320.532792][ T5962] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.023943][ T5962] usb 8-1: config 0 descriptor?? [ 321.038772][ T8264] veth0_macvtap: entered promiscuous mode [ 321.072055][ T8264] veth1_macvtap: entered promiscuous mode [ 321.112265][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.258860][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.295750][ T8264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.327091][ T57] uclogic 0003:2179:0053.0008: interface is invalid, ignoring [ 321.385021][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.387524][ T8264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.397294][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.823658][ T8264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.863990][ T8264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.883386][ T8264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.904202][ T8264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.445427][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.460491][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.700103][ T8433] lo speed is unknown, defaulting to 1000 [ 322.709251][ T8433] lo speed is unknown, defaulting to 1000 [ 322.718263][ T8433] lo speed is unknown, defaulting to 1000 [ 322.848230][ T5962] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 322.908113][ T9] usb 7-1: USB disconnect, device number 2 [ 323.139064][ T8433] infiniband syz0: set active [ 323.143916][ T8433] infiniband syz0: added lo [ 323.187247][ T8433] RDS/IB: syz0: added [ 323.191802][ T8433] smc: adding ib device syz0 with port count 1 [ 323.198358][ T8433] smc: ib device syz0 port 1 has pnetid [ 323.226308][ T5907] lo speed is unknown, defaulting to 1000 [ 323.269946][ T8433] lo speed is unknown, defaulting to 1000 [ 323.270550][ T6600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.396623][ T8433] lo speed is unknown, defaulting to 1000 [ 323.517860][ T8433] lo speed is unknown, defaulting to 1000 [ 323.639403][ T8433] lo speed is unknown, defaulting to 1000 [ 323.763235][ T8433] lo speed is unknown, defaulting to 1000 [ 323.776499][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 323.949776][ T57] lo speed is unknown, defaulting to 1000 [ 323.986160][ T5907] usb 8-1: USB disconnect, device number 2 [ 324.012582][ T6600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.702071][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.721573][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.755653][ T8439] fido_id[8439]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 324.775527][ T8447] Invalid ELF header magic: != ELF [ 325.665256][ T8463] comedi: No check for data length of config insn id 1023 is implemented [ 325.719282][ T8463] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 325.980582][ T8468] net_ratelimit: 4071 callbacks suppressed [ 325.980613][ T8468] Set syz1 is full, maxelem 1038 reached [ 326.009858][ T8463] comedi: Assuming n=29170 is correct [ 326.564962][ T30] audit: type=1326 audit(1752640235.214:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8470 comm="syz.1.498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadc978e929 code=0x0 [ 326.587543][ T8474] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 326.846420][ T5907] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 327.068436][ T5907] usb 8-1: Using ep0 maxpacket: 8 [ 327.091448][ T5907] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.102773][ T5907] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.112931][ T5907] usb 8-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 327.122109][ T5907] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.247387][ T5907] usb 8-1: config 0 descriptor?? [ 328.340255][ T5907] uclogic 0003:2179:0053.000A: interface is invalid, ignoring [ 328.794429][ T8515] comedi: No check for data length of config insn id 1023 is implemented [ 328.926776][ T8515] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 329.108166][ T8515] comedi: Assuming n=29169 is correct [ 329.757137][ T9] usb 8-1: USB disconnect, device number 3 [ 329.776312][ T8530] syz.1.514: attempt to access beyond end of device [ 329.776312][ T8530] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 329.790216][ T8530] EXT4-fs (nbd1): unable to read superblock [ 331.587990][ T8559] netlink: 56 bytes leftover after parsing attributes in process `syz.6.521'. [ 331.629613][ T8559] netlink: 16 bytes leftover after parsing attributes in process `syz.6.521'. [ 331.843541][ T8569] wireguard: wg0: Could not create IPv4 socket [ 331.890200][ T8570] comedi: No check for data length of config insn id 1023 is implemented [ 332.316589][ T8570] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 332.352553][ T8569] gre1: entered allmulticast mode [ 332.398146][ T8570] comedi: Assuming n=29168 is correct [ 332.606597][ T5962] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 332.786499][ T5962] usb 7-1: Using ep0 maxpacket: 8 [ 332.813924][ T5962] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.448851][ T5962] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.513176][ T5962] usb 7-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 333.553472][ T5962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.581329][ T5962] usb 7-1: config 0 descriptor?? [ 333.895819][ T8601] delete_channel: no stack [ 333.914212][ T8600] delete_channel: no stack [ 334.059195][ T5962] uclogic 0003:2179:0053.000B: interface is invalid, ignoring [ 334.101274][ T8597] lo speed is unknown, defaulting to 1000 [ 334.427001][ T8615] 9pnet_fd: Insufficient options for proto=fd [ 334.656248][ T8617] overlay: Bad value for 'verity' [ 337.487799][ T8648] FAULT_INJECTION: forcing a failure. [ 337.487799][ T8648] name failslab, interval 1, probability 0, space 0, times 0 [ 337.537181][ T8648] CPU: 1 UID: 0 PID: 8648 Comm: syz.8.541 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 337.537208][ T8648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.537233][ T8648] Call Trace: [ 337.537241][ T8648] [ 337.537249][ T8648] dump_stack_lvl+0x189/0x250 [ 337.537284][ T8648] ? __pfx____ratelimit+0x10/0x10 [ 337.537309][ T8648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.537328][ T8648] ? __pfx__printk+0x10/0x10 [ 337.537355][ T8648] ? __pfx___might_resched+0x10/0x10 [ 337.537372][ T8648] ? fs_reclaim_acquire+0x7d/0x100 [ 337.537395][ T8648] should_fail_ex+0x414/0x560 [ 337.537423][ T8648] should_failslab+0xa8/0x100 [ 337.537447][ T8648] kmem_cache_alloc_noprof+0x73/0x3c0 [ 337.537469][ T8648] ? __kernfs_new_node+0xd7/0x7e0 [ 337.537491][ T8648] __kernfs_new_node+0xd7/0x7e0 [ 337.537508][ T8648] ? __lock_acquire+0xab9/0xd20 [ 337.537531][ T8648] ? __pfx___kernfs_new_node+0x10/0x10 [ 337.537549][ T8648] ? kernfs_root+0x1c/0x230 [ 337.537572][ T8648] ? kernfs_root+0x1c/0x230 [ 337.537587][ T8648] ? kernfs_root+0x1c/0x230 [ 337.537601][ T8648] ? kernfs_root+0x1c/0x230 [ 337.537624][ T8648] kernfs_new_node+0x102/0x210 [ 337.537648][ T8648] __kernfs_create_file+0x4b/0x2e0 [ 337.537673][ T8648] sysfs_add_file_mode_ns+0x238/0x300 [ 337.537705][ T8648] internal_create_group+0x66d/0x1110 [ 337.537740][ T8648] ? __pfx_internal_create_group+0x10/0x10 [ 337.537769][ T8648] sysfs_create_groups+0x59/0x120 [ 337.537790][ T8648] device_add_attrs+0x1c4/0x5a0 [ 337.537818][ T8648] ? __pfx_device_add_attrs+0x10/0x10 [ 337.537835][ T8648] ? kobject_put+0x43f/0x480 [ 337.537858][ T8648] ? device_add_class_symlinks+0x21f/0x240 [ 337.537881][ T8648] device_add+0x496/0xb50 [ 337.537899][ T8648] ? device_initialize+0x24b/0x440 [ 337.537921][ T8648] wakeup_source_sysfs_add+0x1af/0x280 [ 337.537946][ T8648] wakeup_source_register+0x18a/0x380 [ 337.537969][ T8648] ? ep_insert+0xb93/0x19e0 [ 337.537988][ T8648] ep_insert+0xef6/0x19e0 [ 337.538026][ T8648] ? __pfx_ep_insert+0x10/0x10 [ 337.538072][ T8648] do_epoll_ctl+0x7f4/0xe90 [ 337.538104][ T8648] __x64_sys_epoll_ctl+0x163/0x1a0 [ 337.538129][ T8648] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 337.538149][ T8648] ? rcu_is_watching+0x15/0xb0 [ 337.538173][ T8648] ? do_syscall_64+0xbe/0x3b0 [ 337.538194][ T8648] do_syscall_64+0xfa/0x3b0 [ 337.538208][ T8648] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.538230][ T8648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.538247][ T8648] ? clear_bhb_loop+0x60/0xb0 [ 337.538267][ T8648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.538289][ T8648] RIP: 0033:0x7fa4e558e929 [ 337.538305][ T8648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.538319][ T8648] RSP: 002b:00007fa4e63b9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 337.538339][ T8648] RAX: ffffffffffffffda RBX: 00007fa4e57b5fa0 RCX: 00007fa4e558e929 [ 337.538350][ T8648] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 337.538360][ T8648] RBP: 00007fa4e63b9090 R08: 0000000000000000 R09: 0000000000000000 [ 337.538370][ T8648] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 337.538381][ T8648] R13: 0000000000000000 R14: 00007fa4e57b5fa0 R15: 00007fff15b3bc68 [ 337.538410][ T8648] [ 338.365209][ T5962] usb 7-1: USB disconnect, device number 3 [ 338.818069][ T5840] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 338.987709][ T5840] usb 9-1: Using ep0 maxpacket: 16 [ 339.015991][ T5840] usb 9-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 339.033685][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.045839][ T5840] usb 9-1: Product: syz [ 339.054153][ T5840] usb 9-1: Manufacturer: syz [ 339.071288][ T5840] usb 9-1: SerialNumber: syz [ 339.093927][ T5840] usb 9-1: config 0 descriptor?? [ 339.166552][ T926] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 339.354822][ T926] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 339.402132][ T5840] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input11 [ 339.417187][ T926] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 339.498101][ T926] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 340.081831][ T926] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 340.092969][ T926] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 340.265982][ T926] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 340.278167][ T926] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 340.286287][ T926] usb 7-1: Product: syz [ 340.290818][ T926] usb 7-1: Manufacturer: syz [ 340.334383][ T926] cdc_wdm 7-1:1.0: skipping garbage [ 340.343193][ T5194] bcm5974 9-1:0.0: could not read from device [ 340.356453][ T926] cdc_wdm 7-1:1.0: skipping garbage [ 340.615850][ T5194] bcm5974 9-1:0.0: could not read from device [ 340.903113][ T5840] usb 9-1: USB disconnect, device number 2 [ 340.903821][ T5194] bcm5974 9-1:0.0: could not read from device [ 340.927421][ T926] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 340.933379][ T926] cdc_wdm 7-1:1.0: Unknown control protocol [ 341.033610][ T926] usb 7-1: USB disconnect, device number 4 [ 341.558013][ T8670] overlayfs: failed to resolve './file1': -2 [ 341.741987][ T8707] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.813681][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.553'. [ 342.736517][ T5929] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 342.907916][ T5908] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 342.949705][ T5929] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 342.962810][ T5929] usb 2-1: config 0 has no interface number 0 [ 342.998808][ T5929] usb 2-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31 [ 343.037066][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.045203][ T5929] usb 2-1: Product: syz [ 343.061410][ T5929] usb 2-1: Manufacturer: syz [ 343.066154][ T5929] usb 2-1: SerialNumber: syz [ 343.097142][ T5908] usb 10-1: Using ep0 maxpacket: 8 [ 343.111271][ T5929] usb 2-1: config 0 descriptor?? [ 343.123917][ T5908] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.165215][ T5908] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.252668][ T5908] usb 10-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 343.262853][ T5908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.687902][ T5908] usb 10-1: config 0 descriptor?? [ 343.705968][ T5929] pl2303 2-1:0.161: required endpoints missing [ 343.789318][ T5929] usb 2-1: USB disconnect, device number 4 [ 344.209198][ T5908] uclogic 0003:2179:0053.000C: interface is invalid, ignoring [ 345.505667][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 345.603644][ T5840] usb 10-1: USB disconnect, device number 2 [ 347.118373][ T8784] netlink: 60 bytes leftover after parsing attributes in process `syz.7.568'. [ 347.133924][ T8785] netlink: 'syz.1.569': attribute type 2 has an invalid length. [ 347.171416][ T8786] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 8786 comm: syz.7.568) [ 347.239407][ T30] audit: type=1800 audit(1752640255.894:128): pid=8786 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.568" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=22301 res=0 errno=0 [ 347.424652][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.8.570'. [ 350.805364][ T8841] 9pnet_fd: p9_fd_create_unix (8841): problem connecting socket: ./file1: -111 [ 352.186459][ T926] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 353.029052][ T926] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 353.046460][ T926] usb 7-1: config 0 interface 0 has no altsetting 0 [ 353.056681][ T926] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 353.065873][ T926] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 353.076088][ T926] usb 7-1: Product: syz [ 353.186629][ T5908] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 353.246410][ T926] usb 7-1: Manufacturer: syz [ 353.454264][ T5908] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.454522][ T926] usb 7-1: SerialNumber: syz [ 353.568633][ T5908] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 353.636659][ T5908] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 353.652263][ T926] usb 7-1: config 0 descriptor?? [ 353.671238][ T5908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.681250][ T926] usb 7-1: selecting invalid altsetting 0 [ 353.707532][ T5908] usb 9-1: config 0 descriptor?? [ 353.723175][ T8883] comedi: No check for data length of config insn id 1023 is implemented [ 353.738078][ T5908] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 353.757253][ T8883] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 353.767791][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 353.775439][ T8883] comedi: Assuming n=29163 is correct [ 353.786561][ T5908] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 353.846846][ T5908] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 353.862630][ T5908] usb 9-1: media controller created [ 353.898835][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.913829][ T9] usb 7-1: USB disconnect, device number 5 [ 353.988599][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 354.025359][ T5908] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 354.106571][ T5908] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input12 [ 354.161994][ T5908] dvb-usb: schedule remote query interval to 150 msecs. [ 354.180966][ T5908] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 354.338781][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 354.946524][ T5907] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 354.982147][ T57] dvb-usb: error while querying for an remote control event. [ 355.162355][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 355.168253][ T57] dvb-usb: error while querying for an remote control event. [ 355.236451][ T5907] usb 10-1: Using ep0 maxpacket: 16 [ 355.272148][ T5907] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 355.311558][ T5907] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 355.337317][ T57] dvb-usb: bulk message failed: -22 (1/0) [ 355.363300][ T9] usb 9-1: USB disconnect, device number 3 [ 355.364932][ T57] dvb-usb: error while querying for an remote control event. [ 355.382193][ T5907] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.400201][ T5907] usb 10-1: config 0 descriptor?? [ 355.436137][ T5907] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input13 [ 356.610479][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 357.916783][ T5962] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 357.937138][ T8943] comedi: No check for data length of config insn id 1023 is implemented [ 357.957021][ T8943] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 357.966306][ T8943] comedi: Assuming n=29162 is correct [ 358.151960][ T5962] usb 8-1: Using ep0 maxpacket: 16 [ 358.217297][ T5962] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 358.336962][ T5962] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 358.436549][ T5962] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.548515][ T8949] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 358.620419][ T5962] usb 8-1: config 0 descriptor?? [ 359.210211][ T5962] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input14 [ 361.657995][ T5194] bcm5974 10-1:0.0: could not read from device [ 361.666840][ T8963] netlink: 'syz.8.607': attribute type 20 has an invalid length. [ 361.702559][ T5907] bcm5974 10-1:0.0: could not read from device [ 361.834752][ T5194] bcm5974 10-1:0.0: could not read from device [ 361.909762][ T5907] input: failed to attach handler mousedev to device input13, error: -5 [ 362.012185][ T5194] bcm5974 10-1:0.0: could not read from device [ 362.041013][ T5907] usb 10-1: USB disconnect, device number 3 [ 362.042936][ T5962] usb 8-1: USB disconnect, device number 4 [ 362.094419][ T8980] IPv6: Can't replace route, no match found [ 362.192641][ T8982] kAFS: No cell specified [ 363.859988][ T8984] netlink: 'syz.9.613': attribute type 1 has an invalid length. [ 363.867756][ T8984] netlink: 'syz.9.613': attribute type 3 has an invalid length. [ 363.875382][ T8984] netlink: 216 bytes leftover after parsing attributes in process `syz.9.613'. [ 363.884343][ T8984] NCSI netlink: No device for ifindex 813332851 [ 364.926680][ T8996] comedi: No check for data length of config insn id 1023 is implemented [ 364.981377][ T8996] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 365.066468][ T8996] comedi: Assuming n=29161 is correct [ 366.274233][ T9016] binder: BINDER_SET_CONTEXT_MGR already set [ 366.326650][ T9016] binder: 9014:9016 ioctl 4018620d 200000000040 returned -16 [ 367.025318][ T9024] vivid-007: ================= START STATUS ================= [ 367.033491][ T9024] vivid-007: Enable Output Cropping: true [ 367.077631][ T9024] vivid-007: Enable Output Composing: true [ 367.104148][ T9024] vivid-007: Enable Output Scaler: true [ 367.129992][ T9024] vivid-007: Tx RGB Quantization Range: Automatic [ 367.175983][ T9024] vivid-007: Transmit Mode: HDMI [ 367.216653][ T9024] vivid-007: Hotplug Present: 0x00000000 [ 367.254986][ T9033] netlink: 144 bytes leftover after parsing attributes in process `syz.6.626'. [ 367.276698][ T9024] vivid-007: RxSense Present: 0x00000000 [ 367.284762][ T9024] vivid-007: EDID Present: 0x00000000 [ 367.299751][ T9024] vivid-007: ================== END STATUS ================== [ 368.098903][ T9046] comedi: No check for data length of config insn id 1023 is implemented [ 368.121760][ T9046] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 368.160126][ T9046] comedi: Assuming n=29160 is correct [ 368.286719][ T5929] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 368.614002][ T5929] usb 7-1: Using ep0 maxpacket: 16 [ 368.993120][ T5929] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.010357][ T9054] veth0_to_batadv: entered promiscuous mode [ 369.019889][ T5929] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.041528][ T5929] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 369.046685][ T9054] veth0_to_batadv: left promiscuous mode [ 369.067500][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.075569][ T5929] usb 7-1: Product: syz [ 369.125411][ T5929] usb 7-1: Manufacturer: syz [ 369.139212][ T5929] usb 7-1: SerialNumber: syz [ 369.362957][ T30] audit: type=1326 audit(1752640278.014:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9063 comm="syz.1.634" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadc978e929 code=0x0 [ 369.928600][ T5929] usb 7-1: 0:2 : does not exist [ 370.007153][ T5907] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 370.214299][ T5907] usb 10-1: config 0 has an invalid interface number: 175 but max is 0 [ 370.226381][ T5907] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.258168][ T5907] usb 10-1: config 0 has no interface number 0 [ 370.264474][ T5907] usb 10-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 370.302841][ T5907] usb 10-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 370.339021][ T9045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.370823][ T5907] usb 10-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 370.436020][ T9045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.105717][ T5907] usb 10-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 371.228404][ T5907] usb 10-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 371.228487][ T5907] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.228506][ T5907] usb 10-1: Product: syz [ 371.228520][ T5907] usb 10-1: Manufacturer: syz [ 371.228534][ T5907] usb 10-1: SerialNumber: syz [ 371.228732][ T5929] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 371.256236][ T5907] usb 10-1: config 0 descriptor?? [ 371.260812][ T5907] symbolserial 10-1:0.175: symbol converter detected [ 371.283588][ T5907] usb 10-1: symbol converter now attached to ttyUSB0 [ 371.294276][ T5929] usb 7-1: USB disconnect, device number 6 [ 371.529650][ T8353] udevd[8353]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.649685][ T5929] usb 10-1: USB disconnect, device number 4 [ 372.914450][ T5962] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 373.278278][ T5929] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 373.295411][ T5962] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.316527][ T5962] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 373.330214][ T5962] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 373.351725][ T5929] symbolserial 10-1:0.175: device disconnected [ 373.357539][ T5962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.417665][ T5962] usb 7-1: config 0 descriptor?? [ 373.690501][ T5929] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 373.826585][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 373.836669][ T5929] usb 10-1: device descriptor read/64, error -71 [ 373.865590][ T5962] kovaplus 0003:1E7D:2D50.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 374.057920][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 374.088043][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.122067][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 374.552542][ T5962] kovaplus 0003:1E7D:2D50.000D: couldn't init struct kovaplus_device [ 374.646418][ T5929] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 374.663743][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 374.710862][ T5962] kovaplus 0003:1E7D:2D50.000D: couldn't install mouse [ 374.714209][ T24] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 374.737221][ T5962] kovaplus 0003:1E7D:2D50.000D: probe with driver kovaplus failed with error -71 [ 374.776140][ T5962] usb 7-1: USB disconnect, device number 7 [ 374.848577][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.860157][ T24] usb 9-1: Product: syz [ 374.864355][ T24] usb 9-1: Manufacturer: syz [ 374.876495][ T24] usb 9-1: SerialNumber: syz [ 374.896447][ T5929] usb 10-1: device descriptor read/64, error -71 [ 374.904713][ T24] usb 9-1: config 0 descriptor?? [ 374.923701][ T24] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 374.965914][ T24] gspca_stv06xx: st6422 sensor detected [ 375.007907][ T5929] usb usb10-port1: attempt power cycle [ 375.226439][ T5907] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 375.243443][ T24] STV06xx 9-1:0.0: probe with driver STV06xx failed with error -71 [ 375.276922][ T24] usb 9-1: USB disconnect, device number 4 [ 375.377741][ T5929] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 375.408458][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 375.427330][ T5929] usb 10-1: device descriptor read/8, error -71 [ 375.436424][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.456251][ T5907] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 375.466271][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.519596][ T5907] usb 2-1: config 0 descriptor?? [ 375.676486][ T5929] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 375.729082][ T5929] usb 10-1: device descriptor read/8, error -71 [ 375.802840][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 376.035723][ T5929] usb usb10-port1: unable to enumerate USB device [ 376.063312][ T5907] sony 0003:054C:024B.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.1-1/input0 [ 376.089920][ T5907] sony 0003:054C:024B.000E: failed to claim input [ 376.120509][ T24] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 376.155264][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 376.178634][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 376.206456][ T24] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 376.216079][ T24] usb 8-1: Product: syz [ 376.273178][ T24] usb 8-1: Manufacturer: syz [ 376.289046][ T24] usb 8-1: SerialNumber: syz [ 376.309104][ T24] usb 8-1: config 0 descriptor?? [ 376.328333][ T5962] usb 2-1: USB disconnect, device number 5 [ 376.354036][ T24] usb 8-1: selecting invalid altsetting 0 [ 376.548051][ T24] usb 8-1: USB disconnect, device number 5 [ 376.860383][ T926] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 377.057577][ T926] usb 9-1: Using ep0 maxpacket: 32 [ 377.075020][ T926] usb 9-1: config 0 has an invalid interface number: 230 but max is 0 [ 377.095968][ T926] usb 9-1: config 0 has no interface number 0 [ 377.113120][ T926] usb 9-1: config 0 interface 230 has no altsetting 0 [ 377.137847][ T926] usb 9-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 377.178117][ T926] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.215755][ T926] usb 9-1: Product: syz [ 377.220344][ T926] usb 9-1: Manufacturer: syz [ 377.225183][ T926] usb 9-1: SerialNumber: syz [ 377.246124][ T926] usb 9-1: config 0 descriptor?? [ 377.257604][ T926] ums-usbat 9-1:0.230: USB Mass Storage device detected [ 377.293964][ T926] ums-usbat 9-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 377.686539][ T5962] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 377.866304][ T5962] usb 2-1: Using ep0 maxpacket: 8 [ 377.885026][ T5962] usb 2-1: config 7 has an invalid interface number: 228 but max is 0 [ 377.902480][ T5962] usb 2-1: config 7 has no interface number 0 [ 377.916590][ T5962] usb 2-1: config 7 interface 228 has no altsetting 0 [ 377.928776][ T5962] usb 2-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=bc.63 [ 377.946682][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.965743][ T5962] usb 2-1: Product: syz [ 377.984504][ T5962] usb 2-1: Manufacturer: syz [ 377.996588][ T5962] usb 2-1: SerialNumber: syz [ 378.274367][ T5962] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.436075][ T5962] snd-usb-audio 2-1:7.228: probe with driver snd-usb-audio failed with error -2 [ 378.492042][ T5962] usb 2-1: USB disconnect, device number 6 [ 378.626380][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.632835][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.837415][ T9254] netlink: 48 bytes leftover after parsing attributes in process `syz.6.673'. [ 379.308573][ T8362] udevd[8362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 379.625632][ T926] ums-usbat 9-1:0.230: probe with driver ums-usbat failed with error -5 [ 380.060900][ T926] usb 9-1: USB disconnect, device number 5 [ 380.937393][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 381.256542][ T926] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 381.574282][ T926] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.739596][ T926] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.829116][ T926] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 381.874498][ T926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.905784][ T926] usb 8-1: config 0 descriptor?? [ 382.334753][ T926] isku 0003:1E7D:319C.000F: unknown main item tag 0x0 [ 382.368765][ T926] isku 0003:1E7D:319C.000F: unknown main item tag 0x0 [ 382.407303][ T926] isku 0003:1E7D:319C.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.7-1/input0 [ 382.694033][ T9326] FAULT_INJECTION: forcing a failure. [ 382.694033][ T9326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.735964][ T5908] usb 8-1: USB disconnect, device number 6 [ 382.849634][ T9326] CPU: 1 UID: 0 PID: 9326 Comm: syz.8.686 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 382.849661][ T9326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 382.849675][ T9326] Call Trace: [ 382.849686][ T9326] [ 382.849694][ T9326] dump_stack_lvl+0x189/0x250 [ 382.849718][ T9326] ? __pfx____ratelimit+0x10/0x10 [ 382.849741][ T9326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.849759][ T9326] ? __pfx__printk+0x10/0x10 [ 382.849781][ T9326] ? __asan_memcpy+0x40/0x70 [ 382.849808][ T9326] should_fail_ex+0x414/0x560 [ 382.849836][ T9326] _copy_to_user+0x31/0xb0 [ 382.849857][ T9326] bpf_verifier_vlog+0x520/0x900 [ 382.849889][ T9326] __btf_verifier_log+0xd4/0x120 [ 382.849919][ T9326] ? __pfx___btf_verifier_log+0x10/0x10 [ 382.849940][ T9326] ? __might_fault+0xb0/0x130 [ 382.849968][ T9326] ? btf_parse_hdr+0x1e2/0x6d0 [ 382.849991][ T9326] btf_parse_hdr+0x3aa/0x6d0 [ 382.850016][ T9326] btf_new_fd+0x36d/0xc90 [ 382.850045][ T9326] ? __pfx_btf_new_fd+0x10/0x10 [ 382.850066][ T9326] ? bpf_token_put+0x143/0x160 [ 382.850089][ T9326] ? bpf_btf_load+0x126/0x190 [ 382.850127][ T9326] __sys_bpf+0x635/0x860 [ 382.850152][ T9326] ? __pfx___sys_bpf+0x10/0x10 [ 382.850188][ T9326] ? ksys_write+0x22a/0x250 [ 382.850211][ T9326] ? __pfx_ksys_write+0x10/0x10 [ 382.850241][ T9326] __x64_sys_bpf+0x7c/0x90 [ 382.850262][ T9326] do_syscall_64+0xfa/0x3b0 [ 382.850279][ T9326] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.850301][ T9326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.850318][ T9326] ? clear_bhb_loop+0x60/0xb0 [ 382.850338][ T9326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.850355][ T9326] RIP: 0033:0x7fa4e558e929 [ 382.850371][ T9326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.850385][ T9326] RSP: 002b:00007fa4e63b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.850410][ T9326] RAX: ffffffffffffffda RBX: 00007fa4e57b5fa0 RCX: 00007fa4e558e929 [ 382.850423][ T9326] RDX: 0000000000000028 RSI: 0000200000000780 RDI: 0000000000000012 [ 382.850433][ T9326] RBP: 00007fa4e63b9090 R08: 0000000000000000 R09: 0000000000000000 [ 382.850444][ T9326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.850454][ T9326] R13: 0000000000000001 R14: 00007fa4e57b5fa0 R15: 00007fff15b3bc68 [ 382.850482][ T9326] [ 384.276460][ T5908] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 384.634768][ T5908] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.736559][ T5908] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.929444][ T5908] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 384.960090][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.987245][ T5908] usb 7-1: Product: syz [ 385.003594][ T5908] usb 7-1: Manufacturer: syz [ 385.036390][ T5908] usb 7-1: SerialNumber: syz [ 385.116932][ T926] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 385.327694][ T926] usb 9-1: Using ep0 maxpacket: 8 [ 385.342229][ T926] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 385.370580][ T926] usb 9-1: config 0 has no interface number 0 [ 385.402700][ T926] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 385.420186][ T926] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.448906][ T926] usb 9-1: Product: syz [ 385.462912][ T926] usb 9-1: Manufacturer: syz [ 385.476611][ T926] usb 9-1: SerialNumber: syz [ 385.497457][ T926] usb 9-1: config 0 descriptor?? [ 385.538851][ T9352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.575606][ T9352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.631066][ T5908] usb 7-1: 0:2 : does not exist [ 385.704603][ T5908] usb 7-1: USB disconnect, device number 8 [ 385.777844][ T8353] udevd[8353]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 385.836094][ T926] usb 9-1: USB disconnect, device number 6 [ 387.270710][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.703'. [ 388.849197][ T5916] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 389.216011][ T5916] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 389.437185][ T9443] macvtap0: refused to change device tx_queue_len [ 389.456829][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0 [ 389.466028][ T5916] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 389.486432][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 389.494737][ T5916] usb 7-1: Product: syz [ 389.516419][ T5916] usb 7-1: Manufacturer: syz [ 389.521072][ T5916] usb 7-1: SerialNumber: syz [ 389.539200][ T5916] usb 7-1: config 0 descriptor?? [ 389.562163][ T5916] usb 7-1: selecting invalid altsetting 0 [ 389.767059][ T5929] usb 7-1: USB disconnect, device number 9 [ 390.006569][ T5908] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 390.196601][ T5908] usb 8-1: Using ep0 maxpacket: 16 [ 390.271981][ T5908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.332144][ T5908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.365122][ T5908] usb 8-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 390.385001][ T5908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.436683][ T5908] usb 8-1: config 0 descriptor?? [ 391.044042][ T5908] apple 0003:05AC:024B.0010: unknown main item tag 0x6 [ 391.222327][ T5908] apple 0003:05AC:024B.0010: ignoring exceeding usage max [ 391.241924][ T5908] apple 0003:05AC:024B.0010: invalid report_size 16640 [ 391.261106][ T5908] apple 0003:05AC:024B.0010: item 0 2 1 7 parsing failed [ 391.283359][ T5908] apple 0003:05AC:024B.0010: parse failed [ 391.292185][ T5908] apple 0003:05AC:024B.0010: probe with driver apple failed with error -22 [ 392.016068][ T5908] usb 8-1: USB disconnect, device number 7 [ 392.467449][ T9483] FAULT_INJECTION: forcing a failure. [ 392.467449][ T9483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.480652][ T9483] CPU: 1 UID: 0 PID: 9483 Comm: syz.1.728 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 392.480677][ T9483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.480688][ T9483] Call Trace: [ 392.480695][ T9483] [ 392.480703][ T9483] dump_stack_lvl+0x189/0x250 [ 392.480726][ T9483] ? __pfx____ratelimit+0x10/0x10 [ 392.480751][ T9483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.480770][ T9483] ? __pfx__printk+0x10/0x10 [ 392.480792][ T9483] ? __might_fault+0xb0/0x130 [ 392.480826][ T9483] should_fail_ex+0x414/0x560 [ 392.480855][ T9483] _copy_from_user+0x2d/0xb0 [ 392.480875][ T9483] ___sys_recvmsg+0x12e/0x510 [ 392.480903][ T9483] ? __pfx____sys_recvmsg+0x10/0x10 [ 392.480957][ T9483] ? __might_fault+0xb0/0x130 [ 392.480983][ T9483] do_recvmmsg+0x307/0x770 [ 392.481013][ T9483] ? __pfx_do_recvmmsg+0x10/0x10 [ 392.481047][ T9483] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 392.481082][ T9483] __x64_sys_recvmmsg+0x190/0x240 [ 392.481107][ T9483] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 392.481135][ T9483] ? do_syscall_64+0xbe/0x3b0 [ 392.481155][ T9483] do_syscall_64+0xfa/0x3b0 [ 392.481172][ T9483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.481188][ T9483] ? asm_sysvec_call_function_single+0x1a/0x20 [ 392.481205][ T9483] ? clear_bhb_loop+0x60/0xb0 [ 392.481225][ T9483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.481242][ T9483] RIP: 0033:0x7fadc978e929 [ 392.481257][ T9483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.481271][ T9483] RSP: 002b:00007fadc75f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 392.481290][ T9483] RAX: ffffffffffffffda RBX: 00007fadc99b6160 RCX: 00007fadc978e929 [ 392.481302][ T9483] RDX: 000000000000045b RSI: 0000200000008880 RDI: 0000000000000005 [ 392.481313][ T9483] RBP: 00007fadc75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 392.481323][ T9483] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 392.481333][ T9483] R13: 0000000000000000 R14: 00007fadc99b6160 R15: 00007ffc8ca8b338 [ 392.481361][ T9483] [ 394.289251][ T9493] 9pnet_fd: p9_fd_create_tcp (9493): problem connecting socket to 127.0.0.1 [ 394.702678][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.9.732'. [ 395.126593][ T5916] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 395.224220][ T9509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.298212][ T5916] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 395.308739][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0 [ 395.318110][ T5916] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 395.327492][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 395.335675][ T5916] usb 7-1: Product: syz [ 395.403375][ T5916] usb 7-1: Manufacturer: syz [ 395.424427][ T5916] usb 7-1: SerialNumber: syz [ 395.455543][ T5916] usb 7-1: config 0 descriptor?? [ 395.524738][ T5916] usb 7-1: selecting invalid altsetting 0 [ 395.525509][ T9514] lo speed is unknown, defaulting to 1000 [ 396.111430][ T5916] usb 7-1: USB disconnect, device number 10 [ 396.382632][ T8440] udevd[8440]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.691954][ T30] audit: type=1326 audit(1752640306.344:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9539 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54d58e929 code=0x7ffc0000 [ 397.795690][ T30] audit: type=1326 audit(1752640306.344:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9539 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54d58e929 code=0x7ffc0000 [ 397.806120][ T9543] netlink: 32 bytes leftover after parsing attributes in process `syz.6.744'. [ 397.868609][ T30] audit: type=1326 audit(1752640306.344:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9539 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fb54d58e929 code=0x7ffc0000 [ 397.951250][ T30] audit: type=1326 audit(1752640306.484:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9539 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54d58e929 code=0x7ffc0000 [ 398.035753][ T30] audit: type=1326 audit(1752640306.484:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9539 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54d58e929 code=0x7ffc0000 [ 398.984843][ T3482] wlan1: Trigger new scan to find an IBSS to join [ 399.263127][ T9579] comedi: No check for data length of config insn id 1023 is implemented [ 399.263159][ T9579] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 399.263172][ T9579] comedi: Assuming n=29151 is correct [ 399.624493][ T9585] netlink: 372 bytes leftover after parsing attributes in process `syz.6.755'. [ 399.821633][ T9560] tty tty4: ldisc open failed (-12), clearing slot 3 [ 401.446602][ T5908] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 401.814115][ T5908] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 401.835396][ T5929] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 401.858516][ T5908] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 402.048424][ T9613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.487660][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 30768, setting to 64 [ 402.498926][ T5908] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 402.515120][ T5908] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 402.720893][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.736625][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 402.746617][ T5908] usb 9-1: Product: syz [ 402.750940][ T5908] usb 9-1: Manufacturer: syz [ 402.766579][ T5908] usb 9-1: SerialNumber: syz [ 402.856193][ T5908] usb 9-1: config 0 descriptor?? [ 402.868818][ T5929] usb 2-1: config 0 has an invalid interface number: 218 but max is 0 [ 402.924277][ T1095] wlan1: Trigger new scan to find an IBSS to join [ 403.089849][ T5929] usb 2-1: config 0 has no interface number 0 [ 403.337557][ T5908] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input16 [ 403.494605][ T5929] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=74.07 [ 403.516400][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.524443][ T5929] usb 2-1: Product: syz [ 403.529014][ T5929] usb 2-1: Manufacturer: syz [ 403.533639][ T5929] usb 2-1: SerialNumber: syz [ 403.550262][ T5929] usb 2-1: config 0 descriptor?? [ 403.606489][ T926] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 403.660098][ T9627] netlink: 'syz.6.768': attribute type 1 has an invalid length. [ 403.797986][ C0] kbtab 9-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 403.815438][ T9] usb 2-1: USB disconnect, device number 7 [ 403.828529][ T926] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 403.845650][ T926] usb 10-1: config 0 interface 0 has no altsetting 0 [ 403.888046][ T926] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 403.899962][ T926] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 403.916653][ T926] usb 10-1: Product: syz [ 403.932544][ T926] usb 10-1: Manufacturer: syz [ 403.946110][ T926] usb 10-1: SerialNumber: syz [ 404.000041][ T926] usb 10-1: config 0 descriptor?? [ 404.039869][ T926] usb 10-1: selecting invalid altsetting 0 [ 404.181169][ T1111] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 404.314748][ T9] usb 10-1: USB disconnect, device number 9 [ 404.407456][ T8421] udevd[8421]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.546910][ T5908] usb 9-1: USB disconnect, device number 7 [ 404.956547][ T5929] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 405.680204][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 405.822525][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.833726][ T5929] usb 8-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 405.843090][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.854127][ T5929] usb 8-1: config 0 descriptor?? [ 406.164380][ T5929] usbhid 8-1:0.0: can't add hid device: -71 [ 406.171500][ T5929] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 406.182261][ T5929] usb 8-1: USB disconnect, device number 8 [ 407.711326][ T9697] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.204738][ T9701] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 408.985263][ T9717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.948851][ T9742] comedi: No check for data length of config insn id 1023 is implemented [ 409.973714][ T9742] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 409.992685][ T9742] comedi: Assuming n=29147 is correct [ 410.043486][ T9744] comedi: No check for data length of config insn id 1023 is implemented [ 410.062767][ T9744] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 410.072143][ T9744] comedi: Assuming n=29148 is correct [ 410.276474][ T5908] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 410.426591][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 410.444720][ T5908] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.464890][ T5908] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.500635][ T5908] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 411.080343][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 411.087825][ T5908] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 411.102003][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.110143][ T5907] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 411.136830][ T5908] usb 2-1: config 0 descriptor?? [ 411.277995][ T5907] usb 9-1: Using ep0 maxpacket: 8 [ 411.298459][ T5907] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.329764][ T5907] usb 9-1: config 0 has no interface number 0 [ 411.339867][ T5907] usb 9-1: config 0 interface 1 has no altsetting 0 [ 411.475992][ T5908] usbhid 2-1:0.0: can't add hid device: -71 [ 411.487965][ T5907] usb 9-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=da.9a [ 411.505558][ T5908] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 411.516622][ T5907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.542553][ T5908] usb 2-1: USB disconnect, device number 8 [ 411.548629][ T5907] usb 9-1: Product: syz [ 411.552822][ T5907] usb 9-1: Manufacturer: syz [ 411.580724][ T5907] usb 9-1: SerialNumber: syz [ 411.592858][ T9775] netlink: 2 bytes leftover after parsing attributes in process `syz.6.814'. [ 411.606223][ T5907] usb 9-1: config 0 descriptor?? [ 411.655564][ T9773] overlay: filesystem on ./bus not supported as upperdir [ 411.875449][ T5907] snd-usb-audio 9-1:0.1: probe with driver snd-usb-audio failed with error -22 [ 411.905280][ T5907] usb 9-1: USB disconnect, device number 8 [ 411.963236][ T8353] udevd[8353]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.013329][ T9789] comedi: No check for data length of config insn id 1023 is implemented [ 412.025270][ T9789] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 412.063252][ T9789] comedi: Assuming n=29146 is correct [ 414.354072][ T9825] netlink: 'syz.8.830': attribute type 1 has an invalid length. [ 415.327064][ T9840] comedi: No check for data length of config insn id 1023 is implemented [ 415.348655][ T9840] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 415.394098][ T9840] comedi: Assuming n=29145 is correct [ 415.565694][ T9848] overlayfs: workdir and upperdir must reside under the same mount [ 415.658497][ T30] audit: type=1326 audit(1752640324.304:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54d58e929 code=0x7ffc0000 [ 415.754374][ T30] audit: type=1326 audit(1752640324.304:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54d58e929 code=0x7ffc0000 [ 415.843958][ T30] audit: type=1326 audit(1752640324.304:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb54d58e929 code=0x7ffc0000 [ 415.894241][ T30] audit: type=1326 audit(1752640324.304:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54d58e929 code=0x7ffc0000 [ 415.922630][ T30] audit: type=1326 audit(1752640324.304:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54d58e929 code=0x7ffc0000 [ 415.955059][ T30] audit: type=1326 audit(1752640324.304:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb54d58e929 code=0x7ffc0000 [ 416.060949][ T30] audit: type=1326 audit(1752640324.314:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54d58e929 code=0x7ffc0000 [ 416.092785][ T30] audit: type=1326 audit(1752640324.314:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fb54d58e929 code=0x7ffc0000 [ 416.114944][ T30] audit: type=1326 audit(1752640324.314:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54d58e929 code=0x7ffc0000 [ 416.136617][ T30] audit: type=1326 audit(1752640324.314:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9851 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54d58e929 code=0x7ffc0000 [ 416.536725][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 416.549813][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 417.090458][ T9877] fuse: Unknown parameter 'pcr' [ 417.878873][ T9881] pim6reg: entered allmulticast mode [ 417.960376][ T9883] pim6reg: left allmulticast mode [ 418.306483][ T5907] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 418.496808][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 418.513510][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.534933][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.579697][ T5907] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 418.641385][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.677449][ T5907] usb 2-1: config 0 descriptor?? [ 418.932631][ T9896] comedi: No check for data length of config insn id 1023 is implemented [ 418.971021][ T9896] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 419.010865][ T9896] comedi: Assuming n=29144 is correct [ 419.091731][ T5907] hid (null): unknown global tag 0xe [ 419.169732][ T5907] aquacomputer_d5next 0003:0C70:F0B6.0011: unknown global tag 0xe [ 419.238762][ T5907] aquacomputer_d5next 0003:0C70:F0B6.0011: item 0 1 1 14 parsing failed [ 419.273646][ T5907] aquacomputer_d5next 0003:0C70:F0B6.0011: probe with driver aquacomputer_d5next failed with error -22 [ 419.340610][ T9889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.372849][ T9889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.499961][ T5962] IPVS: starting estimator thread 0... [ 419.737642][ T9913] IPVS: using max 28 ests per chain, 67200 per kthread [ 419.747732][ T9907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.777317][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028ef5000: rx timeout, send abort [ 419.795578][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032923000: rx timeout, send abort [ 420.060832][ T9907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.286997][ C0] vcan0: j1939_tp_rxtimer: 0xffff888028ef5000: abort rx timeout. Force session deactivation [ 420.291087][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.9.858'. [ 420.303840][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032923000: abort rx timeout. Force session deactivation [ 420.355795][ T9920] netlink: 'syz.9.858': attribute type 5 has an invalid length. [ 420.403187][ T9920] netlink: 20 bytes leftover after parsing attributes in process `syz.9.858'. [ 420.437812][ T9920] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 420.448646][ T9920] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 420.470487][ T9920] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 420.480644][ T9920] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 420.493027][ T9920] geneve2: entered promiscuous mode [ 420.500281][ T9920] geneve2: entered allmulticast mode [ 420.756953][ T5840] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 420.842468][ T9938] comedi: No check for data length of config insn id 1023 is implemented [ 420.855147][ T9938] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 420.871428][ T9938] comedi: Assuming n=29143 is correct [ 420.896648][ T5840] usb 9-1: device descriptor read/64, error -71 [ 421.103821][ T5962] usb 2-1: USB disconnect, device number 9 [ 421.168364][ T5840] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 421.410318][ T9948] netlink: 64 bytes leftover after parsing attributes in process `syz.6.866'. [ 421.807046][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 421.813473][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 421.925159][ T5840] usb 9-1: device descriptor read/64, error -71 [ 422.077805][ T5840] usb usb9-port1: attempt power cycle [ 423.709014][ T5840] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 423.770395][ T5840] usb 9-1: device descriptor read/8, error -71 [ 424.749880][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.8.873'. [ 425.200410][ T9986] comedi comedi0: dt2817: I/O port conflict (0x8,5) [ 425.216436][ T5840] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 425.247732][ T5840] usb 9-1: Using ep0 maxpacket: 8 [ 425.254907][ T5840] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 425.266965][ T5840] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 425.279963][ T5840] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 425.295388][ T5840] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 425.311979][ T5840] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 425.336635][ T5840] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 425.351339][ T5840] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 425.370414][ T5840] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 425.522018][ T5840] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 425.535898][ T5840] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 425.552009][ T5840] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 425.632702][ T9993] openvswitch: netlink: VXLAN extension message has 201 unknown bytes. [ 426.023011][ T926] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 426.032695][ T5840] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 426.077738][ T5840] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 426.117274][ T5840] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.125429][ T5840] usb 9-1: Product: syz [ 426.133885][ T5840] usb 9-1: Manufacturer: syz [ 426.141654][ T5840] usb 9-1: SerialNumber: syz [ 426.284495][ T926] usb 10-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=ce.1a [ 426.317114][ T926] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.325373][ T926] usb 10-1: Product: syz [ 426.495488][ T926] usb 10-1: Manufacturer: syz [ 426.518117][ T926] usb 10-1: SerialNumber: syz [ 426.606669][T10004] netlink: 64 bytes leftover after parsing attributes in process `syz.6.881'. [ 426.779169][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 427.250533][ T926] usb 10-1: config 0 descriptor?? [ 427.460810][ T9986] netlink: 'syz.9.878': attribute type 3 has an invalid length. [ 427.534356][ T926] usb 10-1: USB disconnect, device number 10 [ 427.801820][T10010] tipc: Started in network mode [ 427.806899][T10010] tipc: Node identity 7f000001, cluster identity 4711 [ 427.817264][T10010] tipc: Enabled bearer , priority 10 [ 428.742492][T10019] comedi: No check for data length of config insn id 1023 is implemented [ 428.763868][T10019] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 428.775381][T10019] comedi: Assuming n=29141 is correct [ 428.811237][T10014] fuse: Unknown parameter 'f' [ 428.952353][ T5916] tipc: Node number set to 2130706433 [ 429.225559][T10026] netlink: 24 bytes leftover after parsing attributes in process `syz.9.888'. [ 429.906794][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 429.906812][ T30] audit: type=1326 audit(1752640337.794:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10021 comm="syz.9.888" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a3858e929 code=0x0 [ 430.406485][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 430.638040][T10051] netlink: 64 bytes leftover after parsing attributes in process `syz.7.894'. [ 431.205384][ T5840] adutux 9-1:168.0: interrupt endpoints not found [ 431.227263][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 431.246414][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 431.345525][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 431.356468][ T10] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 431.376543][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 431.384862][ T9] usb 2-1: Product: syz [ 431.411735][ T9] usb 2-1: Manufacturer: syz [ 431.421042][ T9] usb 2-1: SerialNumber: syz [ 431.446708][ T9] usb 2-1: config 0 descriptor?? [ 431.460183][ T9] usb 2-1: selecting invalid altsetting 0 [ 431.546642][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 431.554715][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.565970][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.576275][ T10] usb 10-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 431.586262][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.605332][ T10] usb 10-1: config 0 descriptor?? [ 431.660996][ T9] usb 2-1: USB disconnect, device number 10 [ 431.667711][ T5916] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 431.677185][ T5907] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 431.836474][ T5916] usb 7-1: Using ep0 maxpacket: 8 [ 431.841726][ T5907] usb 8-1: Using ep0 maxpacket: 8 [ 431.849051][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.860473][ T5907] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.871475][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.881569][ T5907] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.891398][ T5916] usb 7-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 431.900613][ T5907] usb 8-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 431.909719][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.917805][ T5907] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.929859][ T5916] usb 7-1: config 0 descriptor?? [ 431.939292][ T5907] usb 8-1: config 0 descriptor?? [ 432.031629][ T10] uclogic 0003:2179:0053.0012: interface is invalid, ignoring [ 432.396142][ T5916] uclogic 0003:2179:0053.0013: interface is invalid, ignoring [ 432.407430][ T5907] uclogic 0003:2179:0053.0014: interface is invalid, ignoring [ 432.510370][ T9] IPVS: starting estimator thread 0... [ 433.811253][T10060] 9pnet_fd: Insufficient options for proto=fd [ 433.830832][T10061] IPVS: using max 31 ests per chain, 74400 per kthread [ 434.006575][ T5907] usb 10-1: USB disconnect, device number 11 [ 434.191281][ T1110] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 434.929514][ T5929] usb 7-1: USB disconnect, device number 11 [ 435.202645][ T10] usb 8-1: USB disconnect, device number 9 [ 435.865044][T10091] netlink: 32 bytes leftover after parsing attributes in process `syz.9.907'. [ 436.290246][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 436.458116][ T10] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 436.476424][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 436.498252][ T10] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 436.507618][ T10] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 436.515933][ T10] usb 10-1: Product: syz [ 436.516543][ T5929] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 436.536904][ T10] usb 10-1: Manufacturer: syz [ 436.541681][ T10] usb 10-1: SerialNumber: syz [ 436.559498][ T10] usb 10-1: config 0 descriptor?? [ 436.570700][ T10] usb 10-1: selecting invalid altsetting 0 [ 436.697565][ T5929] usb 7-1: Using ep0 maxpacket: 8 [ 436.721275][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.743514][ T5929] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.775014][ T5916] usb 10-1: USB disconnect, device number 12 [ 436.794490][ T5929] usb 7-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 436.813984][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.870872][ T5929] usb 7-1: config 0 descriptor?? [ 439.370849][ T5929] usbhid 7-1:0.0: can't add hid device: -71 [ 439.397573][ T5929] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 439.467419][ T5929] usb 7-1: USB disconnect, device number 12 [ 440.073933][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.080507][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.139278][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 442.148992][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 442.162113][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 442.176961][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 442.184580][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 442.314410][T10149] lo speed is unknown, defaulting to 1000 [ 442.342577][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.924'. [ 442.385078][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.924'. [ 442.503020][T10157] loop8: detected capacity change from 0 to 7 [ 442.605237][T10157] Dev loop8: unable to read RDB block 7 [ 442.612567][T10157] loop8: AHDI p1 p2 p3 [ 442.617050][T10157] loop8: partition table partially beyond EOD, truncated [ 442.624560][T10157] loop8: p1 start 1601398130 is beyond EOD, truncated [ 442.632001][T10157] loop8: p2 start 1702059890 is beyond EOD, truncated [ 443.244887][ T8353] Dev loop8: unable to read RDB block 7 [ 443.276529][ T8353] loop8: AHDI p1 p2 p3 [ 443.280861][ T8353] loop8: partition table partially beyond EOD, truncated [ 443.310168][ T8353] loop8: p1 start 1601398130 is beyond EOD, truncated [ 443.330296][ T8353] loop8: p2 start 1702059890 is beyond EOD, truncated [ 443.498481][T10159] Dev loop8: unable to read RDB block 7 [ 443.504191][T10159] loop8: AHDI p1 p2 p3 [ 443.816547][ T5840] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 444.297456][ T5841] Bluetooth: hci5: command tx timeout [ 444.320667][T10159] loop8: partition table partially beyond EOD, truncated [ 444.355892][T10159] loop8: p1 start 1601398130 is beyond EOD, truncated [ 444.511132][T10159] loop8: p2 start 1702059890 is beyond EOD, truncated [ 444.592851][T10149] chnl_net:caif_netlink_parms(): no params data found [ 444.736736][ T5840] usb 7-1: Using ep0 maxpacket: 16 [ 446.168078][T10177] netlink: 40 bytes leftover after parsing attributes in process `syz.7.930'. [ 446.179436][T10157] netlink: 'syz.9.925': attribute type 64 has an invalid length. [ 446.209076][T10157] netlink: 16 bytes leftover after parsing attributes in process `syz.9.925'. [ 446.386478][ T5841] Bluetooth: hci5: command tx timeout [ 446.541335][T10188] netlink: 'syz.1.931': attribute type 1 has an invalid length. [ 446.596497][T10188] netlink: 168 bytes leftover after parsing attributes in process `syz.1.931'. [ 446.635444][T10188] netlink: 'syz.1.931': attribute type 1 has an invalid length. [ 447.837197][T10149] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.848941][T10149] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.939938][T10149] bridge_slave_0: entered allmulticast mode [ 447.950425][T10149] bridge_slave_0: entered promiscuous mode [ 447.964723][T10149] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.973210][T10149] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.980974][T10149] bridge_slave_1: entered allmulticast mode [ 447.989810][T10149] bridge_slave_1: entered promiscuous mode [ 448.052365][T10149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.092814][T10149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.103449][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 448.214639][T10149] team0: Port device team_slave_0 added [ 448.264850][T10149] team0: Port device team_slave_1 added [ 448.277331][ T9] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 448.311878][ T9] usb 2-1: config 0 has no interface number 0 [ 448.349153][ T9] usb 2-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64 [ 448.382747][ T9] usb 2-1: config 0 interface 216 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 448.411116][ T9] usb 2-1: config 0 interface 216 has no altsetting 0 [ 448.419787][ T9] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e [ 448.431266][T10149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.443282][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.471863][ T5841] Bluetooth: hci5: command tx timeout [ 448.477732][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.488047][T10149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.501467][T10149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.510537][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.538720][ T9] usb 2-1: config 0 descriptor?? [ 448.547220][T10203] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 448.590578][T10149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.653051][ T9] usb 2-1: NFC: intf ffff88806bdf2000 id ffffffff8eb411e0 [ 449.360789][ T5840] usb 7-1: unable to get BOS descriptor or descriptor too short [ 449.371355][ T5840] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 449.393207][ T5840] usb 7-1: can't read configurations, error -71 [ 449.547676][ T10] usb 2-1: USB disconnect, device number 11 [ 449.590241][T10149] hsr_slave_0: entered promiscuous mode [ 449.597151][T10149] hsr_slave_1: entered promiscuous mode [ 449.603495][T10149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.611202][T10149] Cannot create hsr debugfs directory [ 450.536645][ T5841] Bluetooth: hci5: command tx timeout [ 450.678136][ T926] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 450.878644][ T926] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 450.893258][ T926] usb 8-1: can't read configurations, error -61 [ 451.031702][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 451.044872][ T926] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 451.208429][ T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 451.230017][ T926] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 451.248276][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 451.274840][ T926] usb 8-1: can't read configurations, error -61 [ 451.293268][ T926] usb usb8-port1: attempt power cycle [ 451.300419][T10149] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 451.300878][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 451.323686][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 451.329197][T10149] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 451.341745][ T10] usb 2-1: Product: syz [ 451.346107][ T10] usb 2-1: Manufacturer: syz [ 451.351750][ T10] usb 2-1: SerialNumber: syz [ 451.354383][T10149] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 451.374117][ T10] usb 2-1: config 0 descriptor?? [ 451.394866][T10149] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 451.400297][ T10] usb 2-1: selecting invalid altsetting 0 [ 451.591750][T10149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.609810][ T5916] usb 2-1: USB disconnect, device number 12 [ 451.657175][ T926] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 451.689335][T10149] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.690220][ T926] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 451.708684][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.715943][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.736698][ T926] usb 8-1: can't read configurations, error -61 [ 451.755721][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.763069][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.876477][ T926] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 451.876678][ T5908] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 451.919825][ T926] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 451.927848][ T926] usb 8-1: can't read configurations, error -61 [ 451.937840][ T926] usb usb8-port1: unable to enumerate USB device [ 452.055019][T10149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.066701][ T5908] usb 7-1: Using ep0 maxpacket: 8 [ 452.076177][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.088655][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.102175][ T5908] usb 7-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 452.113574][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.127745][ T5908] usb 7-1: config 0 descriptor?? [ 452.138746][T10149] veth0_vlan: entered promiscuous mode [ 452.174928][T10149] veth1_vlan: entered promiscuous mode [ 452.241881][T10149] veth0_macvtap: entered promiscuous mode [ 452.252497][T10149] veth1_macvtap: entered promiscuous mode [ 452.273806][T10149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.286319][T10149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.401417][T10149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.417421][T10149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.426273][T10149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.435336][T10149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.049755][ T5908] uclogic 0003:2179:0053.0015: interface is invalid, ignoring [ 454.438993][T10267] input: syz1 as /devices/virtual/input/input17 [ 454.457860][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.468945][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.545858][ T3553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.578841][ T3553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.959308][ T5916] usb 7-1: USB disconnect, device number 15 [ 456.096278][T10280] random: crng reseeded on system resumption [ 457.116864][ T926] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 457.368078][ T926] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 457.399806][ T926] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 457.438893][ T926] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.473328][ T926] usb 10-1: config 0 descriptor?? [ 457.491810][T10281] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 457.526549][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 457.675447][T10300] bridge0: port 3(veth0_to_bridge) entered blocking state [ 457.683867][T10300] bridge0: port 3(veth0_to_bridge) entered disabled state [ 457.694033][T10300] veth0_to_bridge: entered allmulticast mode [ 457.699755][ T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 457.704239][T10300] veth0_to_bridge: entered promiscuous mode [ 457.716134][T10300] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 457.732004][T10281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.736711][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 457.752535][T10281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.774263][T10300] bridge0: port 3(veth0_to_bridge) entered blocking state [ 457.781604][T10300] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 457.786652][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 457.795233][T10281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.817123][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 457.817898][T10281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.847353][ T9] usb 2-1: Product: syz [ 457.851653][ T9] usb 2-1: Manufacturer: syz [ 457.856313][ T9] usb 2-1: SerialNumber: syz [ 457.861210][T10281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.902281][T10281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.902991][ T9] usb 2-1: config 0 descriptor?? [ 457.947992][T10281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.954213][ T9] usb 2-1: selecting invalid altsetting 0 [ 457.974500][T10281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.015395][T10281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.039611][T10281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.185824][ T5840] usb 2-1: USB disconnect, device number 13 [ 458.297116][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 458.309942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 458.323037][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 458.335730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 458.348379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 458.361130][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 458.373813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 458.386501][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 458.399155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 458.411824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 460.699996][T10309] input: syz1 as /devices/virtual/input/input18 [ 463.306678][ C0] net_ratelimit: 12468 callbacks suppressed [ 463.306698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 463.325228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 463.337751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 463.350286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 463.362879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 463.375409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 463.387945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 463.400474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 463.413008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 463.425552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 468.316548][ C0] net_ratelimit: 16786 callbacks suppressed [ 468.316589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 468.316991][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.322927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 468.334973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.346945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.366534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.371259][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 468.382996][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 468.395124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 468.408481][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.326428][ C0] net_ratelimit: 20297 callbacks suppressed [ 473.326452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 473.327620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.332775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.344815][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.356903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 473.377755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.380823][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 473.392717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 473.404741][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.418129][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.336600][ C0] net_ratelimit: 16690 callbacks suppressed [ 478.336620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.337430][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.343049][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 478.354930][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.366967][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 478.380228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.390929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 478.402942][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 478.415005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 478.428179][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.346569][ C1] net_ratelimit: 15612 callbacks suppressed [ 483.346591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.346631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.352987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.365053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 483.378225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.390098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 483.406774][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.413043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 483.426287][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.436968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.356661][ C1] net_ratelimit: 16200 callbacks suppressed [ 488.356682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.356720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 488.363118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.375076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.388217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.399245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.411070][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.423194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 488.436050][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 488.447085][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 493.366448][ C0] net_ratelimit: 17198 callbacks suppressed [ 493.366469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 493.366585][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.372781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 493.385841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.396984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 493.408807][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.420945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 493.433695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 493.444839][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 493.457673][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.376731][ C0] net_ratelimit: 16843 callbacks suppressed [ 498.376751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 498.377610][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.383155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 498.395124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.407174][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 498.420073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.431225][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.443297][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 498.455542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 498.468351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.386592][ C0] net_ratelimit: 17696 callbacks suppressed [ 503.386613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 503.386962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.392969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 503.404980][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.416993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 503.429945][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.441016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 503.453688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.465887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 503.478793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.582617][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.664505][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.396603][ C1] net_ratelimit: 17437 callbacks suppressed [ 508.396623][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.396681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 508.404451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.415141][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 508.427108][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.439098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 508.452521][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.463314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 508.475348][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.487302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 513.406591][ C0] net_ratelimit: 17205 callbacks suppressed [ 513.406612][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 513.406763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.413374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 513.425303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.437324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 513.450324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.461414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 513.473329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.485717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 513.498524][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.416448][ C0] net_ratelimit: 17571 callbacks suppressed [ 518.416467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 518.416816][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.422830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 518.434855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.446872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 518.459912][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.470920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 518.482883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.494945][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 518.506844][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.426633][ C0] net_ratelimit: 17532 callbacks suppressed [ 523.426652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.427201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.432983][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.444909][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.457267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 523.469095][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.481344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 523.494026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.505448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 523.518484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.436530][ C0] net_ratelimit: 17788 callbacks suppressed [ 528.436549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 528.436637][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.442917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 528.455863][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.467014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 528.480066][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.491076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 528.503019][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 528.514953][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 528.528015][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.446628][ C1] net_ratelimit: 17890 callbacks suppressed [ 533.446648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.446840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 533.453057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.465358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 533.478119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.489393][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 533.502439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.513512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 533.525505][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.537441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 538.456416][ C1] net_ratelimit: 17591 callbacks suppressed [ 538.456435][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.456639][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 538.463962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.474907][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 538.486895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.498913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 538.512047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.523004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 538.534963][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.546938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 543.466444][ C0] net_ratelimit: 17369 callbacks suppressed [ 543.466464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 543.467710][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.472785][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 543.484810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.496933][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 543.509859][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.520932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 543.532858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.544956][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 543.556564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.476460][ C1] net_ratelimit: 17224 callbacks suppressed [ 548.476480][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.476644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 548.483799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.494951][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 548.506873][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.518860][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.530709][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.542997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 548.555603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.566969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.486422][ C0] net_ratelimit: 17235 callbacks suppressed [ 553.486443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 553.486442][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.486723][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.492922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 553.505757][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.517219][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 553.530099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.541277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 553.553254][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 553.565349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.496541][ C0] net_ratelimit: 17531 callbacks suppressed [ 558.496585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 558.497615][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.502938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 558.515003][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.526988][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 558.540622][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.551489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 558.563445][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 558.575643][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 558.587537][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.316361][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 563.323362][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10311/1:b..l [ 563.331866][ C1] rcu: (detected by 1, t=10503 jiffies, g=40717, q=1382 ncpus=2) [ 563.339696][ C1] task:syz.2.960 state:R running task stack:25224 pid:10311 tgid:10310 ppid:10149 task_flags:0x400140 flags:0x00004006 [ 563.354107][ C1] Call Trace: [ 563.357376][ C1] [ 563.360292][ C1] __schedule+0x16a2/0x4cb0 [ 563.364796][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 563.370064][ C1] ? __pfx___schedule+0x10/0x10 [ 563.374903][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 563.380167][ C1] preempt_schedule_irq+0xb5/0x150 [ 563.385260][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 563.390965][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 563.396750][ C1] irqentry_exit+0x6f/0x90 [ 563.401147][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 563.407104][ C1] RIP: 0010:unwind_next_frame+0x24a/0x2390 [ 563.412887][ C1] Code: 8b 6d 00 44 89 f8 ff c0 48 8d 2c 85 e8 2f dc 90 48 89 e8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 1c 1c 00 00 44 8b 45 00 41 ff c0 <4a> 8d 04 6d 00 00 00 00 4c 01 e8 48 8d 34 45 80 38 27 90 48 81 fe [ 563.432473][ C1] RSP: 0018:ffffc9000516ec98 EFLAGS: 00000202 [ 563.438516][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: c390662a7c724200 [ 563.446465][ C1] RDX: 00000000000a6bfd RSI: ffffffff8be1c9e0 RDI: ffffffff8be1c9a0 [ 563.454413][ C1] RBP: ffffffff90e0db40 R08: 000000000003cc25 R09: ffffffff8172aae5 [ 563.462382][ C1] R10: ffffc9000516edb8 R11: ffffffff81acff90 R12: ffffffff822ad596 [ 563.470352][ C1] R13: 000000000003cc24 R14: ffffc9000516ed68 R15: 0000000000012ad5 [ 563.478319][ C1] ? save_stack+0xf6/0x1f0 [ 563.482718][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 563.488850][ C1] ? unwind_next_frame+0xa5/0x2390 [ 563.493951][ C1] ? unwind_next_frame+0xd4/0x2390 [ 563.499044][ C1] ? unwind_next_frame+0xa5/0x2390 [ 563.504223][ C1] ? save_stack+0xf7/0x1f0 [ 563.508619][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 563.514750][ C1] arch_stack_walk+0x11c/0x150 [ 563.519495][ C1] ? save_stack+0xf7/0x1f0 [ 563.523900][ C1] stack_trace_save+0x9c/0xe0 [ 563.528556][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 563.533908][ C1] save_stack+0xf7/0x1f0 [ 563.538129][ C1] ? __pfx_save_stack+0x10/0x10 [ 563.542963][ C1] ? seqcount_lockdep_reader_access+0x102/0x180 [ 563.549211][ C1] __set_page_owner+0x8d/0x4a0 [ 563.553963][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 563.559319][ C1] post_alloc_hook+0x240/0x2a0 [ 563.564065][ C1] get_page_from_freelist+0x21d5/0x22b0 [ 563.569608][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 563.575565][ C1] ? prepare_alloc_pages+0x213/0x610 [ 563.580830][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 563.586639][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 563.592971][ C1] ? policy_nodemask+0x27c/0x720 [ 563.597904][ C1] alloc_pages_mpol+0x232/0x4a0 [ 563.602741][ C1] folio_alloc_mpol_noprof+0x39/0x70 [ 563.608007][ C1] shmem_alloc_and_add_folio+0x447/0xf60 [ 563.613622][ C1] ? filemap_get_entry+0xad/0x2f0 [ 563.618625][ C1] ? filemap_get_entry+0xad/0x2f0 [ 563.623628][ C1] ? filemap_get_entry+0xad/0x2f0 [ 563.628633][ C1] ? shmem_huge_global_enabled+0x174/0x3a0 [ 563.634424][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 563.640582][ C1] ? shmem_allowable_huge_orders+0x414/0x420 [ 563.646553][ C1] shmem_get_folio_gfp+0x59d/0x1660 [ 563.651747][ C1] shmem_fault+0x179/0x390 [ 563.656149][ C1] __do_fault+0x135/0x390 [ 563.660453][ C1] __handle_mm_fault+0x37ed/0x5620 [ 563.665554][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 563.671009][ C1] ? follow_page_pte+0x8d6/0x14b0 [ 563.676018][ C1] handle_mm_fault+0x2d5/0x7f0 [ 563.680773][ C1] __get_user_pages+0x1af4/0x30b0 [ 563.685782][ C1] ? mt_find+0x15c/0x5f0 [ 563.690009][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 563.695372][ C1] populate_vma_page_range+0x26b/0x340 [ 563.700808][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 563.706766][ C1] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 563.712643][ C1] ? down_read+0x1ad/0x2e0 [ 563.717059][ C1] __mm_populate+0x24c/0x380 [ 563.721658][ C1] ? __pfx___mm_populate+0x10/0x10 [ 563.726765][ C1] ? up_write+0x1c4/0x420 [ 563.731092][ C1] vm_mmap_pgoff+0x3f0/0x4c0 [ 563.736034][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 563.741226][ C1] ? rcu_is_watching+0x15/0xb0 [ 563.745984][ C1] ? ksys_mmap_pgoff+0xf4/0x760 [ 563.750823][ C1] ? syscall_user_dispatch+0x4f/0x90 [ 563.756088][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 563.760859][ C1] do_syscall_64+0xfa/0x3b0 [ 563.765343][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.771389][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 563.777518][ C1] ? clear_bhb_loop+0x60/0xb0 [ 563.782191][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.788069][ C1] RIP: 0033:0x7f4be7d8e929 [ 563.792461][ C1] RSP: 002b:00007f4be5bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 563.800855][ C1] RAX: ffffffffffffffda RBX: 00007f4be7fb5fa0 RCX: 00007f4be7d8e929 [ 563.808899][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 563.816867][ C1] RBP: 00007f4be7e10b39 R08: ffffffffffffffff R09: 0000000000000000 [ 563.824907][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 563.832880][ C1] R13: 0000000000000000 R14: 00007f4be7fb5fa0 R15: 00007ffeed2c25d8 [ 563.840856][ C1] [ 563.844440][ C1] net_ratelimit: 16631 callbacks suppressed [ 563.844456][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.848087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 563.850812][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.862785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 563.874558][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.886922][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 563.899536][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.910849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 563.923816][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.935080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.846617][ C0] net_ratelimit: 17138 callbacks suppressed [ 568.846638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 568.847070][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.853031][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 568.865038][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.877106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 568.890182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.901227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:df:70:b4:89:a5, vlan:0) [ 568.913160][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 568.925127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 568.937028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)