last executing test programs: 18m39.790505101s ago: executing program 0 (id=289): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000440)={0x1f, 0x400, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) 18m39.782948499s ago: executing program 0 (id=290): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x5c, r1, 0x201, 0xffffffff, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x20}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}]}, 0x5c}, 0x8, 0x3000000000002}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000011c0)={0x1, 0x0, [{0x4d0, 0x0, 0x9}]}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000380)={0xdddd0000, 0x1000}) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x24}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x80}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x60}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x850) 18m37.553182698s ago: executing program 0 (id=298): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000440)='\x107m\xadJ\xdc:F\xa0\x06\xe6\xbb\xb8\xb0\xe8\xc3\x87\x12+\x8fY\xee\xc7\xd0,\xc6\x01*\x88\x14U\xde\xfa:\xee\xe8\x1d\x91F\x86)', 0x0) finit_module(r0, 0x0, 0x0) socket(0x1, 0x803, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) r5 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r5, &(0x7f0000000700)=""/115, 0x73, 0x5) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@multiplanar_fd={0x8, 0xb, 0x4, 0x1000, 0xffffffff, {0x0, 0x2710}, {0x3, 0x1, 0x4, 0x2, 0x4, 0x6, "09dcd1bd"}, 0xffff8000, 0x4, {0x0}, 0xd}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) r6 = dup(r4) r7 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r6, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r7, 0x47f5, 0x24, 0x0, 0x0, 0x0) 18m36.593863033s ago: executing program 0 (id=301): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x3, 0x7}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008850) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002440)=@newchain={0x2d4c, 0x64, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0x9}, {0x9, 0xd}, {0xffff, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1d18, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_CGROUP_EMATCHES={0x120c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x194, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x38, 0x2, 0x0, 0x0, {{0x460, 0x0, 0x2}, "baa8ab3e98b804a1a5e45a2f52937a4100b65a940431aa13846009778a8bf942224aaf3f5989bff08f5c"}}, @TCF_EM_CONTAINER={0x3c, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "30f04d3e5a82d29d5f2766c53c2594c1c4cb345751d38576e85bd15b3e3bae7f8908e0d1711c2a73e5f4bdd35f1d106d"}}, @TCF_EM_CONTAINER={0x60, 0x2, 0x0, 0x0, {{0x10, 0x0, 0xffff}, "390b93051da5ab2b35da0e81bdcfc8e0171855d4b98cbd87ef84ef9c6c8b3f3c6fc768fcb5a41340a761b067221d22854c90835ef7917e70cb6ccd75879704cd19f56a19ca1cb913214d8fa17cd9a74c93"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x59, 0x7, 0xfffff000, 0x6d90}}}, @TCF_EM_META={0x90, 0x1, 0x0, 0x0, {{0xa27, 0x4, 0x40}, [@TCA_EM_META_RVALUE={0x28, 0x3, [@TCF_META_TYPE_VAR="5dda578d1c2f", @TCF_META_TYPE_VAR="c422", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="4affb3e84511bac5a1", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x37, 0x3, [@TCF_META_TYPE_VAR="e86ccf24a5fc5dfd04", @TCF_META_TYPE_VAR="087f077f2590d208", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="97239010df2805af1cbc", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x4, 0x1}, {0x1, 0xeb, 0x2}}}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0x9}, {0x3, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xb, 0x1, 0x3}, {0x3, 0x80000001, 0x7, 0x5, 0xa, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x1058, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100c, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x4}, "6ffa59823f479436eae122f1bfc91fe0d4b6db047e6781612e4785f4affaf7053bc6c61b555ebf176c28c831839295aadd6261e7659c326a36ba766c8cfe9400944b892056e928508f50fa636ff7a2228a96edbe865d3848ddc2e0959414d03d20b7c7657f318a0c0223dbb4b3e9e85c7f79a5c34169a3d7e72879f92d9cd35b710044aa87c7ef4f91fb8fcb8df3ddd42a47e8581269727747eda584abd45fd18a761264c48fbc1135c12d7689e513e99cde1bfc07c290bd966f8446b699b2e3b5232c90a1a2835ab18510fbdb82ed78ab2f86e4df7b703f9b47bef996a4e64dbcd8574c21cfd11fc319d2905adcf516adb369f337660baea798aaf7cf37935c97f725566b76780fdb5aeb64d2f3717fbac40e1a0328c97259aaf59772c3321b6d2e43bcc3eb2a0444f08cecec14f123488c799033a85edc626bdcb177954c5b4b9bebd7c0ed4729cb5defb749552e34d743ec728d250dcd4dec4dfeb71b74082a0a9e6de4162f409323f15184b87e25e610994030daca53b7233adf302a9fe70928c224d065ba669978ddfd91512de33b9a05f4c6445122a44a3f5194a1fcb6f220ee2e7804727acb1ffac9d0fa58ab0db0b9d42669942a48d63470fd35fd6a713d9a370f5b4bc1a5122d55ad44952a905bdddb8a861bb4ccc300e28b200cb9875cf55bfd8d059a8873676f8a0bfc6a1c4651fdd2b26ec30d2e35d533a1fd4d6f0fa09d41a295e579d7f609d78bbc9f0f42f2c389bf1aa6f9449eb5d1452db0ca171ec481686c79a311e44a0da822301b2c33e322e3626512b2ac13752e2827a8159b1ce9a70ed3017d10ed5f64ae2906516a70ba3bdb33757e655428166c9e2e31c62cb9215cf8af6fde0cc8d6fc48be060f1dd465785e871818a04b7cbdbaebad2bef9eeff1367c8055bd71c5d47c496b1027c002cff1210fe46afb2652c12fc4ba5bddee95e1739eadaf4936c4874ddfdf748bb04d503dabb48edda1377862d4163906b175974e238be75ae5927de41601dba1b33232e91e0b5bf1809f072bd50565a279d6adb05b8f8dd668f4370170b407c470054d872df71244eadd87e12eaa168c8fc3a3853aa4beba468b9a2b8a0ba860d15f2b55fd1dada28a6e72c23bd293660c19cb2c093f7a38bfbdd8df50fcfd3ff1a808c1610a7aeef4f6df08737854b3f302267ee44306ef6a44d6db1208d383f455b56bab74df25f3c045212ca7d5e7334bb68d61e337489a9527623d4bc9558294b6a2a40650d0faf1697602c3d309ff6abd4e130504b43c9f0646653d5f98fdcc54a25832cc53be211f183543d015082c9b4f10c72ec02a5a29051c364881eabce2cdc19d65cbbd3eef92ec4cc38bbbf1e0742efc39475cc61e89fc144713d0052dba8803bb11f9cc9ba6a63bd2415b1accaac71c9dac1e64daa130c9cbaaf49c7af7efad232ed21fe758ef9e2c0c37ebd06d81f7c80d9c95ea389a03d17f21ba0b7ab9aaa1f3b8b1fdd8c6c11b03ab93053d8253cbf137b5ffcda0165c1a81c0e68f2cebcb9a44784535d5abf98b458b307c28d09486eb5f12265a704b0621b70f54b3b976a8edb7b3e57cb04a7618dacf8d62b44b6ae292d08713ef319401d944fb2c17b57c754a603f8101cc32c1fc37c787ef14f9f32b0d96aae6e5b66c647c70fb277b32dd64481be2822706a6d1cdd1b246913001e8277183a6fe0cf03ba21ab465ef442cc8885acb48f069dde36b51accd653bc706fdf5a2092128041979f98cce48b50517b2ccb5ecb336050781ad0f467481e6761607b6cefbd5114c3bdc8f3218c4ffe0939f5b8ba6ba40d51018a59ff659f35a6dc6376329dd5988287c2210d5694414f7bf4ed30a83f5b8082f05a0058786369514daa263ce36de7d2449dd444c913ee0d4d206b9d6f02e71421eb9c1348f7c79b6eadc70699093135e743b157e63724041d071fcdac9c53c4af97273bd3387e33df124101cd64330ccab1057d6d954550c5aa6563daecd054d3aa64f743a4e2ab03b7f41bedacabe98d102dd09f0d233800ffe99d9b892e360b30117e677b3405b24b6051c5c5c3c7945916b85f146095318598d3157a7c903fdecad89da542bc5a6959d73fd93851058fd9e602d317d00b975122193c2688dfe908385550b5e17091484b10359a9dae0dc9a33a2068e4b4a87e30401ac9b4ca3bef2431e28e5afd6a40d917623a3d1b60a6ab498e2ed5913faefe5ce39fc56785b573130639ef4d395e7da8822739132c0b2fe5322dc3b4face3bee902894540e78a63b06be0109e9eb1ae736a2560ef41e8945376d4685417e8a855610094553c48b1144daadb44a2f11d94d53ff5f59a662c6f3160a9ff0c27bcafdb81b21f76028f8bd822f622b7c1d7fe945c3139064194ec8083ff5c350a864a0b46e6696688c96802f98ef05b05bb90c8e6971a2aaa049e2b99bc0b6e2d1df62be99f2e91fc4e17c1ce1c434aed8f0b9ba2f51bb26922d43a93adc772c75f70355a0cff6df6928b3ac727e69e2c7f850f3263b479c360e99d274199311a2b82d12a5b21720c9b1bc97712f24893d43fa4c650b193031f0ca783b1f8c60eea75e275509f1c4531bb96d88f633523f4fe48328825c1105d49e22f53e187ccece10ad082d7a74299746a29920a4b81f40b25de197759ab8944440b3c9c4558f1838383cbffe69bdbefc13d0bcc7ef442307ddd22a42aa68dc60c0cf9ae4e26e6d69d044596fa22ec6205453a4b63db5e9a2dffcb9064c293ce6badf4fcdc8db1066fd77bebfb3ad11066366ddccc9f9b195d69ba227ee5eb3ba943caffed35cf81cc13e00a8de8de8c81698be11c8a036126f794af8667d5a36dcd28c399879c5c11e9dd9c6a27a371ffebcf2c0930a2292ece2c0edd76e765bfbbd7268078e5116970e565cb603b142af94bf79e4d7687bf4a70ed8cf7fee2251d906b7f7aeb7b08a8c43c5f1ddd74386d2a46953a0c7efaf2ce4d3d7c7262389791057656b6b666d53119a8466668a7fa39676638d0458be5b15f71dae49f03b67419ed4f83a0a77182d76a9ccab229f3e1e0a9d7ce15275439d5699b34bedc1a5105bc63c37c2cd3567dfc5cd7f16400e08e9529af09492e360648f8760e3e4194e62f21c460247240b21ac873ffae7c4b93ad8a001c2cd0c6bcd38f8e48e4ce8b84c474f4fd1af1bef76a30f939e684886cf00bcaa4c1c2097b70b9570fec2b699709d83adee3d9170bb115f3adc563f0e084718631b94322e3deff1324f4fe4704378f7aad7015389396a6dfe95e4dac322c3b09aef8008b0f0fd0fe66aee604b925bc43a1705e7902e9db0fbfb14160da590e86871dfec377a582f11808e5349c0ef4aa41d907f23b43cf08ad2a607d3031f5dcc6e8ca89abdc0930048fe8936a8191bba170e606236b0df6ae1715a8bdadc18f2767f72315da89a97136dbeba8ee944cb08a77f3551a9b56cb966c7d8628b0620bafb4f8188e59a5ba20b7e2675b820bb9dacc06dd48e26de038d14bdf68232dea3f3dea995ea30cb70aea1891eb9f0e849ff7d0ad58ae7f4f85f09b097907a471da3c96e89ef7f60546df33d792d6e267a80658039d5d1c5c542777cc73677367deae697bce45e35f5aba60cc6d3678f508342e1d1daf0f7a5a62da14a4d2a9d7162a37b67982e2892d284d9a68fbbcd6c1d80a19f7ee5c7fd039c82044281e6a99050eff6abf7e7c8dda05fa62f56b9770fb9b2d9e49f3f103d7123dccb11dd90f0616d0b12b34c8690187fea916064537cd30550b171d5afddae032b7f8197aece1d4931a6af01bcba7802837983d97d02b348232b8fde1de602281e2fa1247a358c430d28dfd8f622871f4dcdf66c9e0e0cda15ef5c24cb45a1f48a02bc8969f8b2b78b82d827096aceb392eebc4d45bc1145436285635abeccac168bab436d8d8cc3a488c6c5c69d6f5576d3c83d14531ba924476e85b06266ec90142e02b96df0da1fc136c5a9ee90da6ee38c897da1e618443414491dba64d0e576e52a4c6cff101adabf7f448e6e79f8898cfc4c8d522a2e773bbc80db6943da5329f7e98ca537bd34ffd49ab39d1d1f87e060144b110bf145d6c43e07dba896ce82625da93df792db26de8ef4bdc49cd475f8eee4799ad77911492161533b339b2c4ff46c2dd4026097ecc41019405effb9a8ad965e3be6e2929a15d2c82d937bd205b9693a2da0424d105c612fc30758d3bec4e96940800da3b28efe059a3e9b8a54f936a8caaaa8ef9523548c4a0da5bcd387da5af9785aedb99853f6998fabd132bcc7fd7efdee0998c119794b856b56b3faecb2ee7d59e5703c8e75c1e07d04732853e4949ecea300912e88eca4b0cfcbbf79cbd55836af4a42ce9c875c91b2208d5c4b8c02750f94f7bf43739ae66f2f19c967c49af2cfb7de4e4ef60a62d0aaa005fbec19add7801a8418d2714879a4884f1cef1d9efac5170220544386ce6e4b0ad2cde04f8bcc7fd404a27c0e4dd2f5908b0fd283c2cc84aca5f801c771e75b825fe132f591a42bb63b09baef68986d751dbd52e83894e050922d82e0d66348fe7654e7deca6b67b6227e4cfa255905631c14123f815d5ddd850c9e293664bf26466453335a3a42976de02baf0fddd1dc4c098c2c8e9f62c167b7c99f3d6b91a5138ca0175c9a7400567a1313755e357010209a8dbc177ec331877b268fc0f9872fc0075d32dba2c3adb39fe6e99281353dfa83eae37e56331312ff513a29b462315758205da8b501722f7618ef07ec9ea19eee87d85a43b45b6a0f3639ccaca68d0c4d61c896454da3b5d9d29fe4fdcbbf2033783387f28160b8e6af4b330289192cb0445494a3a7ec9f47d0103c003123170204989986e4a4ea1961289a3fe4b095ea9203175ae326ae719eb3be74bdbc8e686eb2228f850a055ce4e7521512bccae252bcc3588d6da1b57350eaae59fa77aabea30863435ec94ccf6c72f2335aaeef391e00520b9221e11412154938c12ddd748c8b9ba5d2918b57fef439ffa04e6a140942bf8c11c6a78337daf1ffe10a6f42b1727d3c3df9f5e5192ec77fadb072d79e1888ae9648e04ee544aa52c7bfddbb0fb1d9a85dec5f1a3bd2d929ffd8a3737016c2d28d20b8bc34c1f40f6ba9b245e9f5fcabab01db574b9bdfda0d9f7cf820a973bcffe0c555fa24a96f950a5632e1f524cb0f9432de55c848e2605deed688c4b68b6e0569b66afabcde5e71635f8e9763403f4920f9f09d985bbd259c01998058ca684fc088804253a7b95b98ba49d15599e93111524963c47099d62c3ffecca698678b5dd6896f913201ca69dd17d3d578e1b13873d1abf58127eac7268b22dc67e5dac78aa252138d432d32b20592bd07f3a3e952fb7da7a919f4237f18b831c6af9d80f3f05c7957bd032692b8f99341b9a4a78df680c96844c8d939ae19289fba7ae41b3e2e91d383bffff424ebf61dbb246216a3947af0c72af337e552593798898b5ee80daf15337bf52202e2e83a9a56cfe617c667178c0bc11ee05e065325be1540b5810beffaa81d390faf6ca5346b174516e3abd93f9c57991e84b8c28e9f7b1c70d6fd86dce438d244df07d99e6d66a3d01f6cee25b6a1c0f833a8d56fb5520001ed3c39eaabbd746bdd34b4246775fa453cf8e0a406bd51409f1f094fb303b147473f8390cd4e5fc7e15e07515e2aa9099bf8ba5ec21ebe71cb8bb208298148bfe1dd18a839ef5fb0120781520f3bf024d246d4233dcf35c95085d3a67542ad11702b64278262d591984d3bdc0c726846057f26229f55e366017700f"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x5}, {0x4, 0x5}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x8001, 0x2, 0x7}, {0x6, 0x9, 0x0, "65811fb4e72815d9a3"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x3ff}, {0x5, 0x7, 0x409a, 0x10}}}]}]}, @TCA_CGROUP_POLICE={0x7c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8f87, 0x10000000, 0x80000001, 0x1, 0x1, {0xe, 0x1, 0x101, 0x7, 0x700, 0x2}, {0x8, 0x1, 0x8a97, 0xa, 0x100, 0x1}, 0x38000000, 0x4, 0xb551}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x7ce12c50, 0x5, 0x7, {0x5, 0x1, 0x7, 0xfff, 0xffff, 0x80000001}, {0xe, 0x1, 0x10, 0x8, 0x40, 0x4}, 0x5, 0x8, 0xfffffff2}}]}, @TCA_CGROUP_ACT={0xa80, 0x1, [@m_skbmod={0x130, 0x1f, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x4, 0x3e0, 0x7, 0x2e89987a, 0x1}, 0x5}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_DMAC={0xa}]}, {0xb6, 0x6, "9736ee49510a4affddd8319d0feba7b706d49155f02821835ebb8a75614cd10d7472cdd093b692e06ed0d389816284a2218791ed34069818288938a42f04f8202d1d2eca7c09196430f3afe4952fd92724374a2db7176ce3cadf6c624c6afdb618e20a6bef985d0e2e8eaee5f268525507ec600b42d47dd699317a540752123b43bc25de755e2ac59b87d966a7f18f787a6a13865635e620a988776fdf821564bd981d511cf0dd2f752ae662b8ecfd5956fc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_gact={0x118, 0x20, 0x0, 0x0, {{0x9}, {0xdc, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffd2, 0xb, 0x20000000, 0x3, 0xe6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x7d1, 0x0, 0x4, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1842, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x8001, 0x7, 0x1000, 0x10000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x2, 0x9f1f73d4bb8ed040, 0xe6a, 0x7f}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x4, 0x0, 0x7, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x3, 0x7, 0x4, 0x10000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x0, 0x0, 0x7ff, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x800, 0x4, 0x6, 0x2, 0x841b}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2359, 0x6}}]}, {0x13, 0x6, "319843cbb85dddb39567f1c52a3bd2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x138, 0x1f, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x7fff, 0x1, 0x7f188b70, 0x1000}, 0x1a}}]}, {0xed, 0x6, "856f09299f37a083583a7a26646ee17602664fab4b637ba2d031cca2093ef6ac6b519d263c46f97df773a1ea81d7bb70d4992ab0fe6cffd4542abe1a784652e2ca05700630aa075acdfca8ac49557e382ddcf244a7b16a91f393dd5253f2af13ee9d608cab8ccda4828cb00ad75fbade72f4dee8061fd6f436e246a784c88572a52ab2da0f731b7e9b77a04779621a84e386a0ad9276c155258f017e582dd562a7e67e73e408389d7a62172eeadafb8f6c214b060f6f1e6d91c05e9c94d7e791e1af79fd3e29932ce6eb242b721eeb564e47b454089b90178cc917aadea11f3ce2c8a50289e0f5db5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x1c0, 0x1e, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x5, 0x5, 0x1, 0xffffff80, 0x7f}, 0x8}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8000}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="9fb36cce2959"}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0xe, 0x7, 0x4, 0x2, 0x80}, 0xa}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x0, 0x7, 0x5, 0x1ff, 0x7}, 0x1}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0x101, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_skbedit={0x148, 0x10, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xf, 0x6, 0x1, 0x9, 0x7}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x4, 0xffe0}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0x6}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xdc, 0x6, "862fe9a4a6644fc4faf813d22fa2e46ffad68c0ac07500fb40db1fd78e138744993c4b6d8aa58de1e0d9c1f5eaa975ab65a208048251edb03f36eaffdacdf1c50536af8534d328babf5e74b916cbc1cc1712efb1ae7f2f80ad4a72a13e2d2354454a2da1950f298cf06063fecd778feb80ca9f37f792c3191dda084e04a001744a2b5cdd805db39adf333019beb21d498b5125921e1036cd5e5178d4073e64b9f759e9ed3e6ebc8a01fc7685da71cea072db7d6c1484a2e09a263e68c4acc177bfcdf73eedeb3aaa1ef07d0aa14a5e6239e62c8c30d30129"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0xd0, 0x2, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '$*\x00'}, @TCA_DEF_DATA={0x7, 0x3, '-&\x00'}]}, {0x92, 0x6, "8686f2b62d8255c65afa83f12f3fccbaf1353153e0ffa427a3ed45eab2d1697e550aa91c01a8177e714119d3ea1352e054d5fef2dc88160f336ee37b147510f03ebbff15cfe0971536654306618fb570c69c0f027a703dbcbf889b93c100278b2696d58890a58fdf8fad9dacfef2be48db5415d2810e1fd3df11fed1b6c91c11ccdfed695d946ac095c6ae28d489"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x188, 0x5, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x38e, 0x20000000, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x1, 0x5, 0x2}, 0x0, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x6, 0x10000000, 0x7f, 0x101}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x6, 0x4, 0x8, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xc45c, 0x6, 0x0, 0x6}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xe, 0x20000000, 0x5, 0x800}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0x2, 0x4}, 0x4, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x3, 0x7, 0x56963e0c, 0x5}, 0x4, r2}}]}, {0x5c, 0x6, "8cd7c52a23791d103433a1dc737e378675bf63d47d1232c07ad643f225b947718a4132a4b50a3b98f2f46fc2d5649dbcb1d2aebc7fd35a1ce202de71a321b863089d32dd3241574b22e77ae4a173bebc7ee6c4d4ff3dc63b"}, {0xc}, {0xc, 0x8, {0x0, 0x6}}}}, @m_nat={0x19c, 0xb, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xb, 0x8, 0x1, 0x6}, @multicast1, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff9, 0x7, 0x2, 0x8, 0x8}, @multicast1, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7e, 0x6b3, 0x2, 0x9}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xfffffff7, 0x1, 0xfff, 0x6}, @loopback, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8, 0x2, 0x7, 0x80000000}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0xab, 0x6, "0377d6829ba2afcbcdea2bad508c115f8bcd9cb174d243148750448238afd2db5aa13b195986c624dac2298792955e1b10a09ebb4c57932a426f8ef3a7c672abbe4234e34619c94ccfbd7128d6f00fb99b57bf7f8d77b403b2032f8193faa1cfe66421b04a6262b5a19bb75a5d5839050880900fdbda8c81156e7a97e30b02235088500bd5c2062ae10677110d6c5a808194bca70aa25be794c14d2a53ccaf1dab6b81c58a8873"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @filter_kind_options=@f_bpf={{0x8}, {0x2e0, 0x2, [@TCA_BPF_ACT={0x2a8, 0x1, [@m_skbmod={0x168, 0x18, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xffff}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xdaa2}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0xd, 0x35, 0x2, 0x0, 0x8}, 0x7}}]}, {0xf4, 0x6, "2e7a5970cb82ecd43c9518ca7146224b82d17a8b8f9806c1d5f002660f968863a9899cc5c6855f09351f48f9fdec1052ed32c79623cb23721f158ed0c57f1a00ddf01ae476011232d5b8d8bf3a297f45f8056bd56b7d43b9b4f57494615f4eb9f37c85e0a0758794853d8bc811af8c1a16e7a482e6c4120fdf30db84b29cafdd3708ccd6fbf6f50abcaff1eded8651d110ccbdd90549acd879dc8f017d34d0670b5bf7f42e30a6447761726a0952389273304b984ef5a19287da41509e86d7aa335a2653aa5bab83681b959d9521a3376200822403e931e8a95ac91de512b84b71b538ada22c9630ac948c18af40a578"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x50, 0x1d, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0xfff1}}]}, {0x12, 0x6, "2acd635fef4e17f5675030e998b8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0xec, 0x17, 0x0, 0x0, {{0xf}, {0x80, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xccbc, 0x7f, 0x3, 0x2, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0x2, 0x20000000, 0x1, 0x64e4}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x3f, 0x6, "e75f1513640b4e33539618df5fd3b07ff9923789fa71ae8f136999e3c276e171880212f504c7114b4d411e1b267cf67ddc54328a0cf3b5c9c67724"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x8, 0xc1, 0x5, 0x5}, {0x7fc9, 0x34, 0x81, 0x2d8b}, {0x8, 0x2c, 0x9, 0x455}, {0x80, 0xe, 0x7, 0x8}, {0x8669, 0x6, 0x1, 0x4}]}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @filter_kind_options=@f_fw={{0x7}, {0xcfc, 0x2, [@TCA_FW_POLICE={0x418, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x8, 0x5, 0x1000, 0x1, 0x6f4, 0x8001, 0x5, 0x6, 0x8001, 0x8, 0x2, 0xfff, 0x1, 0x3, 0x2, 0x0, 0x10001, 0x8, 0x7, 0x3, 0x6, 0x6, 0x2, 0x8001, 0xc, 0x0, 0x0, 0x4d35, 0x8, 0x2, 0x5, 0x0, 0x18a, 0x1, 0x1, 0xfffffffe, 0x2, 0x41c5c31b, 0x4, 0x8, 0x8, 0x1, 0x1, 0x62c40059, 0x81, 0x4, 0x9, 0x0, 0xedc, 0xf88, 0x6, 0xfffffffb, 0x35, 0xfff, 0x13, 0x6, 0xffffffff, 0x5, 0x0, 0x5cd, 0x101, 0xe, 0x4, 0xffffffff, 0x7b, 0x7, 0x8001, 0x3, 0x9, 0x3, 0x3, 0x4, 0x2, 0x0, 0x3505, 0xffffffff, 0x5, 0x7, 0x8, 0x6, 0xb084, 0x4b, 0xfc69, 0x3, 0xffff5273, 0x1, 0x8, 0xc4, 0x8, 0x9, 0x3, 0x1ff, 0x3, 0x1, 0x6, 0x0, 0x1ff, 0xb44, 0x4, 0x3, 0x5, 0x4, 0x9, 0xa0, 0x9, 0x5, 0x5, 0xfd8, 0x1, 0x6, 0x8, 0x5, 0x1, 0x6, 0x6, 0x5, 0x2, 0x8, 0x200, 0x3, 0xaa5, 0x1256, 0x4, 0x10, 0x7ff, 0xff, 0x3, 0x0, 0x0, 0x401, 0x83, 0x6, 0xf282, 0x5, 0x700000, 0x40, 0x6, 0x1, 0x7, 0x297, 0xffffffff, 0x65, 0x1, 0x5, 0x0, 0xb, 0x1, 0x81, 0x101, 0x7f, 0x3, 0x800, 0x10, 0xfffffff9, 0x7, 0x1ff, 0x7, 0xffffffff, 0xef39, 0x6, 0x57, 0x4, 0x4, 0x9, 0x1d, 0x10000, 0x0, 0x9, 0x400, 0x8, 0x800, 0x7fff, 0x1, 0x6, 0x2, 0x7, 0x9, 0xa7, 0x330, 0x1, 0x6, 0x7fff, 0x66, 0xa774, 0xfffffe00, 0xfffffff0, 0xc427, 0x427, 0x1ff, 0xffffffff, 0x7, 0x100, 0x1, 0x4, 0x3, 0x8, 0x6, 0xf1a0, 0x580, 0x1, 0xffffffff, 0x5, 0xffffff92, 0x67, 0xa5, 0x9, 0xf104328, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x1, 0x1, 0x400, 0x5, 0xbae2beeb, 0x3, 0x3, 0x3ce, 0x8000, 0x200, 0x3, 0x3, 0x1, 0x7, 0xbd3, 0x7fffffff, 0x817e, 0x6, 0x10, 0xa, 0x5, 0x4, 0x4, 0x9, 0x7, 0x3b, 0x2, 0x5, 0x10001, 0xffff, 0x7, 0x0, 0x8000, 0x401, 0x8001, 0x7, 0x0, 0xff, 0x7, 0xe3, 0xffff, 0x80, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x98cc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xfff1}}, @TCA_FW_POLICE={0x890, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x8, 0x6, 0x5, 0x8, 0x80, 0x1, 0xab, 0x5, 0x3, 0x6, 0x3ff, 0x2, 0x6, 0x10000, 0x3, 0x3, 0xffffffff, 0x4, 0x5, 0xb4a8, 0x7fffffff, 0x200, 0x0, 0xf4, 0x3, 0x40, 0x6, 0x8, 0x1, 0x2, 0x0, 0x9, 0x4, 0x5, 0xff, 0x9, 0x5, 0x5, 0x6, 0x80000000, 0xfffff800, 0x81, 0xd18, 0xfffffff7, 0xe, 0xfffffffd, 0x8, 0x401, 0x1000, 0xfffffffb, 0x6, 0x6, 0x9, 0x3, 0xd2, 0x7, 0x2, 0x6, 0x10001, 0x9, 0x8771, 0x8, 0x8, 0x8, 0x966, 0x10001, 0x5, 0x8, 0xfffffffa, 0x3, 0xb0, 0xd491, 0xc67, 0x5, 0xb5c, 0x1, 0x736f, 0xd, 0x100, 0x3, 0x66b, 0x9, 0x3, 0x40, 0x0, 0xc, 0x9b, 0x5, 0x3, 0xffffffff, 0x8, 0x7, 0x2, 0x7fff, 0x6, 0xffff, 0x77, 0x9, 0x7, 0x5, 0x6, 0x9, 0x9, 0x83a, 0x2, 0x6, 0x0, 0x9, 0x1, 0x8, 0x3, 0x10000000, 0xff, 0xffc0, 0x21dc, 0x7f, 0x7, 0x8001, 0x3, 0xda1, 0xa4f, 0x8, 0x392f, 0x41, 0xf05, 0x400, 0x80000000, 0x6, 0x80000000, 0xfffffffd, 0x1, 0x3, 0x6, 0x0, 0x10, 0x0, 0x5, 0x4, 0x3, 0xffffff1a, 0x1, 0x6, 0xe, 0x872, 0x100, 0x6, 0x800, 0x3, 0x4, 0x3, 0x8, 0x5, 0x945, 0x75, 0x8, 0x1, 0x6, 0x80000000, 0x7f, 0x80000000, 0xfffffff9, 0x5, 0x2, 0x2, 0x800, 0xc, 0xc, 0x1, 0x6, 0x1, 0x6, 0x739891f5, 0x4, 0x1, 0x0, 0x2, 0x4, 0x3, 0x80000000, 0x8, 0x5, 0x5, 0x9, 0x10, 0xe67d, 0x1, 0x81, 0xa39, 0x1a3b, 0x5, 0x3, 0x85, 0x0, 0x26dd, 0x8000, 0xef1, 0x8000, 0x7, 0x81, 0x5, 0xdf, 0x9, 0x6, 0x3, 0x33, 0x4, 0x8, 0xfff, 0x4, 0x0, 0x1ff, 0xb, 0x8, 0x4a820903, 0x5, 0x7, 0x8, 0x8001, 0xdb, 0x1000, 0xc27, 0x3, 0x4, 0x200, 0x401, 0xf, 0x5, 0x5, 0xfffffff8, 0xfffffffe, 0x5ad, 0x1, 0x9, 0x10, 0x80000001, 0x7fffffff, 0x3, 0x1000, 0x401, 0x3, 0x7, 0x5, 0x3, 0xdf7f, 0x100, 0x4, 0x69, 0xb, 0x3, 0x0, 0x4, 0x6, 0xfffffffb, 0x7000, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc8e3, 0x8, 0x4b4, 0x9, 0x0, {0xd, 0x0, 0x1, 0x3, 0x5, 0x5b0f}, {0x9, 0x2, 0x0, 0x1000, 0x3}, 0x1ff, 0x3, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0x4, 0x7ff, 0x5, {0x9, 0x6a246949b9a88c1, 0x5, 0x5, 0xf, 0x7}, {0x8, 0x1, 0x0, 0x8, 0x9ecd, 0x2}, 0x2, 0x2, 0x400000}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xffff, 0x10000, 0x80000001, 0x5bc1, 0x718, 0x6, 0x5, 0x2, 0x3, 0x7, 0xdc, 0x10, 0xd, 0x80000001, 0x10001, 0x70000, 0xffff, 0x5, 0x2, 0x200, 0x10001, 0xff, 0xf, 0x5, 0x7, 0x4, 0x10, 0x3, 0x0, 0xfffffff9, 0x1, 0x10, 0x3ee, 0x3, 0x8, 0x7, 0x0, 0x5a4, 0xfff, 0x5, 0x1, 0x7fff, 0x4, 0xa, 0x1, 0x47, 0xc9, 0x0, 0x0, 0x6b, 0x7fff, 0x1000, 0x8000, 0x3, 0xff, 0xf0c, 0x5, 0xa37, 0x4, 0x0, 0x7fff, 0x2, 0x81, 0x4, 0x4, 0x6, 0x5, 0xf24a, 0x1, 0x1, 0x8, 0x4, 0x0, 0x101, 0x8, 0x800, 0xfffffffd, 0x80000000, 0x6, 0x2, 0x0, 0x3, 0x6, 0xffff, 0xa000000, 0x7, 0x4, 0xa2ff, 0x2, 0x6, 0x270, 0xfff, 0x5, 0x5, 0x7, 0x7, 0x6, 0x1, 0x7f, 0x5, 0x4, 0x9, 0x1ff, 0x1, 0x1, 0xd, 0x7, 0x2, 0x4, 0x4, 0x8, 0x94f4, 0xffff, 0x4, 0x5, 0x8, 0x400, 0x5, 0xe, 0x1ff, 0x4, 0x7, 0x7, 0x3, 0xfffffff7, 0x3, 0x9, 0x7, 0x77, 0xffff8000, 0x800, 0x5, 0x9, 0x6, 0x9, 0x5, 0x22, 0x3, 0x6, 0x401, 0x4, 0x6, 0x9, 0x7f361a94, 0x7, 0x0, 0x4, 0xffffffff, 0x1ff, 0x5, 0x0, 0x9762, 0x7ff, 0x6, 0x6, 0xb22, 0x2, 0x8, 0x8, 0x81, 0x2, 0x5, 0xb, 0xa, 0x7, 0xa, 0x5, 0x9, 0x62a6f0c7, 0x10000, 0x5, 0x0, 0x101, 0x583, 0x2, 0x7fffffff, 0xf6, 0x4, 0x10001, 0x0, 0x101, 0x1, 0x6, 0x2, 0x4, 0x7, 0x7, 0x4, 0x9, 0x4, 0x200, 0x3, 0x1, 0x6, 0x4, 0x7, 0x3ff, 0x7, 0x2, 0x3, 0x3, 0x1, 0x4, 0x8, 0x25, 0x80000001, 0x8, 0x6, 0x2, 0xfce, 0x6, 0x7, 0x9, 0x7, 0x10000, 0x2, 0x3, 0x0, 0x80000000, 0x7fffffff, 0x1, 0x5, 0x8, 0x0, 0x6, 0xd, 0x5, 0x4, 0x4, 0x0, 0x7ff, 0x3, 0x4, 0x4dd, 0x6, 0xdf2d, 0x7, 0x1, 0x10, 0x6, 0x5, 0x3, 0x2, 0x7f, 0x8, 0x5, 0x8, 0x8, 0x6, 0x8, 0x6c, 0x10, 0xffff, 0x1a39, 0xfff]}]}, @TCA_FW_MASK={0x8, 0x5, 0x5}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0x6}}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_FW_MASK={0x8, 0x5, 0x9c}, @TCA_FW_POLICE={0x20, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb36}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}]}, 0x2d4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20041844) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') exit(0xf) pread64(r7, &(0x7f0000001400)=""/4108, 0x100c, 0x7) (async) pread64(r7, &(0x7f0000001400)=""/4108, 0x100c, 0x7) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) (async) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) lremovexattr(0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x208845}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000004080301000000000000007d752a500306000240f4060000050003008500000005000300210000000900010073797a310000000006000240001c000006000240803500000900010073797a3000000000050003000600000086c820c877f894ec8cf529f2862f4b5eea5dd0070016b93ead4b22b6bcf9d74feb43a33058023b0e39f6db271166052b48e46d23627e41adecde756e8d2b54cb34a42caa6e9525c19a6a8ed219413d8c00f2b6a2faab663e747eea996857e05fa77f478bf9fe4aaf5dafbaeff57175e4329c7bd0ba5375ed8b1d29014323615f67360d9cfc41"], 0x5c}, 0x1, 0x0, 0x0, 0x20000044}, 0x11) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125499, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3047c4a, 0x0) (async) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3047c4a, 0x0) 18m35.614369342s ago: executing program 0 (id=310): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)) syz_open_dev$video(&(0x7f00000005c0), 0x7, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000700), 0x0, 0x0, &(0x7f00000008c0)={0x0, &(0x7f0000000800)="16488a99a96b2b2862ca51fd34fbe6bb6cc4828fa5258d60c7c0b7ed804474b8237f458e0547090878c78ee564f9019c8cc77517486bffae55160b769cd9b4", 0x3f}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf255d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990007fffd006e0000004c00a6800a000600ffffffffdeff00000a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a00060008021100000000000a0006000802110000000000"], 0x74}, 0x1, 0x0, 0x0, 0x440}, 0x40009d0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) getsockname$packet(r4, &(0x7f0000000400), &(0x7f00000003c0)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1700000000000000008400000100000010000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000dfff00000000000000400000000000000000"], 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r5, 0x0, 0x20000000}, 0x20) clock_gettime(0x0, &(0x7f0000000440)) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500100000", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f0000000480)={0x1, @null, @bpq0, 0x4, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) 18m35.296604082s ago: executing program 0 (id=313): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000000)='\x00', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x47, &(0x7f0000000080), &(0x7f00000000c0)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x439, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000016}, 0x4048004) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x800, 0x1, 0x3, 0x0, 0x3}) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) 18m34.546617781s ago: executing program 32 (id=313): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000000)='\x00', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x47, &(0x7f0000000080), &(0x7f00000000c0)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x439, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000016}, 0x4048004) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x800, 0x1, 0x3, 0x0, 0x3}) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) 16m49.954633975s ago: executing program 3 (id=927): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x3, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x14, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0x4, 0xff}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x9, 0xfd, 0x1, 0xff, 0xd}, 0x0, 0x0, 0x8, [{0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="300316fac2799e0a41d12a8e2f2d544ada873679112c5cefdbd7a068f4a52637ed4bec000000007fffffffc611b499c80f1ce12ccca036a3762fba53bdf37924c4ccfdb3563d3c2198001cef68b8d244792e5e8e7acbc3b0c130fca6c53f0e5a3c33cb365f6cc7231775fd632e9068eef00f1296c8f6a51f3b25476faf5a93252b977986537cbcc5e498661fbc5ce7a7d61b4cfe7ac4cdcc7022e3c3771d9c9720836640ae2e703f"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x449}}, {0x4b, &(0x7f0000000680)=@string={0x4b, 0x3, "bc2b69cf4b1bb02abf9bd429a55e88ac0463c299f9d2dc90a2ab078c2a61bf46902efdc885c3d23f60e0246ca8add4bce27a49f0bbdf1c464a20b0b93fa4d3d4716c4c89f3a1413b49"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0xb5, &(0x7f0000000880)=@string={0xb5, 0x3, "af02588d9bec48ed4236e5ea265739a53b1397fdb7a47ecd6c440a3ce921cd7f9711cea9351be8cdf76a2d8cf6ad1f2d92b179b69b737f959419c945d425d94cf0a4fbc126bd7fd3b5bc5166a849f4d7e7303dcb104e2284e575dbbba7e3c45d8bc18a23c6b34f3ba8c9598049038986de35220ea54f0e28c259908485acdd6068c9f7d56834e606457a1bed5894351021868060c3942d75483e457bfc0daec12f6c0826f92db62afe4ea220a6d444324019cf"}}, {0xc7, &(0x7f0000000a80)=@string={0xc7, 0x3, "baa19a851675722a02e6c6774ed48fef59c088a4fe79ca627b82c8b7392297587c8f4d502c669923d66cf98b2f56793461c69fa6cb8b77ecfd44d5f0b2a9ef04223e80f48c7c87031e28662514a2ccec7ccafac85bfd7042a98969e5afb669356c362914ff7008c11205872a827478adad1bd5496541bc57131f84d0804a0c175e077493b9ec978277a97f0963e8553a20ff76b557129399c1e2d4ae5080da5b7cfeeedc5095077116e392f6d6624295ed1658f00ae6a7cdcacc2e82db2544a2a07d963b60"}}, {0x0, 0x0}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007b0000009500000000000000d1e524ba11c83308a36f246bab92ed869df1923b96aa12dbd576184ac4e1993884b0ae1aebcd296b0f557447e0aac82a46864117f2406a231a0d730e9a3e11839cb036d7d64e0eaad40de3c655b7d299d53c920d94735a7f15fdded791fa3ad8ab40c2a2df649e40c2e7d9455b5fd3598355d6d86017121bea25cd6a1aaf4c2a126dd73d01f685a1928082aaff03000000000000fc4138e41478944d1f5b2c0d32ea02b5d18d8a7279eb70d8abe5de9bddc01829d4cdbeb544ff346860576dfb95b46dcd3fa6969e53d67b9bf9a5049a8ad66c9f580db9eaee17eb79f0c18966bfd8e58e0e1822af1f723fd922026739d2c431415b3d4186dd6e06f490b1fdbff1379608a83d9772bbcf0dc9fd6d5c5b238c03e4d3217ec531a85fd4538a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r0}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket(0x169b85273c6f8108, 0x5, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x20}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) r4 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r4, 0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0xa840, 0x582) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000300)={0x1, 0x77, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000980)='sched_pi_setprio\x00', r0, 0x0, 0x6}, 0x18) 16m46.92204332s ago: executing program 3 (id=935): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0x54, 0x8, 0xfffff800, 0x8, @empty, @remote, 0x7f14726b7b628bd8, 0x700, 0x6, 0x401}}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x402, 0x80000001, 0x7, 0x8, 0x8, 0xfffffffc}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0) 16m46.804343908s ago: executing program 3 (id=936): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f00000001c0)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_on}, {@default_permissions}], [{@appraise}, {@appraise_type}, {@smackfshat={'smackfshat', 0x3d, '%!U:'}}, {@subj_type={'subj_type', 0x3d, 'overlay\x00'}}]}) (async, rerun: 64) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000140)=r1) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 16m46.311736895s ago: executing program 3 (id=943): r0 = socket$igmp(0x2, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="3000000040000701fcffffff00000100017c0000040042800c00018006000600801c00000c00028008000180040006"], 0x30}, 0x1, 0x0, 0x0, 0x200488d1}, 0xc000) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) io_uring_setup(0x1f3, &(0x7f0000000280)={0x0, 0xff85, 0x40, 0x1, 0x39b, 0x0, r2}) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2002042, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) times(0x0) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000400)='2\x06\xc4\xb8\n\xd8\xfd^N\xe2O\x1bE\xd51VC\x11\xcd\xcc\x9c\x8f\xaefa\x02\x00\x00\x00`\x1b\x93\xea2RW\xe6x\xdc\xdd\xd2\xae?HtD.c\xe6[de\x91\xff\xfc\xb1\x8d\xfd\xe7\xf0R5\bM\xc0\x03\b\x93+3R\xdf\x01\xae\x96\xc2\xb2\xca\x1bO\xd6\x8d\x8f9n\x94\x17\x9c\xb5\xd9<\xfb\xab\x18\x99\xd3\xe9\r\'\xbd~\x87)T\xcd\xf9+\x8eqnM6\x80\x8d\x1bV\xee\x01\x15\xdd\xc9\x9e\xd6\v\xe5*_1a\xa2\xa2\xdbs\xc0\xc1\xfa\xe1\xacSn\xd9\xe8\xfb1\x80\xfaS\v\xc1Pf\v\xba\xd9O1\xef@^\x97\xd8+\x94\x9e\xf0\vk\xaa&qd+\x80$::q\xba&\x7f\xf6\xb0C\xcb\xa4\xff', 0x0, r2) splice(r2, &(0x7f0000000140)=0x1, r1, &(0x7f0000000300), 0x50000000, 0xd) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x80000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000000100)) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x5d6b, 0x28, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = syz_open_pts(r2, 0x642880) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r8, 0x8010661b, &(0x7f00000004c0)) 16m45.974801488s ago: executing program 3 (id=945): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x894}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x40000000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @private=0xa2}], 0x3c) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000380)={r6, 0x0, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x4, 0x4, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) close_range(r0, 0xffffffffffffffff, 0x0) r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r9, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x15}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x44}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0xfffffffe}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x100b}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000) 16m45.814987511s ago: executing program 3 (id=946): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8309, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ifreq(r3, 0x891d, &(0x7f0000000180)={'team_slave_1\x00', @ifru_hwaddr}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x4c}}, 0x0) 16m45.641090683s ago: executing program 33 (id=946): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8309, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ifreq(r3, 0x891d, &(0x7f0000000180)={'team_slave_1\x00', @ifru_hwaddr}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x4c}}, 0x0) 14m2.74681062s ago: executing program 5 (id=1773): r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x8284180, 0x0, 0xfffffffffffffcc3, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='smaps_rollup\x00') r3 = socket(0x10, 0x803, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe4) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r9, r10, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000900)={0x3, 0x2}) r11 = openat$full(0xffffff9c, &(0x7f0000000340), 0x200100, 0x0) sendmsg$netlink(r4, &(0x7f00000008c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000140)={0x154, 0x29, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x134, 0xc3, 0x0, 0x1, [@generic="1cab900329f4ee46dcf1eed02c25306ea50f1485fd3b2a69008571e278d86b63b64bf61a5193f6ea52653f7009ed209c75bddc9ffcf009a7e39dcd6aba86a000169872282d7da8d03e3954a6467d449205524c981a8bbcffbb81448c1be84a0d35b681d5b414025231086a75bac7a61bb4cbab551e979155d301b27f21eca2f8ccadf1f3823243df43e83d74d4d1b8f4446e2fca5ee8ebada2508192c3a5f823b37c2debbe19e1443056f8e7a99bec6a5e2f52a3101f0d119a638054908e052f9beebcbb663c930ded6dfc54ba45b73825467c8939eaf57329cc72ab69db4c335694f9e88b3b63e5eed886562f415fb9", @generic="164298f4c68e4cfd60acf1c89a1c6650604e7e31079fef1ab0b7bb4224ed6251", @nested={0x4, 0x11b}, @nested={0x4, 0xf5}, @nested={0x4, 0xca}, @typed={0x8, 0xf1, 0x0, 0x0, @pid=r1}, @nested={0x4, 0x9a}, @typed={0x8, 0x9d, 0x0, 0x0, @ipv4=@local}]}, @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x8, 0x0, 0x0, 0x0, @pid=r1}]}, 0x154}, {&(0x7f00000000c0)={0x10, 0x1a, 0x300, 0x70bd2c, 0x25dfdbfd}, 0x10}, {&(0x7f00000003c0)={0x390, 0x3d, 0x4, 0x70bd28, 0x25dfdbfc, "", [@nested={0x14, 0x19, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x124}, @nested={0x4, 0x40}]}, @nested={0x101, 0x14d, 0x0, 0x1, [@generic="493d50c22593cae43b69da58fa00a720b4c651bb405c290234cbd9f25a94ee30f2c6edd5c68185e8d08ea4607eea2f5d65980fd5f6d6f4fda3bcd72b7068a65f0b0efc30415d047cd93870b6c4be0dbb988adb", @generic="a2fb3bd14ff1bc96c7e6ac556a06ec9dfcf9e04ee2a85822482f856d8add0eb346f013948d1ebbe2388c97c04b66fec2eff16f4e5e367952b8b9355d1b4ddf7f9cb94f3acae868ab0b8bed0f62bf07655e44b9121629e7b062ee846b81b07d03d15272e441e218ffa4cd151ae47a369ea4508cb9961d1bfe46ca3baf9255be43dcad318ac0489f2b7ca2af65aa6622fa929cd7291c019d39c0fff5952be978cf0cd4dfdfe6946bfad272"]}, @generic="51799fdb2a832aaead19a5ec4d6fcf372e2e6590fa685e299c95dc702d8d4f4e4a97ff89851ea993b935ad7cffd7ca3aaa515b7bf87fadb141c4564d244b39dbc4cc83f9eb", @nested={0x9d, 0x10e, 0x0, 0x1, [@typed={0x5, 0x138, 0x0, 0x0, @str='\x00'}, @generic="16ec880b33e0832938b826b47a93320da9b67e19e53eadb3fa5db5e43a203b76fc22c684d82aa02c4d55f8f50da5dd2e04561eab8434541d9907234251fd8f695c3f776f92a3c75eccfe0db9de0f57dbfb3b3acacc0721497a264fcbf6e8a58367b734c06558a04ac7e922bc17c3ce83a5d5124d60175804e999856a0edac5acbd93536c3d93a563d7f1c43f872d5ffe6b"]}, @nested={0x96, 0xe8, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @ipv4=@multicast2}, @generic="9a17c6679656f5500d15293e088c63193b787bb739cdc18d2c1853e70ebd104e47dc02e7ffdf2e6fcb9b39598501ae0921414f98f8744aeecf9ea3f2ac53e0ea256c5c82b94d6c372f68747dbb60d0e47728efec27ba5493df62257f8f3a5cb519b6cc887f5defdee29f221176f0268eed35ff7c039b4d17fc04149b124c0a33abbb2e1dde32d34d36ec"]}, @nested={0x4, 0x4e}, @generic="efeda77578a0ecf3f8cb3aab3033065a8a74b33605f957da09372adee393ed1537a6b704045e7e3dd8b818f4d6efa39de4370a1250207f06b43ed2040b8c9f18d18e6204e765eaab9414e7887bbb17481f93723ab0cca5e572181181acb4eac027f6ffe7cad332d19c6f483bbcc5d6a64fa431864ec138bb17f44fec126c0b5bf379b81fb9d77e5429e9c48d092d5794f5", @typed={0x8, 0x14f, 0x0, 0x0, @fd=r3}, @generic="1a2c9781f14d2377d75bde59ca71156003a183686bbdd6229478f061dd168d23a8ad40b3ae561d52b8b5bcf109febb5bff67ea046700638708e20e87755857bef3effe5928e051d77f94cdc4ae45"]}, 0x390}], 0x3, &(0x7f0000000880)=[@cred={{0x18, 0x1, 0x2, {r5, r6, r10}}}, @rights={{0x24, 0x1, 0x1, [r3, r0, r2, r11, r0, r0]}}], 0x3c, 0x20000000}, 0x40014) close_range(r4, 0xffffffffffffffff, 0x0) 14m2.677620449s ago: executing program 5 (id=1776): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (fail_nth: 9) 14m2.46992953s ago: executing program 5 (id=1777): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x4, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fcffffff00000000fcffffff8500000028000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e00b90f177020000f3ffffff0000", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) set_mempolicy(0x1, 0x0, 0x5) (async) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x9a) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="b93ddb14b0a04a91c6bccd791008", 0xe}], 0x1) (async) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f*\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x1e\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xfe\xfb\n\x1f\xbb\xb2\xfa\xcciP\x15\xa9\xd1\xe1X\x88V)F\x19\xeeR\xc5\xaf\xb3>o\xc5\xee,\xde\aGve\xbbk\x14\xb3\x99\x06a\x0fE9h\xf4\xf6\xc5\xecY\xfbhV\xe9', 0x0) (async) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "b4e1cb02caed70def93a79a60b22c04bf05c974bcda3bcf1d7bf99b64d3c6ef542217ee2ea2d26468fef32692f8603282c79dae14f63654a45edfb14b7b1f07e", 0x19}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x1a) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) (async) listen(r5, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000001fc0)}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002080)="2d735a2bfc0acb80407baf1c2998c617f356dac83de629d2678d4602e6f77d2e966466329c6dccbee852b025e865", 0x2e}, {&(0x7f0000002100)}], 0x2}}], 0x2, 0x4044004) (async) socket(0x28, 0x5, 0x0) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f00000c5000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x74bdc000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) 14m2.136008547s ago: executing program 5 (id=1778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) close(r1) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x2000}) mount$9p_fd(0x1000000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 14m1.690199662s ago: executing program 5 (id=1779): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id, &(0x7f0000000240)=0x10, 0x400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000004000000000000000010000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r5 = socket(0x11, 0x4, 0x80000000) r6 = accept4$tipc(r5, 0x0, &(0x7f00000001c0), 0x80800) cachestat(r6, &(0x7f0000000140)={0xff8000000, 0x5}, &(0x7f0000000180), 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$SNDCTL_DSP_SETDUPLEX(r7, 0x5016, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 14m1.369685788s ago: executing program 5 (id=1784): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000c00), 0x4) mkdir(0x0, 0x64) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2282, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000001c0)={0x2, 0x2, 0x5}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4040004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8800) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 13m46.160618784s ago: executing program 34 (id=1784): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000c00), 0x4) mkdir(0x0, 0x64) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2282, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000001c0)={0x2, 0x2, 0x5}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4040004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000080)=ANY=[], 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8800) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 6m30.62958511s ago: executing program 2 (id=4230): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2e4b, 0x11e41e7a, 0x20000000, 0x3, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x3}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002400), 0x2000, 0x0) pread64(r4, 0x0, 0x0, 0x9) 6m29.211554658s ago: executing program 2 (id=4235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x94, r1, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x58, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x32e}, @device_b, @broadcast, @random="f6b86d6a2f29", {0xb, 0x8}}, 0x5, @default, 0x9143, @void, @void, @void, @val={0x4, 0x6, {0xe9, 0x1, 0x4, 0x6}}, @val={0x6, 0x2, 0x10}, @val={0x5, 0x3, {0x9, 0xe9, 0x99}}, @val={0x25, 0x3, {0x0, 0x38, 0x3}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x3, 0x84, 0x4b}}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x6, 0x1}}, @val={0x76, 0x6, {0x0, 0xff, 0x1b, 0x600}}}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xffffffff}]}, 0x94}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) 6m29.121053005s ago: executing program 2 (id=4236): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) sendfile64(r0, r0, &(0x7f0000000100)=0x401, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c40)=@deltfilter={0x1b38, 0x2d, 0x300, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {0x3, 0x2}, {0x4, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}, @filter_kind_options=@f_matchall={{0xd}, {0x2dc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x8}}, @TCA_MATCHALL_ACT={0x2b8, 0x2, [@m_bpf={0xe8, 0x5, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0xee, 0x40, 0x7, 0xfffffffe}, {0xd1df, 0xf4, 0x9}, {0x2, 0x8, 0x1, 0xdd}, {0x3fda, 0x7, 0x3, 0xfff}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x9, 0xff, 0x4, 0x7fffffff}]}]}, {0x86, 0x6, "a47a60f7488a9e4936af7469eb352564ad17cfae0592920bece45e319b478f621c73dc93f833b6a347a61e2b45481737b2c59d8ef162e63f37a0cecd9fb1eb923e2d3b2462f785bf1acf2f7d8e6ed99f00481d9361f63440944c166adcbf0a3577eae8318ea006797b46eff5b2114cf6d1426e37359afb814fb9c627a6f461752b97"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x104, 0x18, 0x0, 0x0, {{0xa}, {0x70, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x6c, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x6b, 0x6, "608ac91ddeb8fc36a11559c58471c169f6e35b260c8e1a22b304e401fc1744b276fcdd4711ad1c178d8ed837ae231a94b78facae399a8345fbf2c5ca55d3c011657341d5295b2155e090b5b9e96c5310d3dbf787a8f6c11b049cebcb73695d2c8becc3a4cc6ac7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0xc8, 0x12, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5ee7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x401}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7842}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}]}, {0x71, 0x6, "5b4011ffa3879cf4848e64e9ea1ab6f28294b434f3a6cae9edeea737a8192bb6464922abd72e8373c363be32ac68dac0ae76b7a3b57186304de1b9058aea611aebe16ce4466d2dc2ed99101c172b456b8211fe8e95f07d009d22960f850cd374341a36257fc7351a773d3f5a37"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x10}}]}}, @TCA_CHAIN={0x8, 0xb, 0xff}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xff}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x18}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff}]}}, @TCA_CHAIN={0x8, 0xb, 0xaa}, @filter_kind_options=@f_flow={{0x9}, {0x17c4, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0xffffffff}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0x1}}, @TCA_FLOW_EMATCHES={0x51c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1a8, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0x80}, {0x4, 0x7fffffff, 0x4, 0x5, 0x1, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x59ba, 0x3, 0x92db}, {0x8, 0x1, 0xfffffffa, 0x7}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7fff, 0x8, 0x1}, {0x3, 0x4}}}, @TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x40, 0x9, 0x9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1c, 0x7, 0x1}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x8}, {0x17, 0xfffffffc, 0xfffb, 0x1, 0xc, 0x2, 0x1}}}, @TCF_EM_IPT={0xbc, 0x3, 0x0, 0x0, {{0x80, 0x9, 0x3ff}, [@TCA_EM_IPT_MATCH_DATA={0x13, 0x5, "9cd73fc1a111bbea62752c955ff920"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x8a, 0x5, "477ae4678da8a19c8306aa68695d6d4e38ba3b2ab9d4994ae13e426c7ef866377dc6ce67234b40f7782f05c6e4957c243291d53bd6f2a51cdf80d6a0ebd44b87a0863dc7d7afe1ee919d9b6f64eb4adb9716acecc642bca83d9080e059745f50a4faadbcd95285e2a0a8b21af8093d81394217e5972ea8c31872372660784219f0529e874454"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x6000, 0x2, 0xfff9}, {0x0, 0x7, 0x2, "b7ae0aaa13d786"}}}, @TCF_EM_CONTAINER={0x44, 0x2, 0x0, 0x0, {{0xc6, 0x0, 0x6}, "0518cf6404cf6804de49aef4179521d512be09404f8da35c539c904ed56e9a593d06ce59727538643b3febf9fde9793b861732f44b5558"}}]}, @TCA_EMATCH_TREE_LIST={0x368, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x170, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb7}, @TCA_EM_IPT_MATCH_DATA={0xce, 0x5, "cd9429768385817f891731a6777245a8bf7e3a2dd4e0d84f680bcf3364c5569abac2a3ab48ba3aca2561da27b71591f368ca4826263750862923c880cd7c9f8da0ab9a95ca903d4c1abaad6220084078c0c143039b32404415607808ee758f9053cd3a08941aff2687f1839fe6775efd2c9faa2c49964b3fe50dd9fd5be68f2884b025a3e1c748e84c7c3e9debe6deb519578ebfc5c9f45f8bd2e02de92d5c31c20b9e6c8fd15ba270930b826d3f163923b560f235a16249f5057068aab4a0f00677f8879659e301a1aa"}, @TCA_EM_IPT_MATCH_DATA={0x6a, 0x5, "cd940801dc7c91e4ffb257522a4a3a532b496fe94e27c12d6eda63101713d9a8892f09a60c74cbb2a9d53f1c38c5adf5d129fc2a3a6b16bf4487a6dd439d38a2f454dba35beb132921269b3751e0dba3160db6f469fe99ade9b2ec0d76d0444e00f2406a7ab0"}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xffff}, {{0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0x14, 0x3, 0x0, 0x0, {{0x1, 0x0, 0x8}, "6b9ea17842690b"}}, @TCF_EM_CONTAINER={0x68, 0x1, 0x0, 0x0, {{0x3ff, 0x0, 0x3f05}, "1d598bad67de209dd778c743bc9b9ec0db6c0af16e00a4101a7b813aaf388db89ae54b020482140f17f011b0a9ac7e6374dc1b63c8e91781bb56fab33e3275f86401e34896402ce4a45fa5b635fc25c0587c7a0f25efb0a4988ead"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3ff, 0x8, 0x6}, {0x3, 0x0, 0x5}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x8}, {{0x3, 0x0, 0x0, 0x1}, {0x2, 0x1}}}}, @TCF_EM_CONTAINER={0xe0, 0x2, 0x0, 0x0, {{0x2, 0x0, 0x7}, "002394b6579db129f3c8d40fe7b205336c0880b62657eae1d0fe312021baa474404f93a2d0839390038c0fcf041ae140ef3859b1345961bf844fd7c46f5c45ca0a71b84ad67bd9a26b010aaabf605d309a622d334f81c0b2fbfecfc6ca013a3d283dd07aee9bca456be9b32c7549d0e188365c85b8294baf52e476dfdaeb5d18f5fadfc3052b60184e4d2f9e04892a98aa4e0c2587fd1da291d35cffc4adaeab479a6adfe324534e9bb851ad84b5a77155c79796cb835e20d964e7b17bd0881bfb8c29a042e7f288a202f0ec8aed26a556d84bc6"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x12}, {0x5, 0x4, 0x1ff, 0x5}}}, @TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x400, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x80, 0xfb, 0x2}, {0x3, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xbf34, 0x40, 0x2}, {0x401}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7b1, 0xbc, 0x1}, {0x3, 0xf6, 0x2}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="ab398500eb4dc4a93b7a"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xab99}}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x40d6cd45}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x2}, @TCA_FLOW_MASK={0x8, 0x6, 0x6}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x2}, @TCA_FLOW_EMATCHES={0x126c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x70, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7ffb, 0x8, 0x6}, {0x4, 0x4, 0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x925}, {0x3, 0x326, 0xd, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x8}, {0x2, 0x6, 0x7, 0x0, 0x5, 0x2, 0x2}}}, @TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x6, 0x9, 0xb7}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x37}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x1134, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x2, 0x0, 0x0, {{0x6, 0x0, 0xf2bb}, "db7739a17aef0adad746ef048d4733ad6ada9f459b2a018f09709aed8681823b9de8d48151cc7e24c6000781b9c64896c75f3352008df1ad2fd422408536fa68ab855845c81a1c44ccc5a00aee5984d775df9c243167db5d693f37c8ee358fa98886d9457b13d9dd0a8c09e8d168d1ba6a0ee060bb1e55e7f87f28a563e14fc2b2d55a857eed"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x7}, {0x10000, 0xffffffff, 0xf, 0x2, 0xb}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x1}, {0x9, 0xb, 0x7, 0x0, 0x7, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0x9}, {0x2, 0x1, 0x9, 0x2, 0x6, 0x2, 0x1}}}, @TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0xfff9, 0x0, 0x4}, "cf00aa7ab6b5821a20b74ba37b0a32be7f3d7797b87447c2efa65e348f8246cdef910ff281b3d4e0a12b86b3fcb63988c7d6067e4e96de43d6be3319bfb0c18d3ef0d3ca34999f08e63d209e4dcab163a7fa47f5de414061edfcb1cf91f475ab34b2e9289a2997f81ec5d1c47214ae5e3a92e536e822c49d6931e2d8382f754b7d14c3ab0e3eb1e8396cb7d1b3a6b799b167ef7ed2898e9b965de63d25a665fa58ab325cce5b7cae2eb094f59cdc7e2db0d103637a88ea30bb0ad37d7b126a96579c148c8da0e62cf22378688b40f8dc9c9cf30a18e84ed7432f7c7a84d05605d99ee02cf07819d485bea860947f9e8a221dd5f572a80420f328e7873e894aee07a930f88a458b9d233c19177afeb90c7f37ac30d2fc7e9c376584114486f88b4357b25734dda6ae9e4d0f9e6b58707c5c981995cbc62ee7b97f3613bde588a1598241155eae51fd98beb6b2416514a2dc01a2a924ba188c7fd5382a9c2cc852476991ce6fb0d4b13f17f2cfc4753438eecb21398a38ed5c8aae29f1f61a54442a0e41d471b5795e6489b5adbf72751d1762ea15eb31f5ba3be33fe910925c7c8b03563aef4fccf75fb8f1aaeeb64aa7048d8bc7d269c940cc1e5d27202e672b6cc1915cb0edeb68a5c0c765d711a1ea346ee63a20af410672c3f7879164aeaa21dc24b9cf16330441e2dadc9f4a6725118a419b173759c13519f036d8daaf362e2dba70110f24fdfb18e218172505b1c0c3780786958ff32e956964084ae0cf231116f304ba34d2416bfa50da022be90195a8e5d6dd61d54d8e46a2b675f852b46a3640491e3c330841b73ea3e5a49a09f2d933a06edfe1e7db1674e617e9e3a2877b585ea6d43844ca78b334ceeb478fbf004a43b673c3589e4c82510a4323c9fdbda2ec5e188f88116126a82fa31b1b318c8f6b50f8501c97a2755d81ffb30eeb2d1eaf8b39dcf75b818cb3c2f60376d3f9357b2fb0b9f41187839e63627e5aedb625f16961e7059ee3cf3cce8ca2be52f8797e748b54998899ff954c5c1ffef71af479d2977b722a94ab2e49fe6012115af6435db2c961281fff820444bfd044e710f694e58772c90f8d1356085f07319134f9fb3fe008cf955e2a82bc5d4dd44f05a86dc28217a6fef4a400277d6c161c2edc52927701bde57e2130070487e1c1995defb2e794f5efda2155001b6f8a5fa9e94e3e305cefc8f6c8eed3ab433aeb64782c0c031e01f390729f23691b4fb74e54dd430b9dc8dbbc392d5a2e9e41173427ea651111673db8dac187a0bbe39389691b45d20ebe241e0b30d0fd9d5c46eb3ebd4e910fd34ae4db7223dcb4b09451d8c718b9b130861db97b143e6d08a268e650e0f0d0e6e04cf8d29b504a7b27405ddec5ec962f8fdaea9013b7b1ff276a2ff8d2f0de4f3558720a6a7481e90d06256e8dd25fb114a53d8ac68a63694c49460f54118253d20db6ccac484d5c0bb979c0d4b1a6d0f130bb7a827521988d4122e464e4a0cf356c6fcb6cf0cb330f70b4e97334450e2d8f5952ab495990d0eb441057d35adc9984c98855198fc97dd8d0b7b1e700842cc7b5d08b2e4829fa71b90d4b3a483e07e01bce9f936fbb4172f908203a988765fbda536f477a3143bc0989b084779819b6bf65175bc44726ed1289bfb39f5709f32dd2143c0af224dca7a54f4d13c6fdc803afcadaf0778fe65a1e9e356c254831fcc455c6643009f3f8ad005c832ae4baeca5c3a4fd6d52e51f5914388f1d6832573cf6644d081e149e766d4dfef75537098eac2ee83d8f92ba2849ef8781c493d972be785fae08bc915f4a852ee03ec767348e3c5d5c9ec879f7c848230ad67171184b06360481fd22dba8da4f8aa02efe481d40c819120cb5ae39fd6c39cfcab9ccea6be8e52888424c65e65edaba5bd957b3be5ab4871349f6d9b8fc79db1b890d48265d76d9746cb53f24b110123f1ebe2f9260d95ef46cf8ed530add9d3163d82bed68bec1e9dfbc8b37e0967b0afc02d0db5e96601f0f9b01b2415c163be6c76a9f3d85e084ddc57053a98f322b492eed83c66a9c0d2ae6d5ab3cdcbcc6b6d75b0e14dcdc08136621bc375fb5bbd1202e71151b7f5ed03bb99d255fe71ee846d462e515a27acf856b25a0ccd542f4dedcb247e091872fe4487c0c22166067d98b4a8a2e29cd4f08b958c3d2669f05fd4e7329f400e084a918fcb5b4fef7437c72fb45ffc585185ae7992f0456cf440c6895825e44dfdbe8c83e09df648abf11ffce3fef834204889e174ca29242d523406c54f5eb4df6cf1fc598727ff8e59fe21727a7fecd239d085b0bce8792e836569582692f53344167e5f4a240cdbaa033512bed1b81d8d1dd8d233f4a0cfdd0c9f620772e75d352f0d1460e26d55da84b2a6c2e82a430666f5b8edbe1e0c33ce0fa69ba5eb13c8fac71d8d556e7fbd45c36adc1db551a76211ee944bdd894556bcac9564ed51133a1b9439d5b900e4067a8a358d888e881bf30353e16a683ffa298a90c02b5048f390b7daabf0314081ae6a46cbd392c7e315c430aeb1a0f32b47cc11a1584ebee3e257d0b0462645bc4b2a333e7f88e84069c26996fea9d0720706998e5e5de2d9276b69737ad0b3a71b69ea072e3554936c6365e176d196b40e80cce823e6a4e78269811356cb4949ca01b5cb27dad41544da6d63ae72c74dc3f74c66f77c4ece62c66e240f8aa333c8d9a0466522fdd1bb76f94d03e15d7e0fc6a3efad02f11ce4ac7f30a03d9e83bb1dc490071c239394fab0069ff2d1066a6def342cb9b091e6bd56af76bed0c623d70432ecb677bb35e81ea1474a52b67bc100bb5484e07c92bfc867521b0bf42d3898a3f2d929c6b8250bfa75892df1cc63f0378e724e933018d4c79fc6dee9fdf1d8a91e07a74e3e29aafd50831028be1504179e82002296e39ffd0a2f16b40c8589d2329eb0daa758532c6d58392ccdace2391b83447222bfc0db75730716906850b13b46b4a5333428cd92b8ce8ecb8973027a2c79dc643e94cbf7e47a4b5ca17369bd24623a63bf8feb03a690207c5941c3d3626c53d0a02a4ce7e639f6f213f394b88d1ac851630bcb1840513c8bfebdfe3423bf81b2597d41f8f5015a61fecee80ff59cd291bec5935e0271a5490a6c796f741e2fed1c22bf84f9f0f278e4ddcc16669a4652a3a5dfcdfa143a2e4a7a096630cce61a800c2b8ce14d97c92aa2b8d8e192b95ed6b469373f279b6634bb8001380826eb19076950400de0989f4c1a8a84d9344c1dd6f2c3d384ee8089a7c3bcd6f27e6bbb7f197d1dd8e3838a22c96935e412013b2f7d865f75d35091ea673345c8cc6ee12e1c2d516eb3b7032a6ab7939f478586912b43a57d309131388c11743a555d1dd028fee33a7ce912454695420f9fa094dd567cfb0fb2176e52cba87c085492447fc6115952eb5abf87c15cbbb2c6264a3718f6b85840fd8ba241f2ab664233cad686abdbf76ca675f5dc2388b71bf5283ae4138fb91feb2ee6e2deb4dd1f3c12c22c6e974c3ba70ed58454438962fa5a8fd1225c47c4f9b54bc54865250d0cb0c7a56a712ded13ce90df3c6402886d03dd101cea6f4d6e7d1a5fbbc9fe8765de0754a6d5b2e2b92ac4b29c34db9d21ab2fa76c2146784e87c378d43b26cfe192bd4db1a499b8c584bc948a249238568a6cb653dfd444b48445874e49b286c1c9a281889253a31be945ed405d1c80f17aeba3955b532b17a73ab8dcf636cf505a5e30e2229f6b2279da5683c8c2787f080b30bc1f0bf881fd29e3d8a574a6733091e77593af0c479140855a5946bfbcf570dd2e4a8620883ce8a344913de585e725ac9c0ddef8b95e4cdd98b74099766c88793f7a5ac2f619787008ad652b5a89f422c89ddb05b15e98a40740ef40cecc0dd5c30ec7b894f8c2b8f6c0976a03249767b76c4339e8fd59f452532d8660188beff5bbadb9dbc1bcc4f2ebe5c4d1da55c6051e44c14c2d651a4548ac90363b616567187afbed15a43426ba54c8a9445ab4a16d23cf5d2c53e9df6e71897397628b47c5eeb7f33f9e22d5471aacb862a5f9a7a1779d7f573d1e68d103015d7632e9b0b03db9e7c77957254883f79a08d43bf3a33bfbba53c1b54db63a72ed275d221477011ff4da3d873d86372e23fe11884e94f29f82b4b68319bcb785e1a2be1846fb66ffae220873cb2325b590eb119e3e8cfe3d23a2a7a046e3d8b36c27026952193e6029f1ea5e41d30c9da75695875c79e743d54b601db2184d05c037d0611dd85fe274042a31101f9581853e921f3f25ea22782cba1f64a996cdb43a4d9e201fbd40c58b3f5c9fb8a56151369f37bbfd18542fc1ade04dba07daed1cbe6955ce2e2ff0231033cf2267e8b30857d00ca35411fac2a9f877b01d5f1329258d10e9221d7498f19c4ef46b7e4a4b4cccfc65b2f286940eca86d7df77b08572b2d406fed61a89a6f8e8675878df64dae9bf6392e6e4bc8a058bf0e5a592c9b0406d4a1b8a738ddc95f064761c15aa750ec6ae2fc6a4a16eb7bbcfbe9db890a4655822d9a723d83c04dccc33795f942436aa9a9e72e8f41f48c0e7a417208c8eb6f981b805e46e6b84a68db3391dca57f48be17460da04487e27144b8b95b2974196687279410f2f38b326bec046521f45f4cce49783b499749a66cf4286f61bb069b546626f50d00ea0a29f1ca4d9e6d9abff1866af1258d803e0522bcde9afcea216b00e7da831a69da2e55264d14f870720c3ef7e88c71774be6326b4b0de2adec46bf91acd7b90c91f2a2073ba90ece964230b0ace9d43ff7c7acb96c62b3288aa2f8ec4335901b67caca152064b87d118c83b037fa3fc4194f79ea440ca32023a6f7ffc98f0b0cfd0b98ef9fd7e51ad810978a6c777ac0461fdf9b38825bcd4a56622f632c4340ec67c77005e8a5c16cfb0590e50f694d5dfdd90ff827dd4f6e854864a624b348144ef4e2004b8725a357d7269b623b93ad0f090507aec6c7b9d01693b179b85f46e427f79b73ae5d69907f52df79238f56abca062f47a56315bcc92c98c3864a7c01c502d98944a3d57f27a1506f126f28965fb33b73348f2da5f32588970aaab108df98253610c48895a9549edb5f3bedab8a58a45426d6f571347f3a8c9e7371a4ff86546d01d40b8e6d415d4dce04a5fdcde5ac148c0fc96a4f8964a2b3d0c94ddcc0225fde73f90fe5f50622396cbbe5789ce107fa1460f48c86e13b3731ea98daa970c10c6e5565c6a32a6917860dd2fdcb81f7a9f4adf9e7e019863b6906fe03834f055122297a7fcb7050d5b1bee4e2cfc73116e5305a5dae2a559defc3e48ad05da7c3d3889cf3942c477c72566fa8217d05525bc75bff0f0365c141db0fd163ac589b31a9b53a61aa9df4745b2fbfb002e1c9308b0302bcd6a0c6f0528e40c34873b14f0dfdeb586d8c5094c5be74cdcbc4f9ddbf56de6d8708b97a4a5b283c59bbbcf3a674b3946a0f797cee69c23bc19a50774bb029b947916692a7daafef7a99b372a43ee970c8d2d644df65cc6fe70f739c2971b4624e5d38d82d96c81a841aae4b0050d540aff122f1d5eb0abb5b1f4affdefaf6bf79218b149a100cc6b0d9776c219eec751353b382171d0325b7526ff9b414f6727ae375a879afda38758fc63f37ddaa94caeec53231b3b76fe5032ddcc42266c200006b3d7b88f9023480ae2772b40a95a96a19b73e3ccfcfdd01c7e6797f9bbc2338537a7eef5e47f9631f2a6b5ee56c877d250761baaa09e60826e5880be59e8eeddee0dc229fc599a7a3362c9193e8cc"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xe, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1, 0x8, 0x1}, {0xffffffffffffffff, 0x3, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_META={0x70, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="0398653121649e16", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="ec8ee4600ae2afcc15", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="0e73d9cfc476", @TCF_META_TYPE_VAR='l', @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x23, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="bf604c7bbbe0", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="2b05643dfa0e382a4f60", @TCF_META_TYPE_VAR="639e9cc4bef267", @TCF_META_TYPE_INT=0x7]}]}}]}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4ee}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x800, 0x4, 0x1}, {0x8, 0xff}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xb, 0x2}, {0xf9a8, 0x5, 0x1}}}]}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x1b38}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r6 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4662, 0x400, 0x0, 0x315}, &(0x7f0000000300), &(0x7f0000000280)) io_uring_enter(r6, 0x40f5, 0x1f18, 0xa5, 0x0, 0x0) r7 = fsmount(r1, 0x1, 0x4) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB='+kpuset '], 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6m26.628348634s ago: executing program 2 (id=4245): sched_setaffinity(0x0, 0x7, &(0x7f0000000240)=0xf4c6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x38e72a2a, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6341, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0x0, 0xd}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20018041}, 0xc804) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0xca7}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000140)={{0x2, 0x4e24, @multicast1}, {0x6, @local}, 0x4, {0x2, 0x4e22, @private=0xa010102}, 'syzkaller0\x00'}) ioctl$sock_SIOCETHTOOL(r6, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0x1, 0xf1, 0x200, 0x9, 0x9, 0x0, 0x7f, 0x80000001, 0x5, 0x4, 0xfffffff0, 0x1, 0x570, 0x4, 0x40008, 0xa5, 0x5, 0xdff, 0xff, 0x452, 0x1000, 0xb, 0x4}}) sendmsg$kcm(r5, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000680)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca892f", 0xe}], 0x1}, 0x0) 6m26.308360022s ago: executing program 2 (id=4251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') syz_clone(0x8000c000, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 6m25.24564386s ago: executing program 2 (id=4254): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) r1 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e, 0x80400) sendmmsg$unix(r1, &(0x7f0000000300)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x8010}}], 0x1, 0x40001) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x40800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x9, &(0x7f0000000140)) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x4, "07000f00007eaba9a208000000706de400000000000000000000008000"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x3) write$UHID_INPUT(r6, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x8, r4}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f0000000440)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00\xa3HV\xddd\xbd\xf8\x1e\x96\xdc\xd3\xdb\x98\x05M\x97\xb78_\x8c\x055\x1dx\x98\xbd\xfa\xf1?\x0f\xb32\x88\a\x1e\x19\xd4\xf2\f\x11\vI\xe4\xdf\xac)\x7fK\xa7q\x16\xfb\xd8#z\xa4n`\xaa\xc8\xf4\xc4\xefH\xb7\xee\x01\xb7\x90\xed\xd4$\x96\x18\xdc\xbaI\xab2k\x99\xd5\xd6\xc3\x99\xa1\xd4\xba\x8e\xfb\b\xf4HdX:\xb7\xd5\xe6I\x8ao\xc4%\xdb\xdc\x143AT\x91o4\b\xb6\x10\x82\x17l\xc9[\xfb?\x8c\x9a\x98\xe1b\x1e\x89\xa6\xc6\x95\xcd\xfc\xbc\x8bqw\x15\xeap\xb2,\x06z$\xbb^\xba\\l\x97\x03 \xd1\xcb\xfa^\x17\x01E\xe3\x8a\xf0\xa8\x04\xddd\x80.\xc5\xf1D\xcc\x8fd\x14\x89\x8d\xe9\xaa|\xcf\xc1n\xbb\x9a\xe7\xe7j\xf2\xb6\xa2#\xee\xf2\xca\xe4k\xc8\xba\xf3\x8d\xeel~L~K\x16\xe8\x9e\x02\x92\xec\xf7fE\x02\x10\xb7\x04\xa1\xd7\x9b\xdf\xb8\x84\xe6\xf1\xc0\x85@h\f\x15\x00'/264) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000040)=0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x80000000}, @l2tp={0x2, 0x0, @private=0xa010102}, @in={0x2, 0x4e1d, @broadcast}, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="240000002500090122bd7008f9ffffff02000000080003004700000008003f80040022"], 0x24}, 0x1, 0x0, 0x0, 0x30004957}, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000080)=0x3ff) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000400)=""/220) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {}, 0xd}) 6m25.150241064s ago: executing program 35 (id=4254): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) r1 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e, 0x80400) sendmmsg$unix(r1, &(0x7f0000000300)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x8010}}], 0x1, 0x40001) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x40800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x9, &(0x7f0000000140)) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x4, "07000f00007eaba9a208000000706de400000000000000000000008000"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x3) write$UHID_INPUT(r6, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x8, r4}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f0000000440)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00\xa3HV\xddd\xbd\xf8\x1e\x96\xdc\xd3\xdb\x98\x05M\x97\xb78_\x8c\x055\x1dx\x98\xbd\xfa\xf1?\x0f\xb32\x88\a\x1e\x19\xd4\xf2\f\x11\vI\xe4\xdf\xac)\x7fK\xa7q\x16\xfb\xd8#z\xa4n`\xaa\xc8\xf4\xc4\xefH\xb7\xee\x01\xb7\x90\xed\xd4$\x96\x18\xdc\xbaI\xab2k\x99\xd5\xd6\xc3\x99\xa1\xd4\xba\x8e\xfb\b\xf4HdX:\xb7\xd5\xe6I\x8ao\xc4%\xdb\xdc\x143AT\x91o4\b\xb6\x10\x82\x17l\xc9[\xfb?\x8c\x9a\x98\xe1b\x1e\x89\xa6\xc6\x95\xcd\xfc\xbc\x8bqw\x15\xeap\xb2,\x06z$\xbb^\xba\\l\x97\x03 \xd1\xcb\xfa^\x17\x01E\xe3\x8a\xf0\xa8\x04\xddd\x80.\xc5\xf1D\xcc\x8fd\x14\x89\x8d\xe9\xaa|\xcf\xc1n\xbb\x9a\xe7\xe7j\xf2\xb6\xa2#\xee\xf2\xca\xe4k\xc8\xba\xf3\x8d\xeel~L~K\x16\xe8\x9e\x02\x92\xec\xf7fE\x02\x10\xb7\x04\xa1\xd7\x9b\xdf\xb8\x84\xe6\xf1\xc0\x85@h\f\x15\x00'/264) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000040)=0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x80000000}, @l2tp={0x2, 0x0, @private=0xa010102}, @in={0x2, 0x4e1d, @broadcast}, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="240000002500090122bd7008f9ffffff02000000080003004700000008003f80040022"], 0x24}, 0x1, 0x0, 0x0, 0x30004957}, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000080)=0x3ff) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000400)=""/220) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {}, 0xd}) 5m43.453994159s ago: executing program 1 (id=4453): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x4000080) syz_emit_ethernet(0x10c, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0xfe, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @private=0xa010100}, {{0x4e22, 0x4e2a, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x8, 0x0, 0xe6, {[@generic={0x8, 0x2}]}}, {"ce5304d97edc141c92517f89da6941722e8856aee72bf7cdd7e3ae2c5ad7014aadde9330fd5a4f975d95078df5cf81c12cef8ef2cb3298ba1d928b6a2de67bbb5f78e8e70c79b48f03e3a6f783690b05ceadaab242a2fc99684a1ae5a4a39477e196a926951747df21479d1a4767da4200b0c1ee5d4af850b0fa7beca5074ac628ce61a6780298c7836e7b2dd755da326d383e07b0aaf863ff72851f3edbd8ac31a0636569883300844ea2f43ad3492999449b209a3f81dcd1223388a37ef43635860d51e971f856cadb92a562a6b4f7fd39"}}}}}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) gettid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8c089ab39"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = dup(r5) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) write$UHID_INPUT(r6, &(0x7f0000000880)={0x8, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) 5m42.482013597s ago: executing program 1 (id=4462): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r0, &(0x7f0000000ec0)=""/4096, 0x1000) getdents(r0, 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x4040040) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) sendmsg$nl_route(r4, 0x0, 0x20000000) getpid() sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x8}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x804c000) 5m42.021093512s ago: executing program 1 (id=4466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x20, 0x0, 0xfe1f0adc5a1bd340, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x7fffffe, 0x2c0, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x31c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ptrace$ARCH_SHSTK_STATUS(0x1e, r4, &(0x7f0000000300), 0x5005) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe5e) timer_delete(0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m39.273842368s ago: executing program 1 (id=4472): r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) setsockopt$inet_mtu(0xffffffffffffffff, 0x111, 0xa, 0x0, 0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r5, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xfffffffffffffffe, 0x3, 0x5, 0x0, 0x8}, 0xd4d}) tkill(r4, 0x7) 5m38.996267034s ago: executing program 1 (id=4473): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x6, 0x1, 0x100, &(0x7f0000000a00)="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"}) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0xfff5, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) (async) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0xfff5, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaade9ea3f675c186dd60083ff200280600fe8000000000000000000000000000bbff02000000000000000000000000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0000000907800001d12cb3ffa01"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) syz_emit_ethernet(0xf, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@generic={0x88f5, '\x00'}}}, 0x0) (async) syz_emit_ethernet(0xf, &(0x7f0000000040)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@generic={0x88f5, '\x00'}}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0xefaace022867884) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0xefaace022867884) close(0x3) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/67, 0x43}], 0x1}, 0x60) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m38.860103939s ago: executing program 1 (id=4474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (fail_nth: 3) 5m23.77858633s ago: executing program 36 (id=4474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (fail_nth: 3) 6.046513689s ago: executing program 6 (id=5995): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) close(r0) 5.97665729s ago: executing program 6 (id=5996): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) mkdir(&(0x7f0000000300)='./bus\x00', 0xc) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r2, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) stat(&(0x7f0000000040)='./bus/file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x2081, &(0x7f00000001c0)={[], [{@fowner_gt={'fowner>', r3}}, {@seclabel}], 0x2f}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000280)='./bus\x00', &(0x7f0000000f00)='./file1\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc840) 4.824142663s ago: executing program 6 (id=6002): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0x2, 0x4, 0x358, 0xffffffff, 0x0, 0x0, 0x190, 0xfeffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0x0, 0xffffff00], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x29}, 0x2f2, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x3, 0x80, 0x9}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', [0x0, 0xffffffff], [], 'sit0\x00', 'vxcan1\x00', {}, {}, 0x0, 0x1}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xff, 0xff0000ff, 0xff000000, 0xff000000], 0x4e21, 0x4e20, 0x4e20, 0x4e20, 0x4, 0xf4f7, 0x7c, 0xfffffff9, 0x400}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3b4) (fail_nth: 16) 4.721213833s ago: executing program 6 (id=6008): set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000000008500000069000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={&(0x7f0000000300), &(0x7f0000000380)}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xb, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e450ab8bca3cc5d0de67e2", &(0x7f0000000380)=""/148, 0x0, 0x1, 0x1, 0x0}) 3.724674942s ago: executing program 4 (id=6016): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd2c) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x86) fchdir(r6) ioctl$NBD_SET_SIZE(r6, 0xab02, 0x31b9) 3.724092611s ago: executing program 4 (id=6017): r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x60, 0x0, @fd, 0x0, 0x0, 0x1, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f0000060000eb00000000000000000000400000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f00000001c0)={r4, 0x58, &(0x7f0000000140)}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r8, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.333531375s ago: executing program 7 (id=6023): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, &(0x7f00000009c0)=""/186, 0x1b, 0xba, 0x0, 0x800, 0x8d5bb172aa8229fc}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000c00)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x1, 0xb, 0x3, 0x1}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c80)=[r0, r0, r2, r0], 0x0, 0x10, 0x9d}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$user(&(0x7f0000000080), 0x0, &(0x7f00000001c0)="a6", 0x1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', 0x0) openat$incfs(0xffffffffffffffff, &(0x7f00000006c0)='.pending_reads\x00', 0x20000, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r6}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2.272089678s ago: executing program 4 (id=6024): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x3, &(0x7f0000000280)=ANY=[@ANYRES32=r4], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@empty}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0xffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x4, 0xffffffff, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x2}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x860, 0x0, 0x7}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) syz_io_uring_setup(0xc8f, &(0x7f0000000140)={0x0, 0x4393, 0x8, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x29, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x69}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) syz_emit_ethernet(0x5f2, &(0x7f0000001fc0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5e4, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5, "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"}}}}}, 0x0) 2.270854485s ago: executing program 7 (id=6025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000a80)}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0x6}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x48014) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000700)={@fallback, r7, 0x36, 0x2024, r7}, 0x20) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)=@generic={&(0x7f0000000e00)='./file0\x00', 0x0, 0x8}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x14, &(0x7f0000000b00)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x91}}, @map_idx={0x18, 0xb}, @tail_call, @ldst={0x1, 0x2, 0x0, 0x3, 0x1, 0xfffffffffffffffe}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x8, 0xb2, &(0x7f0000000c00)=""/178, 0x41000, 0x6c, '\x00', r5, 0x0, r7, 0x8, &(0x7f0000000cc0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000d00)={0x5, 0xa, 0x800, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000e80)=[r8, r9, r10], &(0x7f0000000ec0)=[{0x5, 0x9, 0x3, 0x7}, {0x4, 0x4, 0xc, 0xc}, {0x3, 0x5, 0x3, 0x5}], 0x10, 0xfffff8bb}, 0x94) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4b637236d4470401}, 0xc, &(0x7f0000000140)={&(0x7f0000000900)={0x164, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf, 0x15}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="3a3c7c8f2950"}, @NL80211_ATTR_IE={0x123, 0x2a, [@challenge={0x10, 0x1, 0x97}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x0, 0x3}}, @mesh_chsw={0x76, 0x6, {0x63, 0x3, 0x8, 0xfff1}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0x1}}, @challenge={0x10, 0x1, 0x70}, @rann={0x7e, 0x15, {{0x1, 0x9}, 0x0, 0x85, @device_b, 0x7ff, 0x0, 0xfffffffa}}, @perr={0x84, 0xe3, {0xff, 0xf, [{{}, @device_b, 0x6, @void, 0x3b}, {{}, @broadcast, 0xfffffff9, @void, 0x1}, {{}, @broadcast, 0x9, @void, 0x41}, {{}, @device_a, 0x9, @void, 0x35}, {{}, @device_b, 0x0, @void, 0x11}, {{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0x33}, {{0x0, 0x1}, @device_a, 0xf7, @value, 0x11}, {{}, @broadcast, 0x3, @void, 0x21}, {{}, @broadcast, 0x3, @void, 0x25}, {{}, @device_a, 0x5, @void, 0x28}, {{}, @device_a, 0x7, @void, 0x3e}, {{}, @broadcast, 0x5, @void, 0xe}, {{0x0, 0x1}, @broadcast, 0x80000001, @value=@device_b, 0x39}, {{0x0, 0x1}, @broadcast, 0x80000000, @value=@broadcast, 0x28}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x3f}]}}, @supported_rates={0x1, 0x4, [{0x1b}, {0x24, 0x1}, {0x60}, {0x6c}]}]}, @NL80211_ATTR_MAC={0xa}]}, 0x164}}, 0x8000) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x64, 0x6, 0x688, 0xc8, 0x450, 0x1a8, 0x2dc, 0x450, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0x15}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0x110, 0x134, 0x0, {}, [@common=@hbh={{0x48}, {0x472e8fa1, 0x1, 0x0, [0x3, 0x0, 0x6, 0x5, 0x4, 0x8000, 0x5, 0x2, 0x7fff, 0x1, 0xfff, 0x2, 0x5, 0x7, 0xa, 0x4], 0x5}}, @inet=@rpfilter={{0x24}, {0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x4, 0x8}}}, {{@uncond, 0x0, 0x150, 0x174, 0x0, {}, [@common=@inet=@iprange={{0x64}, {@ipv4=@multicast1, @ipv6=@mcast2, @ipv4=@multicast1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xff}}}, {{@uncond, 0x0, 0x134, 0x170, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x2, 0x0, [0x905, 0xfffe, 0x4, 0x4, 0x68e, 0xffff, 0x6, 0x7, 0x6, 0x7, 0xfff7, 0x9, 0xffff, 0x8, 0x2, 0x9], 0xa}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf6], 0xff}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6e4) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) 2.212703624s ago: executing program 7 (id=6026): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0e00000900090000000004bba07c6e51"], 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4004010) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0xa, 0x3, 0x3a) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) socket$inet6(0xa, 0x80002, 0x0) sendmmsg$unix(r2, &(0x7f000000a3c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB='\x00', @ANYRES32=r0], 0x10, 0x4}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.09388967s ago: executing program 4 (id=6027): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x2000000, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x4e1e}, 0x2c, {[{@msize={'msize', 0x3d, 0x10000}}]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000006800010000000000000000000a00000000000000599e0213c5dfa40188d2fb545284b7f51520a4757eb5d640d6445ec0544bdb5c39ee8b8d0c16f9434f9fdf9ef33dab6f8d0c492718e5f56b9e00e919f62028f2286c8e860a0b6027946315b3b7e7e143e0ab779afae5674182c75624e48d086b4ba53c6e3a63bf5204d823554d75"], 0x18}}, 0x20001000) shutdown(r3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_SEND(r4, 0x40449426, &(0x7f0000000440)={{r5}, 0x4, &(0x7f0000000400)=[0xfffffffffffffff7, 0x6, 0x5, 0x0], 0x2, 0xc}) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x336, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r9, r10, 0x8f5, 0x0) r11 = fsopen(0x0, 0x0) r12 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r13 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r13, 0x800442d2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @local}]}) 1.452780978s ago: executing program 8 (id=6028): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)={0x5c, r4, 0x1, 0x0, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) (fail_nth: 11) 1.273366239s ago: executing program 8 (id=6029): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = syz_io_uring_setup(0x643d, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x1, 0x40}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0xcf}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000009, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x100) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402) setuid(0xee00) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r8, 0x5, 0x3, 0x0, 0x3, [], [0x4, 0x7, 0x7b], [0x7, 0xffff, 0x2, 0x10000], [0x0, 0x0, 0x1, 0xfff]}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r10, 0x0, 0x0, 0x9200000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd59}, [@generic={0x81, 0x1, 0x1, 0x4a}]}, &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x101d0}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000280)=[{&(0x7f00000007c0)=""/236, 0xec}], 0x1, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x54}}, {{&(0x7f0000000700), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000009c0)=""/103, 0x67}, {&(0x7f0000000a40)=""/254, 0xfe}, {&(0x7f0000000b40)=""/238, 0xee}], 0x3, &(0x7f0000000c80)=[@cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x44}}, {{&(0x7f0000000d00), 0x6e, &(0x7f0000000e80)=[{&(0x7f00000008c0)=""/19, 0x13}, {&(0x7f0000000d80)=""/198, 0xc6}], 0x2, &(0x7f0000000ec0)=[@cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0xf4}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f0000001340)=[{&(0x7f0000001040)=""/61, 0x3d}, {&(0x7f0000001080)=""/11, 0xb}, {&(0x7f00000010c0)=""/222, 0xde}, {&(0x7f00000011c0)=""/149, 0x95}, {&(0x7f0000001280)=""/25, 0x19}, {&(0x7f00000012c0)=""/85, 0x55}], 0x6, &(0x7f0000001380)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xd4}}], 0x4, 0x30, 0x0) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.272939909s ago: executing program 7 (id=6030): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) read$alg(r3, &(0x7f0000000cc0)=""/4084, 0x835) sendmmsg$alg(r3, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f", 0x1}], 0x1, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080) r4 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r6}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0x7, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r15, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb3a, 0x6, 0x26, 0x7, 0x9, 0x10000, 0x42, 0xdec, 0x10001, 0x40, 0x2, 0x2, 0x7, 0x0, 0xfffeffff, 0x0, 0xffffff84, 0xf, 0x5, 0xfffffffd, 0x2, 0x3, 0x9, 0x1, 0x577, 0x7, 0x4, 0x7, 0xe, 0x7, 0x0, 0x5, 0x8, 0x355d, 0x5, 0x9, 0x10000, 0x3, 0x97, 0x0, 0x5, 0xaa4, 0x4, 0x5, 0x8, 0xfd, 0x9, 0x400, 0x5, 0x9, 0x74, 0xfc79, 0x20000, 0x10, 0x4, 0x80, 0x7, 0x81, 0x6, 0x7, 0xb06e, 0x3, 0x2, 0x8, 0x7fffffff, 0x80000001, 0x1000, 0x3, 0x7fffffff, 0x2, 0x8, 0x8001, 0x7fffffff, 0x0, 0x3, 0xc, 0xffff, 0x1000, 0x2bca, 0x57, 0x9, 0x9, 0xfffffffd, 0x0, 0x1, 0x9, 0x5, 0x101, 0xcd1c, 0x2, 0x2, 0x4, 0xfffffffa, 0x450, 0x9, 0x8, 0x9, 0xfffffffc, 0x6, 0x0, 0x0, 0x5, 0x1, 0x22462e3c, 0x1, 0xb, 0xffffffff, 0x3, 0x2, 0x10001, 0x3, 0x1, 0xe7b, 0x4, 0x6, 0xfff, 0x3, 0x6d, 0xffffffff, 0xa, 0x80, 0x8001, 0x9, 0x3, 0x7, 0x7, 0x9, 0x1a93, 0x248, 0x66f, 0x8, 0x2800000, 0x2, 0x2, 0x4, 0x3, 0x200, 0x1, 0x8, 0x80000001, 0xb, 0xab64, 0x7fff, 0x4, 0x8, 0xc, 0x6, 0x200, 0x401, 0x1, 0xfffffffd, 0x5537, 0x4, 0x0, 0x73c9, 0xdad5, 0x9, 0x9, 0x5, 0x7f, 0xffff7190, 0x7, 0x1, 0x16, 0x5, 0x1000, 0x7, 0xffffffff, 0x4, 0x28f, 0x1dd0, 0x8001, 0x5, 0x6, 0x6, 0x80, 0xb, 0xed, 0x10001, 0x3, 0x9, 0x5, 0x2, 0x8, 0x23, 0x0, 0x401, 0xc, 0x7, 0x2, 0x7, 0x893, 0x6, 0x9, 0x0, 0x8001, 0x100, 0xb7c, 0x9, 0x4, 0x435, 0x2d4f, 0xffffffff, 0x400, 0x3, 0x8a, 0xfff, 0x1, 0x3, 0x7f, 0x7, 0x6, 0x2, 0x7, 0x694, 0x1, 0xe94, 0x67, 0x7, 0x7, 0x6, 0x9, 0xfffff001, 0x9, 0x2, 0x343, 0x8000, 0xfff, 0x0, 0x20, 0x10, 0x7, 0x6, 0x5, 0x8, 0x6, 0x9, 0x2232, 0x3, 0x2, 0xfe79800, 0x0, 0x4f6, 0x3, 0x8, 0x260c, 0xaedb, 0xd084, 0x1, 0x8, 0x2, 0x1000, 0x400, 0x6000, 0x0, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff81, 0x9, 0x2, 0x3, 0x5, 0xffffff01, 0x0, 0x1599, 0x7ff, 0xb, 0x209c, 0xfffff2e9, 0x2, 0x42d2, 0x6, 0x5678f281, 0xfc, 0x7, 0xee, 0x5, 0x0, 0x8001, 0x80000, 0x8, 0xc425, 0x88, 0x401, 0x8, 0xffffffff, 0x3, 0x2, 0xffffffff, 0x80, 0xf7f, 0x9, 0x3, 0x3, 0xfffffff9, 0x80000000, 0x40, 0x0, 0x3, 0x1, 0xe, 0xfffffff7, 0x400, 0x1ff, 0x2, 0x9, 0x5, 0x54e, 0x4, 0x2, 0x7, 0xb166, 0x2, 0x36c, 0x5, 0x200, 0x9, 0xffff, 0x1, 0x5, 0xc86, 0xfffffff1, 0x1, 0x67, 0x2, 0xffff, 0x1, 0x9, 0x10001, 0x0, 0xc4a, 0x80000001, 0xfffffffd, 0x366, 0xd, 0x0, 0x9, 0xea, 0xd7, 0x2, 0x9, 0x1, 0x77, 0x2, 0x3, 0x2, 0x3, 0x4, 0x3, 0x4, 0x7, 0x1000, 0x2c21, 0x3a41, 0x2e90, 0x0, 0x3000000, 0x5, 0x1, 0xe60, 0x6, 0xa, 0x1, 0xfffffffa, 0x5, 0x0, 0x2, 0x40, 0x9, 0x100, 0x27e1, 0x8000000, 0x9, 0x4, 0xd, 0x1, 0x8, 0x3e83, 0xb7, 0x3, 0x20000000, 0x3, 0xd, 0x10, 0x1, 0xffffffe0, 0x200, 0x5, 0xffffffff, 0x8, 0x6, 0x40, 0x1, 0x10, 0x3, 0x9, 0x1000000, 0x9, 0x1, 0x2, 0x7, 0x2, 0xfffffff9, 0x10001, 0x4c2, 0xfff, 0x8, 0x4d76, 0x7f, 0x5, 0x1, 0x3366, 0x2, 0x4, 0x800, 0x800, 0x3, 0x6, 0xe, 0xff, 0x80000001, 0xe, 0x51, 0x2, 0x6, 0xfffffffb, 0x6, 0x4, 0xec49, 0x101, 0x97, 0x0, 0xfff, 0x5, 0xd, 0x8, 0xa, 0x6, 0x8, 0x7, 0x81, 0xe61, 0x1, 0x7, 0x4, 0x2, 0x1, 0x9, 0x0, 0xfffffffd, 0x800, 0x4, 0x0, 0x1, 0x4, 0x1, 0x10001, 0xb, 0xe, 0xcd, 0x4, 0x9, 0x6, 0x9, 0xb, 0x0, 0x9, 0x5, 0x6, 0xec16, 0xa443, 0x9, 0x6, 0x5, 0x8, 0x1, 0x9, 0x7, 0x2, 0x5, 0x3, 0x58, 0x40, 0x81, 0xbf1f, 0x6, 0x40, 0x5, 0x9c, 0x1, 0x9, 0x22472c26, 0xfffffffb, 0x0, 0x7, 0x1, 0x5, 0x201, 0x5, 0x6, 0x9, 0x9, 0x80000001, 0x1, 0x1, 0x65d3, 0x2, 0x1, 0xffff8001, 0x5, 0xb, 0x8, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x1, 0x1, 0x400, 0x8, 0x8, 0x401}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000280)={@remote, @local, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0xfc, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7e722c0b040f308d}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000045) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r17, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r17, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) close_range(r1, 0xffffffffffffffff, 0x0) 1.272526648s ago: executing program 6 (id=6031): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc01c7c02, &(0x7f0000000d40)={0x80000000, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc01c7c02, &(0x7f0000000d40)={0x80000000, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x4c050) r5 = fsopen(&(0x7f0000000040)='cifs\x00', 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={r6, 0x6}, &(0x7f0000000500)=0x8) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='iocharset', 0x0, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[@ANYBLOB='ds,', @ANYRES16=r9, @ANYBLOB="110128bd7000ffdbdf250a0000000c0003800800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c800000", @ANYRES16=r9, @ANYBLOB="000227bd7000fedbdf250700000014000380080001000100000005000800090000005c0003801400020074756e6c30000000000000000000000014000600fe8800000000000000000000000001010600040001000000060007004e20000006000400080000000800030002000000060007004e2200000800050000007fff0800040000010000"], 0x8c}, 0x1, 0x0, 0x0, 0x4400}, 0x4000000) tee(r5, r8, 0xe, 0x9) pwrite64(r0, &(0x7f0000000480)="d749768c56d2", 0x6, 0x1000) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) 1.193421071s ago: executing program 4 (id=6032): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_MCE_KILL_GET(0x22) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$loop(0x0, 0x3, 0x2000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f0000000340)=@encrypted_load={'load ', 'default', 0x20, 'user:', '***-}-}\'b$#', 0x20, 0x3, 0x20, [0x65]}, 0x35, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r5 = fsopen(&(0x7f0000000280)='nfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000080)='acl\x00\t\x00\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xd3\x0f\x99R\xb3\x16n\rO\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:.\xf1!\x9d`YQ\xc3N\n\xbbWN:\xd3\x98', 0x0, r5) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) listen(r0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @loopback, 0x7}}, 0x6, 0x5}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x7, 0x1, 0x10001, 0xe5, 0xec0}, 0x14) 1.192971578s ago: executing program 8 (id=6033): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x40040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00'}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000300000005000500070000000000080009000300000014002000ff000000000000000000e1ffe000000108000a0000000000060002e16ccb01d435"], 0x5c}, 0x1, 0x6c}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b05, &(0x7f0000000100)={'wlan1\x00'}) io_uring_setup(0xb3c, &(0x7f0000000000)={0x0, 0x5228, 0x1, 0x44, 0x29d}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r2, &(0x7f0000000680)=""/219, 0xdb) r3 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r3, 0x80104d12, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000080)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) 1.004106352s ago: executing program 7 (id=6034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000a80)}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0x6}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x48014) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000700)={@fallback, r6, 0x36, 0x2024, r6}, 0x20) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)=@generic={&(0x7f0000000e00)='./file0\x00', 0x0, 0x8}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x14, &(0x7f0000000b00)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x91}}, @map_idx={0x18, 0xb}, @tail_call, @ldst={0x1, 0x2, 0x0, 0x3, 0x1, 0xfffffffffffffffe}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x8, 0xb2, &(0x7f0000000c00)=""/178, 0x41000, 0x6c, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000cc0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000d00)={0x5, 0xa, 0x800, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000e80)=[r7, r8, r9], &(0x7f0000000ec0)=[{0x5, 0x9, 0x3, 0x7}, {0x4, 0x4, 0xc, 0xc}, {0x3, 0x5, 0x3, 0x5}], 0x10, 0xfffff8bb}, 0x94) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4b637236d4470401}, 0xc, &(0x7f0000000140)={&(0x7f0000000900)={0x164, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf, 0x15}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="3a3c7c8f2950"}, @NL80211_ATTR_IE={0x123, 0x2a, [@challenge={0x10, 0x1, 0x97}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x0, 0x3}}, @mesh_chsw={0x76, 0x6, {0x63, 0x3, 0x8, 0xfff1}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0x1}}, @challenge={0x10, 0x1, 0x70}, @rann={0x7e, 0x15, {{0x1, 0x9}, 0x0, 0x85, @device_b, 0x7ff, 0x0, 0xfffffffa}}, @perr={0x84, 0xe3, {0xff, 0xf, [{{}, @device_b, 0x6, @void, 0x3b}, {{}, @broadcast, 0xfffffff9, @void, 0x1}, {{}, @broadcast, 0x9, @void, 0x41}, {{}, @device_a, 0x9, @void, 0x35}, {{}, @device_b, 0x0, @void, 0x11}, {{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0x33}, {{0x0, 0x1}, @device_a, 0xf7, @value, 0x11}, {{}, @broadcast, 0x3, @void, 0x21}, {{}, @broadcast, 0x3, @void, 0x25}, {{}, @device_a, 0x5, @void, 0x28}, {{}, @device_a, 0x7, @void, 0x3e}, {{}, @broadcast, 0x5, @void, 0xe}, {{0x0, 0x1}, @broadcast, 0x80000001, @value=@device_b, 0x39}, {{0x0, 0x1}, @broadcast, 0x80000000, @value=@broadcast, 0x28}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x3f}]}}, @supported_rates={0x1, 0x4, [{0x1b}, {0x24, 0x1}, {0x60}, {0x6c}]}]}, @NL80211_ATTR_MAC={0xa}]}, 0x164}}, 0x8000) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x64, 0x6, 0x688, 0xc8, 0x450, 0x1a8, 0x2dc, 0x450, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0x15}}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@uncond, 0x0, 0x110, 0x134, 0x0, {}, [@common=@hbh={{0x48}, {0x472e8fa1, 0x1, 0x0, [0x3, 0x0, 0x6, 0x5, 0x4, 0x8000, 0x5, 0x2, 0x7fff, 0x1, 0xfff, 0x2, 0x5, 0x7, 0xa, 0x4], 0x5}}, @inet=@rpfilter={{0x24}, {0x1}}]}, @HL={0x24, 'HL\x00', 0x0, {0x4, 0x8}}}, {{@uncond, 0x0, 0x150, 0x174, 0x0, {}, [@common=@inet=@iprange={{0x64}, {@ipv4=@multicast1, @ipv6=@mcast2, @ipv4=@multicast1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xff}}}, {{@uncond, 0x0, 0x134, 0x170, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x2, 0x0, [0x905, 0xfffe, 0x4, 0x4, 0x68e, 0xffff, 0x6, 0x7, 0x6, 0x7, 0xfff7, 0x9, 0xffff, 0x8, 0x2, 0x9], 0xa}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf6], 0xff}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6e4) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) 802.887309ms ago: executing program 7 (id=6035): socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x40000, 0x8000, 0xfffffffc, 0x238}, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_int(r7, 0x0, 0x2, 0x0) writev(r8, &(0x7f0000000a40)=[{&(0x7f0000000100)='t', 0x1}], 0x1) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x2, @remote}}, {{0x2, 0x0, @local}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x20c) syz_open_procfs(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x4040016) r10 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r10, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 382.599919ms ago: executing program 6 (id=6036): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x2000000, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x4e1e}, 0x2c, {[{@msize={'msize', 0x3d, 0x10000}}]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000006800010000000000000000000a00000000000000599e0213c5dfa40188d2fb545284b7f51520a4757eb5d640d6445ec0544bdb5c39ee8b8d0c16f9434f9fdf9ef33dab6f8d0c492718e5f56b9e00e919f62028f2286c8e860a0b6027946315b3b7e7e143e0ab779afae5674182c75624e48d086b4ba53c6e3a63bf5204d823554d75"], 0x18}}, 0x20001000) shutdown(r3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_SEND(r4, 0x40449426, &(0x7f0000000440)={{r5}, 0x0, &(0x7f0000000400), 0x2, 0xc}) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x336, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) tee(r9, 0xffffffffffffffff, 0x8f5, 0x0) r10 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r11 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r12 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r12, 0x800442d2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @local}]}) 312.580303ms ago: executing program 4 (id=6037): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x101, 0x0, 0x2000000, 0xfffffffc, 0x0, 0xb063}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000000080)={0xb480000000000000, 0x0, 0x7ffffffffffffffd, 0x4}) r10 = openat$nmem0(0xffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r10, 0x400448c9, &(0x7f0000000380)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xac}) r11 = openat$mice(0xffffff9c, &(0x7f0000000000), 0x20040) io_uring_register$IORING_REGISTER_NAPI(r11, 0x1b, &(0x7f0000000180)={0x7fff, 0xc0}, 0x1) r12 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) accept4$vsock_stream(r11, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10, 0x800) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r12, 0xc02c564a, &(0x7f0000000040)={0x0, 0x38415261, 0x3, @discrete={0x9, 0x100}}) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x88}}, 0x0) 231.508742ms ago: executing program 8 (id=6038): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x5f]}}, &(0x7f00000009c0)=""/186, 0x1b, 0xba, 0x0, 0x800, 0x8d5bb172aa8229fc}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000c00)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x1, 0xb, 0x3, 0x1}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c80)=[r0, r0, r2, r0], 0x0, 0x10, 0x9d}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$user(&(0x7f0000000080), 0x0, &(0x7f00000001c0)="a6", 0x1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', 0x0) openat$incfs(0xffffffffffffffff, &(0x7f00000006c0)='.pending_reads\x00', 0x20000, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r6}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) 170.747104ms ago: executing program 8 (id=6039): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x32) (async, rerun: 64) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) (rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c5000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x6a040000) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async, rerun: 64) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) (rerun: 64) r2 = dup(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket(0x21, 0x2, 0x10000000000002) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0xc0) (async, rerun: 32) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) (async, rerun: 32) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) (async, rerun: 64) r6 = getpgid(0x0) (rerun: 64) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r7, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x24000) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, &(0x7f0000000080)) (async) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000000c0)="01", 0x24}]) 0s ago: executing program 8 (id=6040): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x2000000, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x4e1e}, 0x2c, {[{@msize={'msize', 0x3d, 0x10000}}]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000006800010000000000000000000a00000000000000599e0213c5dfa40188d2fb545284b7f51520a4757eb5d640d6445ec0544bdb5c39ee8b8d0c16f9434f9fdf9ef33dab6f8d0c492718e5f56b9e00e919f62028f2286c8e860a0b6027946315b3b7e7e143e0ab779afae5674182c75624e48d086b4ba53c6e3a63bf5204d823554d75"], 0x18}}, 0x20001000) shutdown(r3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_SEND(r4, 0x40449426, &(0x7f0000000440)={{r5}, 0x4, &(0x7f0000000400)=[0xfffffffffffffff7, 0x6, 0x5, 0x0], 0x2, 0xc}) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x336, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r9, r10, 0x8f5, 0x0) r11 = fsopen(0x0, 0x0) r12 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r13 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r13, 0x800442d2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @local}]}) kernel console output (not intermixed with test programs): 1148.132582][T26641] kAFS: unable to lookup cell '(,cL' [ 1148.506409][T26644] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1148.509939][T26644] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1148.513454][T26644] vhci_hcd vhci_hcd.0: Device attached [ 1148.519998][T26646] vhci_hcd: connection closed [ 1148.520333][T23261] vhci_hcd: stop threads [ 1148.523656][T23261] vhci_hcd: release socket [ 1148.527786][T23261] vhci_hcd: disconnect device [ 1148.873029][ T6025] usb 11-1: new high-speed USB device number 70 using dummy_hcd [ 1148.894919][T26657] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5546'. [ 1148.902372][T26657] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5546'. [ 1148.927264][T26657] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5546'. [ 1148.956915][T26657] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1149.043382][ T6025] usb 11-1: Using ep0 maxpacket: 8 [ 1149.050672][ T6025] usb 11-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 1149.054011][ T6025] usb 11-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 1149.056972][ T6025] usb 11-1: config 1 interface 0 has no altsetting 0 [ 1149.060711][ T6025] usb 11-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1149.063877][ T6025] usb 11-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 1149.066576][ T6025] usb 11-1: Product: syz [ 1149.067985][ T6025] usb 11-1: Manufacturer: 폏蹃晡ᘌ疈澢ᢹλ樵ݡᙚ꽂髏韙䛒﷭⃃ᶏ覯뿄ų쎯褈⤗䜚툖萳殯Ȝꃈ㹡䒔肃僂ͣ๾憱롢嬭땶玍艱㒷唞鋫ॉ㸐峻哹ཧꛋᢌ낎ͳ섪뵞謟孌쨳뒮଄ꅵ迲龈汗令뢄䒎앐襎ﾈ㬡쟰糇拓ᡫ懤ㄕ⌔䫋ꤣጺዴ菌殺 [ 1149.076720][ T6025] usb 11-1: SerialNumber: syz [ 1149.080101][T26651] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1149.083153][T26651] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1149.263720][T26669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5549'. [ 1149.295524][T26651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.298394][T26651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1149.323441][ T6025] usblp0: Disabling reads from problematic bidirectional printer [ 1149.332233][ T6025] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 8 proto 3 vid 0x03F0 pid 0x0004 [ 1149.348066][ T6025] usb 11-1: USB disconnect, device number 70 [ 1149.405800][ T6025] usblp0: removed [ 1150.039614][T26676] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.5550'. [ 1150.259363][T26682] openvswitch: netlink: Key type 31 is not supported [ 1150.275059][T18118] usb 50-1: device descriptor read/8, error -110 [ 1150.291997][T26685] 9pnet_fd: p9_fd_create_tcp (26685): problem connecting socket to 127.0.0.1 [ 1150.354596][T26687] kAFS: unable to lookup cell '(' [ 1150.360630][T26687] kAFS: unable to lookup cell '(,cL' [ 1150.666208][T18118] usb usb50-port1: attempt power cycle [ 1150.879985][T26691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5556'. [ 1150.884004][T26691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5556'. [ 1150.904513][T26691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5556'. [ 1150.934025][T26691] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1151.100681][ T7016] usb 13-1: new high-speed USB device number 20 using dummy_hcd [ 1151.251647][ T7016] usb 13-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1151.254703][ T7016] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1151.257514][ T7016] usb 13-1: Product: syz [ 1151.258948][ T7016] usb 13-1: Manufacturer: syz [ 1151.260574][ T7016] usb 13-1: SerialNumber: syz [ 1151.263476][ T7016] usb 13-1: config 0 descriptor?? [ 1151.267361][ T7016] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1151.269799][ T7016] dvb-usb: bulk message failed: -22 (2/0) [ 1151.273041][ T7016] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1151.276929][ T7016] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1151.279403][ T7016] usb 13-1: media controller created [ 1151.288462][ T7016] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1151.317220][T18118] usb usb50-port1: unable to enumerate USB device [ 1151.426847][ T29] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 1151.471895][T26689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.475562][T26689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.555519][T26698] dvb-usb: bulk message failed: -22 (4/0) [ 1151.558038][T26698] cxusb: i2c read failed [ 1151.596660][ T29] usb 12-1: Using ep0 maxpacket: 8 [ 1151.625520][ T29] usb 12-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 1151.651999][ T29] usb 12-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 1151.660393][ T29] usb 12-1: config 1 interface 0 has no altsetting 0 [ 1151.689205][ T29] usb 12-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1151.693072][ T29] usb 12-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 1151.696780][ T29] usb 12-1: Product: syz [ 1151.698708][ T29] usb 12-1: Manufacturer: 폏蹃晡ᘌ疈澢ᢹλ樵ݡᙚ꽂髏韙䛒﷭⃃ᶏ覯뿄ų쎯褈⤗䜚툖萳殯Ȝꃈ㹡䒔肃僂ͣ๾憱롢嬭땶玍艱㒷唞鋫ॉ㸐峻哹ཧꛋᢌ낎ͳ섪뵞謟孌쨳뒮଄ꅵ迲龈汗令뢄䒎앐襎ﾈ㬡쟰糇拓ᡫ懤ㄕ⌔䫋ꤣጺዴ菌殺 [ 1151.730174][ T29] usb 12-1: SerialNumber: syz [ 1151.762669][T26697] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1151.766024][T26697] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1152.020331][T26697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.033018][T26697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.118621][ T29] usblp0: Disabling reads from problematic bidirectional printer [ 1152.126691][ T29] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 8 proto 3 vid 0x03F0 pid 0x0004 [ 1152.176704][ T29] usb 12-1: USB disconnect, device number 25 [ 1152.246546][ T29] usblp0: removed [ 1152.310319][T26704] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1152.312496][T26704] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1152.315244][T26704] vhci_hcd vhci_hcd.0: Device attached [ 1152.376538][T26704] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1152.414476][T26706] vhci_hcd: connection closed [ 1152.415248][T14758] vhci_hcd: stop threads [ 1152.433268][T14758] vhci_hcd: release socket [ 1152.437453][T14758] vhci_hcd: disconnect device [ 1152.499623][T26714] 9pnet_fd: Insufficient options for proto=fd [ 1152.823235][T26729] kAFS: unable to lookup cell '(' [ 1152.830702][T26729] kAFS: unable to lookup cell '(,cL' [ 1153.539010][T26724] 9pnet_fd: p9_fd_create_tcp (26724): problem connecting socket to 127.0.0.1 [ 1154.002452][ T7016] cxusb: set interface failed [ 1154.004184][ T7016] dvb-usb: bulk message failed: -22 (1/0) [ 1154.014845][T26747] 9pnet_virtio: no channels available for device syz [ 1154.044050][ T7016] DVB: Unable to find symbol mt352_attach() [ 1154.046543][ T7016] dvb-usb: bulk message failed: -22 (5/0) [ 1154.048591][ T7016] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1154.054739][ T7016] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1154.126051][ T5953] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1154.160105][ T7016] rc_core: IR keymap rc-dvico-mce not found [ 1154.163293][ T7016] Registered IR keymap rc-empty [ 1154.171864][ T7016] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0 [ 1154.181626][ T7016] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input192 [ 1154.200931][ T7016] dvb-usb: schedule remote query interval to 100 msecs. [ 1154.203711][ T7016] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1154.209125][ T7016] usb 13-1: USB disconnect, device number 20 [ 1154.224003][ T7016] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1154.370401][ T5953] Bluetooth: hci2: command 0x0401 tx timeout [ 1154.847108][T26771] 9pnet_fd: p9_fd_create_tcp (26771): problem connecting socket to 127.0.0.1 [ 1155.121324][ T5988] usb 11-1: new high-speed USB device number 71 using dummy_hcd [ 1155.262107][T26776] kAFS: unable to lookup cell '(' [ 1155.272010][T26776] kAFS: unable to lookup cell '(,cL' [ 1155.414097][ T5988] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1155.417160][ T5988] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1155.420013][ T5988] usb 11-1: Product: syz [ 1155.421459][ T5988] usb 11-1: Manufacturer: syz [ 1155.423483][ T5988] usb 11-1: SerialNumber: syz [ 1155.427355][ T5988] usb 11-1: config 0 descriptor?? [ 1155.431349][ T5988] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1155.433943][ T5988] dvb-usb: bulk message failed: -22 (2/0) [ 1155.437124][ T5988] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1155.440725][ T5988] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1155.444100][ T5988] usb 11-1: media controller created [ 1155.459844][ T5988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1155.596012][T26786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5583'. [ 1155.599964][T26786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5583'. [ 1155.631244][T26786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5583'. [ 1155.642204][T26773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1155.644994][T26773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1155.711933][T26786] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1155.801760][T26791] dvb-usb: bulk message failed: -22 (4/0) [ 1155.803906][T26791] cxusb: i2c read failed [ 1155.829052][T26790] FAULT_INJECTION: forcing a failure. [ 1155.829052][T26790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1155.836532][T26790] CPU: 0 UID: 60928 PID: 26790 Comm: syz.8.5584 Not tainted syzkaller #0 PREEMPT(full) [ 1155.836556][T26790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1155.836566][T26790] Call Trace: [ 1155.836572][T26790] [ 1155.836578][T26790] dump_stack_lvl+0x16c/0x1f0 [ 1155.836602][T26790] should_fail_ex+0x512/0x640 [ 1155.836628][T26790] _copy_from_iter+0x29f/0x1720 [ 1155.836654][T26790] ? __alloc_skb+0x200/0x380 [ 1155.836679][T26790] ? __pfx__copy_from_iter+0x10/0x10 [ 1155.836703][T26790] ? __kernel_text_address+0xd/0x40 [ 1155.836718][T26790] ? __pfx___might_resched+0x10/0x10 [ 1155.836742][T26790] netlink_sendmsg+0x820/0xdd0 [ 1155.836761][T26790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1155.836779][T26790] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1155.836803][T26790] ____sys_sendmsg+0xa98/0xc70 [ 1155.836825][T26790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1155.836844][T26790] ? get_compat_msghdr+0x11a/0x170 [ 1155.836870][T26790] ___sys_sendmsg+0x134/0x1d0 [ 1155.836887][T26790] ? __pfx____sys_sendmsg+0x10/0x10 [ 1155.836915][T26790] ? find_held_lock+0x2b/0x80 [ 1155.836945][T26790] __sys_sendmsg+0x16d/0x220 [ 1155.836962][T26790] ? __pfx___sys_sendmsg+0x10/0x10 [ 1155.836987][T26790] ? rcu_is_watching+0x12/0xc0 [ 1155.837004][T26790] __do_fast_syscall_32+0x7c/0x300 [ 1155.837027][T26790] do_fast_syscall_32+0x32/0x80 [ 1155.837047][T26790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1155.837066][T26790] RIP: 0023:0xf7f41579 [ 1155.837079][T26790] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1155.837094][T26790] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1155.837111][T26790] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000300 [ 1155.837119][T26790] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1155.837126][T26790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1155.837135][T26790] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1155.837145][T26790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1155.837166][T26790] [ 1156.252778][ T6453] usb 13-1: new high-speed USB device number 21 using dummy_hcd [ 1156.312301][T26804] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1156.314544][T26804] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1156.317324][T26804] vhci_hcd vhci_hcd.0: Device attached [ 1156.325077][T26808] vhci_hcd: connection closed [ 1156.325578][T14769] vhci_hcd: stop threads [ 1156.329412][T14769] vhci_hcd: release socket [ 1156.331363][T14769] vhci_hcd: disconnect device [ 1156.403012][ T6453] usb 13-1: device descriptor read/64, error -71 [ 1156.651193][T26813] 9p: Unknown Cache mode or invalid value fscach [ 1156.673950][ T6453] usb 13-1: new high-speed USB device number 22 using dummy_hcd [ 1156.823556][ T6453] usb 13-1: device descriptor read/64, error -71 [ 1156.956235][ T6453] usb usb13-port1: attempt power cycle [ 1157.207787][ T5988] cxusb: set interface failed [ 1157.209761][ T5988] dvb-usb: bulk message failed: -22 (1/0) [ 1157.228062][ T5988] DVB: Unable to find symbol mt352_attach() [ 1157.230473][ T5988] dvb-usb: bulk message failed: -22 (5/0) [ 1157.232281][ T5988] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1157.235641][ T5988] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1157.284192][ T5988] rc_core: IR keymap rc-dvico-mce not found [ 1157.286253][ T5988] Registered IR keymap rc-empty [ 1157.288466][ T5988] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 1157.292173][ T5988] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input193 [ 1157.296657][ T5988] dvb-usb: schedule remote query interval to 100 msecs. [ 1157.299609][ T5988] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1157.303017][ T5988] usb 11-1: USB disconnect, device number 71 [ 1157.314154][ T6453] usb 13-1: new high-speed USB device number 23 using dummy_hcd [ 1157.344785][ T6453] usb 13-1: device descriptor read/8, error -71 [ 1157.366146][ T5988] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1157.584598][ T6453] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 1157.634750][T26828] kAFS: unable to lookup cell '(' [ 1157.645265][T26828] kAFS: unable to lookup cell '(,cL' [ 1157.796240][T26817] 9pnet_fd: p9_fd_create_tcp (26817): problem connecting socket to 127.0.0.1 [ 1157.835553][ T6453] usb 13-1: device descriptor read/8, error -71 [ 1157.849660][T26833] No control pipe specified [ 1157.868858][T26835] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5598'. [ 1157.872897][T26835] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5598'. [ 1157.900025][T26835] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5598'. [ 1157.927837][T26835] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1157.945444][ T6453] usb usb13-port1: unable to enumerate USB device [ 1158.855250][T26870] 9pnet_fd: p9_fd_create_tcp (26870): problem connecting socket to 127.0.0.1 [ 1158.936515][ T6074] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 1159.289162][ T6074] usb 12-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1159.292812][ T6074] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1159.295803][ T6074] usb 12-1: Product: syz [ 1159.347180][ T6074] usb 12-1: Manufacturer: syz [ 1159.349232][ T6074] usb 12-1: SerialNumber: syz [ 1159.353104][ T6074] usb 12-1: config 0 descriptor?? [ 1159.356922][T26875] kAFS: unable to lookup cell '(,cL' [ 1159.361077][ T6074] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1159.364233][ T6074] dvb-usb: bulk message failed: -22 (2/0) [ 1159.403345][ T6074] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1159.420309][ T6074] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1159.425231][ T6074] usb 12-1: media controller created [ 1159.442770][ T6074] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1159.704007][T26864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.726184][T26864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.805463][T26881] dlm: plock device version mismatch: kernel (1.2.0), user (458753.0.0) [ 1159.979794][T26883] dvb-usb: bulk message failed: -22 (4/0) [ 1159.982375][T26883] cxusb: i2c read failed [ 1160.849652][T26888] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5609'. [ 1160.895756][T26888] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5609'. [ 1160.987265][T26888] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5609'. [ 1161.050471][T26892] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1161.217795][ T40] audit: type=1326 audit(1764611519.123:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26895 comm="syz.8.5612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1161.226597][ T40] audit: type=1326 audit(1764611519.123:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26895 comm="syz.8.5612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1161.235814][ T40] audit: type=1326 audit(1764611519.133:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26895 comm="syz.8.5612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1161.244489][ T40] audit: type=1326 audit(1764611519.133:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26895 comm="syz.8.5612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1161.256832][ T40] audit: type=1326 audit(1764611519.133:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26895 comm="syz.8.5612" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1161.266369][ T40] audit: type=1326 audit(1764611519.143:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26895 comm="syz.8.5612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1161.274453][ T40] audit: type=1326 audit(1764611519.143:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26895 comm="syz.8.5612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1161.282708][ T40] audit: type=1326 audit(1764611519.143:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26895 comm="syz.8.5612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1161.289642][ T40] audit: type=1326 audit(1764611519.143:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26895 comm="syz.8.5612" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1161.297388][ T40] audit: type=1326 audit(1764611519.143:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26895 comm="syz.8.5612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1161.755692][ T6074] cxusb: set interface failed [ 1161.757245][ T6074] dvb-usb: bulk message failed: -22 (1/0) [ 1161.763745][T26899] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5613'. [ 1161.846387][ T6074] DVB: Unable to find symbol mt352_attach() [ 1161.848947][ T6074] dvb-usb: bulk message failed: -22 (5/0) [ 1161.851486][ T6074] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1161.854370][ T6074] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1161.857131][T26902] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5614'. [ 1161.940216][ T6074] rc_core: IR keymap rc-dvico-mce not found [ 1161.942197][ T6074] Registered IR keymap rc-empty [ 1161.944303][ T6074] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 1161.948254][ T6074] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input194 [ 1161.960955][ T6074] dvb-usb: schedule remote query interval to 100 msecs. [ 1161.963172][ T6074] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1161.970351][ T6074] usb 12-1: USB disconnect, device number 26 [ 1161.996384][ T6074] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1162.651916][T26908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5616'. [ 1162.656732][T26908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5616'. [ 1162.761319][T26899] comedi comedi2: reset error (fatal) [ 1162.957950][T26925] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1162.967089][T26925] netlink: 'syz.4.5617': attribute type 16 has an invalid length. [ 1162.969748][T26925] netlink: 'syz.4.5617': attribute type 17 has an invalid length. [ 1163.033415][T26925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1163.038498][T26925] 8021q: adding VLAN 0 to HW filter on device team0 [ 1163.051464][T26925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1163.101785][ T6453] usb 11-1: new high-speed USB device number 72 using dummy_hcd [ 1163.230700][T23969] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 1163.258230][ T6453] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1163.262042][ T6453] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1163.265290][ T6453] usb 11-1: Product: syz [ 1163.266705][ T6453] usb 11-1: Manufacturer: syz [ 1163.268654][ T6453] usb 11-1: SerialNumber: syz [ 1163.274786][ T6453] usb 11-1: config 0 descriptor?? [ 1163.283182][ T6453] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1163.288416][ T6453] dvb-usb: bulk message failed: -22 (2/0) [ 1163.295698][ T6453] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1163.302807][ T6453] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1163.307133][ T6453] usb 11-1: media controller created [ 1163.334099][ T6453] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1163.422110][T23969] usb 12-1: Using ep0 maxpacket: 8 [ 1163.431163][T23969] usb 12-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 1163.434434][T23969] usb 12-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 1163.437564][T23969] usb 12-1: config 1 interface 0 has no altsetting 0 [ 1163.441468][T23969] usb 12-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1163.444531][T23969] usb 12-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 1163.447114][T23969] usb 12-1: Product: syz [ 1163.448503][T23969] usb 12-1: Manufacturer: 폏蹃晡ᘌ疈澢ᢹλ樵ݡᙚ꽂髏韙䛒﷭⃃ᶏ覯뿄ų쎯褈⤗䜚툖萳殯Ȝꃈ㹡䒔肃僂ͣ๾憱롢嬭땶玍艱㒷唞鋫ॉ㸐峻哹ཧꛋᢌ낎ͳ섪뵞謟孌쨳뒮଄ꅵ迲龈汗令뢄䒎앐襎ﾈ㬡쟰糇拓ᡫ懤ㄕ⌔䫋ꤣጺዴ菌殺 [ 1163.457748][T23969] usb 12-1: SerialNumber: syz [ 1163.462478][T26912] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1163.467035][T26912] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1163.496870][T26920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.500115][T26920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.632696][T26930] dvb-usb: bulk message failed: -22 (4/0) [ 1163.634627][T26930] cxusb: i2c read failed [ 1163.725409][T26912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.729230][T26912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.877087][T23969] usblp0: Disabling reads from problematic bidirectional printer [ 1164.306541][T26943] 9pnet_fd: p9_fd_create_tcp (26943): problem connecting socket to 127.0.0.1 [ 1164.472251][T26946] kAFS: unable to lookup cell '(,cL' [ 1164.608200][T26944] kAFS: unable to lookup cell '(' [ 1164.947535][T23969] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 8 proto 3 vid 0x03F0 pid 0x0004 [ 1165.075013][T23969] usb 12-1: USB disconnect, device number 27 [ 1165.081642][T23969] usblp0: removed [ 1165.113834][ T6453] cxusb: set interface failed [ 1165.117739][ T6453] dvb-usb: bulk message failed: -22 (1/0) [ 1165.143571][ T6453] DVB: Unable to find symbol mt352_attach() [ 1165.254798][ T6453] dvb-usb: bulk message failed: -22 (5/0) [ 1165.256647][ T6453] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1165.259059][ T6453] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1165.634944][ T6453] rc_core: IR keymap rc-dvico-mce not found [ 1165.636897][ T6453] Registered IR keymap rc-empty [ 1165.639130][ T6453] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 1165.644232][ T6453] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input195 [ 1165.746358][ T6453] dvb-usb: schedule remote query interval to 100 msecs. [ 1165.750648][ T6453] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1165.867343][ T9619] dvb-usb: bulk message failed: -22 (1/0) [ 1166.002475][ T6453] usb 11-1: USB disconnect, device number 72 [ 1166.021703][ T6453] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1166.316004][ T6074] usb 13-1: new high-speed USB device number 25 using dummy_hcd [ 1166.348528][T26974] ubi: mtd0 is already attached to ubi31 [ 1166.496180][ T6074] usb 13-1: Using ep0 maxpacket: 8 [ 1166.500515][ T6074] usb 13-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 1166.503661][ T6074] usb 13-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 1166.506852][ T6074] usb 13-1: config 1 interface 0 has no altsetting 0 [ 1166.511607][ T6074] usb 13-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1166.514512][ T6074] usb 13-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 1166.517160][ T6074] usb 13-1: Product: syz [ 1166.518513][ T6074] usb 13-1: Manufacturer: 폏蹃晡ᘌ疈澢ᢹλ樵ݡᙚ꽂髏韙䛒﷭⃃ᶏ覯뿄ų쎯褈⤗䜚툖萳殯Ȝꃈ㹡䒔肃僂ͣ๾憱롢嬭땶玍艱㒷唞鋫ॉ㸐峻哹ཧꛋᢌ낎ͳ섪뵞謟孌쨳뒮଄ꅵ迲龈汗令뢄䒎앐襎ﾈ㬡쟰糇拓ᡫ懤ㄕ⌔䫋ꤣጺዴ菌殺 [ 1166.530516][ T6074] usb 13-1: SerialNumber: syz [ 1166.533778][T26973] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1166.536755][T26973] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1166.741630][T26973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.744626][T26973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.751579][ T6074] usblp0: Disabling reads from problematic bidirectional printer [ 1166.754949][ T6074] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 8 proto 3 vid 0x03F0 pid 0x0004 [ 1166.759726][ T6074] usb 13-1: USB disconnect, device number 25 [ 1166.763067][ T6074] usblp0: removed [ 1166.900248][T26989] 9pnet_fd: p9_fd_create_tcp (26989): problem connecting socket to 127.0.0.1 [ 1167.140048][T26992] kAFS: unable to lookup cell '(' [ 1167.142942][T26992] kAFS: unable to lookup cell '(,cL' [ 1168.598862][T23969] usb 11-1: new high-speed USB device number 73 using dummy_hcd [ 1168.750363][T27023] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5648'. [ 1168.755058][T27023] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5648'. [ 1168.764154][T23969] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1168.769232][T23969] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1168.771988][T23969] usb 11-1: Product: syz [ 1168.773405][T23969] usb 11-1: Manufacturer: syz [ 1168.774942][T23969] usb 11-1: SerialNumber: syz [ 1168.777642][T23969] usb 11-1: config 0 descriptor?? [ 1168.781114][T23969] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1168.784026][T23969] dvb-usb: bulk message failed: -22 (2/0) [ 1168.786446][T27023] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1168.786889][T23969] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1168.794062][T23969] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1168.796627][T23969] usb 11-1: media controller created [ 1168.808056][T23969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1168.966232][T27031] 9pnet_fd: p9_fd_create_tcp (27031): problem connecting socket to 127.0.0.1 [ 1168.983783][T27019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1168.986676][T27019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.002356][T27019] dvb-usb: bulk message failed: -22 (4/0) [ 1169.004233][T27019] cxusb: i2c read failed [ 1169.007794][T23969] cxusb: set interface failed [ 1169.009442][T23969] dvb-usb: bulk message failed: -22 (1/0) [ 1169.030468][T23969] DVB: Unable to find symbol mt352_attach() [ 1169.033012][T23969] dvb-usb: bulk message failed: -22 (5/0) [ 1169.035369][T23969] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1169.038144][T23969] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1169.089651][T23969] rc_core: IR keymap rc-dvico-mce not found [ 1169.091605][T23969] Registered IR keymap rc-empty [ 1169.093756][T23969] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 1169.098742][T23969] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input196 [ 1169.103068][T23969] dvb-usb: schedule remote query interval to 100 msecs. [ 1169.105304][T23969] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1169.108929][T23969] usb 11-1: USB disconnect, device number 73 [ 1169.128155][T23969] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1169.138672][T27036] kAFS: unable to lookup cell '(' [ 1169.141363][T27036] kAFS: unable to lookup cell '(,cL' [ 1169.898465][T27052] can0: slcan on ttyS3. [ 1169.930775][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 1169.930854][ T40] audit: type=1326 audit(1764611527.832:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27053 comm="syz.6.5657" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1169.942314][ T40] audit: type=1326 audit(1764611527.832:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27053 comm="syz.6.5657" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1169.951145][ T40] audit: type=1326 audit(1764611527.832:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27053 comm="syz.6.5657" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1169.958235][ T40] audit: type=1326 audit(1764611527.832:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27053 comm="syz.6.5657" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1169.962007][T27052] can0 (unregistered): slcan off ttyS3. [ 1169.965071][ T40] audit: type=1326 audit(1764611527.832:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27053 comm="syz.6.5657" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1169.973967][ T40] audit: type=1326 audit(1764611527.832:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27053 comm="syz.6.5657" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1169.981836][ T40] audit: type=1326 audit(1764611527.832:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27053 comm="syz.6.5657" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1169.988722][ T40] audit: type=1326 audit(1764611527.832:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27053 comm="syz.6.5657" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1169.996378][ T40] audit: type=1326 audit(1764611527.832:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27053 comm="syz.6.5657" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1170.004077][ T40] audit: type=1326 audit(1764611527.832:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27053 comm="syz.6.5657" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 1171.222241][ T6074] usb 11-1: new high-speed USB device number 74 using dummy_hcd [ 1171.393028][ T6074] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1171.397131][ T6074] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1171.400865][ T6074] usb 11-1: Product: syz [ 1171.402832][ T6074] usb 11-1: Manufacturer: syz [ 1171.404966][ T6074] usb 11-1: SerialNumber: syz [ 1171.407801][ T6074] usb 11-1: config 0 descriptor?? [ 1171.423433][ T6074] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1171.426659][ T6074] dvb-usb: bulk message failed: -22 (2/0) [ 1171.429664][ T6074] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1171.435071][ T6074] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1171.437783][ T6074] usb 11-1: media controller created [ 1171.447411][ T6074] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1171.615656][T27071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.618497][T27071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.638443][T27071] dvb-usb: bulk message failed: -22 (4/0) [ 1171.640348][T27071] cxusb: i2c read failed [ 1171.643668][ T6074] cxusb: set interface failed [ 1171.645350][ T6074] dvb-usb: bulk message failed: -22 (1/0) [ 1171.663882][ T6074] DVB: Unable to find symbol mt352_attach() [ 1171.665899][ T6074] dvb-usb: bulk message failed: -22 (5/0) [ 1171.667868][ T6074] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1171.670306][ T6074] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1171.713038][ T6074] rc_core: IR keymap rc-dvico-mce not found [ 1171.715279][ T6074] Registered IR keymap rc-empty [ 1171.717679][ T6074] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 1171.722006][ T6074] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input197 [ 1171.727153][ T6074] dvb-usb: schedule remote query interval to 100 msecs. [ 1171.730225][ T6074] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1171.735070][ T6074] usb 11-1: USB disconnect, device number 74 [ 1171.755901][ T6074] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1172.107653][T27081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5664'. [ 1172.111595][T27081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5664'. [ 1172.122408][T27081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5664'. [ 1172.129059][T27081] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1172.215316][T27085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5665'. [ 1172.218259][T27085] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1172.390551][T27088] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5667'. [ 1172.393518][T27088] block nbd0: not configured, cannot reconfigure [ 1172.407392][T27091] kAFS: unable to lookup cell '(' [ 1172.409340][T27091] kAFS: unable to lookup cell '(,cL' [ 1173.722017][T27083] 9pnet_fd: p9_fd_create_tcp (27083): problem connecting socket to 127.0.0.1 [ 1175.643559][T27150] kAFS: unable to lookup cell '(' [ 1175.677834][T27150] kAFS: unable to lookup cell '(,cL' [ 1176.374153][T27156] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5682'. [ 1176.378045][T27156] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5682'. [ 1176.409027][T27143] 9pnet_fd: p9_fd_create_tcp (27143): problem connecting socket to 127.0.0.1 [ 1176.476430][T27159] 9pnet_fd: p9_fd_create_tcp (27159): problem connecting socket to 127.0.0.1 [ 1176.739570][T27162] kAFS: unable to lookup cell '(' [ 1176.741706][T27162] kAFS: unable to lookup cell '(,cL' [ 1176.909644][T27167] 9pnet_fd: p9_fd_create_tcp (27167): problem connecting socket to 127.0.0.1 [ 1177.217232][T27169] kAFS: unable to lookup cell '(' [ 1177.222341][T27169] kAFS: unable to lookup cell '(,cL' [ 1177.682084][ T1418] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1177.903295][T27179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5687'. [ 1177.911008][T27179] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5687'. [ 1177.939993][T27179] 9pnet_fd: p9_fd_create_tcp (27179): problem connecting socket to 127.0.0.1 [ 1177.944657][T27179] 9pnet_fd: p9_fd_create_tcp (27179): problem connecting socket to 127.0.0.1 [ 1177.949921][T27179] 9pnet_fd: p9_fd_create_tcp (27179): problem connecting socket to 127.0.0.1 [ 1177.954492][T27179] 9pnet_fd: p9_fd_create_tcp (27179): problem connecting socket to 127.0.0.1 [ 1178.031073][T27179] 9pnet_fd: p9_fd_create_tcp (27179): problem connecting socket to 127.0.0.1 [ 1178.035730][T27179] 9pnet_fd: p9_fd_create_tcp (27179): problem connecting socket to 127.0.0.1 [ 1178.237694][T27182] 9pnet_fd: Insufficient options for proto=fd [ 1178.300839][T27184] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5689'. [ 1178.892089][T27196] ubi31: detaching mtd0 [ 1178.958382][T27196] ubi31: mtd0 is detached [ 1179.269674][T27211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5697'. [ 1179.275117][T27211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5697'. [ 1179.279335][T27211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5697'. [ 1179.286033][T27211] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1179.763429][ T5953] Bluetooth: hci2: command 0x0401 tx timeout [ 1180.624870][T27221] kAFS: unable to lookup cell '(' [ 1180.635478][T27221] kAFS: unable to lookup cell '(,cL' [ 1181.265241][T27217] 9pnet_fd: p9_fd_create_tcp (27217): problem connecting socket to 127.0.0.1 [ 1181.468015][ T6074] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 1181.519491][T27233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5701'. [ 1181.625621][ T6074] usb 12-1: Using ep0 maxpacket: 8 [ 1181.629693][ T6074] usb 12-1: config 179 has an invalid interface number: 65 but max is 0 [ 1181.632337][ T6074] usb 12-1: config 179 has no interface number 0 [ 1181.634363][ T6074] usb 12-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1181.638922][ T6074] usb 12-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1181.642593][ T6074] usb 12-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1181.646454][ T6074] usb 12-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1181.650444][ T6074] usb 12-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1181.654671][ T6074] usb 12-1: config 179 interface 65 has no altsetting 0 [ 1181.657239][ T6074] usb 12-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1181.660066][ T6074] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.673462][ T6074] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:179.65/input/input198 [ 1181.727679][ T5337] input input198: unable to receive magic message: -110 [ 1181.734188][ T5337] input input198: unable to receive magic message: -32 [ 1181.738698][ T5337] input input198: unable to receive magic message: -32 [ 1181.744648][ T5337] input input198: unable to receive magic message: -32 [ 1181.874755][T27226] input input198: unable to receive magic message: -32 [ 1181.881914][ T6074] usb 12-1: USB disconnect, device number 28 [ 1181.883869][ C2] xpad 12-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1182.426079][T27247] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1182.464781][T27250] 9pnet_fd: p9_fd_create_tcp (27250): problem connecting socket to 127.0.0.1 [ 1182.557808][T27253] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1182.560045][T27253] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1182.563345][T27253] vhci_hcd vhci_hcd.0: Device attached [ 1182.678054][T27258] can: request_module (can-proto-4) failed. [ 1182.733658][T27260] kAFS: unable to lookup cell '(' [ 1182.757271][T27260] kAFS: unable to lookup cell '(,cL' [ 1182.870804][ T29] usb 46-1: SetAddress Request (89) to port 0 [ 1182.873203][T27264] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5711'. [ 1182.876363][T27264] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5711'. [ 1182.879946][T27264] netlink: 'syz.8.5711': attribute type 14 has an invalid length. [ 1182.881396][ T29] usb 46-1: new SuperSpeed USB device number 89 using vhci_hcd [ 1182.882887][T27264] netlink: 'syz.8.5711': attribute type 13 has an invalid length. [ 1182.920395][T27266] 9pnet_fd: p9_fd_create_tcp (27266): problem connecting socket to 127.0.0.1 [ 1183.163244][T27267] kAFS: unable to lookup cell '(' [ 1183.166069][T27267] kAFS: unable to lookup cell '(,cL' [ 1183.180811][T27254] vhci_hcd: connection reset by peer [ 1183.186314][T14769] vhci_hcd: stop threads [ 1183.187774][T14769] vhci_hcd: release socket [ 1183.189233][T14769] vhci_hcd: disconnect device [ 1183.849807][T27283] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5716'. [ 1183.880527][T27285] netlink: 'syz.4.5717': attribute type 1 has an invalid length. [ 1183.903058][T27285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1183.914410][T27285] FAULT_INJECTION: forcing a failure. [ 1183.914410][T27285] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.919219][T27285] CPU: 3 UID: 0 PID: 27285 Comm: syz.4.5717 Not tainted syzkaller #0 PREEMPT(full) [ 1183.919235][T27285] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1183.919242][T27285] Call Trace: [ 1183.919247][T27285] [ 1183.919252][T27285] dump_stack_lvl+0x16c/0x1f0 [ 1183.919270][T27285] should_fail_ex+0x512/0x640 [ 1183.919287][T27285] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1183.919299][T27285] should_failslab+0xc2/0x120 [ 1183.919314][T27285] __kmalloc_cache_noprof+0x72/0x780 [ 1183.919325][T27285] ? alloc_netdev_mqs+0xed3/0x1550 [ 1183.919341][T27285] ? alloc_netdev_mqs+0xed3/0x1550 [ 1183.919353][T27285] alloc_netdev_mqs+0xed3/0x1550 [ 1183.919367][T27285] rtnl_create_link+0xc08/0xf90 [ 1183.919380][T27285] rtnl_newlink+0xb69/0x2000 [ 1183.919398][T27285] ? __pfx_rtnl_newlink+0x10/0x10 [ 1183.919424][T27285] ? kfree_skbmem+0x1a4/0x1f0 [ 1183.919450][T27285] ? rcu_is_watching+0x12/0xc0 [ 1183.919476][T27285] ? find_held_lock+0x2b/0x80 [ 1183.919491][T27285] ? __pfx_rtnl_newlink+0x10/0x10 [ 1183.919506][T27285] ? __pfx_rtnl_newlink+0x10/0x10 [ 1183.919521][T27285] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1183.919539][T27285] ? __pfx_rtnl_newlink+0x10/0x10 [ 1183.919556][T27285] rtnetlink_rcv_msg+0x95e/0xe90 [ 1183.919576][T27285] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1183.919599][T27285] ? ref_tracker_free+0x37c/0x830 [ 1183.919618][T27285] netlink_rcv_skb+0x158/0x420 [ 1183.919635][T27285] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1183.919652][T27285] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1183.919674][T27285] ? netlink_deliver_tap+0x1ae/0xd30 [ 1183.919696][T27285] netlink_unicast+0x5aa/0x870 [ 1183.919715][T27285] ? __pfx_netlink_unicast+0x10/0x10 [ 1183.919734][T27285] ? __pfx___might_resched+0x10/0x10 [ 1183.919768][T27285] netlink_sendmsg+0x8c8/0xdd0 [ 1183.919796][T27285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1183.919817][T27285] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1183.919848][T27285] ____sys_sendmsg+0xa98/0xc70 [ 1183.919888][T27285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1183.919908][T27285] ? get_compat_msghdr+0x11a/0x170 [ 1183.919938][T27285] ___sys_sendmsg+0x134/0x1d0 [ 1183.919959][T27285] ? __pfx____sys_sendmsg+0x10/0x10 [ 1183.919996][T27285] ? find_held_lock+0x2b/0x80 [ 1183.920016][T27285] __sys_sendmsg+0x16d/0x220 [ 1183.920027][T27285] ? __pfx___sys_sendmsg+0x10/0x10 [ 1183.920044][T27285] ? rcu_is_watching+0x12/0xc0 [ 1183.920057][T27285] __do_fast_syscall_32+0x7c/0x300 [ 1183.920073][T27285] do_fast_syscall_32+0x32/0x80 [ 1183.920086][T27285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1183.920100][T27285] RIP: 0023:0xf70ed579 [ 1183.920109][T27285] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1183.920122][T27285] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1183.920167][T27285] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1183.920178][T27285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1183.920186][T27285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1183.920194][T27285] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1183.920204][T27285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1183.920229][T27285] [ 1184.706396][T27299] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5720'. [ 1184.709419][T27299] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5720'. [ 1184.824928][T27304] netlink: 260 bytes leftover after parsing attributes in process `syz.6.5724'. [ 1184.828106][T27304] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5724'. [ 1184.829814][T27305] 9pnet_fd: p9_fd_create_tcp (27305): problem connecting socket to 127.0.0.1 [ 1184.831270][T27304] unsupported nlmsg_type 40 [ 1184.838455][T27304] syz_tun: entered allmulticast mode [ 1184.840838][T16819] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 1184.902791][T27307] syz_tun: left allmulticast mode [ 1184.906977][T27306] kAFS: unable to lookup cell '(' [ 1184.910956][T27306] kAFS: unable to lookup cell '(,cL' [ 1185.261500][T27316] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1185.264529][T27316] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1185.268635][T27316] vhci_hcd vhci_hcd.0: Device attached [ 1185.540550][ T9619] usb 54-1: SetAddress Request (35) to port 0 [ 1185.543943][ T9619] usb 54-1: new SuperSpeed USB device number 35 using vhci_hcd [ 1185.610861][T27320] FAULT_INJECTION: forcing a failure. [ 1185.610861][T27320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.616184][T27320] CPU: 3 UID: 0 PID: 27320 Comm: syz.4.5726 Not tainted syzkaller #0 PREEMPT(full) [ 1185.616208][T27320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1185.616219][T27320] Call Trace: [ 1185.616226][T27320] [ 1185.616234][T27320] dump_stack_lvl+0x16c/0x1f0 [ 1185.616258][T27320] should_fail_ex+0x512/0x640 [ 1185.616276][T27320] _copy_to_user+0x32/0xd0 [ 1185.616288][T27320] generic_map_lookup_batch+0x634/0xb50 [ 1185.616304][T27320] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1185.616319][T27320] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1185.616328][T27320] bpf_map_do_batch+0x26c/0x680 [ 1185.616346][T27320] __sys_bpf+0x15a9/0x4980 [ 1185.616359][T27320] ? __pfx___sys_bpf+0x10/0x10 [ 1185.616369][T27320] ? find_held_lock+0x2b/0x80 [ 1185.616383][T27320] ? find_held_lock+0x2b/0x80 [ 1185.616397][T27320] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1185.616419][T27320] ? fput+0x9b/0xd0 [ 1185.616434][T27320] ? ksys_write+0x1ac/0x250 [ 1185.616445][T27320] ? __pfx_ksys_write+0x10/0x10 [ 1185.616459][T27320] __ia32_sys_bpf+0x76/0xe0 [ 1185.616470][T27320] __do_fast_syscall_32+0x7c/0x300 [ 1185.616485][T27320] do_fast_syscall_32+0x32/0x80 [ 1185.616499][T27320] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1185.616512][T27320] RIP: 0023:0xf70ed579 [ 1185.616521][T27320] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1185.616531][T27320] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 1185.616542][T27320] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000800003c0 [ 1185.616549][T27320] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 1185.616555][T27320] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1185.616561][T27320] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1185.616567][T27320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1185.616580][T27320] [ 1185.719900][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 1185.719911][ T40] audit: type=1326 audit(1764611543.592:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27322 comm="syz.4.5729" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x0 [ 1185.974640][T27335] siw: device registration error -23 [ 1186.374411][T27317] vhci_hcd: connection reset by peer [ 1186.376397][T14766] vhci_hcd: stop threads [ 1186.379223][T14766] vhci_hcd: release socket [ 1186.396465][T14766] vhci_hcd: disconnect device [ 1186.878888][T27355] overlayfs: failed to get inode (-116) [ 1186.882287][T27355] overlayfs: failed to get inode (-116) [ 1186.887062][T27355] overlayfs: failed to get inode (-116) [ 1186.890391][T27355] overlayfs: failed to get inode (-116) [ 1186.927237][T27360] 9pnet_fd: p9_fd_create_tcp (27360): problem connecting socket to 127.0.0.1 [ 1187.115620][T27365] kAFS: unable to lookup cell '(' [ 1187.123245][T27365] kAFS: unable to lookup cell '(,cL' [ 1187.222715][ T6074] usb 13-1: new high-speed USB device number 26 using dummy_hcd [ 1187.730957][ T6074] usb 13-1: Using ep0 maxpacket: 8 [ 1187.792174][ T6074] usb 13-1: config 179 has an invalid interface number: 65 but max is 0 [ 1187.794766][ T6074] usb 13-1: config 179 has no interface number 0 [ 1187.796791][ T6074] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1187.800200][ T6074] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1187.803634][ T6074] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1187.806985][ T6074] usb 13-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1187.810132][ T6074] usb 13-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1187.814123][ T6074] usb 13-1: config 179 interface 65 has no altsetting 0 [ 1187.816177][ T6074] usb 13-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1187.818832][ T6074] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.825545][ T6074] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:179.65/input/input199 [ 1187.963699][T27380] kAFS: unable to lookup cell '(' [ 1187.972473][T27380] kAFS: unable to lookup cell '(,cL' [ 1187.984904][ T29] usb 46-1: device descriptor read/8, error -110 [ 1188.209820][T27362] 9pnet_fd: p9_fd_create_tcp (27362): problem connecting socket to 127.0.0.1 [ 1188.504662][ T29] usb usb46-port1: attempt power cycle [ 1188.538207][T27394] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1189.131475][T27398] random: crng reseeded on system resumption [ 1189.139847][T27398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5748'. [ 1189.144073][T27398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5748'. [ 1189.271583][ T29] usb usb46-port1: unable to enumerate USB device [ 1189.280083][T27398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5748'. [ 1189.285367][T27398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5748'. [ 1189.339308][T27398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5748'. [ 1189.342218][T27398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5748'. [ 1189.394059][T27402] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1189.396134][T27402] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1189.398990][T27402] vhci_hcd vhci_hcd.0: Device attached [ 1189.665611][ T9696] usb 52-1: SetAddress Request (28) to port 0 [ 1189.667894][ T9696] usb 52-1: new SuperSpeed USB device number 28 using vhci_hcd [ 1189.986431][T27409] vhci_hcd: connection reset by peer [ 1189.996025][T14762] vhci_hcd: stop threads [ 1189.997631][T14762] vhci_hcd: release socket [ 1189.999209][T14762] vhci_hcd: disconnect device [ 1190.013340][ T29] usb 13-1: USB disconnect, device number 26 [ 1190.013356][ C2] xpad 13-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1190.657078][ T9619] usb 54-1: device descriptor read/8, error -110 [ 1191.059512][ T9619] usb usb54-port1: attempt power cycle [ 1191.211276][T27433] lo speed is unknown, defaulting to 1000 [ 1191.213964][T27433] lo speed is unknown, defaulting to 1000 [ 1191.229649][T27428] could not allocate digest TFM handle cryptd(blake2b-160) [ 1191.362060][T27442] netlink: 'syz.7.5759': attribute type 1 has an invalid length. [ 1191.412524][T27442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1191.553575][T27442] bond2: (slave ip6gretap1): making interface the new active one [ 1191.562687][T27442] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1191.640527][ T9619] usb usb54-port1: unable to enumerate USB device [ 1191.740007][T27450] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5761'. [ 1191.745912][T27450] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5761'. [ 1191.764604][T27450] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1192.269543][T27444] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5760'. [ 1192.332841][T27444] mkiss: ax0: crc mode is auto. [ 1192.826034][ T29] usb 11-1: new high-speed USB device number 75 using dummy_hcd [ 1192.967960][T27467] siw: device registration error -23 [ 1193.039858][ T29] usb 11-1: Using ep0 maxpacket: 8 [ 1193.233070][ T29] usb 11-1: config 179 has an invalid interface number: 65 but max is 0 [ 1193.235627][ T29] usb 11-1: config 179 has no interface number 0 [ 1193.237601][ T29] usb 11-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1193.241094][ T29] usb 11-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1193.244590][ T29] usb 11-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1193.248024][ T29] usb 11-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1193.251574][ T29] usb 11-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1193.255648][ T29] usb 11-1: config 179 interface 65 has no altsetting 0 [ 1193.257706][ T29] usb 11-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1193.260886][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.273481][ T29] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:179.65/input/input200 [ 1193.331165][ T5337] input input200: unable to receive magic message: -110 [ 1193.379534][ T5337] input input200: unable to receive magic message: -32 [ 1193.389892][T27475] 9pnet_fd: p9_fd_create_tcp (27475): problem connecting socket to 127.0.0.1 [ 1193.394062][ T5337] input input200: unable to receive magic message: -32 [ 1193.399330][ T5337] input input200: unable to receive magic message: -32 [ 1193.424103][T27477] netlink: 'syz.7.5768': attribute type 30 has an invalid length. [ 1193.472138][T27457] input input200: unable to receive magic message: -32 [ 1193.481940][T27479] netlink: 'syz.7.5768': attribute type 30 has an invalid length. [ 1193.505210][T23969] usb 11-1: USB disconnect, device number 75 [ 1193.505319][ C1] xpad 11-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1193.511597][T27478] kAFS: unable to lookup cell '(' [ 1193.535916][T27477] tls_set_device_offload: netdev not found [ 1193.541318][T27478] kAFS: unable to lookup cell '(,cL' [ 1193.849440][T27488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5770'. [ 1193.861556][T27488] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1193.911787][T27490] netlink: 'syz.4.5771': attribute type 1 has an invalid length. [ 1193.934888][T27490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1193.959863][T27490] bond2: (slave gretap1): making interface the new active one [ 1193.969659][T27490] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1194.125726][T27499] bridge0: port 3(erspan0) entered blocking state [ 1194.127984][T27499] bridge0: port 3(erspan0) entered disabled state [ 1194.131084][T27499] erspan0: entered allmulticast mode [ 1194.143593][T27499] erspan0: entered promiscuous mode [ 1194.146397][T27499] bridge0: port 3(erspan0) entered blocking state [ 1194.148494][T27499] bridge0: port 3(erspan0) entered forwarding state [ 1194.229466][T27492] erspan0: left allmulticast mode [ 1194.231233][T27492] erspan0: left promiscuous mode [ 1194.233208][T27492] bridge0: port 3(erspan0) entered disabled state [ 1194.731337][ T9696] usb 52-1: device descriptor read/8, error -110 [ 1194.756064][T27514] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1195.393268][ T9696] usb usb52-port1: attempt power cycle [ 1195.470463][T27524] __nla_validate_parse: 1 callbacks suppressed [ 1195.470475][T27524] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5779'. [ 1195.477307][T27524] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5779'. [ 1195.482867][T27524] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1195.844963][T27530] could not allocate digest TFM handle cryptd(blake2b-160) [ 1195.848509][T27538] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 1195.850914][T27538] UDF-fs: Scanning with blocksize 2048 failed [ 1195.854101][T27538] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 1195.856560][T27538] UDF-fs: Scanning with blocksize 4096 failed [ 1195.886745][T27541] FAULT_INJECTION: forcing a failure. [ 1195.886745][T27541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1195.892221][T27541] CPU: 3 UID: 0 PID: 27541 Comm: syz.6.5783 Not tainted syzkaller #0 PREEMPT(full) [ 1195.892245][T27541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1195.892256][T27541] Call Trace: [ 1195.892263][T27541] [ 1195.892271][T27541] dump_stack_lvl+0x16c/0x1f0 [ 1195.892297][T27541] should_fail_ex+0x512/0x640 [ 1195.892326][T27541] _copy_to_user+0x32/0xd0 [ 1195.892345][T27541] simple_read_from_buffer+0xcb/0x170 [ 1195.892376][T27541] proc_fail_nth_read+0x197/0x240 [ 1195.892396][T27541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1195.892414][T27541] ? rw_verify_area+0xcf/0x6c0 [ 1195.892429][T27541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1195.892446][T27541] vfs_read+0x1e4/0xcf0 [ 1195.892469][T27541] ? __pfx_vfs_read+0x10/0x10 [ 1195.892484][T27541] ? find_held_lock+0x2b/0x80 [ 1195.892507][T27541] ? __fget_files+0x20e/0x3c0 [ 1195.892530][T27541] ksys_read+0x12a/0x250 [ 1195.892548][T27541] ? __pfx_ksys_read+0x10/0x10 [ 1195.892567][T27541] ? rcu_is_watching+0x12/0xc0 [ 1195.892588][T27541] __do_fast_syscall_32+0x7c/0x300 [ 1195.892609][T27541] do_fast_syscall_32+0x32/0x80 [ 1195.892627][T27541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1195.892644][T27541] RIP: 0023:0xf7f46579 [ 1195.892656][T27541] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1195.892670][T27541] RSP: 002b:00000000f5436590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1195.892684][T27541] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5436620 [ 1195.892694][T27541] RDX: 000000000000000f RSI: 00000000f73d6ff4 RDI: 0000000000000000 [ 1195.892704][T27541] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1195.892712][T27541] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1195.892721][T27541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1195.892744][T27541] [ 1195.975965][ T9696] usb usb52-port1: unable to enumerate USB device [ 1196.153914][T27547] kAFS: unable to lookup cell '(' [ 1196.155909][T27547] kAFS: unable to lookup cell '(,cL' [ 1196.272696][ T61] usb 13-1: new high-speed USB device number 27 using dummy_hcd [ 1196.429414][ T61] usb 13-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1196.443448][ T61] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1196.446831][ T61] usb 13-1: Product: syz [ 1196.448550][ T61] usb 13-1: Manufacturer: syz [ 1196.450431][ T61] usb 13-1: SerialNumber: syz [ 1196.459407][ T61] usb 13-1: config 0 descriptor?? [ 1196.463483][ T61] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1196.466890][ T61] dvb-usb: bulk message failed: -22 (2/0) [ 1196.480282][ T61] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1196.488696][ T61] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1196.492117][ T61] usb 13-1: media controller created [ 1196.501914][ T61] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1196.514936][T27552] Cannot find set identified by id 0 to match [ 1196.666297][T27545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.672173][T27545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.851631][T27543] 9pnet_fd: p9_fd_create_tcp (27543): problem connecting socket to 127.0.0.1 [ 1196.897518][T27545] dvb-usb: bulk message failed: -22 (4/0) [ 1196.899689][T27545] cxusb: i2c read failed [ 1196.912788][ T61] cxusb: set interface failed [ 1196.914389][ T61] dvb-usb: bulk message failed: -22 (1/0) [ 1196.923929][T27563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5789'. [ 1196.933314][T27563] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5789'. [ 1196.938145][T27563] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1196.943430][ T61] DVB: Unable to find symbol mt352_attach() [ 1196.945402][ T61] dvb-usb: bulk message failed: -22 (5/0) [ 1196.947244][ T61] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1196.949678][ T61] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1196.977429][T27566] Bluetooth: MGMT ver 1.23 [ 1197.013498][ T61] rc_core: IR keymap rc-dvico-mce not found [ 1197.015769][ T61] Registered IR keymap rc-empty [ 1197.018122][ T61] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0 [ 1197.022736][ T61] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input201 [ 1197.068772][ T61] dvb-usb: schedule remote query interval to 100 msecs. [ 1197.073389][ T61] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1197.076948][ T61] usb 13-1: USB disconnect, device number 27 [ 1197.134404][ T61] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1197.894275][ T6098] usb 11-1: new high-speed USB device number 76 using dummy_hcd [ 1198.058796][ T6098] usb 11-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1198.061746][ T6098] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.064336][ T6098] usb 11-1: Product: syz [ 1198.065754][ T6098] usb 11-1: Manufacturer: syz [ 1198.067313][ T6098] usb 11-1: SerialNumber: syz [ 1198.069996][ T6098] usb 11-1: config 0 descriptor?? [ 1198.715920][T27592] 9pnet_fd: p9_fd_create_tcp (27592): problem connecting socket to 127.0.0.1 [ 1198.783577][T27593] kAFS: unable to lookup cell '(' [ 1198.788097][T27593] kAFS: unable to lookup cell '(,cL' [ 1198.801247][T27597] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5798'. [ 1198.805053][T27597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5798'. [ 1198.810018][T27597] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1199.054981][T16819] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1199.055065][ T5953] Bluetooth: hci2: command 0x0401 tx timeout [ 1199.552196][T27603] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1199.793300][T27610] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1199.971654][T27614] 9pnet_fd: p9_fd_create_tcp (27614): problem connecting socket to 127.0.0.1 [ 1199.995846][ T6025] usb 12-1: new high-speed USB device number 29 using dummy_hcd [ 1200.091004][ T6098] usb 11-1: f81604_read: reg: 105 failed: -EPROTO [ 1200.093176][ T6098] f81604 11-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1200.095685][ T6098] f81604 11-1:0.0: probe with driver f81604 failed with error -71 [ 1200.108929][T27618] kAFS: unable to lookup cell '(' [ 1200.111947][T27618] kAFS: unable to lookup cell '(,cL' [ 1200.164777][ T6025] usb 12-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1200.172160][ T6025] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1200.180833][ T6025] usb 12-1: Product: syz [ 1200.183702][ T6025] usb 12-1: Manufacturer: syz [ 1200.185773][ T6025] usb 12-1: SerialNumber: syz [ 1200.198809][ T6025] usb 12-1: config 0 descriptor?? [ 1200.207428][ T6025] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1200.210439][ T6025] dvb-usb: bulk message failed: -22 (2/0) [ 1200.223423][ T6025] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1200.234661][ T6025] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1200.240241][ T6025] usb 12-1: media controller created [ 1200.271361][ T6025] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1200.413382][T27609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1200.416307][T27609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1200.438624][T27609] dvb-usb: bulk message failed: -22 (4/0) [ 1200.440563][T27609] cxusb: i2c read failed [ 1200.448071][ T6025] cxusb: set interface failed [ 1200.450384][ T6025] dvb-usb: bulk message failed: -22 (1/0) [ 1200.473428][ T6025] DVB: Unable to find symbol mt352_attach() [ 1200.479052][ T6025] dvb-usb: bulk message failed: -22 (5/0) [ 1200.481273][ T6025] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1200.483821][ T6025] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1200.546348][ T6025] rc_core: IR keymap rc-dvico-mce not found [ 1200.548372][ T6025] Registered IR keymap rc-empty [ 1200.550619][ T6025] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 1200.555177][ T6025] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input202 [ 1200.560038][ T6025] dvb-usb: schedule remote query interval to 100 msecs. [ 1200.562323][ T6025] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1200.566545][ T6025] usb 12-1: USB disconnect, device number 29 [ 1200.587841][ T6025] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1200.831024][ T6098] usb 11-1: USB disconnect, device number 76 [ 1200.946407][T27633] lo speed is unknown, defaulting to 1000 [ 1200.949774][T27633] lo speed is unknown, defaulting to 1000 [ 1200.997821][T27637] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1201.101531][T27642] 9pnet_fd: p9_fd_create_tcp (27642): problem connecting socket to 127.0.0.1 [ 1201.310575][T27648] IPVS: Error connecting to the multicast addr [ 1201.362594][T27645] kAFS: unable to lookup cell '(' [ 1201.365632][T27645] kAFS: unable to lookup cell '(,cL' [ 1201.980179][T27656] 9pnet_fd: p9_fd_create_tcp (27656): problem connecting socket to 127.0.0.1 [ 1202.032750][T27658] 9pnet_fd: p9_fd_create_tcp (27658): problem connecting socket to 127.0.0.1 [ 1202.099108][T27660] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1202.101485][T27660] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1202.105162][T27660] vhci_hcd vhci_hcd.0: Device attached [ 1202.428246][ T29] usb 54-1: SetAddress Request (39) to port 0 [ 1202.465559][T27667] kAFS: unable to lookup cell '(' [ 1202.467613][T27667] kAFS: unable to lookup cell '(,cL' [ 1202.751757][ T29] usb 54-1: new SuperSpeed USB device number 39 using vhci_hcd [ 1202.849806][T27673] kAFS: unable to lookup cell '(,cL' [ 1202.878299][T27666] kAFS: unable to lookup cell '(' [ 1202.966836][ T40] audit: type=1326 audit(1764611560.824:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.4.5817" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1202.973863][ T40] audit: type=1326 audit(1764611560.824:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.4.5817" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1202.983046][ T40] audit: type=1326 audit(1764611560.824:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.4.5817" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1203.090573][ T40] audit: type=1326 audit(1764611560.954:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.4.5817" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1203.101761][ T40] audit: type=1326 audit(1764611560.954:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.4.5817" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1203.108993][ T40] audit: type=1326 audit(1764611560.954:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27678 comm="syz.4.5817" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1203.137187][ T40] audit: type=1326 audit(1764611560.994:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.4.5817" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1203.162816][T27661] vhci_hcd: connection reset by peer [ 1203.165380][T14770] vhci_hcd: stop threads [ 1203.167023][T14770] vhci_hcd: release socket [ 1203.168747][T14770] vhci_hcd: disconnect device [ 1203.241965][ T40] audit: type=1326 audit(1764611561.104:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27678 comm="syz.4.5817" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1203.251437][ T40] audit: type=1326 audit(1764611561.104:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.4.5817" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 1203.260313][ T40] audit: type=1326 audit(1764611561.104:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27675 comm="syz.4.5817" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1203.358744][T17902] usb 12-1: new high-speed USB device number 30 using dummy_hcd [ 1203.393125][T27682] macvlan0: entered allmulticast mode [ 1203.526665][T17902] usb 12-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1203.529930][T17902] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1203.532856][T17902] usb 12-1: Product: syz [ 1203.534295][T17902] usb 12-1: Manufacturer: syz [ 1203.536041][T17902] usb 12-1: SerialNumber: syz [ 1203.540440][T17902] usb 12-1: config 0 descriptor?? [ 1203.545002][T17902] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1203.547885][T17902] dvb-usb: bulk message failed: -22 (2/0) [ 1203.553115][T17902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1203.556635][T17902] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1203.559259][T17902] usb 12-1: media controller created [ 1203.570914][T17902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1203.749893][T27680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.752931][T27680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.777148][T27680] dvb-usb: bulk message failed: -22 (4/0) [ 1203.779159][T27680] cxusb: i2c read failed [ 1203.786258][T17902] cxusb: set interface failed [ 1203.787804][T17902] dvb-usb: bulk message failed: -22 (1/0) [ 1203.819227][T17902] DVB: Unable to find symbol mt352_attach() [ 1203.821885][T17902] dvb-usb: bulk message failed: -22 (5/0) [ 1203.824378][T17902] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1203.827796][T17902] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1203.869134][T17902] rc_core: IR keymap rc-dvico-mce not found [ 1203.871725][T17902] Registered IR keymap rc-empty [ 1203.874641][T17902] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0 [ 1203.880619][T17902] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.7/usb12/12-1/rc/rc0/input203 [ 1203.886492][T17902] dvb-usb: schedule remote query interval to 100 msecs. [ 1203.889601][T17902] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1203.893516][T17902] usb 12-1: USB disconnect, device number 30 [ 1203.909450][T17902] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1204.352034][T27694] 9pnet_fd: p9_fd_create_tcp (27694): problem connecting socket to 127.0.0.1 [ 1204.529874][T27695] kAFS: unable to lookup cell '(' [ 1204.532635][T27695] kAFS: unable to lookup cell '(,cL' [ 1205.504281][T16819] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 1205.712195][T27706] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5825'. [ 1206.482434][ T6074] usb 12-1: new high-speed USB device number 31 using dummy_hcd [ 1206.651838][ T6074] usb 12-1: Using ep0 maxpacket: 8 [ 1206.657198][ T6074] usb 12-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 1206.661605][ T6074] usb 12-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 1206.665807][ T6074] usb 12-1: config 1 interface 0 has no altsetting 0 [ 1206.670936][ T6074] usb 12-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1206.674460][ T6074] usb 12-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 1206.677783][ T6074] usb 12-1: Product: syz [ 1206.679219][ T6074] usb 12-1: Manufacturer: 폏蹃晡ᘌ疈澢ᢹλ樵ݡᙚ꽂髏韙䛒﷭⃃ᶏ覯뿄ų쎯褈⤗䜚툖萳殯Ȝꃈ㹡䒔肃僂ͣ๾憱롢嬭땶玍艱㒷唞鋫ॉ㸐峻哹ཧꛋᢌ낎ͳ섪뵞謟孌쨳뒮଄ꅵ迲龈汗令뢄䒎앐襎ﾈ㬡쟰糇拓ᡫ懤ㄕ⌔䫋ꤣጺዴ菌殺 [ 1206.688296][ T6074] usb 12-1: SerialNumber: syz [ 1206.691976][T27715] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1206.694534][T27715] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1206.905357][T27715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.908128][T27715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.923236][ T6074] usblp0: Disabling reads from problematic bidirectional printer [ 1206.932182][ T6074] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 8 proto 3 vid 0x03F0 pid 0x0004 [ 1206.961747][ T6074] usb 12-1: USB disconnect, device number 31 [ 1206.965347][ T6074] usblp0: removed [ 1207.461979][T27740] 9pnet_fd: p9_fd_create_tcp (27740): problem connecting socket to 127.0.0.1 [ 1207.578466][T27746] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5839'. [ 1207.582484][T27746] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5839'. [ 1207.598189][T27746] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1207.640150][T27749] kAFS: unable to lookup cell '(' [ 1207.642528][T27749] kAFS: unable to lookup cell '(,cL' [ 1207.886946][T27750] comedi comedi2: pcl812: I/O port conflict (0x4f27,16) [ 1207.942683][ T29] usb 54-1: device descriptor read/8, error -110 [ 1208.334605][ T29] usb usb54-port1: attempt power cycle [ 1208.339241][T27754] FAULT_INJECTION: forcing a failure. [ 1208.339241][T27754] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.344561][T27754] CPU: 1 UID: 0 PID: 27754 Comm: syz.7.5841 Not tainted syzkaller #0 PREEMPT(full) [ 1208.344585][T27754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1208.344596][T27754] Call Trace: [ 1208.344614][T27754] [ 1208.344621][T27754] dump_stack_lvl+0x16c/0x1f0 [ 1208.344660][T27754] should_fail_ex+0x512/0x640 [ 1208.344694][T27754] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1208.344723][T27754] should_failslab+0xc2/0x120 [ 1208.344748][T27754] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1208.344767][T27754] ? kstrdup_const+0x63/0x80 [ 1208.344790][T27754] ? kstrdup+0x53/0x100 [ 1208.344807][T27754] kstrdup+0x53/0x100 [ 1208.344825][T27754] kstrdup_const+0x63/0x80 [ 1208.344844][T27754] __kernfs_new_node+0x9b/0x8e0 [ 1208.344864][T27754] ? perf_trace_rdev_del_pmk+0x5c8/0x5d0 [ 1208.344889][T27754] ? __pfx___kernfs_new_node+0x10/0x10 [ 1208.344923][T27754] ? find_held_lock+0x2b/0x80 [ 1208.344940][T27754] ? kernfs_root+0xee/0x2a0 [ 1208.344967][T27754] kernfs_new_node+0x13c/0x1e0 [ 1208.344995][T27754] kernfs_create_dir_ns+0x4c/0x1a0 [ 1208.345022][T27754] sysfs_create_dir_ns+0x13a/0x2b0 [ 1208.345044][T27754] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1208.345063][T27754] ? find_held_lock+0x2b/0x80 [ 1208.345085][T27754] ? class_dir_child_ns_type+0xd/0x60 [ 1208.345111][T27754] kobject_add_internal+0x2c4/0x9b0 [ 1208.345138][T27754] kobject_add+0x16e/0x240 [ 1208.345165][T27754] ? __pfx_kobject_add+0x10/0x10 [ 1208.345188][T27754] ? get_device_parent+0x1c5/0x4e0 [ 1208.345212][T27754] ? kobject_put+0xab/0x5a0 [ 1208.345236][T27754] ? device_add+0xbff/0x1aa0 [ 1208.345264][T27754] device_add+0x288/0x1aa0 [ 1208.345288][T27754] ? rcu_is_watching+0x12/0xc0 [ 1208.345308][T27754] ? __pfx_device_add+0x10/0x10 [ 1208.345337][T27754] ? kfree_const+0x55/0x60 [ 1208.345358][T27754] device_create_groups_vargs+0x1f8/0x270 [ 1208.345379][T27754] device_create+0xed/0x130 [ 1208.345398][T27754] ? __pfx_device_create+0x10/0x10 [ 1208.345414][T27754] ? do_init_timer+0xc9/0x110 [ 1208.345437][T27754] ? ieee80211_roc_setup+0x136/0x270 [ 1208.345457][T27754] ? ieee80211_alloc_hw_nm+0x231/0x22b0 [ 1208.345484][T27754] mac80211_hwsim_new_radio+0x36a/0x50b0 [ 1208.345516][T27754] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1208.345547][T27754] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1208.345590][T27754] hwsim_new_radio_nl+0xba2/0x1330 [ 1208.345612][T27754] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1208.345638][T27754] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1208.345662][T27754] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1208.345688][T27754] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1208.345712][T27754] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1208.345741][T27754] ? bpf_lsm_capable+0x9/0x10 [ 1208.345760][T27754] ? security_capable+0x7e/0x260 [ 1208.345787][T27754] ? ns_capable+0xd7/0x110 [ 1208.345807][T27754] genl_rcv_msg+0x55c/0x800 [ 1208.345831][T27754] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1208.345852][T27754] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1208.345879][T27754] netlink_rcv_skb+0x158/0x420 [ 1208.345899][T27754] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1208.345921][T27754] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1208.345952][T27754] ? netlink_deliver_tap+0x1ae/0xd30 [ 1208.345973][T27754] genl_rcv+0x28/0x40 [ 1208.345991][T27754] netlink_unicast+0x5aa/0x870 [ 1208.346015][T27754] ? __pfx_netlink_unicast+0x10/0x10 [ 1208.346042][T27754] netlink_sendmsg+0x8c8/0xdd0 [ 1208.346059][T27754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1208.346072][T27754] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1208.346090][T27754] ____sys_sendmsg+0xa98/0xc70 [ 1208.346106][T27754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1208.346118][T27754] ? get_compat_msghdr+0x11a/0x170 [ 1208.346135][T27754] ___sys_sendmsg+0x134/0x1d0 [ 1208.346147][T27754] ? __pfx____sys_sendmsg+0x10/0x10 [ 1208.346169][T27754] ? find_held_lock+0x2b/0x80 [ 1208.346190][T27754] __sys_sendmsg+0x16d/0x220 [ 1208.346200][T27754] ? __pfx___sys_sendmsg+0x10/0x10 [ 1208.346217][T27754] ? rcu_is_watching+0x12/0xc0 [ 1208.346231][T27754] __do_fast_syscall_32+0x7c/0x300 [ 1208.346246][T27754] do_fast_syscall_32+0x32/0x80 [ 1208.346260][T27754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1208.346273][T27754] RIP: 0023:0xf7f21579 [ 1208.346282][T27754] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1208.346292][T27754] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1208.346303][T27754] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1208.346309][T27754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1208.346315][T27754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1208.346321][T27754] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1208.346327][T27754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1208.346341][T27754] [ 1208.346398][T27754] kobject: kobject_add_internal failed for hwsim48 (error: -12 parent: mac80211_hwsim) [ 1208.850972][T27763] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1208.853821][T27763] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1208.857810][T27763] vhci_hcd vhci_hcd.0: Device attached [ 1209.041400][ T29] usb usb54-port1: unable to enumerate USB device [ 1209.123625][ T7016] usb 52-1: SetAddress Request (32) to port 0 [ 1209.125696][ T7016] usb 52-1: new SuperSpeed USB device number 32 using vhci_hcd [ 1209.468039][T27764] vhci_hcd: connection reset by peer [ 1209.470546][T14758] vhci_hcd: stop threads [ 1209.472303][T14758] vhci_hcd: release socket [ 1209.474386][T14758] vhci_hcd: disconnect device [ 1209.950635][T27775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5848'. [ 1209.955817][T27775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5848'. [ 1209.975619][T27775] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1209.984493][ T6074] usb 13-1: new high-speed USB device number 28 using dummy_hcd [ 1210.058974][T27779] 9pnet_fd: p9_fd_create_tcp (27779): problem connecting socket to 127.0.0.1 [ 1210.125957][T27782] kAFS: unable to lookup cell '(' [ 1210.131284][T27782] kAFS: unable to lookup cell '(,cL' [ 1210.134474][ T6074] usb 13-1: Using ep0 maxpacket: 8 [ 1210.138745][ T6074] usb 13-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 1210.142055][ T6074] usb 13-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 1210.145522][ T6074] usb 13-1: config 1 interface 0 has no altsetting 0 [ 1210.149454][ T6074] usb 13-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1210.152490][ T6074] usb 13-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 1210.155247][ T6074] usb 13-1: Product: syz [ 1210.156686][ T6074] usb 13-1: Manufacturer: 폏蹃晡ᘌ疈澢ᢹλ樵ݡᙚ꽂髏韙䛒﷭⃃ᶏ覯뿄ų쎯褈⤗䜚툖萳殯Ȝꃈ㹡䒔肃僂ͣ๾憱롢嬭땶玍艱㒷唞鋫ॉ㸐峻哹ཧꛋᢌ낎ͳ섪뵞謟孌쨳뒮଄ꅵ迲龈汗令뢄䒎앐襎ﾈ㬡쟰糇拓ᡫ懤ㄕ⌔䫋ꤣጺዴ菌殺 [ 1210.165456][ T6074] usb 13-1: SerialNumber: syz [ 1210.168823][T27771] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1210.171372][T27771] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1210.381806][T27771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.385582][T27771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.396564][ T6074] usblp0: Disabling reads from problematic bidirectional printer [ 1210.400130][ T6074] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 8 proto 3 vid 0x03F0 pid 0x0004 [ 1210.406775][ T6074] usb 13-1: USB disconnect, device number 28 [ 1210.410093][ T6074] usblp0: removed [ 1211.852117][T27806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5857'. [ 1211.857198][T27806] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5857'. [ 1211.874287][T27806] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1211.892200][T27808] 9pnet_fd: p9_fd_create_tcp (27808): problem connecting socket to 127.0.0.1 [ 1212.023424][T27816] kAFS: unable to lookup cell '(' [ 1212.030786][T27816] kAFS: unable to lookup cell '(,cL' [ 1213.998178][T27842] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5867'. [ 1214.001743][T27842] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5867'. [ 1214.015635][T27842] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1214.027736][T16819] Bluetooth: hci2: command 0x0401 tx timeout [ 1214.187028][T27847] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5869'. [ 1214.190341][ T7016] usb 52-1: device descriptor read/8, error -110 [ 1214.194722][T27847] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5869'. [ 1214.440815][T27855] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1214.442948][T27855] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1214.445871][T27855] vhci_hcd vhci_hcd.0: Device attached [ 1214.609309][ T7016] usb usb52-port1: attempt power cycle [ 1214.800541][ T29] usb 54-1: SetAddress Request (43) to port 0 [ 1214.802645][ T29] usb 54-1: new SuperSpeed USB device number 43 using vhci_hcd [ 1214.942307][T27863] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5872'. [ 1215.065184][T27856] vhci_hcd: connection reset by peer [ 1215.067109][T14766] vhci_hcd: stop threads [ 1215.068538][T14766] vhci_hcd: release socket [ 1215.070106][T14766] vhci_hcd: disconnect device [ 1215.170240][ T7016] usb usb52-port1: unable to enumerate USB device [ 1215.749304][ T6074] usb 11-1: new high-speed USB device number 77 using dummy_hcd [ 1215.754094][T27878] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5876'. [ 1215.758599][T27878] workqueue: Failed to create a rescuer kthread for wq "phy5": -EINTR [ 1215.912897][ T6074] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1215.918936][ T6074] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1215.921761][ T6074] usb 11-1: Product: syz [ 1215.923185][ T6074] usb 11-1: Manufacturer: syz [ 1215.924790][ T6074] usb 11-1: SerialNumber: syz [ 1215.928090][ T6074] usb 11-1: config 0 descriptor?? [ 1215.932624][ T6074] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1215.935320][ T6074] dvb-usb: bulk message failed: -22 (2/0) [ 1215.938179][ T6074] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1215.941644][ T6074] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1215.944208][ T6074] usb 11-1: media controller created [ 1215.950313][T27892] netlink: 'syz.8.5880': attribute type 1 has an invalid length. [ 1215.952869][T27892] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5880'. [ 1215.955900][ T6074] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1216.023441][T27892] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.5880'. [ 1216.136541][T27882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.139682][T27882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.156477][T27882] dvb-usb: bulk message failed: -22 (4/0) [ 1216.158459][T27882] cxusb: i2c read failed [ 1216.161697][ T6074] cxusb: set interface failed [ 1216.163721][ T6074] dvb-usb: bulk message failed: -22 (1/0) [ 1216.183643][ T6074] DVB: Unable to find symbol mt352_attach() [ 1216.186239][ T6074] dvb-usb: bulk message failed: -22 (5/0) [ 1216.188192][ T6074] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1216.192347][ T6074] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1216.249613][ T6074] rc_core: IR keymap rc-dvico-mce not found [ 1216.251584][ T6074] Registered IR keymap rc-empty [ 1216.253744][ T6074] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 1216.257744][ T6074] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input204 [ 1216.262132][ T6074] dvb-usb: schedule remote query interval to 100 msecs. [ 1216.264403][ T6074] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1216.268066][ T6074] usb 11-1: USB disconnect, device number 77 [ 1216.283497][ T6074] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1216.734077][T27908] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1216.755981][T27906] binder: 27905:27906 ioctl c0306201 80001640 returned -14 [ 1217.133638][T27932] overlayfs: missing 'lowerdir' [ 1217.150413][T23969] usb 11-1: new high-speed USB device number 78 using dummy_hcd [ 1217.189656][T27935] overlay: Unknown parameter 'appraise_type' [ 1217.251094][ T6025] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1217.310543][T23969] usb 11-1: Using ep0 maxpacket: 8 [ 1217.314439][T23969] usb 11-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 1217.317622][T23969] usb 11-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 1217.321972][T23969] usb 11-1: config 1 interface 0 has no altsetting 0 [ 1217.325812][T23969] usb 11-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1217.328730][T23969] usb 11-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 1217.331585][T23969] usb 11-1: Product: syz [ 1217.333021][T23969] usb 11-1: Manufacturer: 폏蹃晡ᘌ疈澢ᢹλ樵ݡᙚ꽂髏韙䛒﷭⃃ᶏ覯뿄ų쎯褈⤗䜚툖萳殯Ȝꃈ㹡䒔肃僂ͣ๾憱롢嬭땶玍艱㒷唞鋫ॉ㸐峻哹ཧꛋᢌ낎ͳ섪뵞謟孌쨳뒮଄ꅵ迲龈汗令뢄䒎앐襎ﾈ㬡쟰糇拓ᡫ懤ㄕ⌔䫋ꤣጺዴ菌殺 [ 1217.343387][T23969] usb 11-1: SerialNumber: syz [ 1217.349606][T27922] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1217.352799][T27922] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1217.560972][T27922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.564136][T27922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.572249][T23969] usblp0: Disabling reads from problematic bidirectional printer [ 1217.581013][T23969] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 78 if 0 alt 8 proto 3 vid 0x03F0 pid 0x0004 [ 1217.586950][T23969] usb 11-1: USB disconnect, device number 78 [ 1217.593357][T23969] usblp0: removed [ 1218.022253][T27962] __nla_validate_parse: 2 callbacks suppressed [ 1218.022271][T27962] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5895'. [ 1218.028013][T27962] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5895'. [ 1218.039182][T27962] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1219.872691][ T29] usb 54-1: device descriptor read/8, error -110 [ 1220.264383][ T29] usb usb54-port1: attempt power cycle [ 1220.824251][ T29] usb usb54-port1: unable to enumerate USB device [ 1224.976757][T17180] usb 11-1: new high-speed USB device number 79 using dummy_hcd [ 1225.131544][T17180] usb 11-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 1225.134653][T17180] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 1225.137415][T17180] usb 11-1: Product: syz [ 1225.138774][T17180] usb 11-1: Manufacturer: syz [ 1225.140340][T17180] usb 11-1: SerialNumber: syz [ 1225.143136][T17180] usb 11-1: config 0 descriptor?? [ 1225.146378][T17180] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 1225.148807][T17180] dvb-usb: bulk message failed: -22 (2/0) [ 1225.151546][T17180] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1225.156025][T17180] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 1225.158601][T17180] usb 11-1: media controller created [ 1225.167597][T17180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1225.362285][T28016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1225.366386][T28016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.385355][T28022] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5912'. [ 1225.388961][T28022] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5912'. [ 1225.408248][T28022] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1225.454365][T28025] dvb-usb: bulk message failed: -22 (4/0) [ 1225.456370][T28025] cxusb: i2c read failed [ 1227.579106][T17902] usb 13-1: new high-speed USB device number 29 using dummy_hcd [ 1227.746944][T17902] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1227.759012][T17902] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.760685][T17180] cxusb: set interface failed [ 1227.763445][T17902] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1227.765975][T17180] dvb-usb: bulk message failed: -22 (1/0) [ 1227.779032][T17902] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1227.789121][T17902] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.796531][T17180] DVB: Unable to find symbol mt352_attach() [ 1227.799304][T17902] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1227.799322][T17902] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1227.799333][T17902] usb 13-1: Product: syz [ 1227.799341][T17902] usb 13-1: Manufacturer: syz [ 1227.801572][T17902] cdc_wdm 13-1:1.0: skipping garbage [ 1227.801584][T17902] cdc_wdm 13-1:1.0: skipping garbage [ 1227.802217][T17902] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 1227.802226][T17902] cdc_wdm 13-1:1.0: Unknown control protocol [ 1227.829912][T17180] dvb-usb: bulk message failed: -22 (5/0) [ 1227.831702][T17180] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1227.834029][T17180] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 1227.875307][T28054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5922'. [ 1227.878602][T28054] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5922'. [ 1227.879158][T17180] rc_core: IR keymap rc-dvico-mce not found [ 1227.884191][T17180] Registered IR keymap rc-empty [ 1227.887008][T17180] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0 [ 1227.890870][T28054] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1227.898186][T17180] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb11/11-1/rc/rc0/input205 [ 1227.906668][T17180] dvb-usb: schedule remote query interval to 100 msecs. [ 1227.911046][T17180] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 1227.915830][T17180] usb 11-1: USB disconnect, device number 79 [ 1227.941086][T17180] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 1228.139351][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 1228.139362][ T40] audit: type=1804 audit(1764611585.963:2181): pid=28062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.5923" name="/newroot/439/bus/bus" dev="overlay" ino=2576 res=1 errno=0 [ 1228.148159][ T40] audit: type=1804 audit(1764611585.973:2182): pid=28062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.5923" name="/newroot/439/bus/bus" dev="overlay" ino=2576 res=1 errno=0 [ 1228.159382][ T40] audit: type=1800 audit(1764611585.973:2183): pid=28062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5923" name="bus" dev="overlay" ino=2576 res=0 errno=0 [ 1229.274165][T28082] kAFS: unable to lookup cell '(' [ 1229.276520][T28082] kAFS: unable to lookup cell '(,cL' [ 1229.971397][T28077] 9pnet_fd: p9_fd_create_tcp (28077): problem connecting socket to 127.0.0.1 [ 1230.009152][T28093] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5931'. [ 1230.013464][T28093] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5931'. [ 1230.027786][T28093] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1230.255893][T28100] netlink: 'syz.4.5933': attribute type 30 has an invalid length. [ 1230.310487][T28101] netlink: 'syz.4.5933': attribute type 30 has an invalid length. [ 1230.442497][T28102] kAFS: unable to lookup cell '(' [ 1230.462341][T28102] kAFS: unable to lookup cell '(,cL' [ 1230.922752][T28095] 9pnet_fd: p9_fd_create_tcp (28095): problem connecting socket to 127.0.0.1 [ 1230.964088][ T9619] usb 13-1: USB disconnect, device number 29 [ 1231.262880][T28117] 9pnet_fd: p9_fd_create_tcp (28117): problem connecting socket to 127.0.0.1 [ 1231.331978][ T9619] usb 13-1: new high-speed USB device number 30 using dummy_hcd [ 1231.362489][T28119] kAFS: unable to lookup cell '(' [ 1231.367656][T28119] kAFS: unable to lookup cell '(,cL' [ 1231.482029][ T9619] usb 13-1: Using ep0 maxpacket: 16 [ 1231.497232][ T9619] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1231.530104][ T9619] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1231.533684][ T9619] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.536517][ T9619] usb 13-1: Product: syz [ 1231.537985][ T9619] usb 13-1: Manufacturer: syz [ 1231.539662][ T9619] usb 13-1: SerialNumber: syz [ 1231.542750][ T9619] usb 13-1: config 0 descriptor?? [ 1231.546905][ T9619] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1231.549896][ T9619] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 1232.007644][T28123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5940'. [ 1232.011047][T28123] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5940'. [ 1232.021913][T28123] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1232.170307][ T9619] em28xx 13-1:0.0: chip ID is em2874 [ 1232.257973][T28131] 9pnet_fd: p9_fd_create_tcp (28131): problem connecting socket to 127.0.0.1 [ 1232.353080][T28133] kAFS: unable to lookup cell '(' [ 1232.363298][T28133] kAFS: unable to lookup cell '(,cL' [ 1233.730035][ T9619] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1233.732638][ T9619] em28xx 13-1:0.0: board has no eeprom [ 1234.004116][ T9619] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1234.006718][ T9619] em28xx 13-1:0.0: dvb set to bulk mode. [ 1234.011261][T25067] em28xx 13-1:0.0: Binding DVB extension [ 1234.013168][ T9619] usb 13-1: USB disconnect, device number 30 [ 1234.019590][ T9619] em28xx 13-1:0.0: Disconnecting em28xx [ 1234.042357][T25067] em28xx 13-1:0.0: Registering input extension [ 1234.094478][T25067] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1234.096728][T25067] Registered IR keymap rc-empty [ 1234.098628][T25067] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0 [ 1234.102710][T25067] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/rc/rc0/input206 [ 1234.111259][T25067] em28xx 13-1:0.0: Input extension successfully initialized [ 1234.113626][ T9619] em28xx 13-1:0.0: Closing input extension [ 1234.129766][ T9619] em28xx 13-1:0.0: Freeing device [ 1234.488486][T28164] 9pnet_fd: p9_fd_create_tcp (28164): problem connecting socket to 127.0.0.1 [ 1234.718536][T28165] kAFS: unable to lookup cell '(' [ 1234.722096][T28165] kAFS: unable to lookup cell '(,cL' [ 1234.840549][T28169] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5952'. [ 1235.329044][T28175] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5953'. [ 1235.723526][T28198] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5963'. [ 1235.973541][T28197] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 1236.424818][T28197] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 1236.740734][T28197] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 1236.879249][T28197] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 1236.976526][T14770] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 1236.998336][T14770] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1237.000923][T14770] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1237.008757][T14758] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1237.168451][T28232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5971'. [ 1237.171713][T28232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5971'. [ 1237.182194][T28232] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1237.358669][T28235] kAFS: unable to lookup cell '(' [ 1237.360873][T28235] kAFS: unable to lookup cell '(,cL' [ 1237.480994][T28240] ufs: You didn't specify the type of your ufs filesystem [ 1237.480994][T28240] [ 1237.480994][T28240] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1237.480994][T28240] [ 1237.480994][T28240] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1237.490728][T28240] ufs: ufstype=old is supported read-only [ 1237.912606][T28226] 9pnet_fd: p9_fd_create_tcp (28226): problem connecting socket to 127.0.0.1 [ 1238.232197][T28260] FAULT_INJECTION: forcing a failure. [ 1238.232197][T28260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1238.236479][T28260] CPU: 0 UID: 0 PID: 28260 Comm: syz.7.5977 Not tainted syzkaller #0 PREEMPT(full) [ 1238.236494][T28260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1238.236501][T28260] Call Trace: [ 1238.236506][T28260] [ 1238.236510][T28260] dump_stack_lvl+0x16c/0x1f0 [ 1238.236527][T28260] should_fail_ex+0x512/0x640 [ 1238.236545][T28260] _copy_from_iter+0x29f/0x1720 [ 1238.236564][T28260] ? __alloc_skb+0x200/0x380 [ 1238.236581][T28260] ? __pfx__copy_from_iter+0x10/0x10 [ 1238.236597][T28260] ? netlink_autobind.isra.0+0x158/0x370 [ 1238.236618][T28260] netlink_sendmsg+0x820/0xdd0 [ 1238.236632][T28260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1238.236644][T28260] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1238.236662][T28260] ____sys_sendmsg+0xa98/0xc70 [ 1238.236677][T28260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1238.236690][T28260] ? get_compat_msghdr+0x11a/0x170 [ 1238.236705][T28260] ___sys_sendmsg+0x134/0x1d0 [ 1238.236716][T28260] ? __pfx____sys_sendmsg+0x10/0x10 [ 1238.236733][T28260] ? find_held_lock+0x2b/0x80 [ 1238.236752][T28260] __sys_sendmsg+0x16d/0x220 [ 1238.236763][T28260] ? __pfx___sys_sendmsg+0x10/0x10 [ 1238.236779][T28260] ? rcu_is_watching+0x12/0xc0 [ 1238.236792][T28260] __do_fast_syscall_32+0x7c/0x300 [ 1238.236807][T28260] do_fast_syscall_32+0x32/0x80 [ 1238.236832][T28260] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1238.236847][T28260] RIP: 0023:0xf7f21579 [ 1238.236855][T28260] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1238.236866][T28260] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1238.236876][T28260] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1238.236883][T28260] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1238.236889][T28260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1238.236895][T28260] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1238.236901][T28260] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1238.236914][T28260] [ 1238.302698][ C0] vkms_vblank_simulate: vblank timer overrun [ 1238.340741][T28265] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5980'. [ 1238.344029][T28265] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5980'. [ 1238.356140][T28265] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1238.406435][T28269] 9pnet_fd: p9_fd_create_tcp (28269): problem connecting socket to 127.0.0.1 [ 1238.497308][T28275] FAULT_INJECTION: forcing a failure. [ 1238.497308][T28275] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.505358][T28275] CPU: 2 UID: 0 PID: 28275 Comm: syz.8.5984 Not tainted syzkaller #0 PREEMPT(full) [ 1238.505377][T28275] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1238.505386][T28275] Call Trace: [ 1238.505392][T28275] [ 1238.505399][T28275] dump_stack_lvl+0x16c/0x1f0 [ 1238.505424][T28275] should_fail_ex+0x512/0x640 [ 1238.505450][T28275] ? __kmalloc_noprof+0xca/0x880 [ 1238.505471][T28275] should_failslab+0xc2/0x120 [ 1238.505492][T28275] __kmalloc_noprof+0xdd/0x880 [ 1238.505501][T28275] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1238.505517][T28275] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1238.505536][T28275] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1238.505551][T28275] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1238.505567][T28275] ? __mutex_lock+0x1c5/0x1060 [ 1238.505583][T28275] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1238.505600][T28275] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1238.505620][T28275] ? genl_get_cmd+0x194/0x580 [ 1238.505644][T28275] ? ____sys_sendmsg+0xa98/0xc70 [ 1238.505666][T28275] ? ___sys_sendmsg+0x134/0x1d0 [ 1238.505680][T28275] ? __radix_tree_lookup+0x21f/0x2c0 [ 1238.505701][T28275] genl_rcv_msg+0x55c/0x800 [ 1238.505726][T28275] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1238.505749][T28275] ? __pfx_nfc_genl_get_device+0x10/0x10 [ 1238.505781][T28275] ? __lock_acquire+0x622/0x1c90 [ 1238.505809][T28275] netlink_rcv_skb+0x158/0x420 [ 1238.505828][T28275] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1238.505867][T28275] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1238.505896][T28275] ? netlink_deliver_tap+0x1ae/0xd30 [ 1238.505925][T28275] genl_rcv+0x28/0x40 [ 1238.505942][T28275] netlink_unicast+0x5aa/0x870 [ 1238.505961][T28275] ? __pfx_netlink_unicast+0x10/0x10 [ 1238.505979][T28275] netlink_sendmsg+0x8c8/0xdd0 [ 1238.505993][T28275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1238.506007][T28275] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1238.506027][T28275] ____sys_sendmsg+0xa98/0xc70 [ 1238.506042][T28275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1238.506055][T28275] ? get_compat_msghdr+0x11a/0x170 [ 1238.506073][T28275] ___sys_sendmsg+0x134/0x1d0 [ 1238.506085][T28275] ? __pfx____sys_sendmsg+0x10/0x10 [ 1238.506103][T28275] ? find_held_lock+0x2b/0x80 [ 1238.506124][T28275] __sys_sendmsg+0x16d/0x220 [ 1238.506135][T28275] ? __pfx___sys_sendmsg+0x10/0x10 [ 1238.506153][T28275] ? rcu_is_watching+0x12/0xc0 [ 1238.506167][T28275] __do_fast_syscall_32+0x7c/0x300 [ 1238.506183][T28275] do_fast_syscall_32+0x32/0x80 [ 1238.506197][T28275] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1238.506211][T28275] RIP: 0023:0xf7f41579 [ 1238.506221][T28275] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1238.506232][T28275] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1238.506243][T28275] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000400 [ 1238.506250][T28275] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1238.506256][T28275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1238.506263][T28275] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1238.506269][T28275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1238.506284][T28275] [ 1238.571714][T28273] kAFS: unable to lookup cell '(' [ 1238.629578][T28273] kAFS: unable to lookup cell '(,cL' [ 1238.858015][T28282] ufs: You didn't specify the type of your ufs filesystem [ 1238.858015][T28282] [ 1238.858015][T28282] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1238.858015][T28282] [ 1238.858015][T28282] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1238.868736][T28282] ufs: ufstype=old is supported read-only [ 1239.025584][T28284] comedi comedi0: Minor 2 could not be opened [ 1239.169838][ T1418] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1239.251007][T28288] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1239.253227][T28288] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1239.256367][T28288] vhci_hcd vhci_hcd.0: Device attached [ 1239.301214][T28297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5990'. [ 1239.304407][T28297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5990'. [ 1239.316297][T28297] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1239.357740][T28291] vhci_hcd: connection closed [ 1239.357901][T23261] vhci_hcd: stop threads [ 1239.362303][T23261] vhci_hcd: release socket [ 1239.365985][T23261] vhci_hcd: disconnect device [ 1239.694979][T28322] 9pnet_fd: p9_fd_create_tcp (28322): problem connecting socket to 127.0.0.1 [ 1239.802241][T28323] kAFS: unable to lookup cell '(' [ 1239.804482][T28323] kAFS: unable to lookup cell '(,cL' [ 1240.563393][T28331] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6001'. [ 1240.576061][T28331] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1240.589741][T28335] FAULT_INJECTION: forcing a failure. [ 1240.589741][T28335] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.593680][T28335] CPU: 2 UID: 0 PID: 28335 Comm: syz.6.6002 Not tainted syzkaller #0 PREEMPT(full) [ 1240.593696][T28335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1240.593703][T28335] Call Trace: [ 1240.593707][T28335] [ 1240.593712][T28335] dump_stack_lvl+0x16c/0x1f0 [ 1240.593729][T28335] should_fail_ex+0x512/0x640 [ 1240.593747][T28335] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 1240.593761][T28335] should_failslab+0xc2/0x120 [ 1240.593776][T28335] __kvmalloc_node_noprof+0x141/0x9c0 [ 1240.593789][T28335] ? nf_hook_entries_grow+0x28f/0x860 [ 1240.593799][T28335] ? __pfx___mutex_lock+0x10/0x10 [ 1240.593816][T28335] ? nf_hook_entries_grow+0x28f/0x860 [ 1240.593825][T28335] nf_hook_entries_grow+0x28f/0x860 [ 1240.593834][T28335] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 1240.593856][T28335] __nf_register_net_hook+0x1cd/0x730 [ 1240.593869][T28335] nf_register_net_hook+0x109/0x160 [ 1240.593880][T28335] nf_register_net_hooks+0x5d/0xd0 [ 1240.593891][T28335] nf_ct_netns_do_get+0x251/0x620 [ 1240.593904][T28335] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 1240.593915][T28335] ? find_held_lock+0x2b/0x80 [ 1240.593927][T28335] ? net_generic+0xea/0x2a0 [ 1240.593942][T28335] nf_ct_netns_get+0x39/0x150 [ 1240.593953][T28335] synproxy_tg6_check+0x1d6/0x330 [ 1240.593966][T28335] ? __pfx_synproxy_tg6_check+0x10/0x10 [ 1240.593980][T28335] xt_check_target+0x27c/0xa40 [ 1240.593996][T28335] ? __pfx_xt_check_target+0x10/0x10 [ 1240.594008][T28335] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 1240.594025][T28335] ? xt_find_target+0x1f2/0x290 [ 1240.594041][T28335] find_check_entry.constprop.0+0x82f/0xa20 [ 1240.594060][T28335] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 1240.594080][T28335] ? lockdep_hardirqs_on+0x7c/0x110 [ 1240.594095][T28335] ? translate_table+0xc0e/0x17b0 [ 1240.594114][T28335] translate_table+0xd0b/0x17b0 [ 1240.594135][T28335] ? __pfx_translate_table+0x10/0x10 [ 1240.594154][T28335] translate_compat_table+0x1474/0x18d0 [ 1240.594175][T28335] ? __pfx_translate_compat_table+0x10/0x10 [ 1240.594202][T28335] compat_do_replace+0x255/0x3c0 [ 1240.594218][T28335] ? __pfx_compat_do_replace+0x10/0x10 [ 1240.594234][T28335] ? sockopt_release_sock+0x52/0x60 [ 1240.594246][T28335] ? rcu_is_watching+0x12/0xc0 [ 1240.594262][T28335] ? bpf_lsm_capable+0x9/0x10 [ 1240.594275][T28335] ? security_capable+0x7e/0x260 [ 1240.594292][T28335] do_ip6t_set_ctl+0x55d/0xa70 [ 1240.594308][T28335] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1240.594323][T28335] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1240.594340][T28335] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1240.594355][T28335] ? __pfx___might_resched+0x10/0x10 [ 1240.594367][T28335] ? __lock_acquire+0x622/0x1c90 [ 1240.594385][T28335] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1240.594399][T28335] nf_setsockopt+0x8d/0xf0 [ 1240.594412][T28335] ipv6_setsockopt+0x135/0x170 [ 1240.594429][T28335] udpv6_setsockopt+0x7d/0xd0 [ 1240.594439][T28335] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1240.594454][T28335] do_sock_setsockopt+0xf3/0x1d0 [ 1240.594468][T28335] __sys_setsockopt+0x120/0x1a0 [ 1240.594486][T28335] __ia32_sys_setsockopt+0xbc/0x160 [ 1240.594495][T28335] ? lockdep_hardirqs_on+0x7c/0x110 [ 1240.594507][T28335] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1240.594521][T28335] __do_fast_syscall_32+0x7c/0x300 [ 1240.594536][T28335] do_fast_syscall_32+0x32/0x80 [ 1240.594550][T28335] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1240.594563][T28335] RIP: 0023:0xf7f46579 [ 1240.594571][T28335] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1240.594581][T28335] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 1240.594591][T28335] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 1240.594597][T28335] RDX: 0000000000000040 RSI: 0000000080000140 RDI: 00000000000003b4 [ 1240.594603][T28335] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1240.594609][T28335] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1240.594615][T28335] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1240.594633][T28335] [ 1240.738113][T28350] FAULT_INJECTION: forcing a failure. [ 1240.738113][T28350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1240.744201][T28350] CPU: 1 UID: 0 PID: 28350 Comm: syz.8.6004 Not tainted syzkaller #0 PREEMPT(full) [ 1240.744229][T28350] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1240.744236][T28350] Call Trace: [ 1240.744240][T28350] [ 1240.744244][T28350] dump_stack_lvl+0x16c/0x1f0 [ 1240.744263][T28350] should_fail_ex+0x512/0x640 [ 1240.744282][T28350] _copy_from_user+0x2e/0xd0 [ 1240.744299][T28350] input_event_from_user+0x137/0x290 [ 1240.744313][T28350] ? __pfx_input_event_from_user+0x10/0x10 [ 1240.744327][T28350] ? input_inject_event+0x1c0/0x3b0 [ 1240.744340][T28350] evdev_write+0x26b/0x440 [ 1240.744354][T28350] ? __pfx_evdev_write+0x10/0x10 [ 1240.744364][T28350] ? common_file_perm+0x1a9/0x340 [ 1240.744375][T28350] ? bpf_lsm_file_permission+0x9/0x10 [ 1240.744388][T28350] ? security_file_permission+0x71/0x210 [ 1240.744400][T28350] ? rw_verify_area+0xcf/0x6c0 [ 1240.744412][T28350] ? __pfx_evdev_write+0x10/0x10 [ 1240.744423][T28350] vfs_write+0x2a0/0x11d0 [ 1240.744437][T28350] ? __pfx_vfs_write+0x10/0x10 [ 1240.744447][T28350] ? find_held_lock+0x2b/0x80 [ 1240.744459][T28350] ? __fget_files+0x204/0x3c0 [ 1240.744472][T28350] ? __fget_files+0x20e/0x3c0 [ 1240.744487][T28350] ksys_write+0x1f8/0x250 [ 1240.744498][T28350] ? __pfx_ksys_write+0x10/0x10 [ 1240.744510][T28350] ? rcu_is_watching+0x12/0xc0 [ 1240.744524][T28350] __do_fast_syscall_32+0x7c/0x300 [ 1240.744539][T28350] do_fast_syscall_32+0x32/0x80 [ 1240.744553][T28350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1240.744566][T28350] RIP: 0023:0xf7f41579 [ 1240.744574][T28350] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1240.744585][T28350] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 1240.744595][T28350] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1240.744601][T28350] RDX: 00000000000012d8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1240.744607][T28350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1240.744613][T28350] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1240.744619][T28350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1240.744633][T28350] [ 1241.007512][T28362] 9pnet_fd: p9_fd_create_tcp (28362): problem connecting socket to 127.0.0.1 [ 1241.390073][T28365] kAFS: unable to lookup cell '(' [ 1241.400678][T28365] kAFS: unable to lookup cell '(,cL' [ 1241.622483][T28373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6013'. [ 1241.668623][T28373] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1241.894324][T28381] FAULT_INJECTION: forcing a failure. [ 1241.894324][T28381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1241.898457][T28381] CPU: 1 UID: 0 PID: 28381 Comm: syz.8.6018 Not tainted syzkaller #0 PREEMPT(full) [ 1241.898473][T28381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1241.898492][T28381] Call Trace: [ 1241.898496][T28381] [ 1241.898501][T28381] dump_stack_lvl+0x16c/0x1f0 [ 1241.898519][T28381] should_fail_ex+0x512/0x640 [ 1241.898537][T28381] _copy_from_user+0x2e/0xd0 [ 1241.898555][T28381] get_compat_msghdr+0xa7/0x170 [ 1241.898566][T28381] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1241.898577][T28381] ? __lock_acquire+0x622/0x1c90 [ 1241.898595][T28381] ___sys_recvmsg+0x191/0x1a0 [ 1241.898606][T28381] ? __pfx____sys_recvmsg+0x10/0x10 [ 1241.898618][T28381] ? find_held_lock+0x2b/0x80 [ 1241.898637][T28381] ? __pfx___might_resched+0x10/0x10 [ 1241.898651][T28381] do_recvmmsg+0x55d/0x750 [ 1241.898663][T28381] ? __pfx_do_recvmmsg+0x10/0x10 [ 1241.898683][T28381] ? __fget_files+0x20e/0x3c0 [ 1241.898693][T28381] ? handle_mm_fault+0x210/0xd10 [ 1241.898712][T28381] __sys_recvmmsg+0x21c/0x280 [ 1241.898723][T28381] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1241.898734][T28381] ? __pfx_ksys_write+0x10/0x10 [ 1241.898749][T28381] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 1241.898759][T28381] ? lockdep_hardirqs_on+0x7c/0x110 [ 1241.898772][T28381] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1241.898786][T28381] __do_fast_syscall_32+0x7c/0x300 [ 1241.898802][T28381] do_fast_syscall_32+0x32/0x80 [ 1241.898815][T28381] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1241.898828][T28381] RIP: 0023:0xf7f41579 [ 1241.898837][T28381] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1241.898847][T28381] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 1241.898858][T28381] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800000c0 [ 1241.898864][T28381] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 1241.898871][T28381] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1241.898878][T28381] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1241.898884][T28381] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1241.898898][T28381] [ 1243.165582][T28399] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6025'. [ 1243.179793][T28399] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1243.372061][T28407] 9pnet_fd: p9_fd_create_tcp (28407): problem connecting socket to 127.0.0.1 [ 1243.507553][T28411] kAFS: unable to lookup cell '(' [ 1244.006818][T28414] FAULT_INJECTION: forcing a failure. [ 1244.006818][T28414] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.011793][T28414] CPU: 1 UID: 0 PID: 28414 Comm: syz.8.6028 Not tainted syzkaller #0 PREEMPT(full) [ 1244.011818][T28414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1244.011829][T28414] Call Trace: [ 1244.011836][T28414] [ 1244.011843][T28414] dump_stack_lvl+0x16c/0x1f0 [ 1244.011869][T28414] should_fail_ex+0x512/0x640 [ 1244.011894][T28414] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 1244.011916][T28414] should_failslab+0xc2/0x120 [ 1244.011959][T28414] kmem_cache_alloc_node_noprof+0x78/0x770 [ 1244.011976][T28414] ? __alloc_skb+0x2b2/0x380 [ 1244.012006][T28414] ? __alloc_skb+0x2b2/0x380 [ 1244.012026][T28414] __alloc_skb+0x2b2/0x380 [ 1244.012046][T28414] ? __pfx___alloc_skb+0x10/0x10 [ 1244.012067][T28414] ? genl_rcv_msg+0x4bb/0x800 [ 1244.012090][T28414] netlink_ack+0x15d/0xb80 [ 1244.012111][T28414] netlink_rcv_skb+0x332/0x420 [ 1244.012126][T28414] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1244.012144][T28414] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1244.012167][T28414] ? netlink_deliver_tap+0x1ae/0xd30 [ 1244.012183][T28414] genl_rcv+0x28/0x40 [ 1244.012197][T28414] netlink_unicast+0x5aa/0x870 [ 1244.012215][T28414] ? __pfx_netlink_unicast+0x10/0x10 [ 1244.012236][T28414] netlink_sendmsg+0x8c8/0xdd0 [ 1244.012254][T28414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1244.012271][T28414] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1244.012295][T28414] ____sys_sendmsg+0xa98/0xc70 [ 1244.012314][T28414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1244.012330][T28414] ? get_compat_msghdr+0x11a/0x170 [ 1244.012352][T28414] ___sys_sendmsg+0x134/0x1d0 [ 1244.012367][T28414] ? __pfx____sys_sendmsg+0x10/0x10 [ 1244.012394][T28414] ? find_held_lock+0x2b/0x80 [ 1244.012422][T28414] __sys_sendmsg+0x16d/0x220 [ 1244.012436][T28414] ? __pfx___sys_sendmsg+0x10/0x10 [ 1244.012459][T28414] ? rcu_is_watching+0x12/0xc0 [ 1244.012476][T28414] __do_fast_syscall_32+0x7c/0x300 [ 1244.012496][T28414] do_fast_syscall_32+0x32/0x80 [ 1244.012513][T28414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1244.012530][T28414] RIP: 0023:0xf7f41579 [ 1244.012542][T28414] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1244.012555][T28414] RSP: 002b:00000000f543655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1244.012569][T28414] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000640 [ 1244.012578][T28414] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1244.012586][T28414] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1244.012594][T28414] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1244.012602][T28414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1244.012621][T28414] [ 1244.243690][T28417] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6030'. [ 1244.302441][ T40] audit: type=1326 audit(1764611602.120:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28429 comm="syz.8.6033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1244.348113][ T40] audit: type=1326 audit(1764611602.120:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28429 comm="syz.8.6033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1244.354860][ T40] audit: type=1326 audit(1764611602.120:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28429 comm="syz.8.6033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1244.361437][ T40] audit: type=1326 audit(1764611602.120:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28429 comm="syz.8.6033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1244.368948][ T40] audit: type=1326 audit(1764611602.120:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28429 comm="syz.8.6033" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1244.375807][ T40] audit: type=1326 audit(1764611602.120:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28429 comm="syz.8.6033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1244.382542][ T40] audit: type=1326 audit(1764611602.120:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28429 comm="syz.8.6033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1244.389130][ T40] audit: type=1326 audit(1764611602.120:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28429 comm="syz.8.6033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1244.398205][ T40] audit: type=1326 audit(1764611602.120:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28429 comm="syz.8.6033" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1244.404916][ T40] audit: type=1326 audit(1764611602.120:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28429 comm="syz.8.6033" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41579 code=0x7ffc0000 [ 1244.438301][T28437] trusted_key: encrypted_key: insufficient parameters specified [ 1244.443853][T28439] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6034'. [ 1244.456659][T28439] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6034'. [ 1244.483669][T28439] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1245.208105][T28453] binder: 28449:28453 ioctl c0306201 80000080 returned -14 [ 1245.428161][T28464] 9pnet_fd: p9_fd_create_tcp (28464): problem connecting socket to 127.0.0.1 [ 1245.593542][T28455] kAFS: unable to lookup cell '(' [ 1245.643565][T28455] kAFS: unable to lookup cell '(,cL' [ 1245.655950][T28467] kAFS: unable to lookup cell '(' [ 1245.783871][ C3] ------------[ cut here ]------------ [ 1245.786232][ C3] WARNING: CPU: 3 PID: 16327 at lib/radix-tree.c:572 delete_node+0x223/0x8d0 [ 1245.789298][ C3] Modules linked in: [ 1245.791087][ C3] CPU: 3 UID: 0 PID: 16327 Comm: kworker/3:2H Not tainted syzkaller #0 PREEMPT(full) [ 1245.794285][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1245.797554][ C3] Workqueue: events_highpri snd_vmidi_output_work [ 1245.799574][ C3] RIP: 0010:delete_node+0x223/0x8d0 [ 1245.801288][ C3] Code: 9e 49 f6 41 bc 01 00 00 00 e8 99 6d 63 f6 44 89 e0 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f e9 93 dd 07 00 e8 7e 6d 63 f6 90 <0f> 0b 90 e8 75 6d 63 f6 48 c7 c6 00 c3 58 8b 4c 89 e7 e8 c6 9d 49 [ 1245.807403][ C3] RSP: 0018:ffffc900005e8c80 EFLAGS: 00010246 [ 1245.809368][ C3] RAX: 0000000000000000 RBX: ffff8880427a1160 RCX: ffffffff8b58e983 [ 1245.811873][ C3] RDX: ffff88800df6c900 RSI: ffffffff8b58ea12 RDI: ffff8880427a11a8 [ 1245.814715][ C3] RBP: ffff88804cafeec0 R08: 0000000000000005 R09: 0000000000000000 [ 1245.817204][ C3] R10: 0000000000000004 R11: 0000000000002b81 R12: ffff88804cafeed8 [ 1245.819612][ C3] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000004000004 [ 1245.822114][ C3] FS: 0000000000000000(0000) GS:ffff888097b0d000(0000) knlGS:0000000000000000 [ 1245.824920][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1245.827495][ C3] CR2: 0000000080035000 CR3: 000000005d1db000 CR4: 0000000000352ef0 [ 1245.830011][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1245.832584][ C3] DR3: ffffffffeff7ff15 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1245.835154][ C3] Call Trace: [ 1245.836469][ C3] [ 1245.837613][ C3] __radix_tree_delete+0x193/0x3d0 [ 1245.839372][ C3] radix_tree_delete_item+0xea/0x230 [ 1245.841218][ C3] ? __pfx_radix_tree_delete_item+0x10/0x10 [ 1245.843101][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 1245.844787][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1245.846636][ C3] ? afs_put_vlserverlist+0x1f9/0x220 [ 1245.848396][ C3] ? rcu_is_watching+0x12/0xc0 [ 1245.850008][ C3] ? afs_unuse_cell+0x1d/0x2e0 [ 1245.851542][ C3] ? rcu_core+0x797/0x1530 [ 1245.853002][ C3] afs_cell_destroy+0x1db/0x310 [ 1245.854630][ C3] rcu_core+0x79c/0x1530 [ 1245.856014][ C3] ? __pfx_rcu_core+0x10/0x10 [ 1245.857468][ C3] handle_softirqs+0x219/0x8e0 [ 1245.859000][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 1245.860951][ C3] __irq_exit_rcu+0x109/0x170 [ 1245.862484][ C3] irq_exit_rcu+0x9/0x30 [ 1245.863866][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1245.865624][ C3] [ 1245.866562][ C3] [ 1245.867529][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1245.869462][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1245.871482][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 d1 37 f6 48 89 df e8 8e 25 38 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 b5 2d 28 f6 65 8b 05 7e b5 40 08 85 c0 74 16 5b [ 1245.877465][ C3] RSP: 0018:ffffc90007f3fb40 EFLAGS: 00000246 [ 1245.879517][ C3] RAX: 0000000000000002 RBX: ffff888044dcc238 RCX: 0000000000000006 [ 1245.881999][ C3] RDX: 0000000000000000 RSI: ffffffff8da2967a RDI: ffffffff8bf07940 [ 1245.884490][ C3] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 1245.887012][ C3] R10: ffffffff908253d7 R11: 0000000000000001 R12: ffff888044dcc238 [ 1245.889485][ C3] R13: 0000000000000293 R14: 0000000000000001 R15: ffff88804a124000 [ 1245.891984][ C3] snd_rawmidi_transmit+0x117/0x160 [ 1245.893667][ C3] snd_vmidi_output_work+0x111/0x390 [ 1245.895306][ C3] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 1245.897547][ C3] ? rcu_is_watching+0x12/0xc0 [ 1245.899028][ C3] process_one_work+0x9cf/0x1b70 [ 1245.900712][ C3] ? __pfx_process_one_work+0x10/0x10 [ 1245.902382][ C3] ? assign_work+0x1a0/0x250 [ 1245.903844][ C3] worker_thread+0x6c8/0xf10 [ 1245.905300][ C3] ? __kthread_parkme+0x19e/0x250 [ 1245.906859][ C3] ? __pfx_worker_thread+0x10/0x10 [ 1245.908451][ C3] kthread+0x3c5/0x780 [ 1245.909779][ C3] ? __pfx_kthread+0x10/0x10 [ 1245.911283][ C3] ? rcu_is_watching+0x12/0xc0 [ 1245.912811][ C3] ? __pfx_kthread+0x10/0x10 [ 1245.914249][ C3] ret_from_fork+0x675/0x7d0 [ 1245.915719][ C3] ? __pfx_kthread+0x10/0x10 [ 1245.917152][ C3] ret_from_fork_asm+0x1a/0x30 [ 1245.918639][ C3] [ 1245.919666][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1245.921846][ C3] CPU: 3 UID: 0 PID: 16327 Comm: kworker/3:2H Not tainted syzkaller #0 PREEMPT(full) [ 1245.924826][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1245.928069][ C3] Workqueue: events_highpri snd_vmidi_output_work [ 1245.930108][ C3] Call Trace: [ 1245.931133][ C3] [ 1245.932057][ C3] dump_stack_lvl+0x3d/0x1f0 [ 1245.933463][ C3] vpanic+0x640/0x6f0 [ 1245.935079][ C3] ? delete_node+0x223/0x8d0 [ 1245.936475][ C3] panic+0xca/0xd0 [ 1245.937640][ C3] ? __pfx_panic+0x10/0x10 [ 1245.938995][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 1245.940584][ C3] check_panic_on_warn+0xab/0xb0 [ 1245.942110][ C3] __warn+0xf6/0x3c0 [ 1245.943266][ C3] ? delete_node+0x223/0x8d0 [ 1245.944712][ C3] report_bug+0x3c3/0x580 [ 1245.946052][ C3] ? delete_node+0x223/0x8d0 [ 1245.947436][ C3] handle_bug+0x184/0x210 [ 1245.948772][ C3] exc_invalid_op+0x17/0x50 [ 1245.950316][ C3] asm_exc_invalid_op+0x1a/0x20 [ 1245.951855][ C3] RIP: 0010:delete_node+0x223/0x8d0 [ 1245.953406][ C3] Code: 9e 49 f6 41 bc 01 00 00 00 e8 99 6d 63 f6 44 89 e0 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f e9 93 dd 07 00 e8 7e 6d 63 f6 90 <0f> 0b 90 e8 75 6d 63 f6 48 c7 c6 00 c3 58 8b 4c 89 e7 e8 c6 9d 49 [ 1245.959382][ C3] RSP: 0018:ffffc900005e8c80 EFLAGS: 00010246 [ 1245.961350][ C3] RAX: 0000000000000000 RBX: ffff8880427a1160 RCX: ffffffff8b58e983 [ 1245.963772][ C3] RDX: ffff88800df6c900 RSI: ffffffff8b58ea12 RDI: ffff8880427a11a8 [ 1245.966138][ C3] RBP: ffff88804cafeec0 R08: 0000000000000005 R09: 0000000000000000 [ 1245.968515][ C3] R10: 0000000000000004 R11: 0000000000002b81 R12: ffff88804cafeed8 [ 1245.970858][ C3] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000004000004 [ 1245.973517][ C3] ? delete_node+0x193/0x8d0 [ 1245.974933][ C3] ? delete_node+0x222/0x8d0 [ 1245.976367][ C3] __radix_tree_delete+0x193/0x3d0 [ 1245.977915][ C3] radix_tree_delete_item+0xea/0x230 [ 1245.979548][ C3] ? __pfx_radix_tree_delete_item+0x10/0x10 [ 1245.981556][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 1245.983143][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1245.984930][ C3] ? afs_put_vlserverlist+0x1f9/0x220 [ 1245.986527][ C3] ? rcu_is_watching+0x12/0xc0 [ 1245.988005][ C3] ? afs_unuse_cell+0x1d/0x2e0 [ 1245.989449][ C3] ? rcu_core+0x797/0x1530 [ 1245.990793][ C3] afs_cell_destroy+0x1db/0x310 [ 1245.992319][ C3] rcu_core+0x79c/0x1530 [ 1245.993630][ C3] ? __pfx_rcu_core+0x10/0x10 [ 1245.995094][ C3] handle_softirqs+0x219/0x8e0 [ 1245.996533][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 1245.998148][ C3] __irq_exit_rcu+0x109/0x170 [ 1245.999619][ C3] irq_exit_rcu+0x9/0x30 [ 1246.000911][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1246.002664][ C3] [ 1246.003562][ C3] [ 1246.004477][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1246.006326][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1246.008341][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 d1 37 f6 48 89 df e8 8e 25 38 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 b5 2d 28 f6 65 8b 05 7e b5 40 08 85 c0 74 16 5b [ 1246.014773][ C3] RSP: 0018:ffffc90007f3fb40 EFLAGS: 00000246 [ 1246.016608][ C3] RAX: 0000000000000002 RBX: ffff888044dcc238 RCX: 0000000000000006 [ 1246.019078][ C3] RDX: 0000000000000000 RSI: ffffffff8da2967a RDI: ffffffff8bf07940 [ 1246.021598][ C3] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 1246.024090][ C3] R10: ffffffff908253d7 R11: 0000000000000001 R12: ffff888044dcc238 [ 1246.026516][ C3] R13: 0000000000000293 R14: 0000000000000001 R15: ffff88804a124000 [ 1246.028989][ C3] snd_rawmidi_transmit+0x117/0x160 [ 1246.030994][ C3] snd_vmidi_output_work+0x111/0x390 [ 1246.032835][ C3] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 1246.034667][ C3] ? rcu_is_watching+0x12/0xc0 [ 1246.036211][ C3] process_one_work+0x9cf/0x1b70 [ 1246.037791][ C3] ? __pfx_process_one_work+0x10/0x10 [ 1246.039543][ C3] ? assign_work+0x1a0/0x250 [ 1246.041029][ C3] worker_thread+0x6c8/0xf10 [ 1246.042550][ C3] ? __kthread_parkme+0x19e/0x250 [ 1246.044156][ C3] ? __pfx_worker_thread+0x10/0x10 [ 1246.045797][ C3] kthread+0x3c5/0x780 [ 1246.047095][ C3] ? __pfx_kthread+0x10/0x10 [ 1246.048567][ C3] ? rcu_is_watching+0x12/0xc0 [ 1246.050023][ C3] ? __pfx_kthread+0x10/0x10 [ 1246.051780][ C3] ret_from_fork+0x675/0x7d0 [ 1246.053258][ C3] ? __pfx_kthread+0x10/0x10 [ 1246.054773][ C3] ret_from_fork_asm+0x1a/0x30 [ 1246.056306][ C3] [ 1246.058012][ C3] Kernel Offset: disabled [ 1246.059397][ C3] Rebooting in 86400 seconds..