last executing test programs: 7.311670371s ago: executing program 3 (id=58): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0xffffffffffffffb0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup, r0, 0x24, 0x0, 0xffffffffffffffff, @void, @value=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1fe}}, &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x2d, 0x0, 0x0, 0xffffffffffffffa6, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0xffff, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$qrtr(r1, &(0x7f0000000040), 0xc) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 6.193273988s ago: executing program 2 (id=61): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xd4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xb, 0x2}}, @TCA_U32_SEL={0x94, 0x5, {0x0, 0xfe, 0x8, 0x100, 0x8, 0xd, 0x200, 0x8000, [{0x7, 0x5, 0x6, 0x8}, {0xfffffff0, 0x4, 0x100, 0x6}, {0x4, 0x0, 0xffff6e3f, 0x8}, {0x43ffcb0c, 0x3, 0x3, 0x3}, {0x5, 0xee, 0x7ff, 0x4}, {0x2, 0xd7, 0xfffffff9, 0x6}, {0x2, 0x749, 0x9, 0x5}, {0x9, 0x7, 0x4}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r9, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r7, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e80)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r1, 0x100, 0x70bd29, 0x3, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) 6.053043616s ago: executing program 2 (id=63): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=0x0], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1f, 0x1f, 0x4, [@var={0x7, 0x0, 0x0, 0xe, 0x1, 0x2}, @datasec={0x4, 0x0, 0x0, 0xf, 0x3, [], "e0ea94"}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x3c, 0x0, 0x1}, 0x28) r1 = getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300800a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a68fbff9cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000000000000000000000084d6f31d5de024f", 0xc0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000540)={0x2a0, 0x1f, 0x200, 0x70bd26, 0x25dfdbfd, {0x1f}, [@generic="62457176cfdf61cdcbd5ee13340d0f704015e71b6b6ad857f3f0b693d66f49e208e7652e94", @generic="9af9fb4faa66b9bae08ad42f1d38250160ff4b1dc552669c28c166ef96a4cce5c6e84334f56008dc7aa552e79e2fa41bc7a2960a423bacbf895d8e4ca9271b4c71b37036422e50f71aa6b4292752beeee4508119168ee5ef588a0f8765499ffd7744330587634e6bb6f00ae39fe4094aff82e8c849fb38d502291f72f77296eb67f9cbea9821f2", @generic="76c6fb58f08d8ec892b45fe819daf709b3d87a173e04997acdfdff9cb2042406688f30e051eac3f9a22e15f44aa14becb8e06eff4c3e90be577167af224fc3be53ae631c40b4cc9dd4c3940701ecb9d2570a60149c1144098133fdd24c3881456cf198e9f160ddc222e578b948a91b2663fd40f4bb9db1a457a82693990d721fb7f6fd68824fc10ecb8926f98c88e4dc80cb7f563535c5d771deb9ce3403972466a5e6e7ff0bf4", @nested={0x138, 0x19, 0x0, 0x1, [@generic="89bf39ad4bd6e130545b22554399c8ebc71e084c2671c50014e1b374d2afe91240d6d34f78ebc76671b772501314aef1d72806515fc4fc3e8b8bc5929d826e71fab4fc26bff5eac23bff6f8ff9a7", @typed={0x14, 0x53, 0x0, 0x0, @ipv6=@empty}, @generic="704d00e4004ce46cdaeadaf839826d66fba404a47fb2d09ecd1632e061c2e4fbdb5b899c399650499abb1a0e6656c43e799624c08c514340043a40381fd2d4b3dfa099cd554f3b53bf1639945f3f69bfe5428e26bb65aef8fb0924257b4cd73049d58b26dfec71dec92a38f44f961058b192d05fe4aa9863a18945ead0545a6a245e9d7b638a7daddc2ddfd0d487534a4aa1b1ed034c27f39648089a368447b5cbe1e3d9e4a9d160cd83a44bc217e0a57daff04021462b135d428783d7c901726217049bd0d87fbbf46b88a4f0e80f14a0d5"]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x801}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) unlink(&(0x7f00000000c0)='./file0\x00') pwritev2(r0, &(0x7f0000000980)=[{&(0x7f0000000500)="cb", 0x1}], 0x1, 0x5, 0x2, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={0x2c, r7, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x71a90f0fa04800ec}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 5.048688206s ago: executing program 1 (id=64): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000580)={0x5, 0x0, [{0x40000000, 0x4, 0x0, 0x8001, 0x27, 0x7, 0x5}, {0x7, 0x8, 0x0, 0x2, 0xbb69, 0x5, 0xffff}, {0xb, 0xf5f, 0x0, 0x7, 0x0, 0x6, 0x7ffffffd}, {0xd, 0x2bb, 0x1, 0xd, 0x3, 0x62, 0x3ff}, {0x2, 0x1, 0x5, 0x9, 0x4, 0x4, 0x3}]}) r3 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x101, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x48) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) getsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0), &(0x7f0000000280)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r9, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) listen(r9, 0xda90) accept4(r9, 0x0, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000040)={0x400, 0x400, 0x3c0, 0xa0, 0xf2c, 0x0, 0x10, 0x1, {0x3ff, 0xffffc5c2}, {0x3, 0x1}, {0x138, 0x2e}, {0x0, 0x6, 0x1}, 0x2, 0x0, 0x2, 0x6, 0x0, 0xe, 0x81, 0x6, 0xffffff81, 0x200, 0x5, 0x5, 0x10, 0x200, 0x2, 0xb}) openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.138720134s ago: executing program 2 (id=65): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1cfc0000020000012bc4bd44c43d104a9d00018000e793f8e0000000"], 0x1c}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}], 0x10) listen(r1, 0xfffffffa) sendmsg$inet_sctp(r1, &(0x7f00000001c0)={&(0x7f0000000180)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f00000000c0)="aa", 0x1}], 0x1, 0x0, 0x0, 0x18c0}, 0x20028cc5) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x100) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) write$hidraw(r2, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @broadcast}, &(0x7f0000000080)=0xc) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x24002000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r6 = socket$inet(0x2, 0x3, 0x7f) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_int(r6, 0x0, 0x16, 0x0, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) 3.979538578s ago: executing program 1 (id=67): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x401}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8800) r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000540)={0x0, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b0300000000000020001280080001006774700014000280080003000100000008000100", @ANYRES32, @ANYBLOB], 0x40}}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0xb8, 0x5, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0x98, 0xc, "bcfb1ca20489395ee1417573a762db579cc4e80a6694debea78024d31c7a07fe769c697521be5a096e1d8907ac44b64360d52792ab937e1af1ffff08dfe2b9b4d7e345f37f9b2fccb76e5ce1e79da9595f83d28c6497b631a5842f7a4bd7968aaa25f5228ade44a5f7291b700431c3f125ee9c52a6a6799a9a8f3fae9f52261407445d1b1d3f5ee274d1263c4735c6970c7fe43a"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x68, 0xb, 0xa, 0x802, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_EXPRESSIONS={0x1c, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x402, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x528, 0xb, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x47c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x3a4, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x394, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x368, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xeb, 0x1, "0a503f5de9c25df6cdd068ea64a4ead38dcfe0ffd81362a88871155dfce7bbb4b0ffada66ba92692aff296db54e3425b55492f86b8a2b0a97b258a9f56b59cf990b6b0c7114a5c2ed66076cc4b34f061a329f5415da78f4ad7e52b1eabe6db258c9bbc4ac2639bb2aaf2a356c8a940af839b1cebc931b74c63181c190c05ce3f6eac0bffd2055d5d561314db64664539e05c7227352869afbb6dd9e17b9f34700d5b86a94db5d3fd980207dcf22c72b9067ebeea255aa22ab3adaef0315cf77f9988f089e97ed5f9f9c715be8143a657e07cfc7211673b5361365b515cb432bb6a861d43e2db76"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "18071019c12b80130ec9e219a8e46fb7435bfcfa210952959ab8955db000829dbf4c1c6e9e72e46e97b00ee1e838462f068be523dce2bc0bcb907e199c795a83db4c6a24fc33ea5745c4fd5d5960c2fc217b1474355806873d76398e58292ce698ca44d4575c40967c"}, @NFTA_DATA_VALUE={0xf4, 0x1, "42c34a91faea239a722c64dabf08dc774412906e28c9a18e4bea6616e25608525d93778246762d912369d27cd5e711f4f71c3a519ef2dc517d7140753e0c281bf029fbd2f5db36996dc1d4662b76ba785fe6158d4a4774f8e0474abb9bbea393831e328542f52f559e0a3c2b8a708fa3d5d5bec9e9de016fa4111282b1010cca1db9025db52ac3872a3092f734f18ff7af7b1df3a1c5b0b4062fc4e3ff648760e477157cf866f57793c361ca728d740000707d26cc3f191bedddb486d372742eb951c7b8405e867c35aef499d03fde061798f1ef8a0eb06f8cebcb68927c4401cc98384852dfb0e3ea04eb30a683ec0f"}, @NFTA_DATA_VALUE={0xcc, 0x1, "d993da6f343f3eddc4d42370c97f207d33109921e05f6d435dac19d86fb6b780abbd130a33b2a8307a852f54471cbb909be7b45d7327c176252f50a1b8fff5f387537f5a924d8bf415d0365c360b1df603fe8f2093530a7af02b57cd0446e98b6f784026649e5aa1b4d2cb28c2231834415dbd7804a2fd756fc8f12d35e86bda4c5e1eac166feaf599d2910e150733dd65b2d15421f67b0b8a46f8527bef9ea50e0a9b749cbe58dd65d30f5ceb952399efb11c3cf7651e68dabab3fcf54afc360ca2e3f751f82d06"}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_OP={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3dd89c6a6c3c32a}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x4c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x100, 0xb, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0xc8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0xac, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8005}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6f38}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xac06}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe9e8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x43206c00}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x800}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0b0631bd700000400000300000000a0001007770616e3100000005003300f800000005003600210000000500350006000000b4e704d88af3a4530f8ff7f102092649084c21dfdcc09f649e8ca6bf6d55c083a65525bf548a1ce0db9eb372a8a8569254e6875efba9d68fa9da553888ef4773ee059282da4006d5c1155e75858dadeea378e2f4d6ba1a0ed7570a9eb2aec7c7c35958d17e8cac427996ff4a5cd5874359baa8126a0b6a8876a7f15bce0c046cba7dd4ef79c019cf0d0e409cde46d29fa7d8ca499722925e8ad565e20231da0d380ada0729a2"], 0x38}, 0x1, 0x8000000, 0x0, 0x1}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x30, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1e}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x35}, 0x1, 0x0, 0x0, 0x44}, 0x40) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r11) sendmsg$NL802154_CMD_NEW_INTERFACE(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="01002bbd7000fbdbdf252a00000008000300", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) 3.878270162s ago: executing program 1 (id=68): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000580)={0x5, 0x0, [{0x40000000, 0x4, 0x0, 0x8001, 0x27, 0x7, 0x5}, {0x7, 0x8, 0x0, 0x2, 0xbb69, 0x5, 0xffff}, {0xb, 0xf5f, 0x0, 0x7, 0x0, 0x6, 0x7ffffffd}, {0xd, 0x2bb, 0x1, 0xd, 0x3, 0x62, 0x3ff}, {0x2, 0x1, 0x5, 0x9, 0x4, 0x4, 0x3}]}) r3 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x101, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x48) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) getsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0), &(0x7f0000000280)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r9, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) listen(r9, 0xda90) accept4(r9, 0x0, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000040)={0x400, 0x400, 0x3c0, 0xa0, 0xf2c, 0x0, 0x10, 0x1, {0x3ff, 0xffffc5c2}, {0x3, 0x1}, {0x138, 0x2e}, {0x0, 0x6, 0x1}, 0x2, 0x0, 0x2, 0x6, 0x0, 0xe, 0x81, 0x6, 0xffffff81, 0x200, 0x5, 0x5, 0x10, 0x200, 0x2, 0xb}) openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 3.544861785s ago: executing program 3 (id=69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x41000, 0x0, 0xf, 0x0, 0x8, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x60000, 0xe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xdddd8000, 0x8, 0x8, 0xd, 0x4, 0x5, 0x0, 0x80, 0xe, 0x4, 0x3}, {0x10b002, 0xeeee8000, 0x1c, 0xfd, 0x80, 0x0, 0x3}, {0x2000, 0xb000, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0xfd, 0x1c, 0x1a, 0xa8}, {0x10000, 0x8080000, 0x0, 0x4, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x2, 0x86, 0xb}, {0xeeee8000, 0x30000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xeeee8000, 0x3, 0x82, 0x0, 0x10, 0x4, 0xe, 0x0, 0xfd, 0x4}, {0x6000, 0xfffc}, {0x1, 0xfffe}, 0xe0000009, 0x0, 0x0, 0x10, 0x1, 0x1000, 0x900, [0x0, 0x0, 0x10000, 0x5]}) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000240)=0x28, 0x4) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socket(0x400000000010, 0x3, 0x0) 2.744131676s ago: executing program 2 (id=71): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) close_range(r1, 0xffffffffffffffff, 0x0) 2.557317377s ago: executing program 1 (id=72): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x80801, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.490227686s ago: executing program 3 (id=73): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x19, &(0x7f00000002c0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0xf, 0x800) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000040)={0x1, r5}) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) close(0xffffffffffffffff) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 2.326957699s ago: executing program 0 (id=74): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x9, 0x7ffffffffffffffd, 0xffffffffffffffff, 0x3ffffd, 0x400000000006, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x6, 0x6, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000001c0)=@x86={0x80, 0x4, 0x5, 0x0, 0x8, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x84, 0x3, 0x4, '\x00', 0x4, 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db2d82e6036cbb7e31105314a0fe5f5989bce02d44c1641ffc1cd7d99f6d010251ce2340064f5cac4f96a73d6983035797d24dd1d5f72084b2979a327b1631b445d3ca60d4a2d216cf6a20bf4c449b790b1cea906d2c8203173bb46f2d23ee787772e35c17223f0f1dfc8faab1a7e7d53b3f1839a3f9ec10e980f3c0e89e808b4641aacc977b69172e7ae9efb164c872a29124d879022a25237abf939c", 0x9d}, {&(0x7f0000000400)="6c43a715ebbd318addcd79db30fc82c7897cc1af4d30ef0c0793f737a63a8a1c1f8d58547b8d9afc8d3c1dadefe19e63eadcea6c6377757750bd3d1b", 0x3c}], 0x2}}], 0x1, 0x24040015) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x1) r7 = openat2$dir(0xffffff9c, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)={0x3c081, 0x186, 0x8}, 0x18) fchmodat(r7, &(0x7f0000000100)='./file0\x00', 0x84) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='configfs\x00', 0x3008200, 0x0) 1.757123264s ago: executing program 0 (id=75): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) ptrace(0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x1000)=nil) r3 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x894b, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.728072322s ago: executing program 1 (id=76): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.631785419s ago: executing program 1 (id=77): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}], 0x20) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) r4 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000140), 0x400001, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000000214080026bd7000fedbdf25050054000100000008004400", @ANYRES32=r4, @ANYBLOB="090058e82f3ecbb5be0800"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x20000804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0x13, 0xd4, &(0x7f0000000240)="7e061c26e2dd8309ef2ca1dface30f95ad9a1e", &(0x7f0000000340)=""/212, 0x7, 0x0, 0x0, 0xa1, &(0x7f0000000440), &(0x7f0000000480)="75e6249278f93102cd3d5275c6ee9eaa17f6273c6bf6bebf57c6784701b88d87366f1faa303f60f7c7616a758956debc98fcd01f6e4ccc3f6fe40a2c5f8c5597ca62847f6a540f2eac0022fea97df3f82692bdb5d347f3079236611b0c0a5c1621f016ee09b36e6a1a39548b5f8107ecfa1fa95d4b9ddcd7abd01895442b4d58bff82b5d88a483c17f4353af6592be39319da30387514417d2078df775c8922ee2", 0x7, 0x0, 0x1ff}, 0x4c) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000005c0)={0x1, 0x0, 0x0, 0x0}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_hci(r5, 0x0, 0x3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.479404668s ago: executing program 2 (id=78): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) syz_io_uring_setup(0x3ebf, &(0x7f0000000240)={0x0, 0x86e1, 0x1, 0x8, 0x27d}, 0x0, &(0x7f0000000000), &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone3(&(0x7f00000020c0)={0x8000, &(0x7f0000000180), &(0x7f0000000740), &(0x7f0000000780), {0x3c}, &(0x7f0000000880)=""/153, 0x99, &(0x7f0000001080)=""/4096, &(0x7f0000002080)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000940)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x181600, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0xac, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_NAT_DST={0x98, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xa}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x2}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000040)=""/212, 0xd4, 0x8) lseek(r4, 0x0, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="050000000100", 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 674.531687ms ago: executing program 0 (id=79): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) (async) r3 = fcntl$dupfd(r1, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x20000000}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) setreuid(0xffffffffffffffff, 0xee01) ioctl$KDMKTONE(r4, 0x4b30, 0xa8c) (async) r5 = syz_clone(0x88022080, 0x0, 0x31, 0x0, 0x0, 0x0) (async) r6 = getpid() kcmp$KCMP_EPOLL_TFD(r6, r5, 0x7, r3, &(0x7f0000000100)={r2, r3}) (async) setpgid(r0, r5) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x207, 0x80742, 0x0, 0x32315659, 0x2, 0x490, 0x1, 0xfffffffd, 0xfeedcafe, 0x3, 0x0, 0x1}}) (async) ptrace$poke(0x420f, r0, 0x0, 0x101) (async) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x143400, 0x0) (async) socket$unix(0x1, 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000020c0)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000000000)={0x2020}, 0x2020) (async) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r9, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async, rerun: 32) chdir(&(0x7f00000001c0)='./bus\x00') 641.931436ms ago: executing program 3 (id=80): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x594, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x10000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0xa, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0xa, 0x0, 0xd, 0x0, 0x9, 0x0, 0x8, 0xfe, 0x4}, {0x6000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x1, 0x7, 0x8, 0x40, 0x26, 0x40, 0x0, 0x2}, {0x80a0000, 0x8d0}, {0xdddd1000}, 0x1dfcffdf, 0x0, 0xdddd0000, 0x110, 0x0, 0xf801, 0x0, [0x7ffffffd, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 499.68822ms ago: executing program 3 (id=81): r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0, 0x65) shutdown(r0, 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x3}}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x44}}, 0x40004000) 413.571162ms ago: executing program 3 (id=82): r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_restrict_self(0xffffffffffffffff, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000140)=""/83) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r2, 0x0, 0xffffffffffffffff, 0x0, 0x80000}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 406.043603ms ago: executing program 2 (id=83): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0xfffff9, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x108) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', './file0', [{0x20, '([!{^#!^~'}, {0x20, '/dev/pmem0\x00'}, {0x20, '#! '}, {0x20, '/'}, {0x20, 'broute\x00'}, {0x20, '/dev/pmem0\x00'}, {0x20, '\x11\x00'}]}, 0x3e) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000080)={0x0, 0x0, 0x94, &(0x7f00000000c0)={0x400, 0x1000, 0x8000007}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @time={0x80000000, 0xf}, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {0xff}, {0x2}, @control={0x80, 0x0, 0x7fff}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {0x0, 0x8}, {}, @control}, {0x0, 0x20, 0x0, 0x0, @tick=0x5, {}, {0x0, 0xbf}, @connect={{}, {0x0, 0x45}}}], 0x70) r7 = socket$kcm(0xa, 0x1, 0x106) r8 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) write$binfmt_aout(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b500000001000000feefffff"], 0xc8) sendmsg$kcm(r7, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x20000080) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb8", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000100)=0x8, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) 297.1101ms ago: executing program 0 (id=84): syz_io_uring_setup(0xec6, &(0x7f00000008c0)={0x0, 0x0, 0x3000, 0x0, 0x3b2}, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000340)=""/170, 0xaa) pselect6(0x40, &(0x7f0000000100)={0x3f, 0x20, 0x0, 0x0, 0x800, 0x3, 0x2, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0) 195.716338ms ago: executing program 0 (id=85): r0 = socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100030000000000040000000000000010000700000100002000000000000000"], 0x24, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) recvfrom(r2, &(0x7f00000023c0)=""/231, 0xe7, 0x20, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004021600080008", 0x65, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4400, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "93c9691928972925723d55c712e63c92b492a3c50c9c3d27093a79585e8b73b3", "8aa4c506a2ba17a29171ce08a1e0f09d", {"c952a7f1f0443ce3114cee3518bfb345"}}}}}}}, 0x0) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) close(0x3) 0s ago: executing program 0 (id=86): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd3ca4b07f223f5ff2df250c0000000800060000feffff04000380"], 0x20}, 0x1, 0x0, 0x0, 0xeb5cf41713316147}, 0x80) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, 0x0, 0x800) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000200025a729bd7000fddbdf250a0000cdfe0000010200010008000600fe7f00000c00140065bc7a222a4f8eda"], 0x30}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) listen(r4, 0x800) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) accept4(r4, 0x0, 0x0, 0x80000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) read$dsp(r10, &(0x7f0000000180)=""/67, 0x43) landlock_restrict_self(r9, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff00000000fdffffff8500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000040000850000007b00000095"], 0x0, 0x1}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8c2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd0d, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r8) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000007e1fc40b201407ca6b904ba3", @ANYRES16=r12, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) listen(r2, 0x10000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000300037040400"/20, @ANYRES32=0x0, @ANYBLOB="830405000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00D\x00\x00&(\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:51720' (ED25519) to the list of known hosts. [ 57.079032][ T5730] cgroup: Unknown subsys name 'net' [ 57.248061][ T5730] cgroup: Unknown subsys name 'cpuset' [ 57.255301][ T5730] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.295133][ T5730] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.337276][ T5752] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.337558][ T5758] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.340102][ T5761] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.341437][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.341886][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.342742][ T5752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.344053][ T5759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.347786][ T5761] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.347880][ T5759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.348184][ T5759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.349820][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.349993][ T5759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.350337][ T5759] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.353873][ T5761] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.354402][ T5758] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.356279][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.359866][ T5761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.367042][ T5751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.370452][ T5761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.372855][ T5751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.011570][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.014648][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.017414][ T5745] bridge_slave_0: entered allmulticast mode [ 63.020619][ T5745] bridge_slave_0: entered promiscuous mode [ 63.035438][ T5754] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.038425][ T5754] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.040699][ T5754] bridge_slave_0: entered allmulticast mode [ 63.043357][ T5754] bridge_slave_0: entered promiscuous mode [ 63.075386][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.078267][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.080488][ T5745] bridge_slave_1: entered allmulticast mode [ 63.083207][ T5745] bridge_slave_1: entered promiscuous mode [ 63.086395][ T5754] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.089026][ T5754] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.091381][ T5754] bridge_slave_1: entered allmulticast mode [ 63.094231][ T5754] bridge_slave_1: entered promiscuous mode [ 63.096867][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.099291][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.101742][ T5744] bridge_slave_0: entered allmulticast mode [ 63.104811][ T5744] bridge_slave_0: entered promiscuous mode [ 63.109232][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.111968][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.114513][ T5744] bridge_slave_1: entered allmulticast mode [ 63.117822][ T5744] bridge_slave_1: entered promiscuous mode [ 63.171197][ T5754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.175008][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.177735][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.180348][ T5743] bridge_slave_0: entered allmulticast mode [ 63.183135][ T5743] bridge_slave_0: entered promiscuous mode [ 63.187913][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.190274][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.192727][ T5743] bridge_slave_1: entered allmulticast mode [ 63.195929][ T5743] bridge_slave_1: entered promiscuous mode [ 63.201347][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.207421][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.212308][ T5754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.216467][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.233498][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.279162][ T5744] team0: Port device team_slave_0 added [ 63.282837][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.287300][ T5745] team0: Port device team_slave_0 added [ 63.290205][ T5754] team0: Port device team_slave_0 added [ 63.293990][ T5754] team0: Port device team_slave_1 added [ 63.297666][ T5744] team0: Port device team_slave_1 added [ 63.302503][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.307581][ T5745] team0: Port device team_slave_1 added [ 63.355285][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.357543][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.365151][ T5754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.378893][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.381810][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.392476][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.397985][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.400774][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.409182][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.413752][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.416246][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.424586][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.429308][ T5754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.431469][ T5754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.440411][ T5754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.445190][ T5743] team0: Port device team_slave_0 added [ 63.452648][ T5743] team0: Port device team_slave_1 added [ 63.455404][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.457775][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.466650][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.498261][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.501044][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.511270][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.517252][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.519991][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.530575][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.566605][ T5744] hsr_slave_0: entered promiscuous mode [ 63.569533][ T5744] hsr_slave_1: entered promiscuous mode [ 63.639409][ T5754] hsr_slave_0: entered promiscuous mode [ 63.642718][ T5754] hsr_slave_1: entered promiscuous mode [ 63.645302][ T5754] debugfs: 'hsr0' already exists in 'hsr' [ 63.647404][ T5754] Cannot create hsr debugfs directory [ 63.652836][ T5745] hsr_slave_0: entered promiscuous mode [ 63.655405][ T5745] hsr_slave_1: entered promiscuous mode [ 63.657623][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 63.659417][ T5745] Cannot create hsr debugfs directory [ 63.688518][ T5743] hsr_slave_0: entered promiscuous mode [ 63.690912][ T5743] hsr_slave_1: entered promiscuous mode [ 63.693227][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 63.695176][ T5743] Cannot create hsr debugfs directory [ 63.989361][ T5754] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.997905][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.000868][ T5754] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.006749][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.012344][ T5754] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.018228][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.021062][ T5754] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.025740][ T5754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.079941][ T5744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.086118][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.088963][ T5744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.095867][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.103028][ T5744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.109930][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.126628][ T5744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.132931][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.175111][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.180218][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.184034][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.190283][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.197391][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.201418][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.209370][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.213786][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.269813][ T5743] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.277132][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.285653][ T5754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.293748][ T5743] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.300222][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.303395][ T5743] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.309767][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.319160][ T5743] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.327202][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.351069][ T5754] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.378135][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.381435][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.403575][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.406153][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.416358][ T5751] Bluetooth: hci2: command tx timeout [ 64.416357][ T5746] Bluetooth: hci1: command tx timeout [ 64.416365][ T5761] Bluetooth: hci3: command tx timeout [ 64.425260][ T5751] Bluetooth: hci0: command tx timeout [ 64.449943][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.486188][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.495921][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.517200][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.520306][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.539054][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.541763][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.550301][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.563864][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.568464][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.570810][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.577615][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.579977][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.610813][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.630895][ T264] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.633571][ T264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.646327][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.649106][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.830069][ T5754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.874067][ T5754] veth0_vlan: entered promiscuous mode [ 64.881595][ T5754] veth1_vlan: entered promiscuous mode [ 64.902019][ T5754] veth0_macvtap: entered promiscuous mode [ 64.909472][ T5754] veth1_macvtap: entered promiscuous mode [ 64.921033][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.930691][ T5754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.937170][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.944334][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.953831][ T1271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.960175][ T1271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.966289][ T1271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.975585][ T1271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.983044][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.120088][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.125088][ T5744] veth0_vlan: entered promiscuous mode [ 65.125536][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.165187][ T5745] veth0_vlan: entered promiscuous mode [ 65.169418][ T5743] veth0_vlan: entered promiscuous mode [ 65.173474][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.174844][ T5744] veth1_vlan: entered promiscuous mode [ 65.178459][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.185262][ T5743] veth1_vlan: entered promiscuous mode [ 65.198696][ T5745] veth1_vlan: entered promiscuous mode [ 65.232676][ T5754] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.239707][ T5744] veth0_macvtap: entered promiscuous mode [ 65.266019][ T5743] veth0_macvtap: entered promiscuous mode [ 65.272490][ T5744] veth1_macvtap: entered promiscuous mode [ 65.279293][ T5745] veth0_macvtap: entered promiscuous mode [ 65.288934][ T5743] veth1_macvtap: entered promiscuous mode [ 65.296021][ T5745] veth1_macvtap: entered promiscuous mode [ 65.324483][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.343115][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.355865][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.362313][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.371386][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.379256][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.391681][ T1271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.398344][ T1271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.408996][ T1271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.412482][ T1271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.435336][ T1271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.451212][ T1271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.458158][ T1271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.493383][ T1271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.498196][ T1271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.511831][ T1271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.515975][ T1271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.538021][ T1271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.543097][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.547628][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.621524][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.625357][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.680926][ T1271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.686601][ T1271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.707087][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.715565][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.829938][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.838161][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.860938][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.864175][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.259122][ T5900] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2'. [ 66.284964][ T5823] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.314276][ T5830] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 66.436136][ T5823] usb 5-1: Using ep0 maxpacket: 16 [ 66.480003][ T5830] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 66.484169][ T5830] usb 7-1: config 0 has no interface number 0 [ 66.487058][ T5830] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 66.491730][ T5830] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 66.497430][ T5751] Bluetooth: hci2: command tx timeout [ 66.497569][ T5761] Bluetooth: hci3: command tx timeout [ 66.500473][ T5751] Bluetooth: hci1: command tx timeout [ 66.501510][ T5746] Bluetooth: hci0: command tx timeout [ 66.508534][ T5830] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 66.511956][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.529561][ T5830] usb 7-1: config 0 descriptor?? [ 66.539407][ T5914] Zero length message leads to an empty skb [ 66.541117][ T5905] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 66.560089][ T5914] gtp0: entered promiscuous mode [ 66.568253][ T5914] gtp0: entered allmulticast mode [ 66.590768][ T5830] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 66.600756][ T5903] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 66.616191][ T5903] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 66.644192][ T5903] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 66.745061][ T5903] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 66.758549][ T5903] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 66.803108][ T5905] kernel profiling enabled (shift: 3) [ 66.840271][ T5915] smbdirect: ib_dev[syz1] removed [ 66.872596][ T5894] usb 7-1: USB disconnect, device number 2 [ 66.893068][ T5823] usb 5-1: unable to get BOS descriptor or descriptor too short [ 66.919056][ T5823] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 66.922876][ T5823] usb 5-1: can't read configurations, error -71 [ 67.434351][ T1484] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 67.587612][ T1484] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 67.591712][ T1484] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.595990][ T1484] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 67.601155][ T1484] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.607113][ T1484] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 67.610601][ T1484] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 67.613270][ T1484] usb 6-1: Product: syz [ 67.614785][ T1484] usb 6-1: Manufacturer: syz [ 67.636804][ T1484] cdc_wdm 6-1:1.0: skipping garbage [ 67.646763][ T1484] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 67.844488][ T5921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.866788][ T5921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.028703][ T1484] usb 6-1: USB disconnect, device number 2 [ 68.226297][ T5930] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 68.228934][ T5930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 68.287101][ T5930] vhci_hcd vhci_hcd.0: Device attached [ 68.574613][ T5843] usb 38-1: SetAddress Request (2) to port 0 [ 68.576329][ T5761] Bluetooth: hci2: command tx timeout [ 68.580512][ T5746] Bluetooth: hci3: command tx timeout [ 68.584461][ T5761] Bluetooth: hci0: command tx timeout [ 68.584463][ T5843] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 68.590068][ T5746] Bluetooth: hci1: command tx timeout [ 68.772229][ T5937] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9'. [ 68.781169][ T5933] vhci_hcd: connection reset by peer [ 68.787664][ T12] vhci_hcd vhci_hcd.0: stop threads [ 68.789648][ T12] vhci_hcd vhci_hcd.0: release socket [ 68.797304][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 68.895737][ T5939] ======================================================= [ 68.895737][ T5939] WARNING: The mand mount option has been deprecated and [ 68.895737][ T5939] and is ignored by this kernel. Remove the mand [ 68.895737][ T5939] option from the mount to silence this warning. [ 68.895737][ T5939] ======================================================= [ 70.854503][ T5761] Bluetooth: hci0: command tx timeout [ 70.856424][ T5761] Bluetooth: hci1: command tx timeout [ 70.858389][ T5761] Bluetooth: hci2: command tx timeout [ 70.860429][ T5761] Bluetooth: hci3: command tx timeout [ 72.906831][ T5746] Bluetooth: hci3: command tx timeout [ 73.214996][ T5756] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 73.388683][ T5756] usb 6-1: Using ep0 maxpacket: 16 [ 73.609419][ T5965] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 73.616283][ T5843] usb 38-1: device descriptor read/8, error -110 [ 73.619014][ T5965] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 73.623527][ T5969] /dev/nullb0: Can't open blockdev [ 73.628567][ T5965] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 73.696977][ T5965] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 74.153174][ T5843] usb usb38-port1: attempt power cycle [ 74.768661][ T5756] usb 6-1: unable to get BOS descriptor or descriptor too short [ 74.772592][ T5756] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 74.775686][ T5756] usb 6-1: can't read configurations, error -71 [ 74.894222][ T5822] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 75.057554][ T5822] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.066651][ T5822] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.078384][ T5822] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.088451][ T5822] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 75.107067][ T5822] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.111791][ T5822] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.121497][ T5822] usb 8-1: Product: syz [ 75.126584][ T5822] usb 8-1: Manufacturer: syz [ 75.154361][ T5979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 75.173390][ T5981] rdma_rxe: rxe_newlink: failed to add bond0 [ 75.176528][ T5981] netlink: 14 bytes leftover after parsing attributes in process `syz.2.20'. [ 75.188802][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.201795][ T5822] cdc_wdm 8-1:1.0: skipping garbage [ 75.203809][ T5822] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 75.259847][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.264917][ T5981] bond0 (unregistering): Released all slaves [ 75.335562][ T5843] usb usb38-port1: unable to enumerate USB device [ 75.410135][ T5975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.415945][ T5975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.485926][ T5822] usb 8-1: USB disconnect, device number 2 [ 76.337680][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.340816][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.962098][ T6009] gtp0: entered promiscuous mode [ 77.964805][ T6009] gtp0: entered allmulticast mode [ 80.472447][ T29] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 80.635787][ T29] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 80.638726][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.642221][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 80.645675][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.654297][ T29] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.658791][ T29] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.662605][ T29] usb 6-1: Product: syz [ 80.664546][ T29] usb 6-1: Manufacturer: syz [ 80.682968][ T29] cdc_wdm 6-1:1.0: skipping garbage [ 80.685571][ T29] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 80.985086][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.998036][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.167563][ T5823] usb 6-1: USB disconnect, device number 5 [ 81.727095][ T6037] Cannot find del_set index 1 as target [ 82.341550][ T6051] geneve2: entered promiscuous mode [ 82.445912][ T5822] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 82.528551][ T6054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.604250][ T5822] usb 8-1: Using ep0 maxpacket: 16 [ 82.717631][ T6049] siw: device registration error -23 [ 83.047933][ T5822] usb 8-1: unable to get BOS descriptor or descriptor too short [ 83.062406][ T5822] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 83.068301][ T5822] usb 8-1: can't read configurations, error -71 [ 83.116876][ T40] audit: type=1804 audit(1779174286.228:2): pid=6058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.39" name="/newroot/12/bus/bus" dev="overlay" ino=86 res=1 errno=0 [ 83.229601][ T40] audit: type=1804 audit(1779174286.348:3): pid=6058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.39" name="/newroot/12/bus/bus" dev="overlay" ino=86 res=1 errno=0 [ 83.867857][ T6073] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.134222][ T54] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.304765][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 84.323740][ T54] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 84.329398][ T54] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 84.337554][ T54] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.343635][ T54] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.355040][ T54] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.361382][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.718611][ T54] usb 5-1: GET_CAPABILITIES returned 0 [ 84.721281][ T54] usbtmc 5-1:16.0: can't read capabilities [ 85.122969][ T54] usb 5-1: USB disconnect, device number 4 [ 87.087747][ T6085] syz.1.47 uses obsolete (PF_INET,SOCK_PACKET) [ 87.442021][ T3385] cfg80211: failed to load regulatory.db [ 87.945608][ T5746] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 87.955776][ T5746] Bluetooth: hci2: Injecting HCI hardware error event [ 87.973187][ T5761] Bluetooth: hci2: hardware error 0x00 [ 89.951718][ T5908] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.174296][ T5761] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 90.444266][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 90.448099][ T5908] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.451132][ T5908] usb 5-1: config 0 has no interface number 0 [ 90.453323][ T5908] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 90.456802][ T5908] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 90.459635][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.463561][ T5908] usb 5-1: config 0 descriptor?? [ 90.469907][ T5908] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 90.877019][ T6121] loop4: detected capacity change from 0 to 7 [ 90.891323][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 90.895436][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.900937][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 90.904459][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.908225][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 90.912334][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 90.916547][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 90.920131][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 91.317362][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.320215][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 91.346139][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.349106][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 91.434215][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.437032][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 91.439569][ T6121] ldm_validate_partition_table(): Disk read failed. [ 91.593181][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.596391][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 91.602746][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.605770][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 91.621151][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 91.624153][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 91.630991][ T6121] Dev loop4: unable to read RDB block 0 [ 91.647198][ T6121] loop4: unable to read partition table [ 91.649654][ T6121] loop4: partition table beyond EOD, truncated [ 91.652000][ T6121] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 92.025462][ T5152] ldm_validate_partition_table(): Disk read failed. [ 92.028419][ T5152] Dev loop4: unable to read RDB block 0 [ 92.030791][ T5152] loop4: unable to read partition table [ 92.032751][ T5152] loop4: partition table beyond EOD, truncated [ 92.171890][ T6132] netlink: 112 bytes leftover after parsing attributes in process `syz.2.59'. [ 92.486332][ T10] usb 5-1: USB disconnect, device number 5 [ 92.944193][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 93.104606][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 93.208768][ T6138] siw: device registration error -23 [ 94.466160][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 94.475992][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 94.479830][ T10] usb 5-1: can't read configurations, error -71 [ 95.269923][ T6161] gtp1: entered promiscuous mode [ 95.271930][ T6161] gtp1: entered allmulticast mode [ 95.358562][ T6160] hid-generic 0003:0627:0001.0001: pid 6160 passed too short report [ 95.436761][ T6162] netlink: zone id is out of range [ 95.446850][ T6162] netlink: zone id is out of range [ 95.477530][ T6162] netlink: zone id is out of range [ 95.488429][ T6162] netlink: zone id is out of range [ 95.497781][ T6162] netlink: zone id is out of range [ 95.517082][ T6162] netlink: zone id is out of range [ 95.528162][ T6162] netlink: zone id is out of range [ 95.534545][ T6162] netlink: zone id is out of range [ 95.547600][ T6162] netlink: zone id is out of range [ 95.558842][ T6162] netlink: zone id is out of range [ 96.908260][ T6189] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.840782][ T5908] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 98.016438][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 98.030554][ T5908] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.039481][ T5908] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.042757][ T5908] usb 6-1: config 0 interface 0 has no altsetting 0 [ 98.048979][ T5908] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 98.052817][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.125878][ T5908] usb 6-1: config 0 descriptor?? qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x120000) [ 98.554935][ T1130] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 98.558677][ T1130] ata1: failed to read log page 10h (errno=-5) [ 98.577962][ T1130] ata1.00: exception Emask 0x1 SAct 0x40000001 SErr 0x0 action 0x0 [ 98.599967][ T1130] ata1.00: irq_stat 0x41000000 [ 98.603178][ T6216] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.610400][ T1130] ata1.00: failed command: READ FPDMA QUEUED [ 98.622071][ T1130] ata1.00: cmd 60/00:00:6e:62:01/01:00:00:00:00/40 tag 0 ncq dma 131072 in [ 98.622071][ T1130] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 98.635144][ T1130] ata1.00: status: { DRDY } [ 98.662278][ T1130] ata1.00: error: { ABRT } [ 98.664554][ T1130] ata1.00: failed command: READ FPDMA QUEUED [ 98.671913][ T1130] ata1.00: cmd 60/00:f0:ee:58:01/09:00:00:00:00/40 tag 30 ncq dma 1179648 in [ 98.671913][ T1130] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 98.684344][ T1130] ata1.00: status: { DRDY } [ 98.685866][ T1130] ata1.00: error: { ABRT } [ 98.688185][ T1130] ata1.00: configured for UDMA/100 [ 98.690211][ T1130] sd 0:0:0:0: [sda] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 98.693523][ T1130] sd 0:0:0:0: [sda] tag#0 Sense Key : Aborted Command [current] [ 98.697334][ T1130] sd 0:0:0:0: [sda] tag#0 Add. Sense: No additional sense information [ 98.700025][ T1130] sd 0:0:0:0: [sda] tag#0 CDB: Read(10) 28 00 00 01 62 6e 00 01 00 00 [ 98.703000][ T1130] blk_print_req_error: 30 callbacks suppressed [ 98.703012][ T1130] I/O error, dev sda, sector 90734 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 98.709789][ T1130] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 98.710783][ T5908] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 98.714542][ T1130] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 98.718884][ T5908] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 98.718929][ T5908] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 98.718997][ T5908] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 98.719064][ T5908] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 98.719073][ T1130] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 98.719101][ T1130] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 01 58 ee 00 09 00 00 [ 98.719116][ T1130] I/O error, dev sda, sector 88302 op 0x0:(READ) flags 0x80700 phys_seg 19 prio class 2 [ 98.719322][ T1130] ata1: EH complete [ 98.739116][ T5908] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 98.842673][ T6229] syz.2.83: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 98.848904][ T6229] CPU: 2 UID: 0 PID: 6229 Comm: syz.2.83 Not tainted syzkaller #0 PREEMPT(full) [ 98.848920][ T6229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.848928][ T6229] Call Trace: [ 98.848932][ T6229] [ 98.848937][ T6229] dump_stack_lvl+0x100/0x190 [ 98.848957][ T6229] warn_alloc.cold+0x95/0x1c1 [ 98.848970][ T6229] ? __pfx_warn_alloc+0x10/0x10 [ 98.848989][ T6229] ? unwind_get_return_address+0x59/0xa0 [ 98.849005][ T6229] ? arch_stack_walk+0x88/0xf0 [ 98.849023][ T6229] ? __lock_acquire+0x4a5/0x2630 [ 98.849037][ T6229] __vmalloc_node_range_noprof+0x136c/0x1630 [ 98.849055][ T6229] ? __lock_acquire+0x4a5/0x2630 [ 98.849066][ T6229] ? do_replace+0x1c6/0x490 [ 98.849085][ T6229] ? do_raw_spin_lock+0x128/0x260 [ 98.849097][ T6229] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.849113][ T6229] ? __lock_acquire+0x4a5/0x2630 [ 98.849125][ T6229] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 98.849145][ T6229] ? do_replace+0x1c6/0x490 [ 98.849159][ T6229] __vmalloc_node_noprof+0xad/0xf0 [ 98.849174][ T6229] ? do_replace+0x1c6/0x490 [ 98.849192][ T6229] __vmalloc_noprof+0xa3/0x120 [ 98.849207][ T6229] ? __pfx___vmalloc_noprof+0x10/0x10 [ 98.849226][ T6229] do_replace+0x1c6/0x490 [ 98.849242][ T6229] ? __pfx_do_replace+0x10/0x10 [ 98.849263][ T6229] ? register_lock_class+0x40/0x560 [ 98.849275][ T6229] compat_do_replace+0x589/0x7a0 [ 98.849293][ T6229] ? __pfx_compat_do_replace+0x10/0x10 [ 98.849312][ T6229] ? rcu_is_watching+0x12/0xc0 [ 98.849331][ T6229] ? bpf_lsm_capable+0x9/0x10 [ 98.849344][ T6229] ? security_capable+0x80/0x260 [ 98.849363][ T6229] do_ebt_set_ctl+0x2f5/0x3f0 [ 98.849380][ T6229] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 98.849397][ T6229] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 98.849409][ T6229] ? find_held_lock+0x2b/0x80 [ 98.849425][ T6229] ? nf_sockopt_find.isra.0+0x222/0x290 [ 98.849439][ T6229] nf_setsockopt+0x8d/0xf0 [ 98.849451][ T6229] ip_setsockopt+0xcb/0xf0 [ 98.849466][ T6229] tcp_setsockopt+0xa7/0x100 [ 98.849482][ T6229] smc_setsockopt+0x1b6/0xa40 [ 98.849496][ T6229] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 98.849514][ T6229] ? __pfx_smc_setsockopt+0x10/0x10 [ 98.849529][ T6229] ? aa_sock_opt_perm+0xfe/0x1b0 [ 98.849546][ T6229] ? __pfx_smc_setsockopt+0x10/0x10 [ 98.849560][ T6229] do_sock_setsockopt+0xf3/0x1d0 [ 98.849577][ T6229] __sys_setsockopt+0x119/0x190 [ 98.849592][ T6229] __ia32_sys_setsockopt+0xbc/0x160 [ 98.849604][ T6229] ? __do_fast_syscall_32+0x98/0x950 [ 98.849636][ T6229] ? lockdep_hardirqs_on+0x78/0x100 [ 98.849654][ T6229] __do_fast_syscall_32+0xe7/0x950 [ 98.849667][ T6229] do_fast_syscall_32+0x32/0x70 [ 98.849679][ T6229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 98.849695][ T6229] RIP: 0023:0xf7f32f7c [ 98.849706][ T6229] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 98.849716][ T6229] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 98.849754][ T6229] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 98.849761][ T6229] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108 [ 98.849769][ T6229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.849775][ T6229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.849782][ T6229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.849796][ T6229] [ 98.850841][ T6229] Mem-Info: [ 98.888489][ T54] usb 6-1: USB disconnect, device number 6 [ 98.892950][ T6229] active_anon:4348 inactive_anon:1643 isolated_anon:0 [ 98.892950][ T6229] active_file:2909 inactive_file:19961 isolated_file:0 [ 98.892950][ T6229] unevictable:1768 dirty:330 writeback:0 [ 98.892950][ T6229] slab_reclaimable:6008 slab_unreclaimable:55801 [ 98.892950][ T6229] mapped:23744 shmem:2319 pagetables:1208 [ 98.892950][ T6229] sec_pagetables:298 bounce:0 [ 98.892950][ T6229] kernel_misc_reclaimable:0 [ 98.892950][ T6229] free:45101 free_pcp:18031 free_cma:0 [ 98.983126][ T6229] Node 0 active_anon:140kB inactive_anon:60kB active_file:184kB inactive_file:24kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8636kB pagetables:1556kB sec_pagetables:1108kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 99.047365][ T6229] Node 1 active_anon:17352kB inactive_anon:6512kB active_file:11452kB inactive_file:79820kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:94952kB dirty:1316kB writeback:0kB shmem:5740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4408kB pagetables:3376kB sec_pagetables:84kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 99.057692][ T6229] Node 0 DMA free:2596kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:136kB local_pcp:128kB free_cma:0kB [ 99.066964][ T6229] lowmem_reserve[]: 0 285 285 285 285 [ 99.068776][ T6229] Node 0 DMA32 free:16140kB boost:2048kB min:15136kB low:18408kB high:21680kB reserved_highatomic:0KB free_highatomic:0KB active_anon:140kB inactive_anon:60kB active_file:184kB inactive_file:24kB unevictable:3536kB writepending:4kB zspages:0kB present:1032196kB managed:292512kB mlocked:0kB bounce:0kB free_pcp:9924kB local_pcp:3548kB free_cma:0kB [ 99.079849][ T6229] lowmem_reserve[]: 0 0 0 0 0 [ 99.082178][ T6229] Node 1 DMA32 free:161700kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17352kB inactive_anon:6512kB active_file:11452kB inactive_file:79820kB unevictable:3536kB writepending:1316kB zspages:1708kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:62844kB local_pcp:10708kB free_cma:0kB [ 99.098991][ T6229] lowmem_reserve[]: 0 0 0 0 0 [ 99.100998][ T6229] Node 0 DMA: 51*4kB (U) 5*8kB (U) 3*16kB (U) 16*32kB (U) 4*64kB (U) 0*128kB 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2596kB [ 99.106112][ T6229] Node 0 DMA32: 53*4kB (UME) 45*8kB (UME) 43*16kB (UME) 77*32kB (UME) 42*64kB (UME) 20*128kB (UME) 6*256kB (ME) 5*512kB (M) 3*1024kB (UM) 0*2048kB 0*4096kB = 16140kB [ 99.112449][ T6229] Node 1 DMA32: 463*4kB (UME) 321*8kB (UME) 320*16kB (UME) 68*32kB (UME) 68*64kB (UME) 102*128kB (UME) 79*256kB (UME) 39*512kB (UME) 24*1024kB (UME) 15*2048kB (UM) 9*4096kB (UM) = 161476kB [ 99.118777][ T6229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.121592][ T6229] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.124596][ T6229] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.128970][ T6229] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.131890][ T6229] 26039 total pagecache pages [ 99.133379][ T6229] 806 pages in swap cache [ 99.135316][ T6229] Free swap = 119280kB [ 99.137241][ T6229] Total swap = 124996kB [ 99.138656][ T6229] 524155 pages RAM [ 99.139881][ T6229] 0 pages HighMem/MovableOnly [ 99.141353][ T6229] 210134 pages reserved [ 99.142644][ T6229] 0 pages cma reserved [ 99.346402][ T6239] netlink: 'syz.0.86': attribute type 2 has an invalid length. [ 99.520131][ C1] [ 99.520967][ C1] ================================ [ 99.522634][ C1] WARNING: inconsistent lock state [ 99.524201][ C1] syzkaller #0 Not tainted [ 99.525785][ C1] -------------------------------- [ 99.527464][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 99.529630][ C1] syz.0.86/6239 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 99.531568][ C1] ffff88806babbc68 (slock-AF_PHONET/1){+.?.}-{3:3}, at: __sk_receive_skb+0x37d/0xa00 [ 99.534639][ C1] {SOFTIRQ-ON-W} state was registered at: [ 99.536493][ C1] lock_acquire+0x1b1/0x370 [ 99.537990][ C1] _raw_spin_lock_nested+0x31/0x40 [ 99.539863][ C1] __sk_receive_skb+0x37d/0xa00 [ 99.541439][ C1] pep_do_rcv+0x3eb/0x1e60 [ 99.542892][ C1] __release_sock+0x3a2/0x440 [ 99.544425][ C1] release_sock+0x1e5/0x280 [ 99.546023][ C1] pep_sock_accept+0x33b/0x13e0 [ 99.547900][ C1] pn_socket_accept+0xd8/0x420 [ 99.549533][ C1] do_accept+0x340/0x530 [ 99.550972][ C1] __sys_accept4+0x108/0x200 [ 99.552551][ C1] __ia32_sys_accept4+0x94/0x100 [ 99.554171][ C1] __do_fast_syscall_32+0xe7/0x950 [ 99.555768][ C1] do_fast_syscall_32+0x32/0x70 [ 99.557319][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.559349][ C1] irq event stamp: 4252 [ 99.560656][ C1] hardirqs last enabled at (4252): [] _raw_spin_unlock_irq+0x23/0x50 [ 99.563706][ C1] hardirqs last disabled at (4251): [] _raw_spin_lock_irq+0x45/0x50 [ 99.566786][ C1] softirqs last enabled at (4246): [] netif_rx+0x65/0xb0 [ 99.569389][ C1] softirqs last disabled at (4247): [] do_softirq+0xac/0xe0 [ 99.572231][ C1] [ 99.572231][ C1] other info that might help us debug this: [ 99.574767][ C1] Possible unsafe locking scenario: [ 99.574767][ C1] [ 99.577155][ C1] CPU0 [ 99.578183][ C1] ---- [ 99.579598][ C1] lock(slock-AF_PHONET/1); [ 99.581491][ C1] [ 99.582945][ C1] lock(slock-AF_PHONET/1); [ 99.584975][ C1] [ 99.584975][ C1] *** DEADLOCK *** [ 99.584975][ C1] [ 99.587663][ C1] 5 locks held by syz.0.86/6239: [ 99.589302][ C1] #0: ffff888027e9e240 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 99.592526][ C1] #1: ffff88806babc360 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x92/0x4c0 [ 99.595513][ C1] #2: ffffffff8e7e5420 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x32a/0x1580 [ 99.598686][ C1] #3: ffff88806babc968 (slock-AF_PHONET){+.-.}-{3:3}, at: __sk_receive_skb+0x1d3/0xa00 [ 99.601735][ C1] #4: ffff88806babc9e0 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x84c/0x17f0 [ 99.604975][ C1] [ 99.604975][ C1] stack backtrace: [ 99.607141][ C1] CPU: 1 UID: 0 PID: 6239 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(full) [ 99.607157][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 99.607163][ C1] Call Trace: [ 99.607168][ C1] [ 99.607173][ C1] dump_stack_lvl+0x100/0x190 [ 99.607188][ C1] print_usage_bug.part.0+0x257/0x340 [ 99.607199][ C1] mark_lock+0x74a/0xa20 [ 99.607208][ C1] ? clockevents_program_event+0x1bf/0x820 [ 99.607222][ C1] __lock_acquire+0x103a/0x2630 [ 99.607232][ C1] ? sk_filter_trim_cap+0x5a5/0xcd0 [ 99.607249][ C1] lock_acquire+0x1b1/0x370 [ 99.607258][ C1] ? __sk_receive_skb+0x37d/0xa00 [ 99.607299][ C1] _raw_spin_lock_nested+0x31/0x40 [ 99.607317][ C1] ? __sk_receive_skb+0x37d/0xa00 [ 99.607328][ C1] __sk_receive_skb+0x37d/0xa00 [ 99.607340][ C1] pep_do_rcv+0x3eb/0x1e60 [ 99.607352][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 99.607363][ C1] ? find_held_lock+0x2b/0x80 [ 99.607377][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 99.607387][ C1] __sk_receive_skb+0x905/0xa00 [ 99.607399][ C1] phonet_rcv+0x84c/0x17f0 [ 99.607415][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 99.607432][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 99.607447][ C1] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 99.607461][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 99.607471][ C1] ? lock_acquire+0x1b1/0x370 [ 99.607481][ C1] ? process_backlog+0x32a/0x1580 [ 99.607491][ C1] ? process_backlog+0x32a/0x1580 [ 99.607500][ C1] __netif_receive_skb+0x1f/0x120 [ 99.607510][ C1] process_backlog+0x37a/0x1580 [ 99.607521][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 99.607532][ C1] net_rx_action+0xa40/0xf20 [ 99.607543][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 99.607553][ C1] ? hrtimer_bases_first+0x1a0/0x210 [ 99.607564][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 99.607580][ C1] ? sched_clock+0x38/0x60 [ 99.607589][ C1] ? sched_clock_cpu+0x6c/0x570 [ 99.607601][ C1] ? mark_held_locks+0x40/0x70 [ 99.607610][ C1] handle_softirqs+0x1ea/0xa00 [ 99.607624][ C1] ? __sysvec_apic_timer_interrupt+0x10b/0x460 [ 99.607638][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 99.607651][ C1] ? irqtime_account_irq+0x176/0x2d0 [ 99.607667][ C1] ? netif_rx+0x65/0xb0 [ 99.607678][ C1] ? __pfx_sock_wfree+0x10/0x10 [ 99.607689][ C1] do_softirq+0xac/0xe0 [ 99.607702][ C1] [ 99.607706][ C1] [ 99.607709][ C1] __local_bh_enable_ip+0xf8/0x120 [ 99.607723][ C1] ? netif_rx+0x65/0xb0 [ 99.607734][ C1] netif_rx+0x93/0xb0 [ 99.607745][ C1] pn_send+0x6fa/0x8e0 [ 99.607761][ C1] pn_skb_send+0x29b/0x650 [ 99.607777][ C1] pipe_handler_request+0x1af/0x220 [ 99.607788][ C1] pep_sock_close+0x145/0x4c0 [ 99.607798][ C1] pn_socket_release+0x82/0xb0 [ 99.607812][ C1] __sock_release+0xb3/0x260 [ 99.607825][ C1] ? __pfx_sock_close+0x10/0x10 [ 99.607837][ C1] sock_close+0x1c/0x30 [ 99.607848][ C1] __fput+0x3ff/0xb50 [ 99.607863][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.607878][ C1] task_work_run+0x150/0x240 [ 99.607889][ C1] ? __pfx_task_work_run+0x10/0x10 [ 99.607899][ C1] ? rcu_is_watching+0x12/0xc0 [ 99.607913][ C1] exit_to_user_mode_loop+0x107/0x4f0 [ 99.607923][ C1] ? rcu_is_watching+0x12/0xc0 [ 99.607936][ C1] __do_fast_syscall_32+0x608/0x950 [ 99.607947][ C1] do_fast_syscall_32+0x32/0x70 [ 99.607962][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 99.607977][ C1] RIP: 0023:0xf708ef7c [ 99.607987][ C1] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 99.607998][ C1] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 99.608010][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000ffffffff [ 99.608016][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.608022][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 99.608027][ C1] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 99.608033][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 99.608042][ C1] [ 99.740273][ T6239] gprs0: detached