last executing test programs: 43m5.291173682s ago: executing program 32 (id=866): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) pselect6(0x0, 0x0, 0x0, &(0x7f0000000040)={0x9, 0x8f, 0xdf, 0x81, 0x5, 0xf, 0x1000, 0x1ff}, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 36m6.37379751s ago: executing program 33 (id=3608): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_open_dev$video4linux(&(0x7f0000000000), 0xff, 0x2001) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x3, 0x3, 0x0, 0x0, 0xf}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x10b, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x1) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x21, 0x7, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0x5, [0xf22e]}}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @jumbo={0xc2, 0x4, 0x5}]}}}], 0x58}}], 0x2, 0x4000001) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 36m6.249377656s ago: executing program 34 (id=3610): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="3d63f65c5464418d22e16ae139d3c07bafbab4515dd7ae95833e3963f10d8ab3449500b5f914f246be5f8177dc15148d52f2de8f0574768cff06788ef9bab2146fbd8b76696b9cce58b78b95c9c3315edfb8e2632bbe71105262db94ac95b13869b6e9ede282dbfb04aac18567cf2b30008550258bf56fb5dbccefba206350f3e7a5ebfb2fc3595dafb98166a7020c00bdcda360ccf8cd7d", 0x98}, {&(0x7f0000000000)="cb4fa06c86bc100d53659894fd8f91231731398a7dad2b6cb07dc95c45d1321175e67fd00f3141", 0x27}, {&(0x7f0000000180)="e7a43f080fa452be84d20660ecfe304f52f70e26545865ea3c96ce84326ba6bb1146d841b1b4cd02ba0024d320b0daa697fdbe6cea13d2a0b541e0b92aa28c89bae963526b17eeaa1bc49e08661e6112400227cfc5a8bb9351a6a036dbbe08546a81e937a682244fe050af6a8042ac5215c2aa6b81236970f590442809315a", 0x7f}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000000200)="ee78fe2ce69fc327b91bb288d9f715571897cb9b516bc8edbb01f23205fc37edb2dd0ad77876f56d85185bdcb97269ec668e90cd6160da9b02377a510e23a3880d6561b439a7080ab4098348ff96", 0x4e}, {&(0x7f0000000440)="ec2398a184d475b8c07669ec54e254db73c5fa9f89", 0x15}, {&(0x7f00000002c0)="e246af9c1f6e7ed40c3e813e3daffd366be3d4d6d8362d7748712f75a5965273c3d970f680b4f1f9d338f033e73cf1a84fe484c0ddc33f054542f880183b6508ed0f27aaab8ade2de6806825c4c3305b8ef99e24792ccfda23f700119f9567633b3115108a89537fd441f1c519a70a2c51af9b1aa3a236f5d39486c0058e80a01cd9f26530c5ae1736a2dc923db8a5592fd5cdf5a7be38caadabbdcfa4d917f3b4e38b4f72ef4cb7478d2f7057f2764344170e6284aef9184c057a4b142162975bc31a1accfcd69ce6373025eaf721df02cb11", 0xd3}, {&(0x7f0000002400)="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", 0x1000}], 0x8, &(0x7f0000000480)=[@ip_ttl={{0x10, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_retopts={{0x30, 0x0, 0x7, {[@noop, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0x32, [@remote, @loopback, @remote, @local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x17fff}}], 0x78}}, {{&(0x7f0000000500)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000540)="24114c0c227f7f85fa3e3325638eddea1231ed2c4196ae70236eabaf540174a7825561b198", 0x25}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000600)="2b8e19638dc19b02b51ec8e2ae7879f6dee05529ec575bca0683f600fdb179a7c1ae88af4bc378ad566d2f449a08b52405c4526c4b6e3585da61ca9791df0e8ae70dc1b695a05571a5ec54d02d89f56ca76f5dc7f769e01a60bc863bd5e8d3534b75602f1916cdf74294b438b4e8edde587d0bfb", 0x74}, {&(0x7f00000006c0)="87958f31cf4ad36b9a6c5f58a81786a6a0ca8eca9d10b79ccdef0ebcb6536a84d0605cdc3a11e828237aad2c523c34b2b26be6a3135f4dd5198e72627698db510026a1591050708f0bce0e2fd0fa8fe347a5fab9998622a2d9de61edde9b81edbee3d4f9f30c08e8cf96506b992000956280e31ebe4d30f4aa16159e2af0595cc15e5b933df8793e48b746b2f52a6aedeeb43732953ae9611c658bb09a", 0x9d}, {&(0x7f0000000780)="b34f9bb5d38f2d7b3eb6cc5b98c8b967bf3edb00902d4ab6a256de29c5ba04edd5498f37b7e1b801840a8cddbac6153e57811ddbd4107741ae77e9a2246f2743a89588f3b7fbeea54186cdbd91640d353bcb124e3c4474b75223cd79c16ae9d5ba83381371dc760d8c853ed68564f0c75cd24afcbb4d95b33da9ddb440f1e6e3c246dbc958a6eae24af16b72ecc88cbeadfc727d9ae440fbfca8dcfe0a3bb207f9d321aeb3e40efc3309188237049927fa16967817534541f7fb8e2cf5a702", 0xbf}, {&(0x7f0000000840)="553053f9eb1c50c7d864de0eb40e8326fdbfbc30f27731f2d1da0fc16b3114a9bd5379317cba37752c7e41985c6165", 0x2f}, {&(0x7f00000009c0)}, {&(0x7f0000000a80)="4a6a944ae1465889ae9babf7e19b578aba4f336955a9a61e6983ad5282b8934772090b182008aa498d8759629bd1ed55b015137ebba120bc894865c3ebbfe0ae565337447c4ea25514faf2400b96b80b5f848eb84992846fdf0237d1a55816f2de1f231744731e9dfa4dd0b2c707", 0x6e}, {&(0x7f0000000c40)}, {&(0x7f0000000d00)}], 0x8, &(0x7f0000001140)=[@ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xd8, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x1}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x26}, 0xadd2}, {@multicast2, 0x8000}]}, @generic={0x7, 0x7, "b251e55d59"}, @end]}}}, @ip_retopts={{0x10, 0x0, 0x7, {[@end]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast1, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast1, @multicast1}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7}}, @ip_ttl={{0x10, 0x0, 0x2, 0x10}}], 0xd8}}], 0x3, 0x40801) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 35m37.68182627s ago: executing program 35 (id=3790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="3d63f65c5464418d22e16ae139d3c07bafbab4515dd7ae95833e3963f10d8ab3449500b5f914f246be5f8177dc15148d52f2de8f0574768cff06788ef9bab2146fbd8b76696b9cce58b78b95c9c3315edfb8e2632bbe71105262db94ac95b13869b6e9ede282dbfb04aac18567cf2b30008550258bf56fb5dbccefba206350f3e7a5ebfb2fc3595dafb98166a7020c00bdcda360ccf8cd7d", 0x98}, {&(0x7f0000000000)="cb4fa06c86bc100d53659894fd8f91231731398a7dad2b6cb07dc95c45d1321175e67fd00f3141", 0x27}, {&(0x7f0000000180)="e7a43f080fa452be84d20660ecfe304f52f70e26545865ea3c96ce84326ba6bb1146d841b1b4cd02ba0024d320b0daa697fdbe6cea13d2a0b541e0b92aa28c89bae963526b17eeaa1bc49e08661e6112400227cfc5a8bb9351a6a036dbbe08546a81e937a682244fe050af6a8042ac5215c2aa6b81236970f590442809315a", 0x7f}, {&(0x7f0000001400)="6c436d1a402d6d863f7ca4b012be7df0d2a1fa308b4e41b86befdc80ed5d0922a7fd5dd71497694f88bc085cd25f6c8ea77b12204de86a3e6dcf37019c59a2e3a4ecab800b1d53c57c3a6375c126e42fe0b4433d3d89427e745906fe4d984a48575908149667c6aa3007f68eb046e5de4ff0fa450fca4259400e2e483512f758f9b7a1cdb969f42054adb2c60d637166c915a63b29a68172e9a265c0a863763f8093028b92953a20d572ae29d2e1c9415a62921e8e99db96041588e1292cc66aab2e024fe52faac2a262b62254d085eafe5d459800ac235b8b17c0ab2f24628198befcd6eb7d8259b28dc3e1a1380b944b2c9d76671096ee66d200c44e1d1e38698cbba54c163ea7d070d32e40e165f640bb4d0f1033ae06c4a373010576000a12b40bdc6a5f0fbc6725a32ddec50c9fa6e637c0c822221d931dbdbe56e751b24d07fd8afd63fdf7915faec60710cf2ee2aa653a7ac6cf673439c6dade2dc2b3879840d80600baa05d2c3c69290c095b9aba359cc12b19fe13e6f1e3713222e1e2f9b17faddff57359c55f54d42a82ad34c5a65cee1db9e807f999aef6d1bdcf1583970de32bb2812fb645c58ca030f426c1bbcdda3201c0dce580018e6b76c7d0ec85aa50c72358443082385ff3880c3cde40783564ffb9f4e45615a23c74c5f30e029757847f2abc7715f0fb811c71a7ec1661c1281451dde5f96a9cb27ee3d5fce06a792210bac28683db6ae51adca5549f8e4501581e60fb125fb8fbcac849abd23bba2bf84d0f2ac2d413457927d9d85cc76fbb05aff342e4ab824947f5d64c685b10a872d187146069106ca9fb1dce2b66fbf3f3411f9a90080933f13c7150c5a668e84c0ee4d9ead8995b1e955482c9cb2747b9259039ad2ac6332eb159f79149342b7ba1bb1c43c342ddc0ca5df51afe68171e634290c7fcad770d269ae046b17941e235236b6e5ad5da009e8359c0d49725aa27db36b5935ed7e9874d2ed65135a0dd32c8d2743048744ac5b7ca319574922063677379b74b564c82c4ddacf9e12a845466a7ab637813a23eda9a4a2b3ed8f768cc2137be5371c19c04aa77a8f6fb48e9c38b0ecb4b65f3d846671a6f0454b915d04a67ad073150c60ba7a384bdf0c4fa81171d672f3de5c9268e44d2e8de878364cfd6f1f976c711e6d5ae4844f214b83db62486e48dde922274c3d06ca697d8a487d9af872fa41388d974777d399ac4b2f2c9d1ea6e2a31f7bf5fd6da17ef10b258daef4e99663049605e332b3604204b34668cefd3d2d59790b85a6c56480ebf78da99aa948f0dd15a801761650eafc2f157cf0d7da5f0d0ff1bc17748a9176fe9454d87988d8837c332c7d551c60754189fdf9f6832834183cb987d4e9ff119b9b6e5636a552dbf694ade746a057a29c7c74ee2cd0480486a399a169a138c4eff55a13536e3b8c272a72d57f05a271f12e7c45f8465e75ec07752dbf8bc25cf448c9d37c22cc4c4cc116a3727adfd455383c6a0903e8ca44b1fd9e8bda9b8dfd72cc0a4a403d8d828269b57670843fa7ac0d17315e76ffefc366f705843f29d3620c0386271b48e03df3cf27d61595e27634495a20b49672768ba79d558fbbfc55281ccb53773dccafa1a01d265fe3b742dee35c8c14009a627cdee30e6f76330e0e9d536c9a92100ecc802de28cf2320e2eb065490addcfcc17b0b55a72e4a53f96002feb9174096a683a9c4578df15ac1dfa9a62de20a008f590f8e77574102436613ce198b7bd3cdffc3f8f05a0d5c7df9c32334b323d968b3f692cd480bf1c375c5eff39e618f1cb2dbf9d036f8bc5a2b7c36d4661283463f530118365dd5a6459b480bb3163512adf3b82a84f84375d5118188e48ff66186fd588b1470be0bce1dec13036a504400046d12105f8a3ba5d347e3dd73225464734ed0d5643239144335b2ec1976a52d6bb941067dac026c262c3bb81ba973e391ab9332a3c6d56b76e66816f10bac25aa3dd0da13dd2d82bfb27e5d02219de3f88955c9ce12662664fddaa815b7ee6cbf03e823ae87b6c477b3c8eb1de5d0596f99b7cc57fdcf6a1aaa68188650743eb5a61959211325e3ce2c30b1d6a06c809a98d50ae6cb49107910d776436833ba8f13afc38ba88e3239e6a3b11b332d39550c07b0d3e8f6278d5231060da3f1c9180442903962c0d0f26be0c49d7c5094fb841140203e0ae2c30abe0b29444a1c901a096c4efcb546adcdcb4d37e1cd90fb92a9443dae29d83f67ae474dd9d5d6f103d2b4db380ced9c216d5b6da3ea5b9b18fa6010b52c70dcb600a5501b4fab55cd75f0e84bf69898a91c10ac91c8802527de104b0a49392f53f1ff842d13aa0b3ea9d886268d75fbb5720d6211e595e353f6afb1409dd127c28b578628bcf44a00cc50448ee3d93c4c6cd8a44c275fc502f68659cf48ef26e86756effc22c2d6d1f316f4bb41640c26f4d03fee0aed140ea1d91f7395f298069f0d7bd1ba6e53ff97117e13b97fd83a50e01c6b3622eb750b13f36b916368028fc5b107fc30187ddb2bd0b5d4fd7c1dff0e02ce1ffd1fc0328ce433c3c2cfac82215a4400fa595312029ae11db488f0edc90bb89d59ab08714a6f9263c814c759472104e09188ecedb7a1baa7ecfc741ad121b58ccb69bf4cdda69fadd1dd90c0ceea8a56c6556c4ff21d6ae0a8a7b01d1229965aa3ac6d03d3c58e9192e1a45d3345bf3ebb3950acd654c0df5abab73780f5e5b4110296521a9792f5ab610fb8dd5da611ea03f564553aede571190aa0fe79da8c2f431ad631827ea3260eee38854f497a9318060973325b3c6e1c61a083ff63e0b36e690496ddc926b74a743de6dbec14b52be4e8b5b64cf555a41764a22e19b5b3f7a9c96623e5391e7cb3e365980bd7f626d399b99baa2f081730eeadab81606bcacf4a3328a01fefa8e435865f760dd5a3381a53a00a1792efff5d59c1c7c59b922e5df8cde4f296c45f6730313f732d6d5bcbfcf2fdc49caeb878747b4f3d369d909cc09f98e2343f2e7a2775137fa5cfab508540666fa03cbe545e4b3b1f524b66ac6f30274da3b365bc475674b3eabdb6da52cf7ad43f5fadf19414124f3a4ee394ea857e991fc169ff845acbbca614d54b2e52a48091cdcf6a26804802ad02fd55740b675ec22819b0f019c985e1fdb90abe7c79163bd02bfee51717ca9fbbf717557e7b956bc10d6125b1130debf218428abd6b3e226dbd829ff7c181f80821949af5531e1c182f6feacaea0dffb4c3f90ef406be756be98c87b2bf6b9df81c5af289e39956f17f87dea9ce43373dbde63eef69052c169cb475756a6421e3451239c735fcb0988f0cd92b7c35189a2a40dc0b8763cbd1143f849b68615ea3786ebf6884612c9f3e7d297c777f55b379bb6d7674955f523f3c7df694109e65023834b904293e4cbfdfafa24b3578a55d6846504edcd594a02ec800f4cd5ef32e0049e43342e806b9f41398f4a3d7263c9a36a52c6b9593dc3b213ae696256561b3f1cdff765d218d9d55b0d70f571951f072dfeb100572452cda87746c324f018cd04c0e0bf8df2d5e44a456d303f067ce6c165ed64f23f98e570b662510814532da1cb216a031259bdf4609ac85ed6d77cf88dbc53827b92ee8c5561a511a8af47c8c972dcd64a36fdbd12c5384a302908d4ec552b6b8920286418982b2a14154c307152150a1538390618a1f8f06ccfac886bc8ba0c8fd313af2e02f2cc1649063c145a6e07eb47ad78f735e87323c320969988c785d8eeb29aadde34a25fdace30d96633d4387c59cf3036ab4d77f56d83fd096183daa19a17767e6c7a70355362a42e4a134fbd0600773213bb9be2bf346a8cff1a17e2e6f62d62a4168c2fd3ace8761aac30d04b035b98c66d0b5e6f4583d9fb21c76ebe890cf295abdc5c0219a2c8fc36b2f8c824e3b5f2ae829535c4a214d6ba5d1c27257f39022e7855253eaaf7d98b9237ee822c70c39e5cd73847e9c44e46f9c4b1c2848b6ae8243e28237e69ded52d8aa47b24b38170a254871f6a3d3fef9638886f29ccc0e7bbb580e09e33114c419b7b49a4f7574cae4cb112f46388f0e23f37a52e38228b19b66ef1ca5d9a3d037e7fb2400e0e3f0bb73856a80bb11c90a3b2c97fb1057a48c2fbbed03ee7df7e46c95f7ee1520080b3c9c4d13c379daf8fc3a0658254df9e9b91d0e3b802fa84a83441dac7f81f2e7e061be8e0db5b5747f6cc868d1c4b3287d9477a8d56f2f1ea8aae6e12cdeba233073ae63e7b3e9008afa454658f26809eaa0f8817bec72fb268d34c548cfb7250c116f7602246499f78d771b995258e972388f8d0a532499e45b67fbcbb65e81bbf78055441074f444b8cfb8ec729a98bf4184f4fa66710df1fcf337a0d00073b5c16e47eb10337eb231bb1f7e871896f5957f029bb22b58a72ddcc6a0bd7649276e6cdf33540d5270c21abf5ff7b9fcbee8c345e769b4a9033a83fe686f95286beecae1dd015cfe20ad523f51fa6ee537001d984e1fb538e60d59eb7fb45a34197d8040b9a70ffa6bae1f79a1b6615ccf43b16f6364cd5d895ec525e72c19f4b240da9adb492cd98475254cd941e6824ba2a6646f8c69304c0fe027f00301e532e72c042133fd1b475288c92c51dc67073e0a12a12a3baf9c7efeaffa3072bfe129708f9ab9968b9c9df51b8defd30d5c36545317371f34fafe009857531084dcb9e15f7fabd153094631923c33795bbb897fe200081e78a479725b1ebd28818c177e24a716dd5df681cc1d925d96c19450eefe0b573fc001006c1a4966b06cf240b6cc6d4183edcbff206ce88742c89d121dea78ec778b3a938926f944c42c813c840829560500c62c833aadebb377aba2d567ce2fda0646d2f88a565c20b7562da3f09647833ebfd9aa25f9fb70b2432261b1547ec0c7ae06fd94ed6b9a2c6dfe8ae9fe7287c1d8db42474d98c780e3cee5b43dac8014d5a9750530c9fc5908b52361763997a55de40af07e949030a020eb1b8219176ab03f419de9345d18035551cd8b7b2338eaa2d624fcf41a2bdcf065f1bf420319d0ba4a749c7fd7b36e1ac56209cdab9fa1c367d25d0a7b8e185461b7ceafca79fdf0285e70f657aacf6aed6696ea08a973eac0ca4e87c612228598fa10191203eb2a4714ec4983a2d304c7f0226ff0364d781c066da25023a582cec12092da674932faec234608febf1d6762faede1bc430a4b769994dd836e06307f6e9b64f7fcb963230bae5e683919eac07801ae8c3801f276126ff3164cd62f3fa3c2a02a6b9b9f4ae26f459720b002950662d0318ac9c55c8ba668581531447153b31c8afc5cdaabb7e3c1336eaeb0c2b69aaaa0c128e8c7009eae345a254d71812b717db3b6cf8aa5d8c9aaad2160a4c292138318cfb8e2544b902d5bb5c4b53259d9ac96afc8be5016e8cc6cb78a403aec1c888ff60723b683022255157f34ee72fef8af81ea57d65ef0ad76445882eaccca12cc86b954af4d5e5ee8da7c8e91d199a5287299bafbc046a83c921533b4a7a5afa1e045d404bf57dfd92758de2742a4eb344d1173597d262ddc86e14e6cf2e5e3ad7ac536209da2c4873e00686a19668636b6666a33c1166a9aed2bd7964bf95a79c8d7f681a26ff3b92718f517b7c1af8da51c3bddc2dbe65603a39d8026b06b298c0888d12538e2a93d9a7a827eed0bc414f0bea150d3ea9599396ec859b3e2b77f9787966a5b6cd644167ef290a0f073bab23f2420550562fe15e3b9046a31565ddbc885158a0ccd0fd3b5238359c28916", 0x1000}, {&(0x7f0000000200)="ee78fe2ce69fc327b91bb288d9f715571897cb9b516bc8edbb01f23205fc37edb2dd0ad77876f56d85185bdcb97269ec668e90cd6160da9b02377a510e23a3880d6561b439a7080ab4098348ff96", 0x4e}, {&(0x7f0000000440)="ec2398a184d475b8c07669ec54e254db73c5fa9f89", 0x15}, {&(0x7f00000002c0)="e246af9c1f6e7ed40c3e813e3daffd366be3d4d6d8362d7748712f75a5965273c3d970f680b4f1f9d338f033e73cf1a84fe484c0ddc33f054542f880183b6508ed0f27aaab8ade2de6806825c4c3305b8ef99e24792ccfda23f700119f9567633b3115108a89537fd441f1c519a70a2c51af9b1aa3a236f5d39486c0058e80a01cd9f26530c5ae1736a2dc923db8a5592fd5cdf5a7be38caadabbdcfa4d917f3b4e38b4f72ef4cb7478d2f7057f2764344170e6284aef9184c057a4b142162975bc31a1accfcd69ce6373025eaf721df02cb11", 0xd3}, {&(0x7f0000002400)="42b5113cb22d06226caf864f4909f178ef193ac11778eeda62e360a03310bee7ad96e158da23e2bfc192404f6c70100b6556fec8da79d377d4aacb91c79af4f6cd6e828283dac1287cc74838698e2a88838bd6304cab033668ec19eb4b0ab17c7438a210cb05669ce39657f1c4ca95e18396e41e6a505f3f7d0af4225c381e0507045bc307497331b5163f3c73635a99ca719eab3600790aafcde971e77b7abe4a69ea6f2f1c9daff30386ca7872112544a5e98cbc9fb61d454250aa7e0fa10d888afe8da6802fbedf56c55862d57e79e370ad57e9574a265804fe78f77b0e143f1fa1dc2769de1f4c2925fb97a5ea1b185485224a90ca07b10388ce7dcd59f11d2ca249354509a4fc8b105828ed74c92dcdc2de4c85e229a5c6710f65adae4066671866a7b63b16937d95e97a2a26150044627daa46ebcf7ac285725568a8fdbd4261d541516f41fcec05a74b3a03e05d5cff4fe3e3b55c2bb34199478d31b396e8ed8a69f4b40eea726f61ebe2a05f91615b3ab24fdadc54a40cc1dd19ace9bdf65cdfbef3b10b135f50a3bf7ca79cda1442dd0145f9716721f913124c99881012e3cd20db97cc7e72a75a6868306cb71ea1daa216588e5742e70b8b5536502a89e8e10cd4da1b26335177542a997f3b6e0a66b36b43601a6d4f637cdb024d530768ae6889edb28a9336148982046193136192a24010e84c9dd9c1163a472011ece80ce24f1f4aa7cedc7a34ae92080854cf7edb73feaffd2b61dd4ed0acac94db787faef05efa1c5aa9fd5fd89cfbf7aef447d7ffa9b25ad895a44bfed81f2e4c4adcc8bf684e67d5859f8d21657f99a47991fb2c499121ffb817528f5245966e99b17dea06220cb1038ba2390521cdd1a9040358ce17f14b12a372a9c94ef673ba365e950e9b6f95f37931ee241240bbbf3759916b86b6def1173db372740b5c97c6b7c26e7538af5a63a13dd51d14e6422f792412ffb8975df36419e4a5a55a2e6ce009b23b25af34abd52037bae70fa853326b1458251a55aeb07230a184963112b0279cf9765aaac3c7d774cdbef2b29fafe2939c8074041d9004404fca7e8290af40ef04ebd268513427608cc6fa78a4ab986c648df7785b89d6bc1b9207e176fe0b32de05c383c3b3cc498f1d423261d7f917b7fe1bd3a1786deddb1a998b1bb0b61ff5db80d32c493519f173b46e946d92c61a51efa4036de71382ab3bedafd704d0451d3158e005c7598012594de5366013abe87dc1693851796c88e53751bb3f6f619487348cce98bec99258f0647c4a65885ef40848e1daebe154a2910188c8d36872bc863c524194d0d10aac7ba96d1f99297a49a2f1d3f06c050171ac232e32fc7228f848d5057876060095e1bcbbe507df327112c4820af4b143ee6646e47727b775be152b580f0ab6c7743357a998041a6f6ebc10615f84e0a2c0d37b46af110e27ce6d86c070f76d6c5825a707ce4747d3ddf3a76b788a16aedc847985b49298df6fcd862355f7899c6d95e1426b4c4c5426009fb61a9c9786f09bebc4aba24a34305c237dce80ef7c2b2e5bc19e6b93b441ea6791552bdd5cc050e38cdd6ee92d6ad8b100ef1cd67bbac922d6b3ce707e0fa7b1b173ee5b8bd8fbd6955a3006927b2042d44c701b7c2d0f5064f1c93a292c808ba6b7ed15dc35b923e598cc5ee494956a47598586ce338c2ed15af4672ad3d9cca5862b3e6abc2a65af902b4a2d05ecdbf7f4be3daf067405f245244884cb6af29f536fe9c037f376cb57559cd3aba300e8944bb0717b47f8b26a2d05a98dfcc89ecd1a674d8d2cf5c51fd0b375d30ffae57e746b23d239f78d4667a96c1b33866a6515529cd9392e5a43f4f77b7eb313de255f99be020fef8ddddaacee8e203fb6c4da8ebbaf1ebc7d3be1a7f617eed81383d98f49259f7e7e602b164f52c06063cc99fe710ddb6e4bc68a3efb067612c71e1b2555006be94ff16b656189f4af6d1b8123b8f1b9d455b4b991f442c374fa4191308dedb0f4ed4d594cd934f48d2fb06709a697dec56f5acd490e5675b5a5982ba18371a34be9ffe9bc03e7017d7dc905c1747e0b91fe177726c00bd8a0252599848b4ff28b785b78a90b963e3e54647da37500c2b37453daac7d119903b069e6c8da25b33ddc54b549a41c8d7debcae9ed41730310cc1adce98be5e03d5c6e9e2414c83699155e484bfd17c4e3ea518476dccff668298ab88fa1b5f038ffe06c16e77d95f414612326688d43351ed3d7a3872548f366b495506b03ba784ec17aa103ee07c75481565115b3274f3898647b4f1ca0e52d906e53e4bcd881d15b39055797b4e23c920d5e1beeade28a5134ca02da7af09ee1894bd52f0f170565a41e904dd2fb3fa2000db8f5e27a8e97d8172028d874a08f978e7c3557715bb09fe435d4f3a064dbee818bf8bd070bd0768761d454302858e91726dc98016c99a0807b3da1e145cd87f53667bd8a131481255d872588e5a8610b242bd8138ac57ff9d0845126a43d8e04d8fd9d40bb9d7ec2fd934999d5a9b29add3987d4d67051b821cea1d56ac08207bd64b286c488ac08e03e2ee62940a97551e9f2bcd8a88f337c51d5e8ad4ed33d5b0ca7908c6eca2d4ddaf4604b69fdf6d20b8e2cc96a83481ecf1efa5d94ba3ede67cb58456928c82e2fe4cce72535cb2425ad0dcdac04874d89142d2c9439da6e184243e6e7add5de90c50f25318988dcce028c08eaeaf3cd11ca07ce798e77d9f66ec6dcdff460cdae0950372049f725a6cdf5fe6727223cc0a657d4cba6e6e03d96bb3ef4af11f110433e66ef19e988010b852527f6cc88cdbea42194be4aa01a8b061ceebd59713511f695fe5e7c38fadbb7cba5440f120d7b13d53ff43a3f18b808c4f2ce2691af49c18171879c5a4eb342d9e63f0234a1de3399bf65b581dfb7059edc31c6362d5f9fede1e742139604d8ac5e0c3858d3c9a641a2eab40c8f274720554c04343e04493c88fa504ff50f57f97236a4520118d0b401b3a1135f897af7b258c4bb22e0eb153a7e4624bfa428c6e48d3c9165c8f92b307033e3e908985f5122e15643f13eb8e424db8f5f50412452fd94537485da704857f2162004215fdf8e7219150431bc63caf97a936ebd875780f74ed5765ed28d725eaa4cf5068e62e3763fdda6d4e7421f8ba3b9be671678f906a8a6f37fd0734d34d835e395d759f2f9a602be5c86aadf9379b031906bc10d4da743305198960c17711a74694fa3bc6538ea821ba36dcd7170978a14b863d604fb844fad9c6ff312951855bf134f6ea0d788d1078b82d68b921ae0239f3e5cad03d70ea56d74d71da9d02018ec2d836abf7e5caf4fa3ae0fe0e5a3b20ca04e1d888665a987ca8cd34eec36cbf5783534389c9aee79679b91db9a345feb486b7a935df84aab97413caad64569b073ec6e7bbf4bf23ad5a6c11cd5a5e141ee859f322c2c9f8c8b2280e836f0dcafee7f4b6f47d5d0436e3f29fea54ccd8be228ad41371062c576a2a86046ecb426af1faf2632a15d8308599783585ac3b393e931ff530ad269211d8ea3e6fda44ec44ed8976eb519b15afc2a03dbc1eb80c14cbf0a710a8cd61422b889e8760e6f5f21dbfcb1946872e18e31be3f1072d177c6f926df4256e74a54aeae0652c9086775c8143ec2b59cb5587b14a09e7ae70a1cf66e962df29b49cd77a61d20fd125c98cde215cda4a3ccf110178588ecbe313d96783b9232ee44ddee2799ed67a5dac6e0ccd247e61b0e66e621012f0fb2347b69d516cf33addf1d1c7093a0d23c1c0ea1a7f2fde52c93d955d2afaff1c7bdac454244668d952489b251441cc6368df2bade3775682787db7176f88ee94fe693d24d87188ad1f7105289871f4380e3a7e4cf2122259c44bcc768056eb398b4ecb114ef2ccd8ef33b3c808cf0b915d6744075f191c3b78dfdaceef42821f74c58a14d1c482662084d134a08fc20cb0e3465d50fa2c6f0a00e9d4cf8a6fd65f0566fb0730f66f6e440387eb4469fd5b4ed05d6ccb32a9907d5f7686d6e6941026e1e6f07be9329eaea31b1f73575d4d903c3f92cf2b39d7add4627d8ad8bbe1faa3f111366653bb0e3622a8ceed8907a977581fa57369fbcb64e85b2ada6cb7bdec2641b7fe3560f20fbff76c0435f20d552f2a61e5bb5846baf3750b63f1198ca1279b6986a5a04b08325f3c89b1f4a276cc39ff4b63043336a98f4f6286685aa7b4043e1fc32b45a295eacc38461841acb6ee77592f26d88ecedbee70a8ceb5d3a41c86ccebdde80679ead6e1e268523677060e166a234b55812266e31a79a75a76ca1911e4ed90ee5e3ded0d70f7798c7e922ed8c95a1324bb896d58803f3bb769de672683d92486ee338adccad859f7da251d1926f4f7bc491d877f932bee5ed58e19f1c4bb69578dd6511bd2d90db068d25206fee2514ee0c72e3b53720990e3404b8c9c8c033672f9ee61debdffaa7f0a67bd847c9e2a2a23affc04f5673bd54c3503f80f36a6555d87bb60d4044f30027d01c99ae8b349b9df1a84d7b1743e81f99baa482fb11cd574dc99baa66ad28475b3b364b14c808addf86cc5ce09fa755d1e3fb0e315b03865b9b032c65764d882afd0b989b7b2b8dbc75b9ddedefe23e1b22710f89f87f8d9023279b8c052d3eae9961963353174d9e35dbd3ca66abd7ee768b2ce7069c2eeda4bf9a5554dee109b9a52a4a84dd71c71fbea349e54e02adbf83a5f4bcd2d7da566baad78b98c00c0facf959b17451eb46819936b46cce1f5f86aa8cfc5082928dcfa6fe5adeeaa456aa4863846c0686090a86312822d54b83783b395ef60893aec36b866f1ed7caa869d65d7f5fd59b4b0e424faa1aff0c71bc87026056e8d9d4743c5b498908edea4655ebd3d2c342bdb87c5fb3fbbfbbfa0683e03c2cd112c581513f1170dbd2373581c923e97ae30ce846e977c08fad96ec1aae3f54f7856f0163d16299fe8b719fb15cb70eb12c2717e2efca92cc6b800c2b949af2ecd11c958e30df960099d1a6dcbfc04836cda2bbf1ae06bbc5a8099d12195946dfe8bd80033f8e05a08e1fbabe967ffb9357532a69159597c0de3b6dff53a831a0f629a4d86eb8cdc4949f2c0b92e27ab9e26641c9e51853048fc9ee2d61f85ee27012cba400a7154d35c2943c029e22bfb43a28454e6bfc7009f22fb82d47623ddd9680a24e1b4b1062e124ab86f1f5cc9097a27fe12455903f083bb24540b80ca248d0aebff2fcec927cc1384b9439cee10c935a2ab42a282539a0dccec938e4816f4d9482ecd81c2faa1f1b72ecaf108649e61b5f731528a59af768e8f9c1cf98ceebe2edda1e3c67f460cebc507954b7d4c574202625ea3d0b640a17b290896739685cd5eff263e9052f98602f38e3941e98add219fe30ba3e54a2ed8c1896ff684c219fd64d1701df55b1da21062666b51961a3e7e3d783892dec1a9a05572f5b8090e0621dc2bdead4087b7f36ed16af0791c850f6e8e605aeb604116f0bdc0901cecf1257029ef05f22807845fd174ce5960bac7e03c4c0ee7b439fcd0f6373d47d992c4d0529ae1c7a3d0ab92a5d9c39c9889c1df8cfe586196759c9cf22fc42790a79e561a0ec019563b992a35223e207622bc11b4c19264d349c16cc5bb1b292b5089ece7fcf8104603acfbfed8cf67fbda4c2249fa7e6597968f443bf4ab56d8a7d4adfd10e7155e848cf5d1ba6113b8d08da2bae247c632f123853292c1121bdaa2e12d4846150dde976d24720b5c70fd1afae5df0890fd48d004ba8166fd7be", 0x1000}], 0x8, &(0x7f0000000480)=[@ip_ttl={{0x10, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_retopts={{0x30, 0x0, 0x7, {[@noop, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1f, 0x32, [@remote, @loopback, @remote, @local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x17fff}}], 0x78}}, {{&(0x7f0000000500)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000540)="24114c0c227f7f85fa3e3325638eddea1231ed2c4196ae70236eabaf540174a7825561b198", 0x25}], 0x1}}, {{&(0x7f00000005c0)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000600)="2b8e19638dc19b02b51ec8e2ae7879f6dee05529ec575bca0683f600fdb179a7c1ae88af4bc378ad566d2f449a08b52405c4526c4b6e3585da61ca9791df0e8ae70dc1b695a05571a5ec54d02d89f56ca76f5dc7f769e01a60bc863bd5e8d3534b75602f1916cdf74294b438b4e8edde587d0bfb", 0x74}, {&(0x7f00000006c0)}, {&(0x7f00000009c0)="049c4809f8d5", 0x6}, {0x0}], 0x4, &(0x7f0000001140)=[@ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0xd8, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x1}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x26}, 0xadd2}, {@multicast2, 0x8000}]}, @generic={0x7, 0x7, "b251e55d59"}, @end]}}}, @ip_retopts={{0x10, 0x0, 0x7, {[@end]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast1, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast1, @multicast1}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7}}, @ip_ttl={{0x10, 0x0, 0x2, 0x10}}], 0xd8}}], 0x3, 0x40801) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 35m28.023473763s ago: executing program 36 (id=3846): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000440)=""/65, 0x41}, {&(0x7f00000004c0)=""/12, 0xc}, {&(0x7f0000000500)=""/117, 0x75}, {&(0x7f0000000580)=""/55, 0x37}, {&(0x7f00000005c0)=""/193, 0xc1}], 0x6, &(0x7f0000000700)=""/79, 0x4f}, 0x100}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, &(0x7f0000000880)=""/255, 0xff}, 0xf4}], 0x2, 0x40002020, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x61cc, 0x0, &(0x7f0000000040), &(0x7f0000000000)) r3 = socket$kcm(0x29, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0612"], 0x9) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x3479, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r9, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) io_uring_enter(r4, 0x3516, 0x20000000, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, [], [0xffffffff], [0x0, 0x68], [0xfffffffffffffffc]}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x161e42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000200), 0x0, r10}, 0x68) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 35m17.362539286s ago: executing program 37 (id=3819): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x3d, &(0x7f00000005c0)="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", 0x0, 0x3, 0x0, 0x0, 0xfe25, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x2b) pipe2(&(0x7f00000003c0), 0x0) (async) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xdeU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90vU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t\xd1\xadYk\x90v0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$can_j1939(0x1d, 0x2, 0x7) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r3, 0x2000) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r3, 0x2000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x33, 0x0, 0x0, 0x7f11b2d5, 0x8, 0x2, 0xd2d2, 0x1, 0x6, 0x0, 0x91, 0xffffffff, 0xb83, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc}}) ioctl$sock_ifreq(r2, 0x8931, &(0x7f0000000280)={'bond0\x00', @ifru_mtu}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x24000000) recvmmsg(r4, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10140, 0x0) mremap(&(0x7f0000694000/0x4000)=nil, 0x4000, 0x800000, 0x6, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000694000/0x4000)=nil, 0x4000, 0x800000, 0x6, &(0x7f0000130000/0x800000)=nil) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (async) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000000000000feefffff"], 0xc8) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') (async) syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') unshare(0x6a040000) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) r8 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r8, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) 24m6.093955266s ago: executing program 43 (id=8877): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_RESET={{0x3}, 0x6}}}, 0x7) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900000000000000000000000200"}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x256) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) 24m5.799434249s ago: executing program 44 (id=8879): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000340)={0x0, 0x8000000002, 0x0, [0x802f, 0xffffffff, 0x9, 0x1, 0x6], [0x1000000000000002, 0x10000002, 0x1, 0x2, 0x7ffd, 0xffffffffffff99b9, 0x5, 0x8000000000000001, 0x9, 0xffff, 0x9, 0x1, 0xfc5, 0xfffffffffffffff4, 0x8e3f, 0xfffffffffffffffa, 0x100, 0xd, 0xd9, 0xfaa, 0xf0, 0x800000000002a9, 0x19, 0x0, 0x3, 0x0, 0xa, 0x20000000003, 0xa53, 0x2, 0x6, 0x7, 0x0, 0xfffffffffffffffa, 0x80, 0x3, 0x80, 0x931, 0x101, 0x3, 0x8004, 0x19a0, 0x0, 0x1, 0xb, 0x8, 0x1, 0x2, 0x1, 0x400083, 0x538a, 0x8001, 0x4, 0x4, 0x0, 0x803, 0x8000005, 0xb, 0x3, 0x77, 0x4, 0x800, 0x7, 0x7, 0x3, 0xffffffffffffffff, 0x4, 0x8000, 0x12f, 0x8, 0x4, 0xfffffffffffffffc, 0x82c, 0x7ff, 0x3, 0x2, 0x2, 0x4, 0x3, 0x5, 0x100000001, 0x800, 0x1, 0xe773, 0x2, 0x8, 0x10000000, 0x6, 0xe, 0x9, 0x100000001, 0x400004, 0x800000008, 0x7, 0x9, 0x10000, 0x6, 0x1, 0x16d, 0x2, 0x8, 0xffffffffffff43b3, 0x8, 0x5eb, 0x12, 0x0, 0x0, 0x3, 0x4, 0x7, 0x3fe, 0x0, 0x8, 0x5, 0x0, 0x2, 0x40, 0x80000001, 0x7, 0x101, 0x1]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x442901, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_ext={0x1c, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000004000000000000da6f000018110000ad48831eb935966061050216b9409817dfefe2b8c06eb6612a2dedc16bf34e8152d6035fc5b075f9267f3744be3fe68fb96d5bd6a33d6f0cb98e0000e5b0870b52a4bc9b8d58a41682e6e87a432e3bbd2bab5d55d93f8f2608b5f2455607cf3cdc5ecbd1a12036bb87364b01f5f569350fe6d074360c9b067f643a4c62bcb85d29872a83a078977c36393afaeb0ec8052e0e8fcdf622073c090a493f6032084365661e538765722dbbb750e1e76f2c08296f56c84d9eca000c11fd61", @ANYRES32, @ANYBLOB="0000000000000000b70800005d9100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000184a0000fbffffff0000000000000000185700000400000000000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xf2, &(0x7f0000000980)=""/242, 0x40f00, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0xc, 0x6, 0x5}, 0x10, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000001140)=[0xffffffffffffffff]}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x120) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000c80)=""/222, &(0x7f0000000100)=0xde) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x2, @empty, 0x7}], 0x1c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}, 0x2000000}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000940000/0x4000)=nil, 0x4000, 0x8, 0x10, r0, 0xdae9b000) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x17, 0x1, 0x100, &(0x7f0000000440)="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"}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000001001000001"], 0x10, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0c00000019000000060000000c0000000801000003000000771e4147994bd7364839c067ae90a7e57eee2869f2e7bcd42936848ea7910e1f1f702631dfe63d5b6c384c4715765224326b9ce4633f4a8705143d886e0a8cd45339c3edfcaea95048b85a6022a36c7e2711f2fca101d34752b66535ab0b10b8"], 0x18}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000073c0)}}], 0x4, 0x0) 24m0.585700841s ago: executing program 45 (id=8894): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)="5802000000adbcb1d770dc898c190fb6dbeeee0c28205c43fb3a7cc6b33403fec0002f3cc8a68054e46c6d89680d23d8f6b2a3e94864e0", 0x37, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$inet6(r5, &(0x7f0000000080)='%[', 0x2, 0x800, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r2, 0x1) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x3, 0x8, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x30, 0x5, 0x2, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}, @empty, 0x8000, 0x781e, 0x1000, 0x5}}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000500)={{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x7, 0xa, 0x7, 0xa, 0x80, 0xa0, 0x88, r7, r8}, {0xc3b0, 0x4, 0x7, 0x200000000000000, 0x401, 0x635, 0x6, 0x7}, {0x79, 0x4, 0xffffffff, 0x5}, 0x614a, 0x6e6bb4, 0x2, 0x1, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3505, 0x0, 0x2, 0x3, 0x10001, 0x7, 0x4}}, 0xe4) 23m57.502736918s ago: executing program 46 (id=8899): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018fff900000000003000000030000000020000000000000001000004080000000000000002000000080000000000000000000009030000000000000000000004"], 0x0, 0x4a}, 0x28) 23m48.209400313s ago: executing program 47 (id=8917): ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x7, 0x80007, 0x10, 0x1, 0xe, "2d0000000005040000003c00ff9404c005e0ff"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x2, 0x9, 0x9, 0x80000000, 0x6, "16c560458b63292c7bcd7b30f0248fb225809e"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xcfd4}, [@generic={0x73, 0x1, 0x1, 0x33}]}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x60000000004, 0x1, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x8, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000140)={0x18f, 0x15, &(0x7f0000000740)="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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000240)={{0xd000, 0x1, 0x3, 0x10, 0x9, 0x0, 0x3, 0x7, 0x0, 0x4, 0x9}, {0x6000, 0x2, 0xc, 0xfd, 0x3, 0x0, 0xfd, 0x0, 0xb, 0xff, 0x1}, {0x41000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x91, 0x0, 0x7, 0x3, 0xf, 0x3}, {0xeeef0000, 0x10000, 0x3, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x2b, 0x4}, {0x4000, 0xeeee0000, 0xa, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x8}, {0x100000, 0x80a0000, 0x0, 0x7c, 0x2, 0x1, 0xff, 0x80, 0x0, 0xff, 0x1}, {0xe000, 0xeeee0000, 0x4, 0x4, 0x67, 0x0, 0xa1, 0x6, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0x10, 0x0, 0x40, 0x7, 0x1, 0x40, 0x26, 0x3, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x800e001}, 0xddf8fffb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x58000, [0x80000001, 0x2000000000000000, 0x2, 0x1]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0xc, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000700000000000000fdffffff850000002700000085000000a000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r4, 0x0, 0xe, 0x0, &(0x7f0000001800)="0000000000000000004e3f33907c", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23m41.43520671s ago: executing program 48 (id=8950): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@delchain={0xa0, 0x65, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff2}, {0x2, 0x5}, {0x5, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x4}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x9}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xff}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x81}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0x0, 0x0, 0xff, 0x7f]}, @TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x9}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0xc8}]}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01008b000000006d2d885792197855c42ac289642f0446cc67c9b82609b015c30dadeead5b87a50c0945f7480e0eac708c55c0daea803480bd61ba877f121e9082b0e9b5c429ed0921fa276219ba4983e4b1a4145caf50536e65035933d5fe76bec96882c6bf2fc0e7ba45d8697310818a574e7084dee0155d343de63328dc41afb9bed26054670364cd8087d3446bf2099214c4a59b8319400c6942a8a226af11fbeee69cc69e4c66cb2282a8468bc2f703d4b899922644af765ccc1b78ecbc8fe01332128ce26905a5723cfcce16b45257560254f1dfbd786b"], 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) tkill(r0, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="796104000000000000007e000000a62a6053a8a357fba5b333637e1e3f7ab47836285a66ccffd7f2af493ae3f240903c5ddc9bbb4e1c5bcf21a6a621f6b2663db844c506af62eff003026f87c0a3305bc8b1a182c7ae3d1590f803"], 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000340)={"276b9bbb", 0x1fc, 0x31, 0x4, 0x1e5, 0xb, "b856537895db5876857b9f4c302f8d", "0efec91a", "3c9693bf", "5c462711", ["a4f0909b07b620d324b10822", "ba1ebb4029f2a82e26f6177c", "a1834e376e3f71cbdc04667c", "cafccd372a317c4a8624797a"]}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000180)={0x2e6, r4, 0x1}) 23m41.108054106s ago: executing program 49 (id=8952): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x2, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10}]) 23m16.162973791s ago: executing program 50 (id=9075): r0 = dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000b80)={0xa, 0x4e24, 0x9, @mcast1, 0x5}, 0x1c) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000004, 0x3, 0xfffffffffffffffb, 0xfffffffffedfff81, 0x3, 0x1, {0xffffffffffffffff, 0x8, 0x20ff, 0x7ff, 0xf7b, 0x800000000000d615, 0x3fc, 0x7fffffff, 0x9, 0x4000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) getsockname$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000380)=0x1c) kexec_load(0x6, 0xfffffffffffffe2b, 0x0, 0x1) ioctl$BSG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000400)=0xfff) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000300)=0x4, &(0x7f0000000340)=0x2) socket$inet6(0xa, 0x1, 0xe6d7) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000003c0)=0x20, 0x4) listen(0xffffffffffffffff, 0x401) write$UHID_INPUT(r0, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) 23m11.091794311s ago: executing program 51 (id=9094): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [{0x10, 0x0, 0xfffffffffffffff0}, {0x10, 0x0, 0x3fb}]}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0xa, 0x5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x1, 0x7fc00100}]}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000240)) r9 = syz_io_uring_setup(0x8ad, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r12 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0xe0842, 0x0) ioctl$COMEDI_CMD(r12, 0x80406409, &(0x7f0000000280)={0xc8b, 0x10000, 0x40, 0x22, 0x100, 0x52a2, 0x20, 0x2, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f00000001c0)={r8}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) 23m9.123175602s ago: executing program 52 (id=9101): socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0x2, &(0x7f0000000380)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x3, &(0x7f0000000340)=0x6) mmap(&(0x7f0000a8e000/0x4000)=nil, 0x4000, 0xb635773f05ebbee7, 0x8031, r0, 0xd37c1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket(0x10, 0x9, 0x101) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r6) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x5) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x175}]}) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) 22m55.559234167s ago: executing program 53 (id=9127): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x1000001, @empty}, 0x1c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x80}}, 0x44001) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800, 0x8, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pselect6(0x40, &(0x7f00000001c0)={0xa00, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 22m18.625562597s ago: executing program 54 (id=9307): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x70000, 0x2, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) memfd_secret(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x70000, 0x2, &(0x7f0000000000)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) memfd_secret(0x0) (async) 22m3.885327797s ago: executing program 55 (id=9388): setresuid(0xee01, 0x0, 0x0) r0 = syz_clone(0xb48491, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r2, 0x40087446, &(0x7f00000007c0)={0x1, &(0x7f0000000080)=[{0x6, 0xd, 0x1, 0x2006}]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_DEFRAG(r6, 0x50009402, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@deltfilter={0x110c, 0x2d, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf, 0xfff8}, {0x4, 0x14}, {0xb, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0xe}}, @filter_kind_options=@f_u32={{0x8}, {0x10b8, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x81, 0x7}}, @TCA_U32_HASH={0x8, 0x2, 0x5}, @TCA_U32_ACT={0x888, 0x7, [@m_bpf={0xc4, 0x3, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xcd, 0x6, 0x2, 0x200, 0x200}}]}, {0x77, 0x6, "fe1837cb5c0c76b74f1104851accba8f9e27514ac76a43eb4ba99a87d7ab13cdab071591b27136b1354b1eab653ea363615eb88bf93dbddb42c87926898c771c49969bf45f3057d5e6cef81a0bd4f851d1eaef10ef1c2e947f85e8a06c2695ad9d08fc1db54131d83818b13551f4215dd00d46"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x104, 0x14, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x8, 0x2, 0x7fffffff, 0x5}, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x100, 0x5, 0x42b, 0xa50}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x1}}]}, {0x8a, 0x6, "df6c7cea57bc8f1e8c183ed221c857b3a92f65a1c41a5c7bb7975ae3a5b3bbce5906da9ed99c96c7b2db9567c766be1194f981d3ad5a2f4b0cc88f70959ea41fd18142faf531b96ee2c892091c5ab4c93dd0d8910d977028572c45f79d368023384030bc550dba1daab36c2e8ff9f945fd051b1cda932d44483cf63d68a894d5bc6e31955e50"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0xe8, 0x12, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0xae, 0x6, 0x1000, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x63}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe79}]}, {0x79, 0x6, "be2f41a01764746d0a5ec8d39001c3159e65ab0d9145dbf4d142581e116a35a80d7e01ec9aece13278a03321d21d75c5733758722af76c49b8ec7c88588ca8a2ef201714b1b48198582c9f2f901c06d42d0499f5bf1e27c3f84081d6ccb0b53e11f2908164499acef197cff00a2dcaaf5cd8c7c2de"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x15c, 0x14, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7fff, 0x10000000, 0x7, 0x4}, 0x8}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7, 0x7, 0x3ff, 0x2}, 0x7a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xfffffe00, 0x20000000, 0x0, 0xfffffbff}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x900, 0x5, 0x612}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd4, 0x6, 0x5, 0x6, 0x2}, 0x35}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x7, 0x7, 0x5}, 0x28}}]}, {0x87, 0x6, "74d4b10d968677b367949dc8674e23ec8f397ae9303947234d72c98df1c14cfd1301598687c8d8760581839e84efc037abaa3290eb4ddf1bc91a5cb069e636c61aa23fdea9a00ceaec92a2645dcffa3df94a8302e5cecbaf7afbd0c6a3d1d023744526eecca04e5475947eabcb73bdfc164848a60a23902e47820b2011130a5119f9d4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xb0, 0x8, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xcf414}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x74, 0x6, "a8764ea9e616930a5a2342b7c018e737d2f0c27667ab38741c2c8ae51154faf2d923e42afe7f4c950cebbf122bd04d1597922fc4c73ce11d331de014015ca48be962c2181ecfe006c32ee56e2250f0282e3a0858fc3f63cf49953ea6005df0a482becf2296ca0dd4718dcc4e9e1c0f73"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_csum={0xa8, 0x11, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xc, 0x5, 0x65d, 0x7}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7fff, 0x8, 0x5, 0x9}, 0x41}}]}, {0x42, 0x6, "235f09067d86b87e912ea409c42dfbaa4b9486199eb482319b4acc41f175b238ef21c71272a3db861b7a7e6dfbdf967721a9c4cc9dca3ed27299b7f0604a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0xe0, 0x1d, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xa125, 0x1000, 0x0, 0x8, 0x8}, @broadcast, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x5, 0x2, 0xb}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8, 0x6, 0x6, 0x6}, @local, @multicast2, 0x52b861a8c1f0217}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x10, 0x5, 0x0, 0x54f}, @empty, @multicast1, 0xffffff00}}]}, {0x15, 0x6, "591edc4fd639298e05b331c02e65583602"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0xb0, 0x5, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}]}, {0x7c, 0x6, "00f8eecb0fe72837277ad0c2ca8cfdbf6e27de67bd516d00baa7172e460372f2a22a22e854718183becd6310681b05f6437c697757d80b1de73f777300f53e9b0ac1ea45a91fe9395902fb490f1af372d5f00ee31954f65599e2235038d8c402ca33f1664a10171c044a4de25498fe886e080373e5303c54"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x190, 0x19, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x51, 0x80, 0xffffffffffffffff, 0x6, 0x3}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x221840, 0x5, 0x0, 0x3, 0x4}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb23f, 0x3, 0x0, 0x1e}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8001, 0x10000000, 0x2, 0x10001}, 0x3, r4}}]}, {0xe4, 0x6, "df86f1687ee7e806aef10bd4706e3050a556401340e648390da8d4c78e65a26e0a4b2d914c14d60e3fb1306ffd960793814c7a2bf8d54d62c972f9a3d91907199fb473021ae97645464e1c36f8511b58096a3d7e4d915ee6283c1b191bfc4e343123944132a2bff60caa09579cc82fcac4d3cf2c133610a7cabf1f7042aef8ff24edb40b7f580f30bd23bf0ab35eae346eabe71761db722bbfbca023b2e797a2f8dbef31084eeda68a61888dcb77e94e3c65e9976b93b5786e1c728710633d4fd2dce8b930f0dd85263335887b90618ac3f075f3edf6147619640dccb789c2ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x8adacfb0dfb3445f}}}}]}, @TCA_U32_POLICE={0x814, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0xff}, @TCA_POLICE_RATE={0x404, 0x2, [0x10, 0x44, 0x7, 0x8, 0x5, 0x9, 0x401, 0x4, 0x3ff, 0x3, 0x40, 0x5, 0x5, 0x0, 0x7f, 0x6, 0x5, 0x143c, 0x7fffffff, 0xe5, 0x9, 0xe2, 0x0, 0x7fffffff, 0xffff, 0xd, 0x8, 0x1ef, 0x2, 0x0, 0x9, 0x0, 0x8, 0x5, 0x100, 0x0, 0x0, 0x1, 0x1a20000, 0x4, 0x0, 0x701, 0x10001, 0x400, 0x10, 0xc0000000, 0x0, 0x1ff, 0x8, 0x5, 0x19018b3, 0x6, 0x2, 0x438a, 0x0, 0xd, 0x4, 0x2, 0x6, 0x2, 0x2, 0x800, 0x4, 0x8, 0xa0000000, 0x6, 0x419, 0x80000000, 0x3fe500, 0x1, 0xece3, 0x100, 0x9, 0x5, 0x3, 0x24, 0xffffffff, 0x1, 0x8, 0x4, 0x2, 0x4, 0x9, 0x6, 0xb3e, 0x0, 0x7fffffff, 0x5, 0x7fff, 0x3, 0xd0a, 0x0, 0x7, 0xac01, 0x7, 0x8001, 0x3, 0x1, 0x4, 0x5, 0x1000, 0x3, 0x8, 0x4, 0x2eee, 0x2, 0x5, 0x2, 0x3, 0x7, 0x9, 0x3, 0xfff, 0x4, 0x7, 0x81, 0x3, 0x1ff, 0xa, 0xffff88e3, 0x6, 0x4, 0x1ff, 0x33, 0x7, 0xa, 0x8001, 0x100, 0x3, 0x22, 0x2, 0x2, 0x6, 0x6, 0x1000, 0x8, 0x3, 0x81, 0xcc4, 0x1, 0x80000000, 0x6, 0xf, 0x4, 0x664, 0x9, 0x1, 0x8cd7, 0xde0, 0x2, 0x97, 0xffffffff, 0x8, 0x4, 0x6, 0xc7b063a2, 0x2, 0x24, 0x1, 0x1, 0x3, 0xffff, 0x1, 0x401, 0xfffffc01, 0x5, 0x3, 0x7, 0x8, 0x8, 0x3f, 0xce95, 0x0, 0x0, 0x4, 0x4, 0xfffffffa, 0x6, 0x3558, 0x12, 0x1, 0x10001, 0x2, 0x9, 0xd, 0xb2, 0x1, 0xc, 0x1, 0x0, 0x8, 0x3, 0x2, 0xffffff81, 0x400, 0x2, 0x6, 0x2892, 0xe, 0x5, 0x5a, 0x2, 0x8, 0x1, 0x47, 0x9, 0xc0, 0x2, 0x401, 0x7fff, 0x2, 0x606, 0x0, 0x63, 0x6, 0x5, 0xffff, 0x5, 0x1, 0x2, 0x2, 0x8, 0x1, 0x8, 0x9, 0xcc72, 0x9, 0xce, 0x9, 0xe0, 0x10000, 0x0, 0x2, 0x3, 0x4, 0x10001, 0x5, 0x7, 0x800, 0x0, 0xfffffffe, 0x101, 0x521, 0x0, 0x1148, 0x200, 0x6, 0xdbd, 0xc5, 0x1000, 0xe8, 0x1, 0x5, 0x6, 0x81, 0xff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x6, 0x4, 0x7e4, 0x7, 0xfffffffa, 0xf1f, 0x6, 0x8, 0x1, 0x8, 0x8d8, 0x80000000, 0xe, 0x1, 0xc, 0x9, 0x0, 0x3, 0x0, 0x1, 0x88d, 0x200, 0x0, 0x1, 0xdf1, 0xcf7b, 0x8, 0x7, 0x1000, 0x8, 0x4, 0x1ff, 0xd22, 0x0, 0xd, 0x2a6, 0x1, 0x5, 0x101, 0x7, 0x1ff, 0x2, 0x9, 0xa00000, 0x7f, 0x4c, 0x1, 0x2, 0x9, 0x9, 0x4, 0x8, 0x7, 0x101, 0x7fff, 0x7, 0x10, 0x4, 0x2, 0x9, 0xb06, 0x7, 0x8, 0x0, 0x6, 0x9, 0x8, 0x8, 0x5, 0xff, 0x7, 0x6, 0xffb2, 0x5, 0x17276548, 0x6, 0x9, 0x10000, 0x1, 0x7, 0x4, 0xb, 0x6, 0xfffffffa, 0x7, 0x6, 0x3ff, 0x3000, 0x6, 0x400, 0x2, 0x5, 0x80000001, 0x2, 0xb, 0x4, 0x80000001, 0x0, 0xd, 0x6, 0x0, 0x1000, 0x3, 0x2, 0x400, 0x8, 0x5, 0x9, 0x2, 0xffffff53, 0x3, 0x9, 0xf1, 0x2, 0x1, 0x41, 0x80000001, 0x0, 0xfffffffd, 0xd1d2, 0x81, 0x0, 0xc2d, 0x84c, 0x5, 0x8000, 0x100, 0x0, 0xffff, 0xffff, 0xeb5, 0x1, 0x2, 0xf, 0x9, 0x2, 0x3, 0xffff, 0x7, 0xd5, 0x1, 0x2, 0x6, 0x3, 0x4, 0x7ff, 0x6, 0x14c, 0x80000001, 0xfffeffff, 0x1, 0x200, 0x3, 0x9, 0x67d, 0x1, 0xff, 0x6, 0x0, 0xb41a, 0x0, 0x80000001, 0x3, 0x5, 0x5, 0x0, 0x3, 0x4, 0x3, 0xfd8, 0x2, 0x4, 0x15, 0x93c, 0x6, 0x7, 0xc9, 0x626, 0x18, 0x2, 0xd, 0x9, 0x2, 0x1, 0x8, 0x0, 0xffe00000, 0x9, 0x636b, 0x8, 0x7, 0x8, 0x4, 0x5, 0x3, 0x9, 0x4, 0xc815, 0x8, 0xff, 0x1c7e, 0x9, 0xb30, 0x8, 0x8, 0x10, 0xffffffff, 0x2, 0x7, 0x836, 0x4, 0xb, 0x81, 0x1ff, 0xe, 0x9, 0xfffffff7, 0x694, 0xffffffcd, 0x7fff, 0x9, 0x5, 0x4, 0x10, 0x6, 0x800000, 0x1000, 0x400, 0x4, 0x9, 0x3, 0x1, 0x8000, 0x60, 0x200, 0x63, 0x1, 0x58, 0x80000001, 0x8, 0xd, 0x3ff, 0x0, 0x9, 0x6, 0x1, 0x2, 0x0, 0x4, 0x100, 0xbaa, 0x6, 0x0, 0xc]}]}]}}]}, 0x110c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r4, {0x4, 0x5}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x81, 0x2, 0x1}, {0xc, 0x300}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xf, 0x7, 0x8}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x68}}, 0x240400d0) prlimit64(r0, 0x6, 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2, @vifc_lcl_addr=@local, @private=0xa010100}, 0x10) 18m58.837959299s ago: executing program 56 (id=10217): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fallocate(r0, 0x43, 0x7, 0x2) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'bridge0\x00', {0x2, 0x4e23, @broadcast}}) 17m17.879173407s ago: executing program 57 (id=10555): mkdirat(0xffffffffffffff9c, 0x0, 0x140) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/226}, {&(0x7f0000000300)=""/33}, {&(0x7f0000000480)=""/185}, {&(0x7f00000005c0)=""/83}], 0x0, &(0x7f0000000640)=""/79}, 0x7fb7}, {{&(0x7f0000000700)=@l2={0x1f, 0x0, @fixed}, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)=""/87}, {&(0x7f0000000900)=""/194}, {&(0x7f0000000a00)=""/76}, {&(0x7f0000000b00)=""/245}, {&(0x7f0000000c00)=""/67}, {&(0x7f0000000c80)=""/87}], 0x0, &(0x7f0000000d00)=""/152}, 0x3}, {{&(0x7f0000000dc0)=@in={0x2, 0x0, @private}, 0x0, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/135}, {&(0x7f0000000a80)=""/60}, {&(0x7f0000000f80)=""/221}, {&(0x7f0000000f00)=""/34}, {&(0x7f0000001080)=""/236}]}, 0xeaff}, {{&(0x7f00000011c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x0, &(0x7f0000001240)}, 0xfd32}], 0x80000f7, 0x122, 0x0) mount(&(0x7f0000000080)=@nullb, 0x0, &(0x7f00000000c0)='affs\x00', 0xa48410, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) (async) preadv(r1, &(0x7f00000006c0)=[{&(0x7f0000001300)=""/199, 0xc7}, {&(0x7f0000001400)=""/84, 0x54}, {&(0x7f0000001480)=""/84, 0x54}, {&(0x7f0000000280)=""/48, 0x30}, {&(0x7f0000000580)=""/50, 0x32}, {&(0x7f0000001500)=""/183, 0xb7}, {&(0x7f00000015c0)=""/205, 0xcd}], 0x7, 0x8, 0x5) (async) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f2b, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x3, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x1, 0x6, 0x0, 0xfffffff8]}) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) (async) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x9, &(0x7f0000000040), 0x4) (async) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x10}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x2) 16m14.263966775s ago: executing program 58 (id=10938): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x10}}, 0x4008040) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x2, 0x5, 0x3, 0x4, 0x5}, &(0x7f0000000240)=0x14) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) pread64(r1, &(0x7f0000000480)=""/177, 0xb1, 0x73) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000000)) r5 = getpid() syz_pidfd_open(r5, 0x0) syz_open_procfs(r5, &(0x7f0000000100)='net/raw6\x00') r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 16m13.696472876s ago: executing program 59 (id=10940): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000095000000000010009c07b346cb5e13f8772644f4971e732de04fedad572bac3404f614c6921cc6566233111a04388a1dd9abd53082a556d3870cc36484b7afd31929aee457d4af6b6ec2d0aec2be5822d676d4d9c11f086b9ee55435fa635bf655e9a79e6ef3c3e8ad04cf1da9c1a928f766b975a31f0c49d8b56581c9304a570a7c27812e5da8d9143ea1ecc8e0f700befc1d70bf4fa9b153672e1e6924fddc5f747e8013"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40002002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010010000000000000000a370000", @ANYRES32=0x0, @ANYBLOB="0013fa89c32eb80001"], 0x30}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000001000100ff7f00000202000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 14m36.357750257s ago: executing program 60 (id=11470): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) setxattr$security_capability(&(0x7f0000000180)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)=@v3={0x3000000, [{0x6, 0xffff663b}, {0x3f886411, 0x7}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x0, 0x100) getcwd(&(0x7f0000000380)=""/4096, 0x1000) 12m2.467612482s ago: executing program 61 (id=12003): memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r4, &(0x7f00000000c0)={0x38}, 0x38, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r5 = open(0x0, 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0000000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000300)={'comedi_parport\x00', [0x800, 0x1f, 0x10000, 0x4, 0x3, 0xcc7, 0x4, 0x10, 0xe, 0x6, 0x2, 0x2, 0x7, 0x1, 0x6, 0x10000105, 0x0, 0x1244d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x1, 0x20001e58, 0x80000b, 0xe6c, 0x8, 0x8, 0x6, 0xffffffff, 0xeffffff8]}) 11m4.892939209s ago: executing program 62 (id=12299): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0xf00, 0x0, 0x5e, 0xfffffffffffffff9}) 10m14.647133454s ago: executing program 9 (id=12509): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"], 0x18}, 0x8050) 10m14.590283928s ago: executing program 9 (id=12510): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x2, 0x1) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x208, 0x8f, 0x206, 0xfffffffd, 0x3, 0xb37, 0xfffffe2f, 0x8}, 0x20) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) poll(&(0x7f0000000300)=[{r2, 0x80}], 0x1, 0x101) 10m14.008625907s ago: executing program 9 (id=12512): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) close_range(r1, 0xffffffffffffffff, 0x300) 10m12.694658666s ago: executing program 9 (id=12514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x300, 0x0, 0x1c, {[@timestamp={0x5, 0xa, 0x7ffffff, 0x500}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x4a) 10m12.550793905s ago: executing program 9 (id=12515): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000060000b4f00fb84105d83550c02b98000800000100000000f36c495de28e5504424bc05316ba5254321d8083e7a6dff07c2236242a178bc0bd31d4bee4e381644ee52fc3aa6b98193c75921464e3ba4271d3ff1c6ce43e5a2cd71aba6072345fb11fa568dcf61413051526f59bda", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b700bfa200000000000007ffff00f8ffffffb703000008000000b70400000000000085000000150000009500"/72], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x20, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}e\xd6So\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358", @typed={0x8, 0xe9, 0x0, 0x0, @pid}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={0x0}) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) utime(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x3ff, 0x4}) chdir(&(0x7f0000000080)='./file1\x00') exit(0x7) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0xc}) close_range(r4, 0xffffffffffffffff, 0x0) 10m11.723280475s ago: executing program 9 (id=12518): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"], 0x18}, 0x8050) 10m3.472464078s ago: executing program 63 (id=12495): open(0x0, 0x1607c0, 0x78e22799f4a46ffe) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001d00210000000000000000000700000005000000000000000a00020077a9c6f76f000000060005"], 0x34}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 10m0.98680041s ago: executing program 64 (id=12506): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000340)={0x0, 0x0}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r3, &(0x7f0000000440), 0x4001) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, 0x0, 0x20000081) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) syz_open_pts(0xffffffffffffffff, 0x40100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./bus\x00', 0x80242, 0x100) chdir(&(0x7f0000000400)='./file1\x00') write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) r5 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004700)=""/4083, 0xff3}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000000780)=""/4137, 0x1029}, {0x0}, {&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/164, 0xa4}], 0x6}, 0x120) r7 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r7, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r5, 0x40000000) 9m57.006627868s ago: executing program 65 (id=12518): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"], 0x18}, 0x8050) 9m25.559424126s ago: executing program 3 (id=12678): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x20}], 0x1, 0x0, 0x0, 0x0) r2 = getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r2, 0x12) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x40, 0x0, @fd, 0x5, 0x0, 0x0, 0x3}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) 9m23.97618975s ago: executing program 3 (id=12687): connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r0 = socket$inet6(0xa, 0x800, 0x2) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile64(r4, r3, 0x0, 0x8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @sliced={0x5, [0x4, 0x10, 0x4, 0x5, 0x5ea, 0x4, 0xff, 0xf, 0xfffe, 0x80, 0x2, 0xa, 0x2, 0x5, 0x12, 0x1a9, 0x6, 0x7026, 0x8, 0x7, 0xfe01, 0x6395, 0x1, 0x0, 0x0, 0x7, 0x9, 0x2001, 0x6, 0x80f, 0x3ff, 0x1, 0x3fd, 0x80, 0x8, 0x1ff, 0xfffb, 0xbf, 0xe, 0x1000, 0x9, 0x4, 0x38, 0x7, 0x9c40, 0xd, 0x8, 0x1ff], 0xffffff7f}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f00000045c0)) r7 = socket$inet(0x2, 0x3, 0x7f) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r9, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000300)={0x0, 0x1000000, 0x1000, 0x1, 0x2}, 0x20) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f00000017c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 9m23.170390171s ago: executing program 3 (id=12688): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='ocfs2_dlmfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 9m23.122688923s ago: executing program 3 (id=12690): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0xfe02, 0x300, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 9m23.122115141s ago: executing program 3 (id=12691): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000060000b4f00fb84105d83550c02b98000800000100000000f36c495de28e5504424bc05316ba5254321d8083e7a6dff07c2236242a178bc0bd31d4bee4e381644ee52fc3aa6b98193c75921464e3ba4271d3ff1c6ce43e5a2cd71aba6072345fb11fa568dcf61413051526f59bda", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b700bfa200000000000007ffff00f8ffffffb703000008000000b70400000000000085000000150000009500"/72], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x118, 0x20, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}e\xd6So\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358", @typed={0x8, 0xe9, 0x0, 0x0, @pid}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={0x0}) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) utime(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x3ff, 0x4}) chdir(&(0x7f0000000080)='./file1\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0xc}) close_range(r4, 0xffffffffffffffff, 0x0) 9m22.951189438s ago: executing program 3 (id=12692): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r1, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) socket(0x1f, 0x80805, 0x5) socket(0x1d, 0x2, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 9m8.419630538s ago: executing program 66 (id=12692): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r1, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) socket(0x1f, 0x80805, 0x5) socket(0x1d, 0x2, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 6m45.230390741s ago: executing program 4 (id=13770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ndctl0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000080)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syslog(0x9, 0x0, 0x0) 6m45.230179001s ago: executing program 4 (id=13771): open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket(0x10, 0x80002, 0x0) openat$ttyprintk(0xffffff9c, &(0x7f0000000000), 0x80, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r2) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 6m43.984285599s ago: executing program 4 (id=13779): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="03030200000004f000000600000008000300", @ANYRES32=r1], 0x1c}}, 0x0) 6m43.898253151s ago: executing program 4 (id=13780): r0 = socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="090044ff730ccafbe2a489b1b8c738", @ANYRES16=r2, @ANYBLOB="100025bd7000ffdbdf2510000000080007001e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4055) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}, {@verity_on}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x100000000000041, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0015000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) setsockopt(r4, 0x84, 0x81, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={"ae42ffff", 0x3, 0x5, 0x4, 0x100, 0x803, "000000ffff0600fdff090000000800", "00000005", "05030400", '\x00\b\x00', ['\x00', "6cb8ff080000000000fffd00", "f0ffffffffebffff00000010", "fdffffffff40b82dc44d00"]}) 6m43.467948891s ago: executing program 4 (id=13783): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2084) writev(r1, &(0x7f0000002180)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f00000020c0)="090b51e52598c61daf651a394200", 0xe}], 0x2) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) syz_io_uring_setup(0x1ed3, &(0x7f0000000680)={0x0, 0x10, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x31, &(0x7f0000000300)=""/49}]}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/53, 0x0, &(0x7f0000003840)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002100)=ANY=[@ANYRES64=r2], 0x38}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0xfffffffd, 0x25dfdbfc, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x1, 0x0, 0x0, {0xfc, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x1, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x2c000880) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) 6m43.222019724s ago: executing program 4 (id=13785): r0 = open(&(0x7f0000000140)='./file1\x00', 0x8000, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000380007012cbd7000fedbdf25157c00000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x138, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x12}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2c}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffc}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x24}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x4870) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f", 0x7}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000003540)={0x2020}, 0x2020) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x19) read(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001400)=@filter={'filter\x00', 0x4, 0x4, 0x13c4, 0xffffffff, 0x0, 0x1234, 0x1234, 0xfeffffff, 0xffffffff, 0x12fc, 0x12fc, 0x12fc, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1100, 0x1124, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0xfc, 0x1, './cgroup.cpu/syz0\x00', 0x7, {0x80000000}}}, @common=@unspec=@realm={{0x2c}, {0x2, 0xdb3}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xff, 0x0, 0xff000000], [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], 'nicvf0\x00', 'macvtap0\x00', {}, {}, 0x5e, 0x2, 0x5, 0x4}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0xbd, 0x6, 0x1, [0xa, 0x2, 0xc1e2, 0x4, 0x2, 0x4, 0x6, 0x4, 0x1, 0xff, 0x1, 0x6, 0x3, 0x6, 0x6, 0x9], 0xb}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@loopback, @loopback, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffff00, 0xffffff00, 0x0, 0xff], 'vxcan1\x00', 'dummy0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x7, 0x19}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x1420) r7 = accept4$packet(r3, 0x0, &(0x7f0000000000), 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000440)={0x1, 0x0, 0x4, 0x0, 0x0, [{{r5}, 0x2}, {{r1}, 0x7f}, {{r6}, 0x8}, {{r7}, 0x1}]}) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r8, &(0x7f0000000600)="001a0000000000", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7, 0x7], 0x0, 0x0, 0x2, 0x0, r9}}, 0x40) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') write$FUSE_NOTIFY_STORE(r12, 0x0, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r12, 0x4068aea3, &(0x7f0000000380)={0xce, 0x0, r4}) ftruncate(r0, 0x2007ffa) sendfile(r1, r0, 0x0, 0x7ffff000) 6m43.104174754s ago: executing program 67 (id=13785): r0 = open(&(0x7f0000000140)='./file1\x00', 0x8000, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000380007012cbd7000fedbdf25157c00000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x138, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x12}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2c}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffc}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x24}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x4870) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f", 0x7}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000003540)={0x2020}, 0x2020) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x19) read(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001400)=@filter={'filter\x00', 0x4, 0x4, 0x13c4, 0xffffffff, 0x0, 0x1234, 0x1234, 0xfeffffff, 0xffffffff, 0x12fc, 0x12fc, 0x12fc, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1100, 0x1124, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0xfc, 0x1, './cgroup.cpu/syz0\x00', 0x7, {0x80000000}}}, @common=@unspec=@realm={{0x2c}, {0x2, 0xdb3}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, [0xff, 0x0, 0xff000000], [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], 'nicvf0\x00', 'macvtap0\x00', {}, {}, 0x5e, 0x2, 0x5, 0x4}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0xbd, 0x6, 0x1, [0xa, 0x2, 0xc1e2, 0x4, 0x2, 0x4, 0x6, 0x4, 0x1, 0xff, 0x1, 0x6, 0x3, 0x6, 0x6, 0x9], 0xb}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@loopback, @loopback, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffff00, 0xffffff00, 0x0, 0xff], 'vxcan1\x00', 'dummy0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x7, 0x19}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x1420) r7 = accept4$packet(r3, 0x0, &(0x7f0000000000), 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000440)={0x1, 0x0, 0x4, 0x0, 0x0, [{{r5}, 0x2}, {{r1}, 0x7f}, {{r6}, 0x8}, {{r7}, 0x1}]}) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r8, &(0x7f0000000600)="001a0000000000", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7, 0x7], 0x0, 0x0, 0x2, 0x0, r9}}, 0x40) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') write$FUSE_NOTIFY_STORE(r12, 0x0, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r12, 0x4068aea3, &(0x7f0000000380)={0xce, 0x0, r4}) ftruncate(r0, 0x2007ffa) sendfile(r1, r0, 0x0, 0x7ffff000) 5m59.807482348s ago: executing program 1 (id=14070): r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000440), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000280)=""/190, 0xbe, &(0x7f00000003c0)={&(0x7f0000000240)={'streebog512-generic\x00'}, 0x0, 0xf0}) 5m59.765668375s ago: executing program 1 (id=14071): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRES64=0x0], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xffff7ffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000040)="732fbfdb019d7da37edad2e06a44164ecdaa2c0071e55d0f2412f7", 0x1b) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) io_cancel(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0xffff}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22ffe6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=@gettaction={0xb4, 0x32, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000080) r8 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) close(r8) socket(0x10, 0x3, 0x0) 5m58.735299227s ago: executing program 1 (id=14083): r0 = fsopen(&(0x7f00000005c0)='cramfs\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000280)="f30f1bf066b9034d564b0f32f30f7f0266b80500000066b9b4e963a60f01c166b96a09000066b81080000066ba000000000f30d3c23e0fc71f360f50c9ba4200ed66b80500000066b922cd00000f01d9", 0x50}], 0x1, 0x16, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, 0x0, {0x3, 0xe}, {0x2, 0x1}, {0x0, 0xffff}}}, 0x24}}, 0x440c0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x81}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r6, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x3c) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r1, 0x80000000000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000e0000"], 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x1d, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000014007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 5m57.629717902s ago: executing program 1 (id=14103): socket(0x10, 0x3, 0x0) r0 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xfd056105279ee4e1, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x3, 0x7}, 0x4) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) 5m56.770861338s ago: executing program 1 (id=14118): getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) close(r0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3}, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') fchdir(r8) truncate(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) 5m56.46032866s ago: executing program 1 (id=14120): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0x100003) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @empty=0xfffff000, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) 5m42.135498772s ago: executing program 68 (id=14120): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r0, 0x100003) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @empty=0xfffff000, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) 33.235788925s ago: executing program 5 (id=16558): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x2b, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) r5 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000300)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x17, 0x7fffffff}]}) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) 31.89276841s ago: executing program 5 (id=16565): syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa0500044242"], 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) 31.026073069s ago: executing program 5 (id=16570): r0 = socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x240) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) unshare(0x6a040000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000001700)=0x8, 0x4) 28.854969226s ago: executing program 5 (id=16586): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_dev$mouse(0x0, 0x2, 0x400000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0xfe) 28.646287421s ago: executing program 5 (id=16589): socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f0000000040), 0x3b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0) listen(0xffffffffffffffff, 0x0) unshare(0x0) r3 = timerfd_create(0x0, 0x0) timerfd_gettime(r3, &(0x7f0000000000)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0xdc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r8, 0x50009405, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0d00000002000000040000000540000005000000", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) 28.189222866s ago: executing program 5 (id=16590): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1401, 0x9, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x200000b0}, 0x20000814) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r1, 0x0}]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x8, 0x4, 0x7, 0x10080, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x0, @void, @value, @value=r3}, 0x50) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(r1, &(0x7f00000000c0)=""/222, 0xde, 0x80000000, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x161483) ioctl$NBD_CLEAR_SOCK(r4, 0x125f) 28.132434563s ago: executing program 69 (id=16590): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x1401, 0x9, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x200000b0}, 0x20000814) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r1, 0x0}]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x8, 0x4, 0x7, 0x10080, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x0, @void, @value, @value=r3}, 0x50) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) mq_timedreceive(r1, &(0x7f00000000c0)=""/222, 0xde, 0x80000000, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x161483) ioctl$NBD_CLEAR_SOCK(r4, 0x125f) 23.574932502s ago: executing program 8 (id=16614): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@in, &(0x7f00000001c0)=0x80, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000ea00"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000008200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffff1f, 0x1}}, 0x1c) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r6}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, 0x0, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x3c}}, 0x20) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r8, &(0x7f00000063c0)=""/1024, 0x400) pipe2$watch_queue(&(0x7f00000002c0), 0x80) syz_fuse_handle_req(r4, &(0x7f00000067c0), 0x2053, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x38, 0x0, 0x100000000, [{0x3, 0x0, 0x9, 0x0, '\x8d\xf5\xae\xae\x1f#,|j'}]}, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x3000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 23.049907453s ago: executing program 8 (id=16616): write$tun(0xffffffffffffffff, &(0x7f00000006c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@generic={0x3, 0x6, "b9e7a9", 0x158, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@dstopts={0x0, 0x29, '\x00', [@generic={0x6, 0xf2, "5cab3ad2ec4e922222f0940d70aec90d220a57322c1a4fa58fd1fafcbb83b5ade430ac264433cbd74d1931f2b0e2dc4fd0dff2e22f95ab5ec3befc07d245875b674e928551d385aa7d1845a34858eabe94e4828d23bef83b1e8b1e278415d62273a92662f8a76ec9340c33a9c5b581e122e79533ade1a17f278b478b9d4c02d019c8843b199b3530e161006c3cea85bbd84a2ae3ddfb22e98ae6eb1048dc18d50c3fca6412a4e0c9acf23a26deffc88632269874e642a334a3bc74079dc85282e4c79bd143b58761f0b477a21f6e5ccfd6bc0f471cacfd73247dbddf6a28050b4b4b3a9d25eef16d077325713c036c23b882"}, @enc_lim={0x4, 0x1, 0x5}, @pad1, @generic={0x3, 0x48, "74f28bffb14222ae9c1e902d81db22909590ce76ec4e748de38495fb6670c3a488f98846c545a6c17843c7f1aaa5465e207afaf4db0b117ebbd5e60f34eb2de8a8550a8a284f96aa"}, @jumbo={0xc2, 0x4, 0x9}]}]}}}}, 0x18e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe8, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TESTDATA={0x96, 0x45, "8f5c1d116668c8ee65752ced24dab6a173e9981d6f12a650190c39356b52430ad51caf135f42a76a31ebc4e130017c5fdcad1b1ed32081fb32d07c9055719afde6f114d7434381ab176cba725d552db1cf3d15bd701fb7737e8956591ee8bdbfd02a3b91d423b38a76cb0dd5f4e80c8a5a61b91076d784b9d09d3a73884283627dbc5d9374bfaf56e72f3106fcec47ab873b"}, @NL80211_ATTR_TESTDATA={0x31, 0x45, "6f5a003fcd461dd55e4a71ad4fdfbf5a5a71fb236e542246bfde0c3e1b4bd67236f81978e1832ff560b161803d"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x2000c801) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 22.935340539s ago: executing program 8 (id=16617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES16, @ANYRES16], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.782522344s ago: executing program 8 (id=16618): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) syz_open_dev$mouse(0x0, 0x2, 0x400000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_CACHEINFO={0x14}]}, 0x30}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='user.incfs.size\x00', &(0x7f00000001c0)='tmpfs\x00', 0x6, 0x5) 22.539862526s ago: executing program 8 (id=16619): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, 0x3f9, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x40014) readahead(r3, 0xffffffff, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x25dfcbfb, {0x0, 0x0, 0x0, r5, {0x2, 0xd}, {0xa, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 22.171323623s ago: executing program 8 (id=16628): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = creat(&(0x7f0000001500)='./file0\x00', 0x1) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x150, 0x0, 0x0, [{{0x6, 0x1, 0xe, 0x4, 0x0, 0x4, {0x5, 0x85, 0x24c6ff0a, 0x6, 0x4, 0x6, 0x1, 0x2, 0x7, 0x6000, 0x400, 0x0, 0x0, 0x1}}, {0x2, 0x8000000000000000, 0x4, 0x85c, '\xff\xff\x00\x00'}}, {{0x6, 0x3, 0x0, 0x100000000, 0x7, 0x21b, {0x6, 0x8f, 0x9, 0x1, 0xa5d, 0x10000, 0x9, 0x7f, 0x3, 0x1000, 0xa, 0xee01, 0x0, 0xffff25c4, 0x5}}, {0x3, 0xd, 0x1, 0xb0, '\x00'}}]}, 0x150) (async) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$P9_RMKDIR(r3, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) (async) write$char_usb(r3, &(0x7f0000000600)="b56511e72c6cba780ce701ed0b2db27a336692892a6491e2488652ff00c468d353d809d5b20d8ee0f9fefa6cd7bd1036ed25f0e37053d291887c707a892884c2b4aa2ebac156ef8288264449eea05c4f51c3bb4355eb108744fe34e5d0e851d51a855854135f04dd5d854459226f090b6f0d6135e8f2824eed7469236cad2251116a381d8cd30bae59c1fe71e028a667cb910d523aa5d7208286755075ee8be937304cca20e234303df72ad4e2bdc71219456229460a7c6a2df61e8b21b4a4941dcba5c257b90bbf0a976a73973319258ad7f738c04dfbdee4ea0e1b77a909a154fd934f791ebea03db6f06c8f14bc40924e46cbb9b343f25d63f332f9b3f176601f842a4e40401cbc62ee7803c3a2d71f3878f61d8fb8cb5ee90a696b22fb97bbdfd36af05c2e34dfb3d36cf7333ea9dc98af537780ae7bc701053b9009d654d84f04c851b311341efcec16ef3d5c8a7e8af494068dbad55bfa7b7bf4475ceb03a6f4ef11ce14652dc36f279671b7184586c7aab57d50ca23deaeeeaebc2ed024d91f399c84834e7802ad28b6ffec7ed089e8af35d15f2713e70ce55b3f60b9c002496e110c3a68e4c01faf901df4e39d007bf99f3a2d2e33c58b92b961937060a92ab6347995c09eb6a363092e3a45b68bd5e734d43b0bc98070d66c8d03490897a7d05e894da6d92c46cb1d961d11a7d1cd9d3c437c07e9f090690d2b344a93fdc5d7276b74231f1ad050024359e7a73ee913e9a7eba72f23482de94c572d07491328ca363762c44ddcdb1623ec6d639b368d407ffafbb265de19bd5e52ec86c12167dfe2a3de629af1d66612c3f313e07a301d8378fc6eb551196b51680d1194d682ff6cdbb0f811608d6321b41664108ef6dd1dfcc7df602901b0c0d549fb8d0c1aa9b542b99d76b6b8c360c9bcb01ed819a57441948465279d0b2652be1058065929bffae3e9c8923ba01c954f3c49298db8ffad96b73684daf2e608046be2ffb0de70237e044d4be3e6ccc1984ebd2f6e0f57e99fcb0ec30598f121bd93a4003e0ba0815e5ddbeba9f3f8600ef86258a5423fb1f30da5be531e573bf5322a5842eeb23107f02021dc332e0e687bd1f4f0ac09293c3638603279484dd552d534089e0b5b903c4ceeedef410662ec12e17e9b616950874e24d313d770e84b488544a8b829039d06637269367c108dc37712d46ef6601ef4e937a120c607e570446d6216366a72ced5d543ba92a929cef7c4fb03307e88174ad88381b16de1c3f9985f483ff75e9b40fc0e001d037dda41df9a583009baa3b246c19ab5a20cb4e62accb7a86090717c17db68b0d14905ed0ce6e49555de65448782fc0899f631393b5ccd65da59265d1b4ba9ff4d8a328cb42d2e3a465db23cfa9f159ce5716df7ccf393a561a1783679048570f2467c5336106bc8954569c047e854b2211141d169b27ca796b42c544f70123bd9f6ae23f87d1be164cd7bb2da3dc79e6f12a687296942c9c8f2d99b6961b48e046028bd69dcda162510ad235b7bf28a0ff994e23f08e807437dcd1a426a31e818b918e5c28725bf12f42d6f719d9d81100e529b9f7e4891167aef44ec7afa086e46cf832d144ebe668dbafcbf229be799f33df6c1fb3365f4cb64f360fb70ee140818503a185a44f15d3db5fd5abe8ea3c59f4120c23d3792a4ac791959858dc88286e403ad45b31716e28be7684375c2651f88ed78c2948d673ef2a8a937136ca9842717585894453a83280edc21f3fadb974c36696fe7d8bd136a005a69d14d034a869c4035282ac7c91642a05743814b4cd57df50a4eb15dd7a561637ea4ef6b3bcf89695f125fcd390746357917a6bcf55e0268a09ae5b1195f99a7fe5fec2d4115978052e195d7b5df345b827121a86166c9095e387301fc561654db0183715239247eb9dc15e83c20389aa6271b42125bd475b82db032150aa39fab06fde1034347a8a884c74edb21be34c8cf5b437ad7223970defbb27ca8eb0029fdd4acd4bc92236584ed42f03706376c583a5c8e5cf9f2415ee1f8c1b01f34d7cf1b673db2158eb99d55878ee41b391f8d7339c6f3471ae4af25e5ecb8cea2fbed9f915ce483f1a9411ca5b21776295aa4f52fa31d875f9850f3e07b8093b0f92570d41d77e68e9a79a27b6f5a2c9a100cde02ea745353e996b99b43e0f1aa51288d863859bc618a602c17a15e285e6c189a21a4762b57ce396c852a5453f035c7a2d849a98c30a2e7f797ed13ffae44e4d15a240d092a25b4820e0d2fe3b9cb74b89efc977634d1f37eddc1433f6b06fd13c543bceca1254f91413d8b914bd67f1dca660ad8ef561dfb2ce5f0486b3e1a19a3682dad8a727177a1ea448273c3cd308300e3b4fc4f96efa8d6d723de8b38f7688e13c47b2aa801ba5c33a138208412524250e41eb253520f68324dbdb5e7de6e02dc315e20cf1844cc7a5f15428dd342bcf40895d94b3de0e1acdb698a94e0dd881edfb7569d0c81981213e7186eac0d80dd35e1a48aa5319678db523e9cea10163e3924c52d1d4ff589b3b228d98e64e6ee22990600ac9b272b483520148dac0e26d27ef618c86b0a49075f71d8c21e49bbcf83eb1374f0ad393074e32fa33a257f13fb187ba40b02ee6e688092e81ce0c04e3e53507b4b244fcf3afd4dbf05747a8c81828351558223a7bd0ff6684e94cd264ab3841cca4983c10b627c3c13286872798a3bce148b7f9847cb2b485bb900ad006b08482c801e9f05e5e57591e9c9ed1235c397ebffec2bffdf0eaa4aa2b3927e583f913edb95ce47603bc725ad16c59c4b638668190bd1f9c4b2c9e1b14a85d9e3e81ef3668baf27e59dd14d1ade2d7873d4feb989cdac04675f40b59a1a41453b44e0fdb89f4a7f3f52cb3a6a79d0763f85826fe1b5acb3215a0328c32ccdf2c21bb4ab3310c2d33f9b1255582e0807492ce59953f6cd4422bfa5ea9192177bbf13bd7a83807362036708653bd01b67d3def4ef7041ea29995404c0b10b0eae74bbf614652f887f755e94d390341437d50cecbf2c16fa21638ad3f85f30db17e1af9bf2b4aa8113d6a9170dc4c024f484200a471e9c73f6d2055585bdb499156081d3bc288a2ddd2b9d856c69c22ad3b4ee16555c64d86b7a9d83722860fdbf06b3a1592f3e5832fdf2d3ee078e54b7cee981cec96de0a4c77e052d2f86061cba468f6c5861771014dd56320f5fd4f84b5a890838e9fe72f41620d131cfdb7d0e627dd490acab383d5fc8cfc95e966ced3dfe3d315ad76a0452a50e8b4e9882ca9294eaa12f73629affc9050df48aedc1da6081259226056012decf4a60c3e252860cc7452e6058d8029d2d0971496e19cc94558c96678bd1b074894271b2bff2810f8a684c9329c584641bfeeb2fd4db920aec9d18e1b05803c37bc1b3cd1b3782a713ea754b1a35f137e21e31afd230aa1ba53cbc0af2ec98c860c993441007f910b8814e115725753f7a05d0b0b290048dd6aa97f3ae6f14b9652db8017e23303a3aa52c9fd5b83aa3f8ecb5e280425709237cd6fc6728664168bb2dda083ceab3ca528a78432104912e96a2ff9057885b1aebf1a8423b5c390f32bc5f3f0093870a27d8eee3576aa70a9b1ee21041a64e7dc0bbac8b46e7aa6a825bddeeab7ffbdad2ffa238a6cc77532551ebe4e650faadf67328371563e17b508ace6ed5dfcec60cd4b90ca23260f8ae78d937b7503f9595f233c7b719b837484bb684b2f9ca4df4d716a7de9ceadf0212e7f24574f1f14015ffb583c9ad2747cbddf2f0903d3dfc60eb204c6b581ba9caba16471d1bfb09b8b96ddadadcc97435ad6fe5ed249e25b01e0d5af5fe0430e4fb18eefce981fa6c78abab2a35f186137f256d8719f2053316680c03e7499941efd68a0ff066519f4d02608c320228c8cdc42fde4abecefde9d2113f730529e0215f284732d267c6804a49778a4ee32fb860122b4584a519ced4dfc0c8a3d25d90142d16e9e36eff436881dbddd06b99dee8c4e2ff7dbc19edaa7e1ad5b1f9d713abd72d4e4547b3a46ab6acfaa7d92b6da52b75bd530f6d833d156b95f1da248219c85fe807af0a47ae22c20392c889f5e89a3524cf42412a70277fe98196deb7a4c2b136fba8cc411afa84ab762d9b95b284d95f9220b3789ab54dcfa21cd2b99fcd501263cf23654c332a3aa37c6dac0c9c54e5602a691192707708e53abea4c63b7943b1348d3cf0bdce7e4076e3a4ed9afe8651cd8e953e30104534dcb6e85ab77773b60be7e46f6cd07ea8fc675d27593223dadb9cba83f3976e5133d79afd6e4a83877bd8f0d56bd99f3d996df0295838ffb421781da6c088f18f1f94e149659f02f01b99c73de89826f65bd3dbb44468518e0f0dd5fca324d3c9864d192040cd067b54b8801610bf8391ded4df50968bf7a0d0c0f7c56f47da904ad9bcc52e8690a844b7b0be9a4e7bc8ae396382ad4f6910df9eee9f19cacd9fb0aa9a378ee8b2e58befcd7158d1ea6cdc73cc63233d8c09fb4a04e7e672d7d0c7187f7b027e87560649eb8dfe97c81f3dea408f7f9c171e38892f077e9423e91b55a4635ddbea7b535d31c8ab28ae5030f04356bf05c737884a351a8da8ae81535ed5e9628befc767cd431907dd388c00b9a8d8ebf5b57017f70830dac5eb2872b77da544742d2c93940a94ad88d094090be124e254a1973d8197fe5ed060e387e14680ea92e9a93799e64aca69ded0219486df2541b9fa209923c8d0f57978a39eba4fd17e9108243101d441cfe2c0374aaa65c434cea22e5d103588d526fc92531249ff8b8cd4783d8b915584c5ac71ff330797c85d5f66510a403cf996bec00239cef1730a35c1138b8f7f63f14e253e4d91999632d80f23076f7af79a38388e935e198d666efe799a4b8c2d82e443f01ea4907183d3bc9fb5bb94e119b1fb34beaaf1c0d296c4898600f99488a243c00309ee68a3c7297f3851ca8226eb72103d3e9981ab2dbc7dce584795aa452ee7950508f6016f04c965309f381edb1ce91059c3c21e0f7adf67f966d690545fb9597529fd5885937c433c5a156867951fc419f92ad55795a4267b0c66b59ba22ba782f92d431e37748aa41949a954b3c68120ddac938788b6d753d9152a562f8bf972c744359def08a16da4c077df2795710397e70faa3fe8e004ccf7275ad42d518094821207ad6813f66bf5c15e1a61298b3f977d7fd783f7cac82e88b652a14b9f6df36425cf89507428a6594d2200f392faea2542e6e51faa934ec1218652afd32c1f09ba277f8f", 0xe9c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) (async, rerun: 32) syz_clone(0x60001600, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r6) (async, rerun: 64) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async, rerun: 64) r7 = dup(r6) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="010007004f06f4aacdff44d9aa66367cbc4d02255f3715f3b591fe635127c9243e10330eff18d983fecc3849c1118b1f23f1c4157e60adffcea0a9ea9ca8704a55f0e6bcd21b2ea3713b20cbda78ff3f436bd32547a5e75b2f1a2daf1cff760bc5c30d98d03e88605f865b308e4a00735d2fce85", @ANYRES16=r8, @ANYBLOB="20002abd7000fedbdf25140000000c009900050000003f00000005001301020000000c00430003000000f7ffffff05007400020000001c00ac00a9ce5ed7f14ca3eab7dd0e74c0573b3fdfe24b61c4f9ede00500740004000000"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000014c0)=ANY=[@ANYRESHEX=r5, @ANYBLOB="9731226bfdb51da653ba484161758db1ddb404", @ANYRES64=r1], 0x6f4}, 0x1, 0x0, 0x0, 0x48810}, 0x40000) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r10 = msgget$private(0x0, 0x20) msgsnd(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="030000006eb33872130f3adb22ff5f0e7d2061be28516e7c8b23fd930d85820d930b6aa88444c5b5fe092d48c4ada16b44c91cf48a31661532fae55cd9426faf899913db08786e368ab27fc303c2d4f93a2eaec0d0bfff42efc6c2e74d9ec2cdb940010949cc223fc1c2167f391e65771b84a9a73b53f2be20fba54f2f659ac795371db1b4e9b0db7f75f12a58ba676e4e82ef3e3ed2fdbe0c2d8d7ea0e394b8d892470f89db3e22395081ce1a928ac0b61e52b1c64c7cb79060d1a69ec59c608508432754ef86da6e898a165b51e4ab"], 0xd4, 0x0) 21.830156602s ago: executing program 70 (id=16628): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = creat(&(0x7f0000001500)='./file0\x00', 0x1) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)={0x150, 0x0, 0x0, [{{0x6, 0x1, 0xe, 0x4, 0x0, 0x4, {0x5, 0x85, 0x24c6ff0a, 0x6, 0x4, 0x6, 0x1, 0x2, 0x7, 0x6000, 0x400, 0x0, 0x0, 0x1}}, {0x2, 0x8000000000000000, 0x4, 0x85c, '\xff\xff\x00\x00'}}, {{0x6, 0x3, 0x0, 0x100000000, 0x7, 0x21b, {0x6, 0x8f, 0x9, 0x1, 0xa5d, 0x10000, 0x9, 0x7f, 0x3, 0x1000, 0xa, 0xee01, 0x0, 0xffff25c4, 0x5}}, {0x3, 0xd, 0x1, 0xb0, '\x00'}}]}, 0x150) (async) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$P9_RMKDIR(r3, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) (async) write$char_usb(r3, &(0x7f0000000600)="b56511e72c6cba780ce701ed0b2db27a336692892a6491e2488652ff00c468d353d809d5b20d8ee0f9fefa6cd7bd1036ed25f0e37053d291887c707a892884c2b4aa2ebac156ef8288264449eea05c4f51c3bb4355eb108744fe34e5d0e851d51a855854135f04dd5d854459226f090b6f0d6135e8f2824eed7469236cad2251116a381d8cd30bae59c1fe71e028a667cb910d523aa5d7208286755075ee8be937304cca20e234303df72ad4e2bdc71219456229460a7c6a2df61e8b21b4a4941dcba5c257b90bbf0a976a73973319258ad7f738c04dfbdee4ea0e1b77a909a154fd934f791ebea03db6f06c8f14bc40924e46cbb9b343f25d63f332f9b3f176601f842a4e40401cbc62ee7803c3a2d71f3878f61d8fb8cb5ee90a696b22fb97bbdfd36af05c2e34dfb3d36cf7333ea9dc98af537780ae7bc701053b9009d654d84f04c851b311341efcec16ef3d5c8a7e8af494068dbad55bfa7b7bf4475ceb03a6f4ef11ce14652dc36f279671b7184586c7aab57d50ca23deaeeeaebc2ed024d91f399c84834e7802ad28b6ffec7ed089e8af35d15f2713e70ce55b3f60b9c002496e110c3a68e4c01faf901df4e39d007bf99f3a2d2e33c58b92b961937060a92ab6347995c09eb6a363092e3a45b68bd5e734d43b0bc98070d66c8d03490897a7d05e894da6d92c46cb1d961d11a7d1cd9d3c437c07e9f090690d2b344a93fdc5d7276b74231f1ad050024359e7a73ee913e9a7eba72f23482de94c572d07491328ca363762c44ddcdb1623ec6d639b368d407ffafbb265de19bd5e52ec86c12167dfe2a3de629af1d66612c3f313e07a301d8378fc6eb551196b51680d1194d682ff6cdbb0f811608d6321b41664108ef6dd1dfcc7df602901b0c0d549fb8d0c1aa9b542b99d76b6b8c360c9bcb01ed819a57441948465279d0b2652be1058065929bffae3e9c8923ba01c954f3c49298db8ffad96b73684daf2e608046be2ffb0de70237e044d4be3e6ccc1984ebd2f6e0f57e99fcb0ec30598f121bd93a4003e0ba0815e5ddbeba9f3f8600ef86258a5423fb1f30da5be531e573bf5322a5842eeb23107f02021dc332e0e687bd1f4f0ac09293c3638603279484dd552d534089e0b5b903c4ceeedef410662ec12e17e9b616950874e24d313d770e84b488544a8b829039d06637269367c108dc37712d46ef6601ef4e937a120c607e570446d6216366a72ced5d543ba92a929cef7c4fb03307e88174ad88381b16de1c3f9985f483ff75e9b40fc0e001d037dda41df9a583009baa3b246c19ab5a20cb4e62accb7a86090717c17db68b0d14905ed0ce6e49555de65448782fc0899f631393b5ccd65da59265d1b4ba9ff4d8a328cb42d2e3a465db23cfa9f159ce5716df7ccf393a561a1783679048570f2467c5336106bc8954569c047e854b2211141d169b27ca796b42c544f70123bd9f6ae23f87d1be164cd7bb2da3dc79e6f12a687296942c9c8f2d99b6961b48e046028bd69dcda162510ad235b7bf28a0ff994e23f08e807437dcd1a426a31e818b918e5c28725bf12f42d6f719d9d81100e529b9f7e4891167aef44ec7afa086e46cf832d144ebe668dbafcbf229be799f33df6c1fb3365f4cb64f360fb70ee140818503a185a44f15d3db5fd5abe8ea3c59f4120c23d3792a4ac791959858dc88286e403ad45b31716e28be7684375c2651f88ed78c2948d673ef2a8a937136ca9842717585894453a83280edc21f3fadb974c36696fe7d8bd136a005a69d14d034a869c4035282ac7c91642a05743814b4cd57df50a4eb15dd7a561637ea4ef6b3bcf89695f125fcd390746357917a6bcf55e0268a09ae5b1195f99a7fe5fec2d4115978052e195d7b5df345b827121a86166c9095e387301fc561654db0183715239247eb9dc15e83c20389aa6271b42125bd475b82db032150aa39fab06fde1034347a8a884c74edb21be34c8cf5b437ad7223970defbb27ca8eb0029fdd4acd4bc92236584ed42f03706376c583a5c8e5cf9f2415ee1f8c1b01f34d7cf1b673db2158eb99d55878ee41b391f8d7339c6f3471ae4af25e5ecb8cea2fbed9f915ce483f1a9411ca5b21776295aa4f52fa31d875f9850f3e07b8093b0f92570d41d77e68e9a79a27b6f5a2c9a100cde02ea745353e996b99b43e0f1aa51288d863859bc618a602c17a15e285e6c189a21a4762b57ce396c852a5453f035c7a2d849a98c30a2e7f797ed13ffae44e4d15a240d092a25b4820e0d2fe3b9cb74b89efc977634d1f37eddc1433f6b06fd13c543bceca1254f91413d8b914bd67f1dca660ad8ef561dfb2ce5f0486b3e1a19a3682dad8a727177a1ea448273c3cd308300e3b4fc4f96efa8d6d723de8b38f7688e13c47b2aa801ba5c33a138208412524250e41eb253520f68324dbdb5e7de6e02dc315e20cf1844cc7a5f15428dd342bcf40895d94b3de0e1acdb698a94e0dd881edfb7569d0c81981213e7186eac0d80dd35e1a48aa5319678db523e9cea10163e3924c52d1d4ff589b3b228d98e64e6ee22990600ac9b272b483520148dac0e26d27ef618c86b0a49075f71d8c21e49bbcf83eb1374f0ad393074e32fa33a257f13fb187ba40b02ee6e688092e81ce0c04e3e53507b4b244fcf3afd4dbf05747a8c81828351558223a7bd0ff6684e94cd264ab3841cca4983c10b627c3c13286872798a3bce148b7f9847cb2b485bb900ad006b08482c801e9f05e5e57591e9c9ed1235c397ebffec2bffdf0eaa4aa2b3927e583f913edb95ce47603bc725ad16c59c4b638668190bd1f9c4b2c9e1b14a85d9e3e81ef3668baf27e59dd14d1ade2d7873d4feb989cdac04675f40b59a1a41453b44e0fdb89f4a7f3f52cb3a6a79d0763f85826fe1b5acb3215a0328c32ccdf2c21bb4ab3310c2d33f9b1255582e0807492ce59953f6cd4422bfa5ea9192177bbf13bd7a83807362036708653bd01b67d3def4ef7041ea29995404c0b10b0eae74bbf614652f887f755e94d390341437d50cecbf2c16fa21638ad3f85f30db17e1af9bf2b4aa8113d6a9170dc4c024f484200a471e9c73f6d2055585bdb499156081d3bc288a2ddd2b9d856c69c22ad3b4ee16555c64d86b7a9d83722860fdbf06b3a1592f3e5832fdf2d3ee078e54b7cee981cec96de0a4c77e052d2f86061cba468f6c5861771014dd56320f5fd4f84b5a890838e9fe72f41620d131cfdb7d0e627dd490acab383d5fc8cfc95e966ced3dfe3d315ad76a0452a50e8b4e9882ca9294eaa12f73629affc9050df48aedc1da6081259226056012decf4a60c3e252860cc7452e6058d8029d2d0971496e19cc94558c96678bd1b074894271b2bff2810f8a684c9329c584641bfeeb2fd4db920aec9d18e1b05803c37bc1b3cd1b3782a713ea754b1a35f137e21e31afd230aa1ba53cbc0af2ec98c860c993441007f910b8814e115725753f7a05d0b0b290048dd6aa97f3ae6f14b9652db8017e23303a3aa52c9fd5b83aa3f8ecb5e280425709237cd6fc6728664168bb2dda083ceab3ca528a78432104912e96a2ff9057885b1aebf1a8423b5c390f32bc5f3f0093870a27d8eee3576aa70a9b1ee21041a64e7dc0bbac8b46e7aa6a825bddeeab7ffbdad2ffa238a6cc77532551ebe4e650faadf67328371563e17b508ace6ed5dfcec60cd4b90ca23260f8ae78d937b7503f9595f233c7b719b837484bb684b2f9ca4df4d716a7de9ceadf0212e7f24574f1f14015ffb583c9ad2747cbddf2f0903d3dfc60eb204c6b581ba9caba16471d1bfb09b8b96ddadadcc97435ad6fe5ed249e25b01e0d5af5fe0430e4fb18eefce981fa6c78abab2a35f186137f256d8719f2053316680c03e7499941efd68a0ff066519f4d02608c320228c8cdc42fde4abecefde9d2113f730529e0215f284732d267c6804a49778a4ee32fb860122b4584a519ced4dfc0c8a3d25d90142d16e9e36eff436881dbddd06b99dee8c4e2ff7dbc19edaa7e1ad5b1f9d713abd72d4e4547b3a46ab6acfaa7d92b6da52b75bd530f6d833d156b95f1da248219c85fe807af0a47ae22c20392c889f5e89a3524cf42412a70277fe98196deb7a4c2b136fba8cc411afa84ab762d9b95b284d95f9220b3789ab54dcfa21cd2b99fcd501263cf23654c332a3aa37c6dac0c9c54e5602a691192707708e53abea4c63b7943b1348d3cf0bdce7e4076e3a4ed9afe8651cd8e953e30104534dcb6e85ab77773b60be7e46f6cd07ea8fc675d27593223dadb9cba83f3976e5133d79afd6e4a83877bd8f0d56bd99f3d996df0295838ffb421781da6c088f18f1f94e149659f02f01b99c73de89826f65bd3dbb44468518e0f0dd5fca324d3c9864d192040cd067b54b8801610bf8391ded4df50968bf7a0d0c0f7c56f47da904ad9bcc52e8690a844b7b0be9a4e7bc8ae396382ad4f6910df9eee9f19cacd9fb0aa9a378ee8b2e58befcd7158d1ea6cdc73cc63233d8c09fb4a04e7e672d7d0c7187f7b027e87560649eb8dfe97c81f3dea408f7f9c171e38892f077e9423e91b55a4635ddbea7b535d31c8ab28ae5030f04356bf05c737884a351a8da8ae81535ed5e9628befc767cd431907dd388c00b9a8d8ebf5b57017f70830dac5eb2872b77da544742d2c93940a94ad88d094090be124e254a1973d8197fe5ed060e387e14680ea92e9a93799e64aca69ded0219486df2541b9fa209923c8d0f57978a39eba4fd17e9108243101d441cfe2c0374aaa65c434cea22e5d103588d526fc92531249ff8b8cd4783d8b915584c5ac71ff330797c85d5f66510a403cf996bec00239cef1730a35c1138b8f7f63f14e253e4d91999632d80f23076f7af79a38388e935e198d666efe799a4b8c2d82e443f01ea4907183d3bc9fb5bb94e119b1fb34beaaf1c0d296c4898600f99488a243c00309ee68a3c7297f3851ca8226eb72103d3e9981ab2dbc7dce584795aa452ee7950508f6016f04c965309f381edb1ce91059c3c21e0f7adf67f966d690545fb9597529fd5885937c433c5a156867951fc419f92ad55795a4267b0c66b59ba22ba782f92d431e37748aa41949a954b3c68120ddac938788b6d753d9152a562f8bf972c744359def08a16da4c077df2795710397e70faa3fe8e004ccf7275ad42d518094821207ad6813f66bf5c15e1a61298b3f977d7fd783f7cac82e88b652a14b9f6df36425cf89507428a6594d2200f392faea2542e6e51faa934ec1218652afd32c1f09ba277f8f", 0xe9c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) (async, rerun: 32) syz_clone(0x60001600, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r6) (async, rerun: 64) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async, rerun: 64) r7 = dup(r6) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="010007004f06f4aacdff44d9aa66367cbc4d02255f3715f3b591fe635127c9243e10330eff18d983fecc3849c1118b1f23f1c4157e60adffcea0a9ea9ca8704a55f0e6bcd21b2ea3713b20cbda78ff3f436bd32547a5e75b2f1a2daf1cff760bc5c30d98d03e88605f865b308e4a00735d2fce85", @ANYRES16=r8, @ANYBLOB="20002abd7000fedbdf25140000000c009900050000003f00000005001301020000000c00430003000000f7ffffff05007400020000001c00ac00a9ce5ed7f14ca3eab7dd0e74c0573b3fdfe24b61c4f9ede00500740004000000"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000014c0)=ANY=[@ANYRESHEX=r5, @ANYBLOB="9731226bfdb51da653ba484161758db1ddb404", @ANYRES64=r1], 0x6f4}, 0x1, 0x0, 0x0, 0x48810}, 0x40000) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r10 = msgget$private(0x0, 0x20) msgsnd(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="030000006eb33872130f3adb22ff5f0e7d2061be28516e7c8b23fd930d85820d930b6aa88444c5b5fe092d48c4ada16b44c91cf48a31661532fae55cd9426faf899913db08786e368ab27fc303c2d4f93a2eaec0d0bfff42efc6c2e74d9ec2cdb940010949cc223fc1c2167f391e65771b84a9a73b53f2be20fba54f2f659ac795371db1b4e9b0db7f75f12a58ba676e4e82ef3e3ed2fdbe0c2d8d7ea0e394b8d892470f89db3e22395081ce1a928ac0b61e52b1c64c7cb79060d1a69ec59c608508432754ef86da6e898a165b51e4ab"], 0xd4, 0x0) 5.846914475s ago: executing program 6 (id=16719): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x40020) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES64=r3, @ANYBLOB="029000000080040008000a00", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x1) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x2000008, 0x6, 0xfffffffe, 0x18, 0xb, 0x2e, 0x3, 0x9, {0x10001, 0x7fff, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0x7, 0xa9, 0x1, 0x1, 0x0, 0xfffffffffffffcb9}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x800) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000001c0)='hybla', 0x5) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r5, 0x0, 0x82, &(0x7f0000000440)={'filter\x00', 0x0, 0x0, 0x0, [0xffffff01, 0x7, 0x465, 0x8001, 0x8, 0x401]}, &(0x7f0000000140)=0x50) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 5.480884458s ago: executing program 7 (id=16724): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x8a, &(0x7f0000001640)=0xc, 0x45) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, r2, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000811, 0x0) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000001c0)=0x0) statx(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() r7 = getegid() getgroups(0x3, &(0x7f0000000340)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff]) r9 = getegid() r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r10, 0xe503, 0x0) syz_fuse_handle_req(r10, 0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000100)={0x50, 0xfffffffffffffffe, 0x7, {0x7, 0x2b, 0x6, 0x0, 0x1, 0xff47, 0xfff, 0x5, 0x0, 0x0, 0x2, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r10, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) fstat(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000100040000000000040003000000000008000100", @ANYRES32=r11, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB], 0x34, 0x2) stat(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000025c0)={{}, {0x1, 0x6}, [{0x2, 0x0, r4}, {0x2, 0x5, r5}], {0x4, 0x1}, [{0x8, 0x0, r6}, {0x8, 0x1, r7}, {0x8, 0x0, r8}, {0x8, 0x5, r9}, {0x8, 0x2, r12}, {0x8, 0x2, r13}, {0x8, 0x6, r14}, {0x8, 0x7, r15}, {0x8, 0x0, r16}]}, 0x7c, 0x2) r17 = fanotify_init(0x4, 0x1000) fanotify_mark(r17, 0x1, 0x8000021, r3, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 5.078293968s ago: executing program 7 (id=16725): syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa0500044242"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) 4.976010608s ago: executing program 6 (id=16726): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffc, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000040)=0x6, 0x4) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0x8000000000000000, 0x6, 0x3, @scatter={0xa, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/189, 0xbd}, {&(0x7f0000000180)=""/162, 0xa2}, {&(0x7f00000002c0)=""/175, 0xaf}, {&(0x7f00000005c0)=""/40, 0x28}, {&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f00000004c0)=""/235, 0xeb}, {&(0x7f0000000980)=""/116, 0x74}, {&(0x7f0000000640)=""/139, 0x8b}, {&(0x7f0000000700)=""/5, 0x5}, {&(0x7f0000000740)=""/146, 0x92}]}, &(0x7f0000000240)="128db0cda0b2", 0x0, 0x100, 0x13, 0x3, 0x0}) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000900), &(0x7f0000000940)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x1000080, [{0x0, 0x2, 0x955a}]}]}}, 0x0, 0x4a}, 0x20) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000880)={{0x8}, 0x1, 0x22, 0x8ff1, {0x8, 0x9}, 0xf5, 0x5}) 4.775308034s ago: executing program 6 (id=16728): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000000)=0x5) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@allocspi={0x178, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@multicast1}, {@in6=@mcast1, 0x0, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {0x0, 0x0, 0x20000}}, 0x0, 0x7}, [@user_kmaddress={0x2c, 0x13, {@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x2}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1}}, @algo_aead={0x4c, 0x12, {{'seqiv(morus1280)\x00'}}}]}, 0x178}}, 0x40010) 3.914183073s ago: executing program 6 (id=16729): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e23, @broadcast}, {0x6, @remote}, 0x52, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'netpci0\x00'}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x0, 0x7ffffffe}]}) r6 = dup(r5) ioctl$VHOST_SET_FEATURES(r6, 0x40082103, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x5, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x80200, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000440)=0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f00000000c0)=0x53fffffe) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r9, &(0x7f0000001480)=""/4122, 0x101a, 0x9e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1}, 0x58) socket$inet6_sctp(0xa, 0x1, 0x84) eventfd(0x6) 3.251320251s ago: executing program 7 (id=16734): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000080)=0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r2) umount2(0x0, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$caif_seqpacket(0x25, 0x5, 0x4) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) connect$caif(r5, &(0x7f0000000940)=@dgm={0x25, 0xa}, 0x18) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x9, 0xfff, 0x0, 0x180, 0x2, 0x14, 0x80000000f1, 0x8001, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x8000000000000000, 0x1, 0xbdb], 0xdddcfffc, 0x1c4213}) ioctl$KVM_RUN(r6, 0xae80, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.03252652s ago: executing program 6 (id=16735): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x521043, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendfile(r1, r0, 0x0, 0x578410ed) 2.907807019s ago: executing program 0 (id=16737): r0 = io_uring_setup(0x519, &(0x7f0000000640)={0x0, 0x4000ddad, 0x1, 0xd01fa, 0x8100014e}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "781776914c3d00", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef9b0fbc326100136e976", "f000", "2a1a833e7af32011"}, 0x38) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.346730715s ago: executing program 0 (id=16741): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x810) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbe5b, 0x10, 0x3, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf092000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800003fb704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x154e, 0x0, 0x41, 0x0, 0x0) 2.193658708s ago: executing program 6 (id=16742): iopl(0x5) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000001600)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001700)='`'}) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) getpid() process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/151, 0x97}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xa}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) listen(r3, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYBLOB="3080d81b00a07f51", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, &(0x7f0000000080)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000900)="48357e0287af48ffa745b497a54e0eec1bf2c69031efddcdb338edc5aef1bd7efe075ff441826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced80500000000000000c6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b118a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b046dbff94072945927a14807d3a5bac266b781cd86c7dfea68557e3ae94501fa31ac4c1f7b0dc68a2fa15a9345d1f2106acdcd9b1fe00e244732166c809cec4392d26fd3f00000000000000000000000000000000000000000000000d9b29c3d4f03e24c514f330a9c59e2cc4672997592765a67d83031c3ae95bb79a6adc6519ff7d7450e854601a3c8a4d85a467cc552ccd5d30cd27c6913bace1488720bc255bf9881ba1a999301051e6f37081c84711a5787e8441cdec368b1f77b2334fe695010be4c733135574ceda8e2b75e15b79868971b51e4a11a369c5ed4056b0f4a283689dbebfbc95a3e7150122e10a1d55", 0x3d, 0x0, 0x0, 0x1f) socket(0x2, 0x2, 0x1) syz_open_dev$video(0x0, 0x7efffffe, 0x101302) socket(0x2a, 0x2, 0x0) 2.156442878s ago: executing program 0 (id=16744): syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="02c93012000e00050015020a0004000803"], 0x17) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001600), 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)="452a581d69e81938ae8295dd0c0ca0", 0xf) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) 2.051315485s ago: executing program 0 (id=16745): r0 = userfaultfd(0x80001) r1 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0), &(0x7f0000000280)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chdir(&(0x7f0000000540)='./cgroup\x00') io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) 2.000669593s ago: executing program 0 (id=16746): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x80000, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x400, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x4, {}, [{0x90, 0x1, [@m_ct={0x44, 0x20, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000003010101000000000000000002000000300002802c00018014000300200100000000b0e83c879a5bd48200011400040000000000000000000000ffffac1414bb0c0019800400020092020000"], 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) clock_adjtime(0x0, &(0x7f0000000300)={0x3ff, 0xfff0bdc1, 0x1, 0xb, 0x0, 0xf423f, 0x800000000000003, 0x800000000006, 0x40000, 0x100, 0x3, 0xfffffffd, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x88001, 0x7, 0xfffffffffffffffd, 0x1, 0x0, 0xe}) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x200000) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xe, 0x3}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a1, 0x3, 0x3, 0x7, 0x5b8, 0x2, 0x6, 0xc, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x1000026, 0x1, 0x5, 0x1, 0x6, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0x1, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x45a00000, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x1000339, 0xbbf, 0xfffff000, 0x100800, 0x8], [0x2, 0x100, 0x7ae, 0x6, 0x5, 0x0, 0x5, 0x7fffc, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x20, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x7, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xffff, 0x7, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x10000, 0x9, 0x3, 0x2, 0x89a, 0x100, 0x7, 0x2, 0x1, 0x3, 0xfffffffb, 0x7, 0x6, 0x20000007, 0x9, 0x4, 0x0, 0x3, 0x9, 0x0, 0x2, 0x6, 0x0, 0xfffffff8, 0x7, 0x0, 0x3, 0x6, 0x0, 0x5, 0x3, 0x9bb, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0xd54, 0x1, 0x9, 0xb, 0x4, 0x7f, 0x0, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe692, 0xdaba, 0xfffffffe, 0x52b, 0x8010, 0x9, 0xfd, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x8, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0xfffffffe, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0xff, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) 1.221658351s ago: executing program 2 (id=16750): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) 1.147013313s ago: executing program 2 (id=16751): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x5608, 0x3) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) r2 = userfaultfd(0x801) r3 = memfd_secret(0x80000) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r3, 0xd000) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r4, 0x1, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x4, r1}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0xa0003) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000180)={r8}) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_ENTRIES(r9, 0x84, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x9, 0x0, [0x1ff, 0x9, 0x7975, 0x3, 0x9, 0xffffffff80000000], 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x78) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f00000000c0)=0x400, 0x4) sendto$inet6(r10, &(0x7f0000000140)="9f", 0x1, 0x4040000, 0x0, 0x0) recvfrom(r10, 0x0, 0x0, 0x99bcb88de02507d2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000140)={r8}) 1.067911745s ago: executing program 2 (id=16752): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) chdir(&(0x7f0000000140)='./cgroup\x00') r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x5, 0x142, [0x0, 0x80000080, 0x800001e6, 0x800002c8], 0x6f, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/322]}, 0x192) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x50007a2) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./cgroup\x00', 0x8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffc}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x3}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x30}, 0x1, 0x0, 0x0, 0x24009c80}, 0x40048d4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r4, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x69}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x37}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r10 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r10, 0x400, 0x1) close_range(r10, 0xffffffffffffffff, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 1.010219402s ago: executing program 2 (id=16753): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x810) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbe5b, 0x10, 0x3, 0x40288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf092000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800003fb704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x154e, 0x0, 0x41, 0x0, 0x0) 936.658076ms ago: executing program 2 (id=16754): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, r0, 0x25, 0x4, @val=@tcx}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000003c0)={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000400)="c84aa15d86a2d08534e2f681a1cbfe1f218aaa3ebbda5f71c0c7bf8dbafef950806266855e09be1239bb3ff968e82cde9ed3ade754edd4a48a61e47ea4e8371f5411e79c8912fb2a7506f847a040877c249cd55bb544b89d9fa666b25ecec4847722f7d6e35d7efad0a849534c7e9e2a7a289558e9830a946d60d6ee3226a51ed6e56e9199351e81ddba0aeb81903d5273215774f1bf254db5aafd43637e5e42ef7e09c90bf6e0874e302152b71eb3fbf21d622b50d9191f9d5b1b1917a4a5fd4382f0e2375d", 0xc6}, {&(0x7f0000000680)="7ebb1db8a05cd18b0594718a9192d1c1b2f91578dc7567af028a92ebc989aea17726800df55045a95500b3fa2f2ed388a5fd333b60ef376023f2452c081d37d13a6a4cf09fed99e356bf93671c5498c20ddfe5e7ffb6a85b2c5b4205b669a1c348c111547e0649bf11d382ff39d9876f22e8126faa28703b671337434ff1e43b67c99026a4d3a04c4baa14339463d0f8cc", 0x91}, {&(0x7f0000000740)="fca9822bbbfa0791b1a585e9d3e789a2ca1fee0c7371e20af4f38ed570b1553133ea20510dd6b6ac9ba8f4c1cf7a516c60ad1eeff1007e50faed3e113953dac044280469d116d1e337dc88702742f14d7e1ef1ca5b5a3ec97d5bcd7a87a8dc9d8bed0223a8576f33f8876ebd35ff6cf0c63c5e194bb8e2ece96f330d9467c036e619db1bf69fdb84f1bea45f50d6811faba2b4dce245ca47e1026ee3b1e48900e967d094133c0ffb8d37e947a9d07d1ca822767791172f8df63dfdd0f3c84d0f9c1dab3bbae94148a8431f574fefb7104b66b12e6c069855ad679dd1f5bacf07b1769b760152ab049c62748a4f429ac57d9804d952a6", 0xf6}, {&(0x7f0000000500)="b6deeb6dd2e371236b9cebeda930b6041a98b3ef4e28f5f41ccb0cd6fab5e1f123654da961a2889b1aa05173f8cfecc9062c4a156a1a3d5e1188f4fff42aa381403255a64e1f39a47f0130d78e89914b2563", 0x52}, {&(0x7f0000000840)="f31b47c04ca13f2dcb169bd57b2fd7daa1bf11029614c1313e9c47782c75c4daf55a3bb5682bb90140f33e8cf4ce9424329296e5134488dc52170b6a4ced177fe95173398dfc726a909aa93e734e5d943aff7dee9132e5ab50c12768509e04039ba7b4e459eef63f8de914acd54563c3e721c1a566f868744e8c33bdce7c8b11", 0x80}], 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="4400000029000000390000003b06000500000000fc020000000000000000000000000001fe8000000000000000000000000000bb000000d0f1ffff00e327ffff6401010210000000290000400b0000000000000820000000290000003201000000000000000000000000000000000001", @ANYRES32=r0], 0x74}, 0x0) getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = epoll_create1(0x0) r8 = dup3(r6, r7, 0x0) r9 = fcntl$dupfd(r8, 0x0, r5) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0x20000001}) 573.881849ms ago: executing program 7 (id=16755): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x11c, 0x940c, 0x3002, 0x11c, 0x2c0, 0x218, 0x3d8, 0x3d8, 0x218, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @remote, [0x20020000, 0xffffffff, 0xffffff00], [0xff000000, 0x0, 0x0, 0xff000000], 'ip_vti0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x3c, 0x1, 0x0, 0x2}, 0x0, 0xec, 0x11c, 0x0, {}, [@common=@inet=@set2={{0x24}, {{0x3, 0x6, 0x4}}}, @inet=@rpfilter={{0x24}, {0x9}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x894, 0x9, 0x1}}}, {{@uncond, 0x0, 0xc8, 0xfc, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0x3}, {0x2, 0x3, 0x1}, {0x1, 0x4, 0x7}, 0x0, 0x1000}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x33c) 505.27241ms ago: executing program 0 (id=16756): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xd1}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x70000) 505.022271ms ago: executing program 7 (id=16757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x800, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup3(r0, r2, 0x80000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x891c, &(0x7f0000000000)={'veth1_vlan\x00', @ifru_names='syz_tun\x00'}) ioctl$sock_netdev_private(r4, 0x8948, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x91, 0xc3, &(0x7f0000000140)="f559c14b24bc134e77fc15cf1ba3145cf1e4e8ba285858120561efbd2081641b6f70c9a67ce3fb6105fd71a65b1ae9fdc3865eb6e4fc85793f3dacbe53b773772881c1aba2077900279853e2b815c8cac9a07da1f7f40f3b6c781a21e19fee659cf4268f8fea00ed2047a824061f158c1871a8016264a26757b3727645e9d90dd862e395239c1d70c26bd9fe5215541730", &(0x7f0000000280)=""/195, 0x0, 0x0, 0xf0, 0xdd, &(0x7f0000000380)="2bef7bc986395732c7630c53cb57d4c82649d38a92904b711ae02ded95ea4d8b60498d475ecf44b1cef791b6a3bb999441c6df4880ff9a8cfebbac7d97f6533a380c90a9f8a77c9b0b0ddb27305bd32b3ebfca615796b9be65f9c3da8b27507cc4e2b4fc06493b6c7a87262815b1b2f0d70b593aabad657912976a7428bce63ef8b4c9420e1d0141f7bb559c5f573799babc60f371bf83873354821381d330e077d45075567270bbd6d3dd70715ddfc7396ceac3fd3a6ea31bab33ec2b487d8a32edc63ab71c129cc79f1f8d2659cd301f6a8419175c4d5c029538b6e81c59d63db05963a4c5cc25302426207b5706a0", &(0x7f0000000480)="80bccae51a68480731154527fd27a4f18a42c7c5d6c2943e3f0583c2716a872166f503c563eaf1048b91459ae6cd201a4a8e4227d35f48f806042dc1d908c6566f2d7655c66e7334fb4631360876e2d501317089a5bd660196ffe758c147b8cf9616766df1a011629703c592b2e4da21326853d407680b923c7450147a524e2dbf385f1b4826b700185b6dabc66a3aed82aa66f6941de38649a59fe37c904c4c73a3602ce68fa51cb688f94913beb888b624e793d0033ceacf54e9ee220ec05ac7dcbddb9a61d07e9be1fc97eba0e0077cb956fbb9c8d8bf8263285e4c", 0x1, 0x0, 0x401}, 0x4c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff1, 0xf}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x17}, @TCA_PIE_LIMIT={0x8, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 222.061632ms ago: executing program 7 (id=16758): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)="5802000000adbcb1d770dc898c190fb6dbeeee0c28205c43fb3a7cc6b334030000002f3cc8a68054e46c6d89680d23d8f6b2a3e94864e0", 0x37, 0x48060, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$inet6(r5, &(0x7f0000000080)='%[', 0x2, 0x800, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r2, 0x1) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x3, 0x8, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x30, 0x5, 0x2, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}, @empty, 0x8000, 0x781e, 0x1000, 0x5}}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000500)={{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x7, 0xa, 0x7, 0xa, 0x80, 0xa0, 0x88, r7, r8}, {0xc3b0, 0x4, 0x7, 0x200000000000000, 0x401, 0x635, 0x6, 0x7}, {0x79, 0x4, 0xffffffff, 0x5}, 0x614a, 0x6e6bb4, 0x2, 0x1, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x2b}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3505, 0x0, 0x2, 0x3, 0x10001, 0x7, 0x4}}, 0xe4) 0s ago: executing program 2 (id=16759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getitimer(0x2, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7ffd, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xc, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) r9 = dup2(r2, r7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r10, 0x8, &(0x7f0000000240)=0x2) ioctl$BLKTRACESETUP(r9, 0xc0401273, &(0x7f0000000080)={'\x00', 0x7, 0x7, 0x0, 0x5, 0x3ff, r10}) kernel console output (not intermixed with test programs): T40] audit: type=1326 audit(2000000008.135:43410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30158 comm="syz.7.15435" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc7579 code=0x0 [ 2652.347874][T30165] lo speed is unknown, defaulting to 1000 [ 2652.355455][T30169] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 2652.357558][T30169] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2652.365111][T30169] vhci_hcd vhci_hcd.0: Device attached [ 2652.381720][T30169] random: crng reseeded on system resumption [ 2652.383097][T30172] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15437'. [ 2652.406600][T30174] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15438'. [ 2652.438983][T30169] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 2652.477979][T30169] afs: Unknown parameter 'dyn_read 0 [ 2652.477979][T30169] ' [ 2652.622483][T15850] usb 54-1: SetAddress Request (15) to port 0 [ 2652.624498][T15850] usb 54-1: new SuperSpeed USB device number 15 using vhci_hcd [ 2652.628714][T30170] vhci_hcd: connection closed [ 2652.628935][T12545] vhci_hcd vhci_hcd.8: stop threads [ 2652.633139][T12545] vhci_hcd vhci_hcd.8: release socket [ 2652.638132][T12545] vhci_hcd vhci_hcd.8: disconnect device [ 2652.641963][T15850] usb 54-1: enqueue for inactive port 0 [ 2652.931088][T30182] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2653.002986][T30182] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2653.032696][T15850] usb usb54-port1: attempt power cycle [ 2653.049843][ T40] audit: type=1800 audit(2000000009.605:43411): pid=30189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.15443" name="nullb0" dev="tmpfs" ino=887 res=0 errno=0 [ 2653.063943][T30182] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2653.135135][T30182] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2653.394467][T30212] comedi comedi2: pcmmio: I/O port conflict (0xfffffffffffffffb,32) [ 2653.455208][T30216] netlink: 'syz.8.15451': attribute type 11 has an invalid length. [ 2653.457827][T30216] netlink: 'syz.8.15451': attribute type 4 has an invalid length. [ 2653.460276][T30216] netlink: 224 bytes leftover after parsing attributes in process `syz.8.15451'. [ 2653.509128][T30218] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15452'. [ 2653.559449][T30224] Cannot find map_set index 2 as target [ 2653.594506][T15850] usb usb54-port1: unable to enumerate USB device [ 2653.607573][T30226] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15455'. [ 2653.648815][T30228] netlink: 32 bytes leftover after parsing attributes in process `syz.8.15456'. [ 2653.987172][ T40] audit: type=1326 audit(2000000010.592:43412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30242 comm="syz.5.15460" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x0 [ 2654.387214][T30246] lo speed is unknown, defaulting to 1000 [ 2654.643241][T30250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15461'. [ 2654.856268][T30257] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15464'. [ 2654.985856][T30264] lo speed is unknown, defaulting to 1000 [ 2655.344307][T31817] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2655.353115][T31506] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2655.361439][T31506] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2655.369666][T31506] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2655.722780][ T40] audit: type=1326 audit(2000000012.408:43413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30277 comm="syz.5.15472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2655.734439][ T40] audit: type=1326 audit(2000000012.408:43414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30277 comm="syz.5.15472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2655.742890][ T40] audit: type=1326 audit(2000000012.419:43415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30277 comm="syz.5.15472" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2655.750190][ T40] audit: type=1326 audit(2000000012.419:43416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30277 comm="syz.5.15472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2655.757649][ T40] audit: type=1326 audit(2000000012.419:43417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30277 comm="syz.5.15472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2655.764968][ T40] audit: type=1326 audit(2000000012.419:43418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30277 comm="syz.5.15472" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2655.772095][ T40] audit: type=1326 audit(2000000012.419:43419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30277 comm="syz.5.15472" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2655.799662][T30281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2655.916757][T30286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15476'. [ 2657.197094][T30319] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15488'. [ 2658.171118][T30339] netlink: 'syz.5.15494': attribute type 1 has an invalid length. [ 2658.212296][T30339] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2658.234960][T30339] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 2658.272061][T30343] bond2: (slave gretap1): making interface the new active one [ 2658.277916][T30343] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 2658.485905][T30353] Trying to write to read-only block-device nullb0 [ 2659.136481][T30361] bridge0: port 2(bridge_slave_1) entered disabled state [ 2659.139967][T30361] bridge0: port 1(bridge_slave_0) entered disabled state [ 2659.538208][T30361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2659.552444][T30361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2659.721823][T31817] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2659.724889][T31817] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2659.730921][T31817] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2659.734245][T31817] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2662.290885][T12545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2662.293550][T12545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2662.376645][T30431] afs: Unknown parameter 'dyn_read 0 [ 2662.376645][T30431] ' [ 2662.885726][T30440] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15524'. [ 2662.888656][T30440] netlink: 'syz.8.15524': attribute type 21 has an invalid length. [ 2663.398638][T30457] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 2663.588071][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 2663.588082][ T40] audit: type=1326 audit(2000000020.670:43448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30462 comm="syz.5.15534" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x0 [ 2663.686137][T30465] 9p: Bad value for 'wfdno' [ 2664.015863][T10282] Bluetooth: hci4: unexpected event for opcode 0x0411 [ 2664.377922][T30475] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15537'. [ 2666.298513][T30489] afs: Unknown parameter 'dyn_read 0 [ 2666.298513][T30489] ' [ 2666.336708][T30496] netlink: 52 bytes leftover after parsing attributes in process `syz.8.15540'. [ 2666.346624][T30496] netlink: 20 bytes leftover after parsing attributes in process `syz.8.15540'. [ 2667.013767][T30509] netlink: 56 bytes leftover after parsing attributes in process `syz.5.15545'. [ 2667.018400][T30509] netlink: 56 bytes leftover after parsing attributes in process `syz.5.15545'. [ 2667.028882][T30512] lo speed is unknown, defaulting to 1000 [ 2668.214005][T30548] netlink: 868 bytes leftover after parsing attributes in process `syz.5.15557'. [ 2668.855026][T30569] netlink: 64 bytes leftover after parsing attributes in process `syz.5.15563'. [ 2669.970400][T30590] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2669.978085][T30590] overlayfs: missing 'lowerdir' [ 2670.634331][T30606] netlink: 348 bytes leftover after parsing attributes in process `syz.5.15573'. [ 2670.925372][T30614] overlayfs: failed to resolve './file2': -2 [ 2670.980785][T30624] netlink: 'syz.5.15577': attribute type 1 has an invalid length. [ 2671.015219][T30624] bond3: (slave geneve2): making interface the new active one [ 2671.017871][T30624] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 2671.020511][T29043] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 2671.023446][T29043] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 2671.026448][T29043] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 2671.029178][T29043] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 2672.977831][T30664] overlayfs: failed to clone upperpath [ 2673.757254][T10282] Bluetooth: Frame is too long (len 24, expected len 4) [ 2675.242821][T30691] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15598'. [ 2675.255398][T30691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2675.277879][T30691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2675.280850][T30691] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 2675.287050][T30691] bond2: (slave vti0): Error -95 calling set_mac_address [ 2675.327605][ T40] audit: type=1326 audit(2000000032.995:43449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30690 comm="syz.7.15598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2675.341343][ T40] audit: type=1326 audit(2000000032.995:43450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30690 comm="syz.7.15598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2675.347796][ T40] audit: type=1326 audit(2000000032.995:43451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30690 comm="syz.7.15598" exe="/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2675.370032][ T40] audit: type=1326 audit(2000000032.995:43452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30690 comm="syz.7.15598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2675.377320][ T40] audit: type=1326 audit(2000000032.995:43453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30690 comm="syz.7.15598" exe="/syz-executor" sig=0 arch=40000003 syscall=442 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2675.399127][ T40] audit: type=1326 audit(2000000032.995:43454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30690 comm="syz.7.15598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2675.405727][ T40] audit: type=1326 audit(2000000032.995:43455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30690 comm="syz.7.15598" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2675.425881][ T40] audit: type=1326 audit(2000000032.995:43456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30690 comm="syz.7.15598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2675.446533][ T40] audit: type=1326 audit(2000000032.995:43457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30690 comm="syz.7.15598" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2675.658982][T12545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2675.662021][T12545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2676.274477][T30723] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 2676.277185][T30723] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2676.280495][T30723] vhci_hcd vhci_hcd.0: Device attached [ 2676.286048][T30723] random: crng reseeded on system resumption [ 2676.540802][ T7484] usb 54-1: SetAddress Request (19) to port 0 [ 2676.542747][ T7484] usb 54-1: new SuperSpeed USB device number 19 using vhci_hcd [ 2676.842630][T30728] vhci_hcd: connection reset by peer [ 2676.844508][T31506] vhci_hcd vhci_hcd.8: stop threads [ 2676.846242][T31506] vhci_hcd vhci_hcd.8: release socket [ 2676.848180][T31506] vhci_hcd vhci_hcd.8: disconnect device [ 2676.928384][T30740] fuse: Bad value for 'user_id' [ 2676.929917][T30740] fuse: Bad value for 'user_id' [ 2677.605425][T30752] overlayfs: failed lookup in lower (newroot/160, name='file1', err=-40): overlapping layers [ 2677.940849][T30771] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2678.743143][T30785] netlink: 44 bytes leftover after parsing attributes in process `syz.7.15624'. [ 2679.039961][T30795] overlayfs: failed to clone upperpath [ 2680.447224][T30809] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15632'. [ 2680.563749][T30818] netlink: 'syz.7.15636': attribute type 10 has an invalid length. [ 2680.571985][T30818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2680.575227][T30818] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2680.578233][T30818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2680.583474][T30818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2680.587288][T30818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2680.590089][T30818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2680.623559][T30818] bond0: (slave batadv0): Releasing backup interface [ 2681.149397][T30843] lo speed is unknown, defaulting to 1000 [ 2681.351277][ T7484] usb 54-1: device descriptor read/8, error -110 [ 2681.525742][T30859] netlink: 72 bytes leftover after parsing attributes in process `syz.6.15645'. [ 2681.551761][T30859] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15645'. [ 2681.618880][T30859] team0: Port device team_slave_0 removed [ 2681.631667][T10282] Bluetooth: hci2: link tx timeout [ 2681.634079][T10282] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2681.641657][T10282] Bluetooth: hci2: link tx timeout [ 2681.643297][T10282] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2681.707508][T30863] Bluetooth: hci2: link tx timeout [ 2681.709497][T30863] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2681.732853][T30863] Bluetooth: hci2: link tx timeout [ 2681.733913][ T7484] usb usb54-port1: attempt power cycle [ 2681.734601][T30863] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2681.881603][T30863] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 2682.286047][ T7484] usb usb54-port1: unable to enumerate USB device [ 2682.450538][T30885] lo speed is unknown, defaulting to 1000 [ 2682.510562][T30863] Bluetooth: hci2: link tx timeout [ 2682.515063][T30863] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2682.564278][T30863] Bluetooth: hci2: link tx timeout [ 2682.566523][T30863] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2682.580494][T30863] Bluetooth: hci2: link tx timeout [ 2682.582705][T30863] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2682.652628][T30890] netlink: 'syz.6.15651': attribute type 72 has an invalid length. [ 2682.655241][T30890] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15651'. [ 2683.499568][T30863] Bluetooth: hci2: link tx timeout [ 2683.501074][T30863] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2683.547579][T30863] Bluetooth: hci2: link tx timeout [ 2683.549103][T30863] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 2683.571122][T30863] Bluetooth: hci2: command 0x0406 tx timeout [ 2684.987371][T30927] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 2685.004057][T30927] netlink: 256 bytes leftover after parsing attributes in process `syz.7.15663'. [ 2685.620620][T30939] netlink: 'syz.5.15668': attribute type 10 has an invalid length. [ 2685.623141][T30939] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15668'. [ 2685.639997][T30939] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 2685.647882][T30939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2685.704642][T21192] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2685.709706][T21192] Bluetooth: hci4: Injecting HCI hardware error event [ 2685.715051][T21192] Bluetooth: hci4: hardware error 0x00 [ 2685.817617][T30945] lo speed is unknown, defaulting to 1000 [ 2687.688156][T21192] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2687.697946][T30944] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2687.840946][T30945] IPv6: NLM_F_CREATE should be specified when creating new route [ 2688.208986][ T40] audit: type=1326 audit(2000000046.506:43458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30965 comm="syz.7.15673" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc7579 code=0x0 [ 2688.262533][T30973] netlink: 14 bytes leftover after parsing attributes in process `syz.6.15676'. [ 2688.309738][T30973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2688.319084][T30973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2688.328456][T30973] bond0 (unregistering): Released all slaves [ 2688.450085][T30983] loop9: detected capacity change from 0 to 7 [ 2688.453003][T30845] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 2688.454898][T30845] loop9: partition table partially beyond EOD, truncated [ 2688.457745][T30845] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 2688.472432][T30983] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 2688.474153][T30983] loop9: partition table partially beyond EOD, truncated [ 2688.477474][T30983] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 2688.507298][T30845] udevd[30845]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 2688.517480][T30845] udevd[30845]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 2688.542266][T30987] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 2688.544390][T30987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2688.546906][T30987] vhci_hcd vhci_hcd.0: Device attached [ 2688.580504][T30989] vhci_hcd: connection closed [ 2688.580975][T31506] vhci_hcd vhci_hcd.8: stop threads [ 2688.584888][T31506] vhci_hcd vhci_hcd.8: release socket [ 2688.586695][T31506] vhci_hcd vhci_hcd.8: disconnect device [ 2688.893759][T30994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2689.138840][T31002] netlink: zone id is out of range [ 2689.138856][T31001] netlink: zone id is out of range [ 2689.140463][T31002] netlink: zone id is out of range [ 2689.140470][T31002] netlink: zone id is out of range [ 2689.142564][T31001] netlink: zone id is out of range [ 2689.144154][T31002] netlink: zone id is out of range [ 2689.144161][T31002] netlink: zone id is out of range [ 2689.144165][T31002] netlink: zone id is out of range [ 2689.174650][T30999] vlan3: entered promiscuous mode [ 2689.176412][T30999] vlan3: entered allmulticast mode [ 2689.178144][T30999] hsr_slave_1: entered allmulticast mode [ 2689.874015][T31018] syzkaller0: entered promiscuous mode [ 2689.875780][T31018] syzkaller0: entered allmulticast mode [ 2690.034525][T31023] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15692'. [ 2690.178797][T31030] overlayfs: failed to clone upperpath [ 2690.374404][T31032] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15696'. [ 2690.672782][T31041] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15699'. [ 2690.684751][T31043] netlink: 'syz.8.15700': attribute type 2 has an invalid length. [ 2690.687312][T31043] netlink: 224 bytes leftover after parsing attributes in process `syz.8.15700'. [ 2690.930523][ T40] audit: type=1326 audit(2000000049.372:43459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31055 comm="syz.8.15705" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f53579 code=0x0 [ 2690.979863][T31068] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15709'. [ 2690.988694][T31058] lo speed is unknown, defaulting to 1000 [ 2691.687397][T31112] netlink: 'syz.8.15724': attribute type 3 has an invalid length. [ 2691.690348][T31112] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15724'. [ 2692.402699][T31112] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 2692.404710][T31112] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2692.411738][T31112] vhci_hcd vhci_hcd.0: Device attached [ 2692.422953][T31112] netlink: 'syz.8.15724': attribute type 12 has an invalid length. [ 2692.570428][T31129] vhci_hcd: connection closed [ 2692.570678][T29043] vhci_hcd vhci_hcd.8: stop threads [ 2692.584960][T29043] vhci_hcd vhci_hcd.8: release socket [ 2692.586713][T29043] vhci_hcd vhci_hcd.8: disconnect device [ 2693.421496][T31142] vlan3: left promiscuous mode [ 2693.423151][T31142] vlan3: left allmulticast mode [ 2693.424661][T31142] hsr_slave_1: left allmulticast mode [ 2693.433276][T15452] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2693.436423][T15452] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2693.439417][T31506] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2693.442999][T31506] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2693.502174][T31143] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2693.509403][ T40] audit: type=1326 audit(2000000052.080:43460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31169 comm="syz.6.15733" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x0 [ 2693.510656][T31143] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2693.528125][T31506] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2693.530992][T31506] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 2693.586649][T31175] bridge0: port 2(bridge_slave_1) entered disabled state [ 2693.590363][T31175] bridge0: port 1(bridge_slave_0) entered disabled state [ 2693.819654][T31170] lo speed is unknown, defaulting to 1000 [ 2693.821123][T29043] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2693.825387][T29043] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2693.828691][T29043] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2693.833019][T31172] lo speed is unknown, defaulting to 1000 [ 2693.835644][T29043] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2694.168277][T31187] netlink: 'syz.8.15736': attribute type 2 has an invalid length. [ 2694.170721][T31187] netlink: 224 bytes leftover after parsing attributes in process `syz.8.15736'. [ 2694.698264][T31211] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15746'. [ 2695.409696][T31242] lo speed is unknown, defaulting to 1000 [ 2696.099116][T31261] netlink: 84 bytes leftover after parsing attributes in process `syz.8.15761'. [ 2696.240002][ T40] audit: type=1326 audit(2000000054.946:43461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31260 comm="syz.5.15763" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x0 [ 2696.411764][ T6953] IPVS: starting estimator thread 0... [ 2696.497127][T31276] IPVS: using max 40 ests per chain, 96000 per kthread [ 2697.339544][T31285] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15769'. [ 2698.097094][T31320] lo speed is unknown, defaulting to 1000 [ 2698.319707][ T40] audit: type=1326 audit(2000000057.130:43462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31339 comm="syz.5.15785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2698.337865][ T40] audit: type=1326 audit(2000000057.130:43463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31339 comm="syz.5.15785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2698.339526][T31340] tipc: Enabling of bearer rejected, failed to enable media [ 2698.353338][ T40] audit: type=1326 audit(2000000057.130:43464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31339 comm="syz.5.15785" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2698.370896][ T40] audit: type=1326 audit(2000000057.130:43465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31339 comm="syz.5.15785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2698.383747][ T40] audit: type=1326 audit(2000000057.130:43466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31339 comm="syz.5.15785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2698.391952][ T40] audit: type=1326 audit(2000000057.130:43467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31339 comm="syz.5.15785" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2698.400218][ T40] audit: type=1326 audit(2000000057.130:43468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31339 comm="syz.5.15785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2698.409301][ T40] audit: type=1326 audit(2000000057.130:43469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31339 comm="syz.5.15785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2698.418340][ T40] audit: type=1326 audit(2000000057.130:43470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31339 comm="syz.5.15785" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2698.429139][ T40] audit: type=1326 audit(2000000057.130:43471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31339 comm="syz.5.15785" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2699.643231][T31371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15795'. [ 2700.205692][T31384] geneve2: entered promiscuous mode [ 2700.208130][T31384] geneve2: entered allmulticast mode [ 2700.211269][T29043] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2700.217111][T29043] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2700.220417][T29043] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2700.224172][T29043] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2700.250864][T30457] IPVS: ip_vs_send_async error -101 [ 2700.469917][ T7484] usb 13-1: new high-speed USB device number 45 using dummy_hcd [ 2700.508120][T31399] netlink: 'syz.7.15804': attribute type 2 has an invalid length. [ 2700.641240][ T7484] usb 13-1: Using ep0 maxpacket: 8 [ 2700.672768][T31401] batman_adv: batadv0: Adding interface: gretap2 [ 2700.674944][T31401] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2700.682914][T31401] batman_adv: batadv0: Interface activated: gretap2 [ 2700.690311][ T7484] usb 13-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2700.698244][ T7484] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2700.707555][ T7484] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2700.718531][ T7484] usb 13-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2700.731912][ T7484] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2700.734833][ T7484] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2700.748640][ T7484] usbtmc 13-1:16.0: bulk endpoints not found [ 2702.608909][T31436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15816'. [ 2702.847369][T31451] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2702.849320][T31451] netlink: 188 bytes leftover after parsing attributes in process `syz.5.15820'. [ 2703.124898][T13427] usb 13-1: USB disconnect, device number 45 [ 2703.550972][T31468] random: crng reseeded on system resumption [ 2703.862639][T31476] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 2704.226707][T31507] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15842'. [ 2704.355314][T31515] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15845'. [ 2704.407414][T31517] 9pnet_fd: p9_fd_create_tcp (31517): problem connecting socket to 127.0.0.1 [ 2704.411210][T31517] 9pnet_fd: p9_fd_create_tcp (31517): problem connecting socket to 127.0.0.1 [ 2704.415837][T31517] 9pnet_fd: p9_fd_create_tcp (31517): problem connecting socket to 127.0.0.1 [ 2704.421212][T31517] 9pnet_fd: p9_fd_create_tcp (31517): problem connecting socket to 127.0.0.1 [ 2704.429534][T31517] 9pnet_fd: p9_fd_create_tcp (31517): problem connecting socket to 127.0.0.1 [ 2704.434556][T31517] 9pnet_fd: p9_fd_create_tcp (31517): problem connecting socket to 127.0.0.1 [ 2704.440176][T31517] 9pnet_fd: p9_fd_create_tcp (31517): problem connecting socket to 127.0.0.1 [ 2704.443917][T31517] 9pnet_fd: p9_fd_create_tcp (31517): problem connecting socket to 127.0.0.1 [ 2704.447309][T31517] 9pnet_fd: p9_fd_create_tcp (31517): problem connecting socket to 127.0.0.1 [ 2704.450736][T31517] 9pnet_fd: p9_fd_create_tcp (31517): problem connecting socket to 127.0.0.1 [ 2704.455989][T31517] 9pnet_fd: p9_fd_create_tcp (31517): problem connecting socket to 127.0.0.1 [ 2704.462955][T31517] 9pnet_fd: p9_fd_create_tcp (31517): problem connecting socket to 127.0.0.1 [ 2704.472057][T31517] 9pnet_virtio: no channels available for device 127.0.0.1 [ 2704.806086][T31538] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 2704.808777][T31538] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2704.812228][T31538] vhci_hcd vhci_hcd.0: Device attached [ 2704.927993][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 2704.928004][ T40] audit: type=1326 audit(2000000064.069:43537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31454 comm="syz.7.15824" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2704.936799][ T40] audit: type=1326 audit(2000000064.069:43538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31454 comm="syz.7.15824" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2705.108150][ T7484] usb 54-1: SetAddress Request (24) to port 0 [ 2705.111776][ T7484] usb 54-1: new SuperSpeed USB device number 24 using vhci_hcd [ 2705.505951][T31543] vhci_hcd: connection reset by peer [ 2705.520302][T31817] vhci_hcd vhci_hcd.8: stop threads [ 2705.522424][T31817] vhci_hcd vhci_hcd.8: release socket [ 2705.524217][T31817] vhci_hcd vhci_hcd.8: disconnect device [ 2706.677040][T31572] lo speed is unknown, defaulting to 1000 [ 2707.721507][T31597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15873'. [ 2707.976640][T31609] overlayfs: failed to resolve './bus': -2 [ 2708.067942][T31619] CIFS mount error: No usable UNC path provided in device string! [ 2708.067942][T31619] [ 2708.072567][T31619] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2708.131056][T31609] overlayfs: failed to resolve './bus': -2 [ 2709.098997][T31652] bond0: entered promiscuous mode [ 2709.101185][T31652] bond_slave_0: entered promiscuous mode [ 2709.103039][T31652] bond_slave_1: entered promiscuous mode [ 2709.728319][T31673] netlink: 52 bytes leftover after parsing attributes in process `syz.5.15895'. [ 2709.732999][T31673] batadv_slave_1: entered promiscuous mode [ 2709.738567][T31672] batadv_slave_1: left promiscuous mode [ 2709.938157][ T7484] usb 54-1: device descriptor read/8, error -110 [ 2710.080510][T31687] lo speed is unknown, defaulting to 1000 [ 2710.310131][ T7484] usb usb54-port1: attempt power cycle [ 2710.780454][T31709] netlink: 'syz.5.15905': attribute type 1 has an invalid length. [ 2710.812638][T31709] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2710.818618][T31709] bond4: (slave bond5): making interface the new active one [ 2710.821300][T31709] bond4: (slave bond5): Enslaving as an active interface with an up link [ 2710.840642][T31709] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15905'. [ 2710.844232][ T7484] usb usb54-port1: unable to enumerate USB device [ 2711.098001][T31716] MTD: Couldn't look up '': -22 [ 2711.283277][T31726] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15908'. [ 2711.284417][T31720] overlayfs: failed to clone upperpath [ 2711.707435][T31733] overlayfs: failed lookup in lower (newroot/217, name='bus', err=-40): overlapping layers [ 2711.766555][T31734] SQUASHFS error: Failed to read block 0x0: -5 [ 2711.771555][T31734] unable to read squashfs_super_block [ 2712.535315][T31758] netlink: 'syz.8.15919': attribute type 29 has an invalid length. [ 2712.607905][T31760] tipc: Enabled bearer , priority 0 [ 2712.786012][T31760] syzkaller0: entered promiscuous mode [ 2712.813898][T31760] syzkaller0: entered allmulticast mode [ 2712.816695][T31760] tipc: Resetting bearer [ 2712.879172][T31817] tipc: Resetting bearer [ 2712.883507][T31759] tipc: Resetting bearer [ 2713.660423][T31768] netlink: 'syz.7.15922': attribute type 1 has an invalid length. [ 2713.760181][T31773] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15922'. [ 2713.878527][ T40] audit: type=1326 audit(2000000073.465:43539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31777 comm="syz.5.15923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2713.888134][ T40] audit: type=1326 audit(2000000073.465:43540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31777 comm="syz.5.15923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2713.900146][ T40] audit: type=1326 audit(2000000073.465:43541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31777 comm="syz.5.15923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2713.909702][ T40] audit: type=1326 audit(2000000073.465:43542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31777 comm="syz.5.15923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2713.918814][ T40] audit: type=1326 audit(2000000073.475:43543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31777 comm="syz.5.15923" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2713.927643][ T40] audit: type=1326 audit(2000000073.475:43544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31777 comm="syz.5.15923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2713.934746][ T40] audit: type=1326 audit(2000000073.475:43545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31777 comm="syz.5.15923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2713.942216][ T40] audit: type=1326 audit(2000000073.485:43546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31777 comm="syz.5.15923" exe="/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2713.949037][ T40] audit: type=1326 audit(2000000073.527:43547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31777 comm="syz.5.15923" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2713.955862][ T40] audit: type=1326 audit(2000000073.527:43548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31777 comm="syz.5.15923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f16579 code=0x7ffc0000 [ 2715.250129][T31759] tipc: Disabling bearer [ 2715.255207][T31768] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 2715.258755][T31770] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 2715.355242][T31793] fuse: Unknown parameter '©w—Óé;Re' [ 2715.374840][T31795] netlink: 'syz.6.15929': attribute type 29 has an invalid length. [ 2716.189682][T31816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15934'. [ 2716.189683][T31818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15934'. [ 2716.265059][T31825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15936'. [ 2716.270892][T31825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15936'. [ 2716.367745][T31829] lo speed is unknown, defaulting to 1000 [ 2716.407937][T31832] netlink: 'syz.5.15938': attribute type 21 has an invalid length. [ 2716.411936][T31832] netlink: 132 bytes leftover after parsing attributes in process `syz.5.15938'. [ 2717.090832][T31841] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15940'. [ 2717.162505][T31843] loop8: detected capacity change from 0 to 8 [ 2717.165190][T31843] Dev loop8: unable to read RDB block 8 [ 2717.166916][T31843] loop8: unable to read partition table [ 2717.170056][T31843] loop8: partition table beyond EOD, truncated [ 2717.172149][T31843] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2717.504932][T31854] fuse: Bad value for 'user_id' [ 2717.521602][T31854] fuse: Bad value for 'user_id' [ 2718.384700][T31868] all (unregistering): Released all slaves [ 2718.621273][T31883] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15953'. [ 2718.654386][T31883] dns_resolver: Unsupported content type (5) [ 2718.930709][T31890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15956'. [ 2719.014304][T31893] Invalid logical block size (2) [ 2719.527330][T31923] overlayfs: failed to clone upperpath [ 2719.531263][T31923] fuse: Bad value for 'fd' [ 2719.594103][T31925] geneve3: entered promiscuous mode [ 2719.595836][T31925] geneve3: entered allmulticast mode [ 2719.887179][T31936] ip6gre1: entered allmulticast mode [ 2719.892589][T31936] team0: Port device ip6gre1 added [ 2720.020609][T31942] 9pnet_fd: Insufficient options for proto=fd [ 2721.490671][T31995] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15991'. [ 2721.536028][T32002] loop5: detected capacity change from 0 to 7 [ 2721.542766][T32002] Dev loop5: unable to read RDB block 7 [ 2721.544652][T32002] loop5: AHDI p1 [ 2721.546016][T32002] loop5: partition table partially beyond EOD, truncated [ 2721.727469][T31991] netlink: 'syz.7.15987': attribute type 4 has an invalid length. [ 2721.782528][T31991] netlink: 'syz.7.15987': attribute type 4 has an invalid length. [ 2727.413647][T32101] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16019'. [ 2728.078110][T32132] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16028'. [ 2731.657061][T32191] fuse: Unknown parameter 'æd' [ 2732.540933][T32202] lo speed is unknown, defaulting to 1000 [ 2733.399339][T32222] No control pipe specified [ 2733.402113][T32222] netlink: 'syz.5.16052': attribute type 2 has an invalid length. [ 2734.173030][T32235] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.16055'. [ 2734.335062][T32242] 9p: Bad value for 'rfdno' [ 2734.460129][T32250] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16061'. [ 2736.847922][T32345] overlay: ./file0 is not a directory [ 2736.850559][T32345] overlay: ./file0 is not a directory [ 2737.576258][T32362] IPVS: set_ctl: invalid protocol: 107 224.0.0.1:20004 [ 2738.833400][T32388] lo speed is unknown, defaulting to 1000 [ 2738.978573][T32395] overlayfs: failed to clone upperpath [ 2740.217361][T21192] Bluetooth: hci2: link tx timeout [ 2740.219336][T21192] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 2740.800005][ T7484] usb 13-1: new high-speed USB device number 46 using dummy_hcd [ 2741.069142][ T7484] usb 13-1: config 0 has no interfaces? [ 2741.079592][ T7484] usb 13-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2741.092189][ T7484] usb 13-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2741.107479][ T7484] usb 13-1: Manufacturer: syz [ 2741.118715][ T7484] usb 13-1: config 0 descriptor?? [ 2741.498048][T32442] netlink: 'syz.7.16124': attribute type 2 has an invalid length. [ 2742.163545][T30863] Bluetooth: hci2: command 0x0406 tx timeout [ 2743.324750][T32483] overlayfs: failed to clone upperpath [ 2743.360754][T13427] usb 13-1: USB disconnect, device number 46 [ 2743.579340][T32495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16133'. [ 2743.739131][T32514] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16139'. [ 2743.772792][T32514] team0 (unregistering): Port device team_slave_0 removed [ 2743.783453][T32514] team0 (unregistering): Port device team_slave_1 removed [ 2743.804657][T32522] netlink: 29 bytes leftover after parsing attributes in process `syz.8.16140'. [ 2743.975523][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 2743.975535][ T40] audit: type=1326 audit(2000000260.763:43556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32531 comm="syz.7.16143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2743.986801][ T40] audit: type=1326 audit(2000000260.763:43557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32531 comm="syz.7.16143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2743.998103][ T40] audit: type=1326 audit(2000000260.763:43558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32531 comm="syz.7.16143" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2744.012925][ T40] audit: type=1326 audit(2000000260.763:43559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32531 comm="syz.7.16143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2744.026457][ T40] audit: type=1326 audit(2000000260.763:43560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32531 comm="syz.7.16143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2744.234380][T32545] Cannot find set identified by id 3 to match [ 2744.336896][T32550] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16147'. [ 2744.350785][T32550] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16147'. [ 2744.354426][T32550] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16147'. [ 2744.398947][T32553] tipc: Enabled bearer , priority 0 [ 2744.401882][T32555] syzkaller0: entered promiscuous mode [ 2744.404202][T32555] syzkaller0: entered allmulticast mode [ 2744.916526][T32559] netlink: 60 bytes leftover after parsing attributes in process `syz.6.16149'. [ 2745.263059][T32555] tipc: Resetting bearer [ 2745.310545][T32555] tipc: Disabling bearer [ 2746.228488][T32577] overlayfs: failed to clone upperpath [ 2746.378225][T32572] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(13) [ 2746.380457][T32572] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2746.383607][T32572] vhci_hcd vhci_hcd.0: Device attached [ 2746.634811][T15850] usb 54-1: SetAddress Request (28) to port 0 [ 2746.637729][T15850] usb 54-1: new SuperSpeed USB device number 28 using vhci_hcd [ 2746.707378][T32588] netlink: 80 bytes leftover after parsing attributes in process `syz.7.16157'. [ 2747.377496][T32580] vhci_hcd: connection reset by peer [ 2747.383902][T15452] vhci_hcd vhci_hcd.8: stop threads [ 2747.385665][T15452] vhci_hcd vhci_hcd.8: release socket [ 2747.391633][T15452] vhci_hcd vhci_hcd.8: disconnect device [ 2749.266014][ T6953] usb 13-1: new high-speed USB device number 47 using dummy_hcd [ 2749.420783][ T6953] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2749.424507][ T6953] usb 13-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 2749.428954][ T6953] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2749.499713][ T6953] usb 13-1: config 0 descriptor?? [ 2749.507212][ T6953] rndis_host 13-1:0.0: skipping garbage [ 2749.512967][ T6953] usb 13-1: bad CDC descriptors [ 2749.761102][T32622] No such timeout policy "syz0" [ 2749.829072][T32627] tipc: Started in network mode [ 2749.831352][T32627] tipc: Node identity ac14140f, cluster identity 4711 [ 2749.834881][T32627] tipc: New replicast peer: 255.255.255.255 [ 2749.841664][T32627] tipc: Enabled bearer , priority 10 [ 2749.948151][T32636] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16171'. [ 2749.953447][T32636] netlink: 44 bytes leftover after parsing attributes in process `syz.6.16171'. [ 2750.258032][ T40] audit: type=1326 audit(2000000267.339:43561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.16179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ff00000 [ 2750.272242][ T40] audit: type=1326 audit(2000000267.339:43562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.16179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ff00000 [ 2750.279770][T32655] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16178'. [ 2750.282696][ T40] audit: type=1326 audit(2000000267.339:43563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.16179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ff00000 [ 2750.294341][ T40] audit: type=1326 audit(2000000267.339:43564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.16179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ff00000 [ 2750.305476][ T40] audit: type=1326 audit(2000000267.339:43565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.16179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ff00000 [ 2750.314649][ T40] audit: type=1326 audit(2000000267.339:43566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.16179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ff00000 [ 2750.322282][ T40] audit: type=1326 audit(2000000267.339:43567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.16179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ff00000 [ 2750.329417][ T40] audit: type=1326 audit(2000000267.339:43568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.16179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ff00000 [ 2750.336742][ T40] audit: type=1326 audit(2000000267.339:43569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.16179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ff00000 [ 2750.344710][ T40] audit: type=1326 audit(2000000267.339:43570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.7.16179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ff00000 [ 2750.905942][ T7484] tipc: Node number set to 2886997007 [ 2751.547154][T15850] usb 54-1: device descriptor read/8, error -110 [ 2751.570079][T32666] tipc: Started in network mode [ 2751.571869][T32666] tipc: Node identity ac14140f, cluster identity 4711 [ 2751.583528][T32666] tipc: New replicast peer: 255.255.255.255 [ 2751.586569][T32666] tipc: Enabled bearer , priority 10 [ 2751.966670][T15850] usb usb54-port1: attempt power cycle [ 2752.014406][T31153] usb 13-1: USB disconnect, device number 47 [ 2752.057023][T30863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2752.076691][T30863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2752.097580][T30863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2752.127295][T30863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2752.131602][T30863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2752.230461][T32671] lo speed is unknown, defaulting to 1000 [ 2752.508884][T15850] usb usb54-port1: unable to enumerate USB device [ 2752.536214][T13427] tipc: Node number set to 2886997007 [ 2752.582031][T32671] chnl_net:caif_netlink_parms(): no params data found [ 2752.677398][T32671] bridge0: port 1(bridge_slave_0) entered blocking state [ 2752.683653][T32671] bridge0: port 1(bridge_slave_0) entered disabled state [ 2752.686312][T32671] bridge_slave_0: entered allmulticast mode [ 2752.690198][T32671] bridge_slave_0: entered promiscuous mode [ 2752.696083][T32671] bridge0: port 2(bridge_slave_1) entered blocking state [ 2752.701922][T32671] bridge0: port 2(bridge_slave_1) entered disabled state [ 2752.704226][T32671] bridge_slave_1: entered allmulticast mode [ 2752.717780][T32671] bridge_slave_1: entered promiscuous mode [ 2752.758837][T32671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2752.763385][T32671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2752.823582][T32671] team0: Port device team_slave_0 added [ 2752.829606][T32671] team0: Port device team_slave_1 added [ 2752.884641][T32703] binder: Unknown parameter 'sta·£°T÷sèhl' [ 2752.885271][T32671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2752.890593][T32671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2752.899147][T32671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2752.918584][T32671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2752.921106][T32671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2752.931665][T32671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2752.959363][T32671] hsr_slave_0: entered promiscuous mode [ 2752.961784][T32671] hsr_slave_1: entered promiscuous mode [ 2752.963843][T32671] debugfs: 'hsr0' already exists in 'hsr' [ 2752.965915][T32671] Cannot create hsr debugfs directory [ 2752.977129][T31817] batman_adv: batadv0: Interface deactivated: gretap2 [ 2753.034697][T31817] team0: Port device ip6gre1 removed [ 2753.146322][T15850] usb 13-1: new high-speed USB device number 48 using dummy_hcd [ 2753.184070][T31817] bond2 (unregistering): (slave gretap1): Releasing active interface [ 2753.200922][T31817] batman_adv: batadv0: Removing interface: gretap2 [ 2753.262941][T31817] bond3 (unregistering): (slave geneve2): Releasing active interface [ 2753.309207][T15850] usb 13-1: too many configurations: 9, using maximum allowed: 8 [ 2753.309270][T31817] batman_adv: batadv0: Removing interface: vxlan0 [ 2753.312752][T15850] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2753.316764][T15850] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2753.320434][T15850] usb 13-1: config 0 interface 0 has no altsetting 0 [ 2753.323547][T15850] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2753.326456][T15850] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2753.330143][T15850] usb 13-1: config 0 interface 0 has no altsetting 0 [ 2753.333246][T15850] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2753.336203][T15850] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2753.339809][T15850] usb 13-1: config 0 interface 0 has no altsetting 0 [ 2753.343930][T15850] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2753.347069][T15850] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2753.351191][T15850] usb 13-1: config 0 interface 0 has no altsetting 0 [ 2753.354626][T15850] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2753.357636][T15850] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2753.361190][T15850] usb 13-1: config 0 interface 0 has no altsetting 0 [ 2753.364182][T15850] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2753.367275][T15850] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2753.370842][T15850] usb 13-1: config 0 interface 0 has no altsetting 0 [ 2753.373850][T15850] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2753.377004][T15850] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2753.380770][T15850] usb 13-1: config 0 interface 0 has no altsetting 0 [ 2753.383882][T15850] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2753.387022][T15850] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2753.390566][T15850] usb 13-1: config 0 interface 0 has no altsetting 0 [ 2753.394883][T15850] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2753.397832][T15850] usb 13-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2753.400538][T15850] usb 13-1: Product: syz [ 2753.401923][T15850] usb 13-1: Manufacturer: syz [ 2753.403491][T15850] usb 13-1: SerialNumber: syz [ 2753.408298][T15850] usb 13-1: config 0 descriptor?? [ 2753.415357][T15850] yurex 13-1:0.0: USB YUREX device now attached to Yurex #0 [ 2753.474885][T31817] bond0 (unregistering): Released all slaves [ 2753.479426][T31817] bond1 (unregistering): Released all slaves [ 2753.486065][T31817] bond2 (unregistering): Released all slaves [ 2753.493294][T31817] bond3 (unregistering): Released all slaves [ 2753.501573][T31817] bond4 (unregistering): (slave bond5): Releasing backup interface [ 2753.505115][T31817] bond4 (unregistering): Released all slaves [ 2753.692148][T31817] bond5 (unregistering): Released all slaves [ 2753.713926][T32703] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16189'. [ 2753.813007][T31817] tipc: Disabling bearer [ 2753.828563][T31817] tipc: Left network mode [ 2753.898733][T31817] IPVS: stopping master sync thread 30457 ... [ 2753.997460][T32724] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2754.144439][T32724] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2754.147513][T21192] Bluetooth: hci5: command tx timeout [ 2754.249520][T32724] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2754.307749][T31817] hsr_slave_0: left promiscuous mode [ 2754.311972][T31817] hsr_slave_1: left promiscuous mode [ 2755.595803][ C0] usb 13-1: yurex_control_callback - control failed: -2 [ 2755.951988][T32724] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2756.018594][T32733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16196'. [ 2756.112674][T32671] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2756.121194][T21192] Bluetooth: hci5: command tx timeout [ 2756.134231][T32671] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2756.178256][T31504] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2756.181137][T32671] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2756.216827][T32671] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2756.285268][T15433] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2756.288222][T15433] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2756.297860][T15433] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2756.326867][T31817] IPVS: stop unused estimator thread 0... [ 2756.358787][T32671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2756.368421][T32671] 8021q: adding VLAN 0 to HW filter on device team0 [ 2756.378300][T15433] bridge0: port 1(bridge_slave_0) entered blocking state [ 2756.380828][T15433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2756.396689][T31504] bridge0: port 2(bridge_slave_1) entered blocking state [ 2756.398967][T31504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2756.400836][T32738] 9p: Bad value for 'rfdno' [ 2756.559356][T32671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2756.595793][T15850] usb 13-1: USB disconnect, device number 48 [ 2756.598924][T15850] yurex 13-1:0.0: USB YUREX #0 now disconnected [ 2756.796809][T32671] veth0_vlan: entered promiscuous mode [ 2756.808992][T32671] veth1_vlan: entered promiscuous mode [ 2756.825997][T32671] veth0_macvtap: entered promiscuous mode [ 2756.837815][T32671] veth1_macvtap: entered promiscuous mode [ 2756.862686][T32671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2756.873368][T32671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2756.894787][T29043] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2756.899528][T29043] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2756.914070][T29043] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2756.918592][T29043] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2756.983293][T31820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2756.986575][T31820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2756.990916][T29043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2756.993478][T29043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2757.058506][ T308] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 2757.061313][ T308] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2757.065091][ T308] vhci_hcd vhci_hcd.0: Device attached [ 2757.101548][ T313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16182'. [ 2757.334444][ T6020] usb 54-1: SetAddress Request (32) to port 0 [ 2757.336438][ T6020] usb 54-1: new SuperSpeed USB device number 32 using vhci_hcd [ 2757.355603][ T310] vhci_hcd: connection closed [ 2757.429464][T31504] vhci_hcd vhci_hcd.8: stop threads [ 2757.432852][T31504] vhci_hcd vhci_hcd.8: release socket [ 2757.434749][T31504] vhci_hcd vhci_hcd.8: disconnect device [ 2758.129085][T21192] Bluetooth: hci5: command tx timeout [ 2759.160569][ T316] netlink: 'syz.5.16205': attribute type 11 has an invalid length. [ 2759.551157][ T346] netlink: 220 bytes leftover after parsing attributes in process `syz.8.16215'. [ 2760.087472][T21192] Bluetooth: hci5: command tx timeout [ 2760.663373][ T358] netlink: 'syz.6.16218': attribute type 1 has an invalid length. [ 2760.663941][ T359] netlink: 'syz.6.16218': attribute type 1 has an invalid length. [ 2760.666020][ T358] netlink: 'syz.6.16218': attribute type 4 has an invalid length. [ 2760.668517][ T359] netlink: 'syz.6.16218': attribute type 4 has an invalid length. [ 2760.671372][ T358] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.16218'. [ 2760.673575][ T359] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.16218'. [ 2760.708350][ T362] netlink: 52 bytes leftover after parsing attributes in process `syz.6.16219'. [ 2760.718158][ T362] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16219'. [ 2761.059066][ T372] lo speed is unknown, defaulting to 1000 [ 2761.946724][ T402] CIFS mount error: No usable UNC path provided in device string! [ 2761.946724][ T402] [ 2761.955829][ T402] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2762.146923][ T6020] usb 54-1: device descriptor read/8, error -110 [ 2762.239595][ T406] netlink: 'syz.5.16231': attribute type 4 has an invalid length. [ 2762.242175][ T406] netlink: 224 bytes leftover after parsing attributes in process `syz.5.16231'. [ 2762.259451][ T407] netlink: 'syz.5.16231': attribute type 4 has an invalid length. [ 2762.267850][ T407] netlink: 224 bytes leftover after parsing attributes in process `syz.5.16231'. [ 2762.538642][ T6020] usb usb54-port1: attempt power cycle [ 2762.586766][ T422] overlayfs: failed to clone upperpath [ 2762.949762][T31178] libceph: connect (1)[c::]:6789 error -101 [ 2762.949831][ T447] overlayfs: upper fs does not support file handles, falling back to index=off. [ 2762.951703][T31178] libceph: mon0 (1)[c::]:6789 connect error [ 2762.955451][ T447] FAULT_INJECTION: forcing a failure. [ 2762.955451][ T447] name failslab, interval 1, probability 0, space 0, times 0 [ 2762.960529][ T447] CPU: 3 UID: 0 PID: 447 Comm: syz.5.16242 Tainted: G L syzkaller #0 PREEMPT(full) [ 2762.960547][ T447] Tainted: [L]=SOFTLOCKUP [ 2762.960551][ T447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2762.960568][ T447] Call Trace: [ 2762.960573][ T447] [ 2762.960578][ T447] dump_stack_lvl+0x100/0x190 [ 2762.960597][ T447] should_fail_ex.cold+0x5/0xa [ 2762.960616][ T447] should_failslab+0xc2/0x120 [ 2762.960633][ T447] kmem_cache_alloc_noprof+0x83/0x780 [ 2762.960647][ T447] ? __pfx_map_id_range_down+0x10/0x10 [ 2762.960659][ T447] ? security_inode_alloc+0x3b/0x2c0 [ 2762.960677][ T447] ? security_inode_alloc+0x3b/0x2c0 [ 2762.960691][ T447] security_inode_alloc+0x3b/0x2c0 [ 2762.960707][ T447] inode_init_always_gfp+0xced/0x1040 [ 2762.960722][ T447] ? __pfx_ovl_inode_test+0x10/0x10 [ 2762.960738][ T447] ? __pfx_ovl_inode_set+0x10/0x10 [ 2762.960753][ T447] alloc_inode+0x8e/0x250 [ 2762.960769][ T447] iget5_locked+0x5f/0xa0 [ 2762.960786][ T447] ovl_get_inode+0xecc/0x1900 [ 2762.960808][ T447] ? __pfx_ovl_get_inode+0x10/0x10 [ 2762.960824][ T447] ? ovl_stack_cpy+0x78/0xb0 [ 2762.960836][ T447] ? do_raw_spin_unlock+0x145/0x1e0 [ 2762.960854][ T447] ? _raw_spin_unlock+0x28/0x50 [ 2762.960867][ T447] ovl_lookup_layers+0x8bc/0x2ac0 [ 2762.960892][ T447] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 2762.960910][ T447] ? rcu_is_watching+0x12/0xc0 [ 2762.960925][ T447] ? find_held_lock+0x2b/0x80 [ 2762.960936][ T447] ? d_alloc_parallel+0xb4e/0x14e0 [ 2762.960948][ T447] ovl_lookup+0x4a8/0x6b0 [ 2762.960965][ T447] ? d_alloc_parallel+0x864/0x14e0 [ 2762.960975][ T447] ? __pfx_ovl_lookup+0x10/0x10 [ 2762.961008][ T447] ? lockdep_init_map_type+0x5c/0x250 [ 2762.961034][ T447] __lookup_slow+0x251/0x460 [ 2762.961060][ T447] ? __pfx___lookup_slow+0x10/0x10 [ 2762.961106][ T447] lookup_slow+0x50/0x70 [ 2762.961125][ T447] link_path_walk+0x1377/0x1cc0 [ 2762.961142][ T447] __filename_parentat+0x213/0x740 [ 2762.961152][ T447] ? kasan_save_stack+0x3f/0x50 [ 2762.961169][ T447] ? __pfx___filename_parentat+0x10/0x10 [ 2762.961197][ T447] do_unlinkat+0xfb/0x6e0 [ 2762.961216][ T447] ? __might_fault+0xc5/0x140 [ 2762.961230][ T447] ? __pfx_do_unlinkat+0x10/0x10 [ 2762.961253][ T447] ? getname_flags.part.0+0x1c5/0x540 [ 2762.961271][ T447] __ia32_sys_unlinkat+0x145/0x250 [ 2762.961287][ T447] __do_fast_syscall_32+0xde/0x660 [ 2762.961303][ T447] do_fast_syscall_32+0x32/0x70 [ 2762.961317][ T447] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2762.961331][ T447] RIP: 0023:0xf745d579 [ 2762.961341][ T447] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 2762.961353][ T447] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 000000000000012d [ 2762.961364][ T447] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 2762.961371][ T447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2762.961377][ T447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2762.961383][ T447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2762.961389][ T447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2762.961404][ T447] [ 2762.961775][ T447] overlayfs: failed to get inode (-12) [ 2762.967265][ T435] bridge_slave_0: left allmulticast mode [ 2763.101025][ T6020] usb usb54-port1: unable to enumerate USB device [ 2763.116953][ T435] bridge_slave_0: left promiscuous mode [ 2763.119825][ T435] bridge0: port 1(bridge_slave_0) entered disabled state [ 2763.125920][ T435] bridge_slave_1: left allmulticast mode [ 2763.127917][ T435] bridge_slave_1: left promiscuous mode [ 2763.131195][ T435] bridge0: port 2(bridge_slave_1) entered disabled state [ 2763.144874][ T435] team0: Port device team_slave_1 removed [ 2763.147693][ T435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2763.150724][ T435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2763.159000][ T435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2763.161484][ T435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2763.169825][ T435] net_ratelimit: 685 callbacks suppressed [ 2763.169834][ T435] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2763.205158][T31178] libceph: connect (1)[c::]:6789 error -101 [ 2763.207805][T31178] libceph: mon0 (1)[c::]:6789 connect error [ 2763.694285][ T437] ceph: No mds server is up or the cluster is laggy [ 2763.698268][T31178] libceph: connect (1)[c::]:6789 error -101 [ 2763.700360][T31178] libceph: mon0 (1)[c::]:6789 connect error [ 2763.943542][ T471] overlayfs: failed to clone upperpath [ 2764.619149][ T500] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 2764.621268][ T500] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2764.623688][ T500] vhci_hcd vhci_hcd.0: Device attached [ 2764.854425][ T6020] usb 53-1: new high-speed USB device number 4 using vhci_hcd [ 2765.147544][ T502] vhci_hcd: connection reset by peer [ 2765.150625][T31506] vhci_hcd vhci_hcd.8: stop threads [ 2765.153070][T31506] vhci_hcd vhci_hcd.8: release socket [ 2765.157812][T31506] vhci_hcd vhci_hcd.8: disconnect device [ 2765.336726][ T518] netlink: 24 bytes leftover after parsing attributes in process `syz.7.16265'. [ 2765.377454][ T522] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16267'. [ 2765.450524][ T524] overlayfs: failed to clone upperpath [ 2765.498491][ T528] overlayfs: failed to clone upperpath [ 2765.955115][ T546] netlink: 'syz.5.16272': attribute type 2 has an invalid length. [ 2765.957741][ T546] netlink: 'syz.5.16272': attribute type 3 has an invalid length. [ 2766.677508][ T552] netlink: 16 bytes leftover after parsing attributes in process `syz.5.16275'. [ 2766.680895][ T552] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2766.929367][ T562] netlink: 'syz.5.16279': attribute type 1 has an invalid length. [ 2766.957674][ T564] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 2768.167504][ T40] kauditd_printk_skb: 13964 callbacks suppressed [ 2768.167515][ T40] audit: type=1326 audit(2000000286.124:57535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=603 comm="syz.5.16292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2768.180789][ T40] audit: type=1326 audit(2000000286.134:57536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=603 comm="syz.5.16292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2768.187879][ T40] audit: type=1326 audit(2000000286.134:57537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=603 comm="syz.5.16292" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2768.195963][ T40] audit: type=1326 audit(2000000286.134:57538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=603 comm="syz.5.16292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2768.203056][ T40] audit: type=1326 audit(2000000286.134:57539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=603 comm="syz.5.16292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2768.209653][ T40] audit: type=1326 audit(2000000286.134:57540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=603 comm="syz.5.16292" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2768.217017][ T40] audit: type=1326 audit(2000000286.134:57541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=603 comm="syz.5.16292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2768.223848][ T40] audit: type=1326 audit(2000000286.134:57542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=603 comm="syz.5.16292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2768.231906][ T40] audit: type=1326 audit(2000000286.134:57543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=603 comm="syz.5.16292" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2768.239610][ T40] audit: type=1326 audit(2000000286.134:57544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=603 comm="syz.5.16292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2769.276506][ T620] netlink: 52 bytes leftover after parsing attributes in process `syz.7.16294'. [ 2769.774401][ T6020] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 2769.958280][ T627] netlink: 'syz.6.16297': attribute type 1 has an invalid length. [ 2770.311777][ T627] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 2770.327010][ T627] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 2770.364745][ T634] bond0: (slave bridge1): Enslaving as an active interface with a down link [ 2770.537245][ T641] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2770.634863][ T641] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2770.709470][ T641] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2770.765831][ T641] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2770.869848][T31820] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2770.901003][T31820] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2770.904372][T31820] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2770.924222][T31820] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2771.474431][ T659] xt_socket: unknown flags 0x50 [ 2772.268720][ T669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16307'. [ 2772.293869][ T669] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2772.489927][ T676] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16308'. [ 2772.998854][ T678] bridge0: port 1(vlan0) entered blocking state [ 2773.000962][ T678] bridge0: port 1(vlan0) entered disabled state [ 2773.003086][ T678] vlan0: entered allmulticast mode [ 2773.004878][ T678] bond0: entered allmulticast mode [ 2773.008006][ T678] vlan0: entered promiscuous mode [ 2773.009708][ T678] bond0: entered promiscuous mode [ 2773.014134][ T678] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16309'. [ 2773.333538][ T689] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16313'. [ 2773.789250][ T696] netlink: 'syz.5.16315': attribute type 3 has an invalid length. [ 2774.452967][ T699] syzkaller1: entered promiscuous mode [ 2774.454718][ T699] syzkaller1: entered allmulticast mode [ 2774.458170][ T699] program syz.5.16316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2774.524268][ T1110] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 2774.526665][ T1110] ata1.00: irq_stat 0x40000000 [ 2774.528557][ T1110] ata1.00: failed command: ZAC MANAGEMENT OUT [ 2774.530532][ T1110] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 14 [ 2774.530532][ T1110] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 2774.535965][ T1110] ata1.00: status: { DRDY ERR } [ 2774.537537][ T1110] ata1.00: error: { ABRT } [ 2774.538963][ T1110] ata1.00: device reported invalid CHS sector 0 [ 2774.542098][ C3] ata1: illegal qc_active transition (00000000->00100000) [ 2774.849646][ T1110] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 2774.853059][ T1110] ata1.00: configured for UDMA/100 [ 2774.865882][ T703] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16317'. [ 2775.027869][ T703] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16317'. [ 2775.032745][ T703] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16317'. [ 2775.099626][ T711] tmpfs: Bad value for 'mpol' [ 2775.372063][ T701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2775.459518][ T707] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 2775.469123][ T707] bond2 (unregistering): Released all slaves [ 2775.581691][ T707] 9p: Bad value for 'rfdno' [ 2776.661159][ T741] SQUASHFS error: Failed to read block 0x0: -5 [ 2776.663166][ T741] unable to read squashfs_super_block [ 2777.916390][T31153] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 2778.072317][T31153] usb 10-1: Using ep0 maxpacket: 8 [ 2778.119744][T31153] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2778.122346][T31153] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2778.127835][T31153] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2778.132214][T31153] usb 10-1: config 0 descriptor?? [ 2778.195320][ T770] No control pipe specified [ 2778.561703][T31153] mcp2221 0003:04D8:00DD.0023: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 2779.332501][ T781] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2779.381403][ T773] netlink: 52 bytes leftover after parsing attributes in process `syz.6.16339'. [ 2779.511737][ T787] overlayfs: failed to resolve './file2': -2 [ 2780.370139][T25823] usb 10-1: USB disconnect, device number 67 [ 2780.565232][ T817] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 2780.873759][ T826] netlink: 'syz.6.16354': attribute type 10 has an invalid length. [ 2780.887656][ T826] team0: Port device dummy0 added [ 2780.918110][ T826] netlink: 'syz.6.16354': attribute type 10 has an invalid length. [ 2781.055760][ T826] team0: Port device dummy0 removed [ 2781.219624][ T832] input: syz1 as /devices/virtual/input/input116 [ 2781.299260][ T819] netlink: 52 bytes leftover after parsing attributes in process `syz.5.16352'. [ 2781.352357][ T839] ALSA: mixer_oss: invalid OSS volume '' [ 2782.214056][ T857] netlink: 16 bytes leftover after parsing attributes in process `syz.7.16362'. [ 2782.284470][ T857] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16362'. [ 2782.288026][ T857] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16362'. [ 2782.631338][ T871] hpfs: hpfs_map_sector(): read error [ 2782.702337][ T877] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.16370'. [ 2783.052850][ T889] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16375'. [ 2783.351524][ T907] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 2783.353734][ T907] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2783.360433][ T907] vhci_hcd vhci_hcd.0: Device attached [ 2783.408682][ T911] sctp: [Deprecated]: syz.6.16379 (pid 911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2783.408682][ T911] Use struct sctp_sack_info instead [ 2783.413787][ T906] sctp: [Deprecated]: syz.6.16379 (pid 906) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2783.413787][ T906] Use struct sctp_sack_info instead [ 2783.632086][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 2783.632130][ T40] audit: type=1326 audit(2000000302.350:57602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=899 comm="syz.7.16378" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc7579 code=0x0 [ 2783.636295][T31154] usb 54-1: SetAddress Request (36) to port 0 [ 2783.642762][T31154] usb 54-1: new SuperSpeed USB device number 36 using vhci_hcd [ 2784.237294][ T909] vhci_hcd: connection reset by peer [ 2784.239202][T31506] vhci_hcd vhci_hcd.8: stop threads [ 2784.240964][T31506] vhci_hcd vhci_hcd.8: release socket [ 2784.243156][T31506] vhci_hcd vhci_hcd.8: disconnect device [ 2784.466027][ T920] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.16382'. [ 2784.469912][ T920] x_tables: duplicate underflow at hook 1 [ 2784.646318][ T923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16383'. [ 2785.094089][ T950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16390'. [ 2785.160880][ T965] input: syz1 as /devices/virtual/input/input117 [ 2785.276336][ T979] netlink: 24 bytes leftover after parsing attributes in process `syz.7.16396'. [ 2786.304920][ T1002] trusted_key: encrypted_key: master key parameter 'defaul000000000000036861' is invalid [ 2787.805028][ T1046] trusted_key: encrypted_key: insufficient parameters specified [ 2788.124076][ T1060] 8021q: VLANs not supported on sit0 [ 2788.543294][ T40] audit: type=1326 audit(2000000307.500:57603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.5.16424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2788.546707][ T1089] netlink: 'syz.8.16421': attribute type 10 has an invalid length. [ 2788.565013][ T1081] bond5 (unregistering): Released all slaves [ 2788.575125][ T40] audit: type=1326 audit(2000000307.542:57604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.5.16424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2788.580126][ T1089] team0: Port device dummy0 added [ 2788.586547][ T40] audit: type=1326 audit(2000000307.553:57605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.5.16424" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2788.595571][ T40] audit: type=1326 audit(2000000307.553:57606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.5.16424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2788.605721][ T40] audit: type=1326 audit(2000000307.553:57607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.5.16424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2788.616788][ T40] audit: type=1326 audit(2000000307.584:57608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.5.16424" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2788.625605][ T40] audit: type=1326 audit(2000000307.595:57609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.5.16424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2788.633254][ T40] audit: type=1326 audit(2000000307.595:57610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.5.16424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2788.633392][ T1089] netlink: 'syz.8.16421': attribute type 10 has an invalid length. [ 2788.642749][ T40] audit: type=1326 audit(2000000307.605:57611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.5.16424" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2788.651186][ T40] audit: type=1326 audit(2000000307.605:57612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1084 comm="syz.5.16424" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d579 code=0x7ffc0000 [ 2788.654408][ T1089] team0: Port device dummy0 removed [ 2788.664120][T31154] usb 54-1: device descriptor read/8, error -110 [ 2788.665169][ T1089] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 2788.683050][ T1088] futex_wake_op: syz.5.16424 tries to shift op by 32; fix this program [ 2788.770439][ T1097] binder: 1096:1097 ioctl c0306201 800004c0 returned -22 [ 2789.035721][T31154] usb usb54-port1: attempt power cycle [ 2790.234449][T31154] usb usb54-port1: unable to enumerate USB device [ 2791.112338][ T1137] xt_l2tp: missing protocol rule (udp|l2tpip) [ 2791.703439][ T1149] netlink: 36 bytes leftover after parsing attributes in process `syz.7.16439'. [ 2792.048672][ T1151] futex_wake_op: syz.8.16440 tries to shift op by 32; fix this program [ 2792.386920][ T1161] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16443'. [ 2792.625532][ T1178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16449'. [ 2792.844117][ T1196] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16454'. [ 2792.914554][ T1199] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16455'. [ 2792.924262][ T1199] batman_adv: batadv0: Adding interface: gretap2 [ 2792.926402][ T1199] batman_adv: batadv0: The MTU of interface gretap2 is too small (1498) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 2792.934308][ T1199] batman_adv: batadv0: Interface activated: gretap2 [ 2792.957075][ T1197] overlay: Unknown parameter 'defcontext' [ 2793.095442][ T1205] netlink: 'syz.6.16458': attribute type 3 has an invalid length. [ 2793.484347][ T1212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2793.524605][ T1214] bridge_slave_0: left allmulticast mode [ 2793.527098][ T1214] bridge_slave_0: left promiscuous mode [ 2793.529025][ T1214] bridge0: port 1(bridge_slave_0) entered disabled state [ 2793.653295][ T1216] ip6t_REJECT: ECHOREPLY is not supported [ 2793.743478][ T1218] netlink: 24 bytes leftover after parsing attributes in process `syz.8.16464'. [ 2793.747323][ T1218] netlink: 24 bytes leftover after parsing attributes in process `syz.8.16464'. [ 2793.924192][ T1214] bridge_slave_1: left allmulticast mode [ 2793.926062][ T1214] bridge_slave_1: left promiscuous mode [ 2793.928055][ T1214] bridge0: port 2(bridge_slave_1) entered disabled state [ 2794.005520][ T1214] bond0: (slave bond_slave_0): Releasing backup interface [ 2794.025394][ T1214] bond_slave_0: left promiscuous mode [ 2794.118248][ T1214] bond0: (slave bond_slave_1): Releasing backup interface [ 2794.122176][ T1214] bond_slave_1: left promiscuous mode [ 2794.124471][ T1214] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2794.576572][ T1229] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2794.819247][ T1229] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2795.064801][ T1229] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2795.146259][ T1236] netlink: 24 bytes leftover after parsing attributes in process `syz.8.16468'. [ 2795.171602][ T1229] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2795.492266][ T1248] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2795.581799][ T1248] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2795.586813][ T1251] netlink: 20 bytes leftover after parsing attributes in process `syz.7.16471'. [ 2795.688093][T31817] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2795.697975][ T1248] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2795.741423][T12545] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2795.754538][T12545] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2795.763308][T12545] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2795.768550][ T1248] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2795.814813][ T1253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16472'. [ 2795.923381][T31817] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2795.956515][T12545] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2796.023693][T15431] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2796.054413][T12545] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2796.557449][ T1274] netlink: 156 bytes leftover after parsing attributes in process `syz.6.16479'. [ 2796.740528][ T1280] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2797.600818][ T1287] netlink: 'syz.8.16485': attribute type 1 has an invalid length. [ 2797.617870][ T1287] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2797.678357][ T1287] bond2: (slave veth5): Enslaving as an active interface with a down link [ 2797.688661][ T1295] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2797.691292][ T1295] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 2798.012399][ T1309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16490'. [ 2798.322770][ T1322] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16494'. [ 2798.326452][ T1321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2799.191791][ T1346] ptrace attach of ""[1347] was attempted by "/syz-executor exec"[1346] [ 2800.349967][ T1370] netlink: 16 bytes leftover after parsing attributes in process `syz.6.16511'. [ 2801.366939][ T1394] overlayfs: failed to clone upperpath [ 2801.417329][ T1394] overlayfs: failed to clone upperpath [ 2802.368359][ T1415] CIFS mount error: No usable UNC path provided in device string! [ 2802.368359][ T1415] [ 2802.373557][ T1415] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2802.474854][T25823] usb 13-1: new high-speed USB device number 49 using dummy_hcd [ 2802.742377][T25823] usb 13-1: Using ep0 maxpacket: 8 [ 2802.745405][T25823] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 2802.748118][T25823] usb 13-1: config 0 has no interface number 0 [ 2802.750114][T25823] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2802.754311][T25823] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2802.758465][T25823] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2802.762342][T25823] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2802.766412][T25823] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2802.769383][T25823] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2802.775893][T25823] usb 13-1: config 0 descriptor?? [ 2802.784134][T25823] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2802.795443][ T1420] syzkaller0: entered promiscuous mode [ 2802.798020][ T1420] syzkaller0: entered allmulticast mode [ 2802.992206][T31148] usb 13-1: USB disconnect, device number 49 [ 2802.998940][T31148] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 2803.564106][ T1430] lo speed is unknown, defaulting to 1000 [ 2803.844719][ T1435] netlink: 7 bytes leftover after parsing attributes in process `syz.8.16529'. [ 2803.851473][ T1435] netlink: 7 bytes leftover after parsing attributes in process `syz.8.16529'. [ 2804.876020][ T1449] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16532'. [ 2805.466278][ T1470] overlayfs: failed to clone upperpath [ 2805.678072][ T1478] netlink: 72 bytes leftover after parsing attributes in process `syz.6.16541'. [ 2806.395085][ T1490] netlink: 'syz.6.16546': attribute type 1 has an invalid length. [ 2806.560084][ T1497] lo speed is unknown, defaulting to 1000 [ 2806.698038][ T1497] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16549'. [ 2806.718799][ T1507] netlink: 16 bytes leftover after parsing attributes in process `syz.7.16551'. [ 2807.348641][ T1518] netlink: 104 bytes leftover after parsing attributes in process `syz.6.16554'. [ 2807.531634][ T1525] netlink: 28 bytes leftover after parsing attributes in process `syz.5.16557'. [ 2807.534373][T19177] libceph: connect (1)[c::]:6789 error -13 [ 2807.539861][T19177] libceph: mon0 (1)[c::]:6789 connect error [ 2807.785484][T19177] libceph: connect (1)[c::]:6789 error -13 [ 2807.788058][T19177] libceph: mon0 (1)[c::]:6789 connect error [ 2808.318001][ T1545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16560'. [ 2808.319107][T19177] libceph: connect (1)[c::]:6789 error -13 [ 2808.560412][ T1523] ceph: No mds server is up or the cluster is laggy [ 2808.582876][T19177] libceph: mon0 (1)[c::]:6789 connect error [ 2808.759688][ T1552] netlink: 'syz.8.16562': attribute type 1 has an invalid length. [ 2808.791425][ T1552] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2808.863897][ T1552] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2808.866690][ T1552] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2808.870892][ T1552] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 2808.908750][ T1556] mac80211_hwsim hwsim148 wlan0: entered promiscuous mode [ 2808.913914][ T1556] bond3: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 2809.393123][ T1570] 9pnet_fd: Insufficient options for proto=fd [ 2810.592659][ T1612] tipc: Enabling of bearer rejected, failed to enable media [ 2810.885377][ T1608] lo speed is unknown, defaulting to 1000 [ 2812.246753][ T1629] Bluetooth: MGMT ver 1.23 [ 2812.279989][ T1629] syz.8.16583 (1629): drop_caches: 2 [ 2812.283175][ T1629] syz.8.16583 (1629): drop_caches: 2 [ 2812.289877][ T1629] loop8: detected capacity change from 0 to 8 [ 2812.293591][ T1629] Dev loop8: unable to read RDB block 8 [ 2812.296364][ T1629] loop8: unable to read partition table [ 2812.298571][ T1629] loop8: partition table beyond EOD, truncated [ 2812.300577][ T1629] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2812.349644][ T1631] tmpfs: Bad value for 'mpol' [ 2812.988834][T31504] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2813.068389][T31504] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2813.192895][T31504] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2813.279975][T31504] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2813.327592][T30863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2813.332882][T30863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2813.338488][T30863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2813.345699][T30863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2813.349511][T30863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2813.424666][ T1655] lo speed is unknown, defaulting to 1000 [ 2813.563806][T31504] bridge_slave_1: left allmulticast mode [ 2813.566394][T31504] bridge_slave_1: left promiscuous mode [ 2813.568509][T31504] bridge0: port 2(bridge_slave_1) entered disabled state [ 2813.573762][T31504] bridge_slave_0: left allmulticast mode [ 2813.575580][T31504] bridge_slave_0: left promiscuous mode [ 2813.577520][T31504] bridge0: port 1(bridge_slave_0) entered disabled state [ 2813.774939][T31504] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 2813.822767][ T1660] fuse: Unknown parameter '0x00000000000000040xffffffffffffffffÿÿÿÿÿÿÿÿÿÿÿÿ' [ 2813.950721][ T1663] netlink: 24 bytes leftover after parsing attributes in process `syz.8.16596'. [ 2813.986068][ T1664] overlay: Unknown parameter 'fsname' [ 2813.993209][T31504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2813.999398][T31504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2814.005488][T31504] bond0 (unregistering): Released all slaves [ 2814.016034][T31504] bond1 (unregistering): Released all slaves [ 2814.033979][T31504] bond2 (unregistering): Released all slaves [ 2814.142268][ T1668] can0: slcan on ttyS3. [ 2814.591794][ T1667] can0 (unregistered): slcan off ttyS3. [ 2814.611800][ T1655] chnl_net:caif_netlink_parms(): no params data found [ 2814.750100][ T1655] bridge0: port 1(bridge_slave_0) entered blocking state [ 2814.760467][ T1655] bridge0: port 1(bridge_slave_0) entered disabled state [ 2814.765889][ T1655] bridge_slave_0: entered allmulticast mode [ 2814.769469][ T1655] bridge_slave_0: entered promiscuous mode [ 2814.773099][ T1655] bridge0: port 2(bridge_slave_1) entered blocking state [ 2814.775751][ T1655] bridge0: port 2(bridge_slave_1) entered disabled state [ 2814.778096][ T1655] bridge_slave_1: entered allmulticast mode [ 2814.780876][ T1655] bridge_slave_1: entered promiscuous mode [ 2814.828296][ T1655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2814.850387][T31504] hsr_slave_0: left promiscuous mode [ 2814.852621][T31504] hsr_slave_1: left promiscuous mode [ 2814.855797][T31504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2814.858154][T31504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2814.870015][T31504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2814.872356][T31504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2814.912594][T31504] veth1_macvtap: left promiscuous mode [ 2814.914381][T31504] veth0_macvtap: left promiscuous mode [ 2814.921774][T31504] veth1_vlan: left promiscuous mode [ 2814.923470][T31504] veth0_vlan: left promiscuous mode [ 2815.307187][T30863] Bluetooth: hci1: command tx timeout [ 2815.689114][T31504] team0 (unregistering): Port device team_slave_1 removed [ 2815.748834][T31504] team0 (unregistering): Port device team_slave_0 removed [ 2816.519077][ T1655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2816.571451][ T1655] team0: Port device team_slave_0 added [ 2816.586549][ T1655] team0: Port device team_slave_1 added [ 2816.624030][ T1713] fuse: Unknown parameter 'Fd' [ 2816.652106][ T1655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2816.654507][ T1655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2816.663501][ T1655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2816.668699][ T1655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2816.671862][ T1655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2816.681806][ T1655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2816.825804][ T1655] hsr_slave_0: entered promiscuous mode [ 2816.828172][ T1655] hsr_slave_1: entered promiscuous mode [ 2816.830234][ T1655] debugfs: 'hsr0' already exists in 'hsr' [ 2816.832084][ T1655] Cannot create hsr debugfs directory [ 2817.290413][T30863] Bluetooth: hci1: command tx timeout [ 2817.500584][ T1724] random: crng reseeded on system resumption [ 2817.662143][ T1729] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16614'. [ 2817.727943][ T1728] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16612'. [ 2818.487735][T30863] Bluetooth: hci3: unexpected event 0x2f length: 1017 > 260 [ 2818.591490][ T1742] syz.8.16618 (1742): drop_caches: 2 [ 2818.787103][ T1655] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2818.791939][ T1655] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2818.818485][ T1655] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2818.835406][ T1655] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2819.267122][ T1655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2819.304501][ T1655] 8021q: adding VLAN 0 to HW filter on device team0 [ 2819.320905][T31817] bridge0: port 1(bridge_slave_0) entered blocking state [ 2819.323195][T31817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2819.330365][T15431] bridge0: port 2(bridge_slave_1) entered blocking state [ 2819.332642][T15431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2819.374617][T30863] Bluetooth: hci1: command tx timeout [ 2819.514136][ T1655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2819.536045][ T1655] veth0_vlan: entered promiscuous mode [ 2819.542670][ T1655] veth1_vlan: entered promiscuous mode [ 2819.574854][ T1655] veth0_macvtap: entered promiscuous mode [ 2819.583131][ T1655] veth1_macvtap: entered promiscuous mode [ 2819.596892][ T1655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2819.604056][ T1655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2819.610510][T21192] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2819.613382][T31820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.626726][T21192] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2819.631994][T21192] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2819.638033][T21192] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2819.638193][T31820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.642064][T21192] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2819.697258][T31820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.710535][T31820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.746224][ T1772] lo speed is unknown, defaulting to 1000 [ 2819.803057][T12545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2819.806265][T12545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2819.868929][T31820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2819.872092][T31820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2820.068113][ T1772] chnl_net:caif_netlink_parms(): no params data found [ 2820.222337][ T1800] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16625'. [ 2820.350906][ T1772] bridge0: port 1(bridge_slave_0) entered blocking state [ 2820.353949][ T1772] bridge0: port 1(bridge_slave_0) entered disabled state [ 2820.356302][ T1772] bridge_slave_0: entered allmulticast mode [ 2820.368919][ T1772] bridge_slave_0: entered promiscuous mode [ 2820.377308][ T1772] bridge0: port 2(bridge_slave_1) entered blocking state [ 2820.383256][ T1772] bridge0: port 2(bridge_slave_1) entered disabled state [ 2820.388196][ T1772] bridge_slave_1: entered allmulticast mode [ 2820.399074][ T1772] bridge_slave_1: entered promiscuous mode [ 2820.417301][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 2820.417314][ T40] audit: type=1326 audit(2000000340.930:57657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1815 comm="syz.7.16626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2820.426058][ T40] audit: type=1326 audit(2000000340.930:57658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1815 comm="syz.7.16626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2820.427510][ T1772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2820.440795][ T40] audit: type=1326 audit(2000000340.930:57659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1815 comm="syz.7.16626" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2820.449508][ T40] audit: type=1326 audit(2000000340.930:57660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1815 comm="syz.7.16626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2820.454562][ T1772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2820.460592][ T40] audit: type=1326 audit(2000000340.930:57661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1815 comm="syz.7.16626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2820.471876][ T40] audit: type=1326 audit(2000000340.930:57662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1815 comm="syz.7.16626" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2820.481011][ T40] audit: type=1326 audit(2000000340.930:57663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1815 comm="syz.7.16626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2820.489805][ T40] audit: type=1326 audit(2000000340.930:57664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1815 comm="syz.7.16626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2820.499568][ T40] audit: type=1326 audit(2000000340.930:57665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1815 comm="syz.7.16626" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2820.518771][ T1772] team0: Port device team_slave_0 added [ 2820.519407][ T40] audit: type=1326 audit(2000000340.930:57666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1815 comm="syz.7.16626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 2820.527400][ T1772] team0: Port device team_slave_1 added [ 2820.547262][ T1772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2820.549674][ T1772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2820.558535][ T1772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2820.563170][ T1772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2820.565377][ T1772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2820.573991][ T1772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2820.615405][ T1772] hsr_slave_0: entered promiscuous mode [ 2820.619247][ T1772] hsr_slave_1: entered promiscuous mode [ 2820.622347][ T1772] debugfs: 'hsr0' already exists in 'hsr' [ 2820.624667][ T1772] Cannot create hsr debugfs directory [ 2821.332013][T30863] Bluetooth: hci1: command tx timeout [ 2821.490463][ T1847] random: crng reseeded on system resumption [ 2821.570436][T30863] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 2821.636759][T30863] Bluetooth: hci2: command tx timeout [ 2821.893377][T31504] bridge_slave_1: left allmulticast mode [ 2821.896886][T31504] bridge_slave_1: left promiscuous mode [ 2821.899377][T31504] bridge0: port 2(bridge_slave_1) entered disabled state [ 2821.914320][T31504] bridge_slave_0: left allmulticast mode [ 2821.916766][T31504] bridge_slave_0: left promiscuous mode [ 2821.919333][T31504] bridge0: port 1(bridge_slave_0) entered disabled state [ 2822.572520][T31504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2822.576530][T31504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2822.580101][T31504] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 2822.591352][T31504] bond0 (unregistering): Released all slaves [ 2822.595856][T31504] bond1 (unregistering): Released all slaves [ 2822.768899][T31504] bond2 (unregistering): (slave veth5): Releasing active interface [ 2822.774797][T31504] bond2 (unregistering): Released all slaves [ 2822.982149][T31504] bond3 (unregistering): Released all slaves [ 2823.074107][T30863] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 2823.108418][T31504] tipc: Left network mode [ 2823.619798][T30863] Bluetooth: hci2: command tx timeout [ 2823.701220][T31504] hsr_slave_0: left promiscuous mode [ 2823.704738][T31504] hsr_slave_1: left promiscuous mode [ 2823.709511][T31504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2823.713417][T31504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2824.767156][T31504] team0 (unregistering): Port device team_slave_1 removed [ 2824.867164][T31504] team0 (unregistering): Port device team_slave_0 removed [ 2825.411375][ T1772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2825.436380][ T1772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2825.445189][ T1772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2825.458208][ T1772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2825.562117][ T1772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2825.571969][ T1772] 8021q: adding VLAN 0 to HW filter on device team0 [ 2825.590949][T29043] bridge0: port 1(bridge_slave_0) entered blocking state [ 2825.593882][T29043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2825.618765][T31819] bridge0: port 2(bridge_slave_1) entered blocking state [ 2825.621815][T30863] Bluetooth: hci2: command tx timeout [ 2825.624315][T31819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2825.755114][ T1772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2825.760718][ T1772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2825.834917][T31504] IPVS: stop unused estimator thread 0... [ 2826.554325][ T1996] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16656'. [ 2826.577747][ T2002] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 2826.612898][ T1772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2826.687005][ T1772] veth0_vlan: entered promiscuous mode [ 2826.710035][ T1772] veth1_vlan: entered promiscuous mode [ 2826.742892][ T1772] veth0_macvtap: entered promiscuous mode [ 2826.757464][ T1772] veth1_macvtap: entered promiscuous mode [ 2826.770661][ T1772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2826.777297][ T1772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2827.101908][T31504] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2827.106627][T31504] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2827.126507][T31504] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2827.137541][T31504] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2827.174418][T29043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2827.177325][T29043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2827.203065][T29043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2827.206978][T29043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2827.589611][T30863] Bluetooth: hci2: command tx timeout [ 2827.719708][ T2028] netlink: 'syz.6.16662': attribute type 4 has an invalid length. [ 2827.758547][ T2029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16622'. [ 2827.766218][ T2028] netlink: 'syz.6.16662': attribute type 4 has an invalid length. [ 2828.552367][ T7017] IPVS: starting estimator thread 0... [ 2828.565992][T21192] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2828.576401][T21192] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2828.590185][T21192] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2828.593578][T21192] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2828.596507][T21192] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2828.643515][ T2040] IPVS: using max 41 ests per chain, 98400 per kthread [ 2828.646681][T31817] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2828.738704][ T2035] lo speed is unknown, defaulting to 1000 [ 2828.760815][ T2047] overlayfs: conflicting lowerdir path [ 2828.777680][ T2044] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2828.785943][T31817] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2828.856649][ T2057] fuse: Unknown parameter 'fd“0x0000000000000004' [ 2828.883874][T31817] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2828.930188][ T2035] chnl_net:caif_netlink_parms(): no params data found [ 2828.989805][ T2035] bridge0: port 1(bridge_slave_0) entered blocking state [ 2828.992205][ T2035] bridge0: port 1(bridge_slave_0) entered disabled state [ 2828.994521][ T2035] bridge_slave_0: entered allmulticast mode [ 2828.997536][ T2035] bridge_slave_0: entered promiscuous mode [ 2829.002434][T31817] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2829.016432][ T2035] bridge0: port 2(bridge_slave_1) entered blocking state [ 2829.019202][ T2035] bridge0: port 2(bridge_slave_1) entered disabled state [ 2829.021581][ T2035] bridge_slave_1: entered allmulticast mode [ 2829.024329][ T2035] bridge_slave_1: entered promiscuous mode [ 2829.039664][ T2035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2829.044653][ T2035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2829.061445][ T2035] team0: Port device team_slave_0 added [ 2829.065054][ T2035] team0: Port device team_slave_1 added [ 2829.079453][ T2035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2829.081720][ T2035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2829.090192][ T2035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2829.102084][ T2035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2829.104342][ T2035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2829.115082][ T2035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2829.298639][ T2035] hsr_slave_0: entered promiscuous mode [ 2829.301059][ T2035] hsr_slave_1: entered promiscuous mode [ 2829.303411][ T2035] debugfs: 'hsr0' already exists in 'hsr' [ 2829.305250][ T2035] Cannot create hsr debugfs directory [ 2829.507043][T31817] batadv2: left allmulticast mode [ 2829.509272][T31817] batadv2: left promiscuous mode [ 2829.520747][T31817] bridge0: port 4(batadv2) entered disabled state [ 2829.538602][T31817] batadv1: left allmulticast mode [ 2829.541809][T31817] batadv1: left promiscuous mode [ 2829.544104][T31817] bridge0: port 3(batadv1) entered disabled state [ 2830.331357][T24266] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2830.459756][T31817] bond0 (unregistering): Released all slaves [ 2830.464112][T31817] bond1 (unregistering): Released all slaves [ 2830.476170][T24266] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2830.480164][T24266] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2830.484520][T24266] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2830.492004][T24266] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 2830.496132][T24266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 2830.499147][T24266] usb 5-1: Product: syz [ 2830.500832][T24266] usb 5-1: Manufacturer: syz [ 2830.502861][T24266] usb 5-1: SerialNumber: syz [ 2830.570318][T30863] Bluetooth: hci5: command tx timeout [ 2830.684755][T31817] bond2 (unregistering): Released all slaves [ 2830.690980][T31817] bond3 (unregistering): Released all slaves [ 2830.705435][T24266] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2830.787288][T31817] : left promiscuous mode [ 2830.812194][ T2097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16683'. [ 2830.898122][T24266] usb 5-1: USB disconnect, device number 59 [ 2830.904620][T24266] usblp0: removed [ 2830.919143][T31817] tipc: Left network mode [ 2830.959707][T31817] IPVS: stopping backup sync thread 27956 ... [ 2831.063941][ T2114] netlink: 'syz.2.16681': attribute type 10 has an invalid length. [ 2831.070083][ T2114] bridge0: port 2(bridge_slave_1) entered disabled state [ 2831.072694][ T2114] bridge0: port 1(bridge_slave_0) entered disabled state [ 2831.081535][ T2114] bridge0: port 2(bridge_slave_1) entered blocking state [ 2831.084477][ T2114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2831.087531][ T2114] bridge0: port 1(bridge_slave_0) entered blocking state [ 2831.090116][ T2114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2831.097135][ T2114] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2831.377506][ T2035] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2831.402026][ T2134] lo speed is unknown, defaulting to 1000 [ 2831.402626][ T2035] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2831.423929][ T2035] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2831.439448][ T2035] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2831.452169][T31817] hsr_slave_0: left promiscuous mode [ 2831.455206][T31817] hsr_slave_1: left promiscuous mode [ 2831.670894][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 2831.670910][ T40] audit: type=1326 audit(2000000352.742:57682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2147 comm="syz.0.16688" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x0 [ 2831.755336][ T2151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16688'. [ 2831.882693][ T2153] xt_recent: Unsupported userspace flags (000000fe) [ 2831.898854][ T2153] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16688'. [ 2832.552090][T30863] Bluetooth: hci5: command tx timeout [ 2832.706878][ T2156] lo speed is unknown, defaulting to 1000 [ 2832.903886][ T2035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2832.929324][ T2035] 8021q: adding VLAN 0 to HW filter on device team0 [ 2832.937707][T15433] bridge0: port 1(bridge_slave_0) entered blocking state [ 2832.940303][T15433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2832.947398][T31819] bridge0: port 2(bridge_slave_1) entered blocking state [ 2832.949722][T31819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2833.119722][ T2189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2833.122890][ T2189] IPv6: NLM_F_CREATE should be set when creating new route [ 2833.136270][ T2035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2833.221814][ T2193] 9p: Bad value for 'dfltgid' [ 2833.223370][ T2193] 9p: Bad value for 'dfltgid' [ 2833.303283][ T2035] veth0_vlan: entered promiscuous mode [ 2833.309992][ T2035] veth1_vlan: entered promiscuous mode [ 2833.335631][ T2035] veth0_macvtap: entered promiscuous mode [ 2833.351034][ T2035] veth1_macvtap: entered promiscuous mode [ 2833.382940][ T2035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2833.393932][ T2035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2833.406375][T31819] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2833.410080][T31819] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2833.417928][T31819] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2833.426432][T31819] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2833.477124][T31817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2833.489864][T31817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2833.502072][T31819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2833.504642][T31819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2833.618658][ T2224] netlink: 284 bytes leftover after parsing attributes in process `syz.0.16698'. [ 2833.641456][ T2226] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16664'. [ 2834.325193][ T2249] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16704'. [ 2834.526455][T30863] Bluetooth: hci5: command tx timeout [ 2834.643421][ T2259] netlink: 'syz.6.16707': attribute type 10 has an invalid length. [ 2834.660172][ T2260] Malformed UNC in devname [ 2834.660172][ T2260] [ 2834.663072][ T2260] CIFS: VFS: Malformed UNC in devname [ 2834.753621][ T2268] syzkaller1: entered promiscuous mode [ 2834.755571][ T2268] syzkaller1: entered allmulticast mode [ 2835.001662][ T2274] overlayfs: failed to clone lowerpath [ 2835.033736][ T2276] FAULT_INJECTION: forcing a failure. [ 2835.033736][ T2276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2835.038177][ T2276] CPU: 3 UID: 0 PID: 2276 Comm: syz.0.16712 Tainted: G L syzkaller #0 PREEMPT(full) [ 2835.038196][ T2276] Tainted: [L]=SOFTLOCKUP [ 2835.038200][ T2276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2835.038207][ T2276] Call Trace: [ 2835.038211][ T2276] [ 2835.038216][ T2276] dump_stack_lvl+0x100/0x190 [ 2835.038233][ T2276] should_fail_ex.cold+0x5/0xa [ 2835.038252][ T2276] _copy_from_user+0x2e/0xd0 [ 2835.038270][ T2276] get_compat_msghdr+0xb3/0x4b0 [ 2835.038287][ T2276] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2835.038308][ T2276] ___sys_sendmsg+0x1b6/0x1e0 [ 2835.038323][ T2276] ? __pfx____sys_sendmsg+0x10/0x10 [ 2835.038352][ T2276] __sys_sendmsg+0x170/0x220 [ 2835.038369][ T2276] ? __pfx___sys_sendmsg+0x10/0x10 [ 2835.038391][ T2276] ? __pfx_ksys_write+0x10/0x10 [ 2835.038403][ T2276] ? fput+0x79/0x100 [ 2835.038420][ T2276] __do_fast_syscall_32+0xde/0x660 [ 2835.038437][ T2276] do_fast_syscall_32+0x32/0x70 [ 2835.038451][ T2276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2835.038465][ T2276] RIP: 0023:0xf7f52579 [ 2835.038474][ T2276] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 [ 2835.038486][ T2276] RSP: 002b:00000000f541650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2835.038497][ T2276] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001140 [ 2835.038504][ T2276] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2835.038510][ T2276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2835.038517][ T2276] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2835.038523][ T2276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2835.038537][ T2276] [ 2835.163167][ T2284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16716'. [ 2835.170801][ T2285] dvmrp1: entered allmulticast mode [ 2835.394276][ T2294] netlink: 'syz.6.16719': attribute type 1 has an invalid length. [ 2835.720799][ T2317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16719'. [ 2836.508214][T30863] Bluetooth: hci5: command tx timeout [ 2836.543548][ T2329] ceph: No mds server is up or the cluster is laggy [ 2837.824015][T30863] Bluetooth: Wrong link type (-57) [ 2837.830671][ T2345] 9pnet_virtio: no channels available for device syz [ 2838.231937][T13557] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 2838.387194][T13557] usb 12-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2838.391176][T13557] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2838.395153][T13557] usb 12-1: Product: syz [ 2838.397202][T13557] usb 12-1: Manufacturer: syz [ 2838.398787][T13557] usb 12-1: SerialNumber: syz [ 2838.401701][T13557] usb 12-1: config 0 descriptor?? [ 2838.598232][T13557] usb 12-1: USB disconnect, device number 13 [ 2838.643384][ T2373] bridge0: port 3(batadv1) entered blocking state [ 2838.645712][ T2373] bridge0: port 3(batadv1) entered disabled state [ 2838.648227][ T2373] batadv1: entered allmulticast mode [ 2838.659211][ T2373] batadv1: entered promiscuous mode [ 2839.121603][T31504] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 2839.124519][T31504] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 2839.186409][ T2383] netlink: 228 bytes leftover after parsing attributes in process `syz.0.16746'. [ 2839.518963][ T2390] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 2839.521109][ T2390] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2839.523683][ T2390] vhci_hcd vhci_hcd.0: Device attached [ 2839.527462][ T2390] netlink: 'syz.0.16746': attribute type 2 has an invalid length. [ 2839.539890][ T2390] input: syz0 as /devices/virtual/input/input120 [ 2839.793706][ T6020] usb 38-1: SetAddress Request (75) to port 0 [ 2839.803400][ T6020] usb 38-1: new SuperSpeed USB device number 75 using vhci_hcd [ 2839.962582][ T2404] 9p: Bad value for 'rfdno' [ 2840.000929][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880597c0800: rx timeout, send abort [ 2840.004385][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff8880597c0800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 2840.005728][ T2392] vhci_hcd: connection reset by peer [ 2840.038609][T29043] vhci_hcd vhci_hcd.0: stop threads [ 2840.040699][T29043] vhci_hcd vhci_hcd.0: release socket [ 2840.040782][T29043] vhci_hcd vhci_hcd.0: disconnect device [ 2840.121461][T31178] IPVS: starting estimator thread 0... [ 2840.133218][ T2414] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 2840.204522][ T2415] IPVS: using max 40 ests per chain, 96000 per kthread [ 2840.529389][ T2423] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16754'. [ 2840.647319][ T2425] Cannot find set identified by id 3 to match [ 2841.415545][ T40] audit: type=1326 audit(2000000262.232:57683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2439 comm="syz.2.16759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 2841.436757][ T40] audit: type=1326 audit(2000000262.232:57684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2439 comm="syz.2.16759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 2841.458169][ T40] audit: type=1326 audit(2000000262.242:57685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2439 comm="syz.2.16759" exe="/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 2841.479216][ T40] audit: type=1326 audit(2000000262.242:57686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2439 comm="syz.2.16759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 2841.503291][ T40] audit: type=1326 audit(2000000262.242:57687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2439 comm="syz.2.16759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 2841.524063][ T40] audit: type=1326 audit(2000000262.242:57688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2439 comm="syz.2.16759" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 2841.544111][ T40] audit: type=1326 audit(2000000262.253:57689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2439 comm="syz.2.16759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 2841.567890][ T40] audit: type=1326 audit(2000000262.253:57690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2439 comm="syz.2.16759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 2841.580804][ T40] audit: type=1326 audit(2000000262.295:57691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2439 comm="syz.2.16759" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 2841.590680][ T40] audit: type=1326 audit(2000000262.295:57692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2439 comm="syz.2.16759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 2841.618083][ T1440] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2841.620623][ T1440] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 2841.623913][ C2] ------------[ cut here ]------------ [ 2841.626532][ C2] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 2841.628645][ C2] WARNING: kernel/workqueue.c:2251 at __queue_work+0xcbb/0x10f0, CPU#2: kworker/2:0H/30024 [ 2841.631808][ C2] Modules linked in: [ 2841.633649][ C2] CPU: 2 UID: 0 PID: 30024 Comm: kworker/2:0H Tainted: G L syzkaller #0 PREEMPT(full) [ 2841.637096][ C2] Tainted: [L]=SOFTLOCKUP [ 2841.638460][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2841.641623][ C2] Workqueue: events_highpri snd_vmidi_output_work [ 2841.643634][ C2] RIP: 0010:__queue_work+0xcbf/0x10f0 [ 2841.645346][ C2] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 15 04 00 00 48 8d 3d e5 a9 ec 0e 48 8b 75 18 <67> 48 0f b9 3a e9 77 f7 ff ff e8 22 8e 38 00 90 0f 0b 90 e9 ff f5 [ 2841.651329][ C2] RSP: 0018:ffffc90000538bf0 EFLAGS: 00010046 [ 2841.653261][ C2] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100ead6151 [ 2841.655737][ C2] RDX: ffff88801b613178 RSI: ffffffff8a6b5130 RDI: ffffffff90ba6630 [ 2841.658196][ C2] RBP: ffff8880756b0a70 R08: 0000000000000005 R09: 0000000000000000 [ 2841.660681][ C2] R10: 0000000000000100 R11: 0000000000000000 R12: ffff88801b613000 [ 2841.663147][ C2] R13: 1ffff920000a718f R14: ffffffff81cdcd50 R15: 0000000000000001 [ 2841.665611][ C2] FS: 0000000000000000(0000) GS:ffff8880975e3000(0000) knlGS:0000000000000000 [ 2841.668413][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2841.670504][ C2] CR2: 0000000080001d84 CR3: 0000000069a33000 CR4: 0000000000352ef0 [ 2841.672994][ C2] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2841.675467][ C2] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2841.677943][ C2] Call Trace: [ 2841.679010][ C2] [ 2841.679975][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 2841.681629][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 2841.683465][ C2] call_timer_fn+0x19a/0x590 [ 2841.684960][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 2841.686571][ C2] ? __run_timers+0x560/0xac0 [ 2841.688089][ C2] ? __run_timers+0x560/0xac0 [ 2841.689609][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 2841.691436][ C2] __run_timers+0x570/0xac0 [ 2841.692900][ C2] ? __pfx___run_timers+0x10/0x10 [ 2841.694505][ C2] run_timer_base+0x114/0x190 [ 2841.696034][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 2841.697680][ C2] run_timer_softirq+0x1a/0x50 [ 2841.699197][ C2] handle_softirqs+0x1ea/0x910 [ 2841.700853][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 2841.702530][ C2] __irq_exit_rcu+0xef/0x150 [ 2841.704011][ C2] irq_exit_rcu+0x9/0x30 [ 2841.705365][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2841.707147][ C2] [ 2841.708118][ C2] [ 2841.709063][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2841.710945][ C2] RIP: 0010:finish_task_switch.isra.0+0x20d/0xb70 [ 2841.712965][ C2] Code: a9 e3 0e 48 85 d2 0f 85 7a 06 00 00 85 c0 0f 85 a6 01 00 00 48 89 df e8 31 e5 ff ff e8 bc 38 3a 00 fb 49 8d bc 24 48 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 2841.718937][ C2] RSP: 0018:ffffc9000f187898 EFLAGS: 00000206 [ 2841.720875][ C2] RAX: 000000000204ffa5 RBX: ffff88802b43adc0 RCX: 0000000000000040 [ 2841.723340][ C2] RDX: 0000000000000000 RSI: ffffffff8dc4156b RDI: ffff88802353bb08 [ 2841.725834][ C2] RBP: ffffc9000f1878e0 R08: 0000000000000001 R09: 0000000000000000 [ 2841.728314][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802353a4c0 [ 2841.730799][ C2] R13: ffff888062bd4980 R14: ffff888062bd4980 R15: ffff88802b43bbf0 [ 2841.733275][ C2] ? finish_task_switch.isra.0+0x204/0xb70 [ 2841.735090][ C2] ? __schedule+0xf65/0x5e10 [ 2841.736564][ C2] __schedule+0xfec/0x5e10 [ 2841.737876][ C2] ? try_to_wake_up+0xcef/0x1a60 [ 2841.739478][ C2] ? __pfx___schedule+0x10/0x10 [ 2841.741026][ C2] ? __wake_up+0x3f/0x60 [ 2841.742373][ C2] ? __wake_up+0x3f/0x60 [ 2841.743735][ C2] ? preempt_schedule_thunk+0x16/0x30 [ 2841.745419][ C2] preempt_schedule_common+0x42/0xc0 [ 2841.747088][ C2] preempt_schedule_thunk+0x16/0x30 [ 2841.748770][ C2] _raw_spin_unlock_irqrestore+0x61/0x80 [ 2841.750551][ C2] snd_rawmidi_transmit+0x117/0x160 [ 2841.752203][ C2] snd_vmidi_output_work+0x111/0x390 [ 2841.753873][ C2] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 2841.755715][ C2] ? process_one_work+0x80b/0x1840 [ 2841.757341][ C2] ? rcu_is_watching+0x12/0xc0 [ 2841.758857][ C2] process_one_work+0x9c2/0x1840 [ 2841.760461][ C2] ? __pfx_process_one_work+0x10/0x10 [ 2841.762169][ C2] ? assign_work+0x19c/0x250 [ 2841.763636][ C2] worker_thread+0x5da/0xe40 [ 2841.765116][ C2] ? __pfx_worker_thread+0x10/0x10 [ 2841.766738][ C2] ? kthread+0x17d/0x730 [ 2841.768108][ C2] ? __pfx_worker_thread+0x10/0x10 [ 2841.769758][ C2] kthread+0x3b3/0x730 [ 2841.771057][ C2] ? __pfx_kthread+0x10/0x10 [ 2841.772542][ C2] ? ret_from_fork+0x79/0xaf0 [ 2841.774071][ C2] ? ret_from_fork+0x79/0xaf0 [ 2841.775564][ C2] ? rcu_is_watching+0x12/0xc0 [ 2841.777097][ C2] ? __pfx_kthread+0x10/0x10 [ 2841.778564][ C2] ret_from_fork+0x754/0xaf0 [ 2841.780066][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 2841.781678][ C2] ? native_load_gs_index+0x1e/0xc0 [ 2841.783322][ C2] ? __switch_to+0x7b9/0x10c0 [ 2841.784829][ C2] ? __pfx_kthread+0x10/0x10 [ 2841.786298][ C2] ret_from_fork_asm+0x1a/0x30 [ 2841.787855][ C2] [ 2841.788849][ C2] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2841.791141][ C2] CPU: 2 UID: 0 PID: 30024 Comm: kworker/2:0H Tainted: G L syzkaller #0 PREEMPT(full) [ 2841.794497][ C2] Tainted: [L]=SOFTLOCKUP [ 2841.795876][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2841.798976][ C2] Workqueue: events_highpri snd_vmidi_output_work [ 2841.801000][ C2] Call Trace: [ 2841.802064][ C2] [ 2841.802988][ C2] dump_stack_lvl+0x100/0x190 [ 2841.804561][ C2] vpanic+0x20d/0x630 [ 2841.805830][ C2] panic+0xd1/0xd1 [ 2841.807018][ C2] ? __pfx_panic+0x10/0x10 [ 2841.808434][ C2] ? check_panic_on_warn+0x1f/0x90 [ 2841.810039][ C2] check_panic_on_warn.cold+0x19/0x34 [ 2841.811732][ C2] ? __queue_work+0xcbb/0x10f0 [ 2841.813249][ C2] __warn.cold+0x191/0x2f8 [ 2841.814660][ C2] __report_bug+0x296/0x3d0 [ 2841.816101][ C2] ? __queue_work+0xcbb/0x10f0 [ 2841.817616][ C2] ? __pfx___report_bug+0x10/0x10 [ 2841.819202][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2841.821096][ C2] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 2841.822796][ C2] ? look_up_lock_class+0x64/0x120 [ 2841.824424][ C2] report_bug_entry+0xe1/0x290 [ 2841.825940][ C2] ? __queue_work+0xcbf/0x10f0 [ 2841.827458][ C2] handle_bug+0x1c9/0x2a0 [ 2841.828850][ C2] exc_invalid_op+0x17/0x50 [ 2841.830314][ C2] asm_exc_invalid_op+0x1a/0x20 [ 2841.831861][ C2] RIP: 0010:__queue_work+0xcbf/0x10f0 [ 2841.833549][ C2] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 15 04 00 00 48 8d 3d e5 a9 ec 0e 48 8b 75 18 <67> 48 0f b9 3a e9 77 f7 ff ff e8 22 8e 38 00 90 0f 0b 90 e9 ff f5 [ 2841.839538][ C2] RSP: 0018:ffffc90000538bf0 EFLAGS: 00010046 [ 2841.841458][ C2] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100ead6151 [ 2841.843934][ C2] RDX: ffff88801b613178 RSI: ffffffff8a6b5130 RDI: ffffffff90ba6630 [ 2841.846409][ C2] RBP: ffff8880756b0a70 R08: 0000000000000005 R09: 0000000000000000 [ 2841.848893][ C2] R10: 0000000000000100 R11: 0000000000000000 R12: ffff88801b613000 [ 2841.851391][ C2] R13: 1ffff920000a718f R14: ffffffff81cdcd50 R15: 0000000000000001 [ 2841.854027][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 2841.855903][ C2] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 2841.857593][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 2841.859261][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 2841.861213][ C2] call_timer_fn+0x19a/0x590 [ 2841.862705][ C2] ? __pfx_call_timer_fn+0x10/0x10 [ 2841.864328][ C2] ? __run_timers+0x560/0xac0 [ 2841.865827][ C2] ? __run_timers+0x560/0xac0 [ 2841.867331][ C2] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 2841.869255][ C2] __run_timers+0x570/0xac0 [ 2841.870801][ C2] ? __pfx___run_timers+0x10/0x10 [ 2841.872439][ C2] run_timer_base+0x114/0x190 [ 2841.873942][ C2] ? __pfx_run_timer_base+0x10/0x10 [ 2841.875570][ C2] run_timer_softirq+0x1a/0x50 [ 2841.877101][ C2] handle_softirqs+0x1ea/0x910 [ 2841.878620][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 2841.880336][ C2] __irq_exit_rcu+0xef/0x150 [ 2841.881859][ C2] irq_exit_rcu+0x9/0x30 [ 2841.883218][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2841.885016][ C2] [ 2841.885965][ C2] [ 2841.886914][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2841.888838][ C2] RIP: 0010:finish_task_switch.isra.0+0x20d/0xb70 [ 2841.890988][ C2] Code: a9 e3 0e 48 85 d2 0f 85 7a 06 00 00 85 c0 0f 85 a6 01 00 00 48 89 df e8 31 e5 ff ff e8 bc 38 3a 00 fb 49 8d bc 24 48 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 2841.897177][ C2] RSP: 0018:ffffc9000f187898 EFLAGS: 00000206 [ 2841.899104][ C2] RAX: 000000000204ffa5 RBX: ffff88802b43adc0 RCX: 0000000000000040 [ 2841.901737][ C2] RDX: 0000000000000000 RSI: ffffffff8dc4156b RDI: ffff88802353bb08 [ 2841.904240][ C2] RBP: ffffc9000f1878e0 R08: 0000000000000001 R09: 0000000000000000 [ 2841.906765][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802353a4c0 [ 2841.909244][ C2] R13: ffff888062bd4980 R14: ffff888062bd4980 R15: ffff88802b43bbf0 [ 2841.912329][ C2] ? finish_task_switch.isra.0+0x204/0xb70 [ 2841.914176][ C2] ? __schedule+0xf65/0x5e10 [ 2841.915654][ C2] __schedule+0xfec/0x5e10 [ 2841.917093][ C2] ? try_to_wake_up+0xcef/0x1a60 [ 2841.918671][ C2] ? __pfx___schedule+0x10/0x10 [ 2841.920335][ C2] ? __wake_up+0x3f/0x60 [ 2841.922118][ C2] ? __wake_up+0x3f/0x60 [ 2841.923518][ C2] ? preempt_schedule_thunk+0x16/0x30 [ 2841.925266][ C2] preempt_schedule_common+0x42/0xc0 [ 2841.926948][ C2] preempt_schedule_thunk+0x16/0x30 [ 2841.928646][ C2] _raw_spin_unlock_irqrestore+0x61/0x80 [ 2841.930563][ C2] snd_rawmidi_transmit+0x117/0x160 [ 2841.932759][ C2] snd_vmidi_output_work+0x111/0x390 [ 2841.934913][ C2] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 2841.937355][ C2] ? process_one_work+0x80b/0x1840 [ 2841.939511][ C2] ? rcu_is_watching+0x12/0xc0 [ 2841.941421][ C2] process_one_work+0x9c2/0x1840 [ 2841.943330][ C2] ? __pfx_process_one_work+0x10/0x10 [ 2841.945508][ C2] ? assign_work+0x19c/0x250 [ 2841.947345][ C2] worker_thread+0x5da/0xe40 [ 2841.949413][ C2] ? __pfx_worker_thread+0x10/0x10 [ 2841.951490][ C2] ? kthread+0x17d/0x730 [ 2841.953311][ C2] ? __pfx_worker_thread+0x10/0x10 [ 2841.955206][ C2] kthread+0x3b3/0x730 [ 2841.956804][ C2] ? __pfx_kthread+0x10/0x10 [ 2841.958644][ C2] ? ret_from_fork+0x79/0xaf0 [ 2841.960568][ C2] ? ret_from_fork+0x79/0xaf0 [ 2841.962527][ C2] ? rcu_is_watching+0x12/0xc0 [ 2841.964548][ C2] ? __pfx_kthread+0x10/0x10 [ 2841.966419][ C2] ret_from_fork+0x754/0xaf0 [ 2841.968328][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 2841.970499][ C2] ? native_load_gs_index+0x1e/0xc0 [ 2841.972646][ C2] ? __switch_to+0x7b9/0x10c0 [ 2841.974540][ C2] ? __pfx_kthread+0x10/0x10 [ 2841.976535][ C2] ret_from_fork_asm+0x1a/0x30 [ 2841.978608][ C2] [ 2841.980740][ C2] Kernel Offset: disabled [ 2841.982574][ C2] Rebooting in 86400 seconds..