last executing test programs: 24m46.730512276s ago: executing program 32 (id=1184): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002480)=@newchain={0x43c, 0x64, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffef}, {0xffe0, 0x3}, {0x8, 0x9}}, [@f_rsvp={{0x9}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x6, 0xddf433fe, 0x7, 0x7fffffff, 0x40, 0x7, 0x0, 0x7fffffff, 0x40, 0xed, 0x8, 0x8, 0x6, 0x1, 0x6, 0x8, 0x4f000, 0x101, 0x1, 0x7, 0x900, 0x401, 0x1ff, 0xf3, 0xe, 0x5, 0x5, 0x401, 0x1, 0x2, 0x4, 0x3, 0x9f09, 0x0, 0x401, 0x9, 0xe, 0x3, 0xfe, 0x0, 0x1, 0x4, 0x4, 0x0, 0x23f1, 0x1, 0x8000, 0x4, 0xc00, 0x9, 0x8, 0x7fff, 0x6, 0x5, 0xfff1, 0x3, 0x1, 0x81, 0x9, 0x4, 0x0, 0xd, 0x8, 0x5, 0x6, 0x9, 0x80, 0x7, 0x7ff, 0x5, 0xd29c, 0x6, 0x2, 0xffffffff, 0x6, 0x0, 0xcf8, 0x4, 0x6a8c, 0x4, 0x200, 0x8, 0xd, 0x1c00000, 0x800, 0xfff, 0x5, 0x8001, 0x7fff, 0x0, 0xd, 0x7, 0x1, 0x6, 0x9, 0xc8ab, 0x2, 0x3, 0x9, 0xf5, 0x8, 0x9, 0x7ff, 0x2, 0x2, 0x5, 0x1, 0x4338, 0x6a010c8e, 0x0, 0xfff, 0x6, 0x5, 0x2, 0x1000, 0x2, 0x0, 0x7, 0xc, 0x1, 0x10001, 0x1, 0x7, 0x3, 0x40, 0x70000000, 0x1, 0x8000, 0x7, 0x40, 0xc3, 0x4, 0x9, 0x0, 0x8, 0x8, 0x8000, 0xfffffff7, 0x0, 0x9, 0xf42, 0x4, 0xc, 0x4, 0x8, 0x3, 0x0, 0x5ffffe, 0x0, 0xfffffffd, 0x800, 0x200, 0x0, 0x3ff, 0x1, 0xb3, 0x0, 0x8, 0x4, 0x2, 0x4, 0xe, 0x6, 0x48, 0x80000000, 0x8000, 0x9, 0x6, 0x951c, 0x5, 0x0, 0x6, 0x2, 0xf44, 0x7fffffff, 0x400, 0x6, 0x2, 0x9, 0x100, 0x4, 0x8001, 0x7, 0xc, 0x5, 0x1698e070, 0x1, 0x6, 0x400, 0x7fff, 0x0, 0x0, 0x0, 0x773e, 0x2, 0x1000, 0x2, 0x3, 0x411101c7, 0xc, 0x1, 0xc, 0x6143, 0x5, 0x6, 0x1, 0xc, 0x7ffb, 0x101, 0x8b1, 0xb48, 0x5, 0x2, 0xfec9, 0xeaa3, 0xfffffffe, 0xa932, 0xfffffff8, 0x7fffffff, 0x7, 0x3, 0x6, 0x9, 0x3, 0xe633, 0x0, 0xe, 0x1, 0x66c419be, 0x3ff, 0xb120, 0x6, 0x7ff, 0x6, 0xfffffffa, 0x0, 0x72cdab50, 0x6, 0x9, 0x6, 0x0, 0x5, 0x4791, 0x0, 0x7, 0x4, 0x329f, 0xffffffff, 0x1, 0x10000, 0x7fff, 0x9, 0xff, 0x6]}]}]}}]}, 0x43c}}, 0x4000000) recvmmsg(r3, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/117, 0x75}, {&(0x7f00000004c0)=""/208, 0xd0}, {0x0}], 0x3}, 0x9cd}], 0x1, 0x2002, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r6, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23m37.293450419s ago: executing program 33 (id=1607): syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) r1 = bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000500010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r5 = syz_open_procfs(0x0, 0x0) io_submit(r4, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000700)='./binderfs\x00', 0x0, 0x20, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) lseek(0xffffffffffffffff, 0x9, 0x0) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000009000000ff7f0000f90000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r1, @ANYRESOCT=r4, @ANYRESOCT, @ANYRESOCT=r0, @ANYRES64=r2, @ANYRES64=r5, @ANYRES64=r4, @ANYRES16, @ANYRESHEX=r7], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3fb, 0x7, 0xffffffffffffffff, 0x9, 0x7f, 0xf, 0x80000006}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000"], 0x118}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 22m53.112446031s ago: executing program 34 (id=1712): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x7, 0x1, 0x5, 0x7ff, 0x54, 0x7fffe002, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xb, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x3ff, 0x3, 0x2, 0xbaa3, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x6, 0x203, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x318ccbf2, 0x9, 0x4, 0x2, 0x1000, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x199, 0x1, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x80000000, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0xffffffa1, 0x9, 0x2, 0x8d1, 0x8fd, 0xfffffffa, 0xe4, 0x1, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0xb, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x81, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x2000007, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb11, 0x1a, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464f, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x101, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x5, 0x40, 0x3, 0x0, 0x1fc1, 0x7fffffff, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0x4, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x4, 0x5, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000403, 0xffffffff, 0xfffffffb, 0x40, 0x7fffffff, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x2, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000402, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0x7fff, 0x4000037d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ipv6_route\x00') sched_setscheduler(r1, 0x6, &(0x7f0000000300)=0x400) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r7, 0x289e0cb5, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@u}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 14m24.821372444s ago: executing program 35 (id=3353): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x7, 0x1, 0x5, 0x7ff, 0x54, 0x7fffe002, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xb, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x3ff, 0x3, 0x2, 0xbaa3, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x6, 0x203, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x318ccbf2, 0x9, 0x4, 0x2, 0x1000, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x199, 0x1, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x80000000, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0xffffffa1, 0x9, 0x2, 0x8d1, 0x8fd, 0xfffffffa, 0xe4, 0x1, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0xb, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x81, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x2000007, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb11, 0x1a, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464f, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x101, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x5, 0x40, 0x3, 0x0, 0x1fc1, 0x7fffffff, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0x4, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x4, 0x5, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000403, 0xffffffff, 0xfffffffb, 0x40, 0x7fffffff, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x2, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000402, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0x7fff, 0x4000037d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ipv6_route\x00') sched_setscheduler(r1, 0x6, &(0x7f0000000300)=0x400) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r7, 0x289e0cb5, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@u}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 14m20.326199555s ago: executing program 36 (id=3358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800086}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @private2, 0x5}, {0xa, 0x0, 0x100006, @dev={0xfe, 0x80, '\x00', 0x1f}}, r2}}, 0x48) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000000000c8d05300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r6, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/18, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500"], 0x74}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 14m19.364348858s ago: executing program 37 (id=3361): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x13, 0x18, 0x1, 0x70bd29, 0x20000000, {}, [@CGW_CS_XOR={0x8, 0x5, {0x2, 0x6, 0x8, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, "64100a93079597e0"}, 0x2}}]}, 0x34}}, 0x0) ioperm(0xf73, 0x3, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@private=0xa010100, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8, 0x0, 0x8, 0x8}, {0x4, 0x0, 0x0, 0x4aa}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {{@in=@local, 0x80, 0x32}, 0x0, @in6=@empty, 0x3506, 0x2, 0x0, 0x8, 0xfffffffd}}, 0xe4) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010030bd701004000000050000000600010005000000080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x12}}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_EVENT={0x8, 0x2c, 0x9b}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8048802) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$evdev(&(0x7f0000002f80), 0x3, 0x484000) 14m17.333513053s ago: executing program 38 (id=3362): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="0800080006000600000014000000450a0fc0006600000b2f"], 0xfce) r4 = getpid() syz_pidfd_open(r4, 0x0) setpriority(0x1, r4, 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) r6 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0) ioctl$CEC_DQEVENT(r6, 0x541b, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev, 0x40, 0x0, 0xffffffff, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x5, r0, 'id0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r11, 0xc0287c02, &(0x7f00000004c0)={0x80000000, 0x0, &(0x7f00000002c0)=[{{}, {0x80000000}}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r11, 0xc0347c03, &(0x7f00000001c0)={{r12, r13, 0x1, [0x0, 0xf32c]}, {r14, r15, 0x4, [0x6]}, 0x0, [0x80008, 0x3df]}) r16 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000340)=ANY=[@ANYBLOB="200003a3b93300bb", @ANYRES16=r16, @ANYBLOB="05042abd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="dcfe0280"], 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0xc0c4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r9, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c040000", @ANYRES16=r16, @ANYRES32=r5, @ANYRES32=r8, @ANYBLOB="7c00028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004006f07000008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="280202804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ffffffff40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000e000000080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000700000000003c000100240001006270665f686173685f66756e70299468636e03806300000000000000000000000000000000000000050003000b0000000300017f060000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600fe5ccdad7d973c2d742b2e9f34361f0729c7767c3df714821bebd0b42d8a21cd7ecad1d4275f8eb3", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000008008000100", @ANYRES32=r19, @ANYBLOB="7c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000008000100", @ANYRES32=r7, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000008000100", @ANYRES32=r8, @ANYBLOB="3c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040008000000"], 0x46c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 13m20.384961955s ago: executing program 9 (id=3375): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'nat\x00', 0x0, 0x0, 0x0, [0xd7, 0x10, 0x1ff, 0x401, 0x1c62, 0x5]}, &(0x7f0000000180)=0x50) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r1}, 0x18) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x4f, 0xb0, 0xfffffffffffffffe, 0x5, 0x7, 0x40000000a, 0x651, 0x100000004, 0x9657, 0x0, 0x7ffffffd, 0x0, 0xf3, 0x5, 0x8000000000000000, 0xa70, 0x1, 0x1, 0x1, 0x2, 0xfffffffd, 0x8, 0x8, 0xfffffffffffffffa, 0x5, 0x6}) 13m19.867888595s ago: executing program 9 (id=3376): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000040)=0x3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f80)=@newtaction={0x85c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x848, 0x1, [@m_police={0x844, 0x1, 0x0, 0x0, {{0xb}, {0x818, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6, 0xeb, 0x7fffffff, 0x6, 0x0, 0x0, 0x8000, 0x10001, 0x10b, 0x9, 0x9ec, 0x200, 0x1, 0xffff, 0x6, 0x4, 0x9, 0x9, 0x70000000, 0x5, 0x37, 0x7fff, 0xfc8, 0x4, 0x8000, 0x9, 0x6b4, 0x0, 0xd2c, 0x8, 0x0, 0x1ff, 0x62, 0x0, 0xd, 0x100, 0x0, 0x9d, 0x10001, 0xffffffff, 0x1, 0xaa9, 0xd33c000, 0xffffffff, 0xffffffcf, 0x9, 0x5, 0x7, 0x4, 0x0, 0x4, 0xc9cf, 0x6f, 0x4, 0x5, 0x3, 0x7, 0x7, 0x1, 0x3, 0x4, 0x80000001, 0x4, 0xfffffffc, 0x3, 0x8, 0x401, 0x7, 0x8, 0x8, 0x8001, 0x401, 0xc693, 0x1, 0x2, 0x80000000, 0xe, 0x0, 0x248, 0x7, 0x201, 0x0, 0x8, 0x8e, 0x7, 0x20000000, 0x10001, 0x40, 0x4, 0x0, 0xe68, 0x1, 0x8000001, 0x1, 0x0, 0xffff, 0x8, 0x6, 0xa8, 0x9, 0x633, 0x5, 0x4, 0x2, 0x7, 0x1ff, 0x2, 0x1, 0x8, 0x2, 0xfffff109, 0x7fff, 0x6, 0x5, 0x48d, 0x9, 0x2, 0x1, 0x9, 0xfffffffe, 0x9, 0x3, 0x80000000, 0x2, 0x3, 0x7f, 0x6, 0x0, 0x5, 0x8, 0x4, 0x0, 0x6, 0xfffffffe, 0x3, 0x7fff, 0x2, 0x2, 0x8, 0x200, 0x2, 0xd1e, 0x6, 0x80000000, 0xd, 0xacc1, 0xb, 0x2, 0x6, 0x9, 0x1, 0x0, 0x7, 0x800, 0x80000000, 0x6, 0x3, 0x7fffffff, 0xfffffffd, 0x9, 0x9, 0x200, 0xc, 0xfff, 0x2, 0x8, 0x9, 0x7, 0xb, 0x7, 0x0, 0x5, 0x7ff, 0x5, 0x8, 0x4, 0x5, 0x4, 0x4, 0x5, 0x7, 0x3, 0x6, 0xbc59, 0x3, 0xd53, 0x3ff, 0x1, 0x1, 0x1000, 0x0, 0x15, 0x8001, 0x8, 0x4, 0x4, 0x4, 0x0, 0x401, 0x7f, 0x574, 0x0, 0x1ff, 0x51343c33, 0x1ff, 0x3, 0x6, 0x401, 0x5, 0xffffffc0, 0x1, 0x1, 0x7ff, 0x2c09, 0x8, 0x0, 0x8, 0x1, 0x2, 0x4, 0x4, 0x401, 0x2, 0x4, 0xfffffffa, 0x2, 0x4000ff, 0xfff, 0x0, 0x2, 0x1000, 0x80, 0x5, 0x2, 0xb6c, 0x0, 0x7, 0x5, 0x2, 0x7, 0x6, 0x8, 0x0, 0x160e, 0xfffffffb, 0x4d2e, 0x8001, 0xfff, 0xfffffffd, 0x1, 0x9, 0x5, 0x7, 0x5, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xa71f, 0x3, 0x8, 0x8001, 0x9, 0x9, 0x7, 0x2, 0x7af, 0xfffffff4, 0x5, 0x1ff, 0x8, 0xda, 0x8, 0x7, 0xaeb41200, 0x0, 0x6, 0x0, 0x0, 0x8, 0x9, 0xffffffff, 0x916, 0x8000, 0x6, 0x9, 0x5, 0x0, 0x3, 0x4d74, 0x7, 0x6, 0x7, 0x7fffffff, 0x9, 0x9, 0x9, 0x0, 0x8, 0x3, 0x7, 0xffffff7b, 0x5, 0x81, 0x2, 0xffffffff, 0x9, 0x0, 0x3, 0x1000, 0x4, 0x0, 0x8, 0x8, 0xd, 0x4, 0xa, 0x4, 0x101, 0x1ff, 0xc, 0x0, 0x6, 0x2, 0x4, 0x3ff, 0x80000001, 0x401, 0x8, 0x0, 0x7fff, 0x7, 0xec, 0x3ff, 0x8, 0xf, 0x3, 0xb, 0x4, 0x5, 0x2, 0x7, 0x2, 0x10, 0x9, 0x6, 0x0, 0x27, 0xfff, 0x2, 0xffffffff, 0x0, 0x6, 0x9, 0x9e4a, 0xf, 0x6, 0x68a4, 0x6, 0x401, 0x10001, 0x4, 0x3cd, 0x1000, 0x3, 0x2, 0xe, 0x0, 0x7fda, 0x40000, 0xb299, 0x7, 0x14000000, 0x4c8, 0x5, 0x3, 0xea, 0x1, 0x5, 0x3, 0x3, 0x7, 0xb8, 0x8f, 0x4, 0x3, 0x4, 0x3, 0xc2, 0xfffeffff, 0x2, 0x2, 0x8, 0x5, 0xfad, 0x2, 0x10001, 0x4aa, 0x6, 0x9, 0x2, 0x10000000, 0x7, 0xffffff0a, 0x3, 0x7, 0x8001, 0xce, 0x30, 0x4, 0x0, 0x0, 0x1000, 0x1, 0x10, 0x1, 0x10001, 0x689, 0x0, 0x9, 0x7, 0x8, 0xb, 0x9, 0xe2cf, 0x2, 0xa, 0xff, 0x1, 0x8, 0x4, 0x1ff, 0xffff542b, 0x0, 0x1, 0x9, 0xc394, 0xffffffff, 0x5, 0x8000, 0x5, 0xe, 0x9, 0x9, 0x7fffffff, 0x2, 0x3, 0xdd, 0x4, 0x4, 0x9, 0x1, 0x1, 0x7, 0xd4, 0x7, 0x6, 0x7fffffff, 0x4, 0x4, 0x9, 0xb9, 0x5, 0x2, 0x4, 0xfff, 0x0, 0x1285, 0xbdf, 0x5558, 0xfffffff3, 0x4, 0x5, 0x9, 0xfcca, 0x20004000, 0x80000001, 0x5, 0x1, 0x9, 0x8, 0x9, 0x0, 0xf1b3, 0x4af2, 0x101, 0x4, 0x1, 0x96, 0x8001, 0xc6, 0xa321, 0x6, 0x59115142, 0x400, 0x2, 0x3, 0xfff, 0x1, 0x7, 0x5, 0xff, 0x5, 0x9, 0x7, 0x8, 0x5, 0xa2af, 0x6, 0x1, 0x80000000, 0x6, 0x800]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x85c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000080)=0x7) write$evdev(r5, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) lseek(r6, 0x1, 0x1) mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000001000)=""/91) 13m16.861285216s ago: executing program 9 (id=3379): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x7, 0x1, 0x5, 0x7ff, 0x54, 0x7fffe002, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xb, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x3ff, 0x3, 0x2, 0xbaa3, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x6, 0x203, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x318ccbf2, 0x9, 0x4, 0x2, 0x1000, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x199, 0x1, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x80000000, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0xffffffa1, 0x9, 0x2, 0x8d1, 0x8fd, 0xfffffffa, 0xe4, 0x1, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0xb, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x81, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x2000007, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb11, 0x1a, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464f, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x101, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x5, 0x40, 0x3, 0x0, 0x1fc1, 0x7fffffff, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0x4, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x4, 0x5, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000403, 0xffffffff, 0xfffffffb, 0x40, 0x7fffffff, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x2, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000402, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0x7fff, 0x4000037d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r5, 0x0, 0x1}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ipv6_route\x00') sched_setscheduler(r1, 0x6, &(0x7f0000000300)=0x400) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r7, 0x289e0cb5, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@u}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 13m14.81798412s ago: executing program 1 (id=3381): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x7, 0x1, 0x5, 0x7ff, 0x54, 0x7fffe002, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xb, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x3ff, 0x3, 0x2, 0xbaa3, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x6, 0x203, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x318ccbf2, 0x9, 0x4, 0x2, 0x1000, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x199, 0x1, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x80000000, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0xffffffa1, 0x9, 0x2, 0x8d1, 0x8fd, 0xfffffffa, 0xe4, 0x1, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0xb, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x81, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x2000007, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb11, 0x1a, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464f, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x101, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x5, 0x40, 0x3, 0x0, 0x1fc1, 0x7fffffff, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0x4, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x4, 0x5, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000403, 0xffffffff, 0xfffffffb, 0x40, 0x7fffffff, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x2, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000402, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0x7fff, 0x4000037d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ipv6_route\x00') sched_setscheduler(r1, 0x6, &(0x7f0000000300)=0x400) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r7, 0x289e0cb5, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@u}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 13m9.14925756s ago: executing program 9 (id=3384): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(0x0, 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000380)=[{&(0x7f00000001c0)="390000001300034700bb5bffffe4feff06000000010000004500000025", 0x1d}, {&(0x7f00000004c0)="52fbe6c15468275be880716a57eeae0d6eee23fbaa52cfe736ab171a252b43d3914bb642092d5fcf1cdb6cd5f9a28f9d96531810b7d31a7ac31f3b51dd9cc9a673ae23d1645420e99c72240fdaaa6ad9bd03d90d7b7ff2096cf4eaf711a740df165aa614b6813800a21fa2d5818049f57cf874594f624160c69e86117630d67d39214c7077e3df1957b7d0c70c167f9f63c3515c4cf166e8c7bce12577a0c768c950a38bce9ea7c1d7a07811c8a5fb0584b8ef3bbb8d73f3230d755d70302b8529eb4555267e781b", 0xc8}, {&(0x7f0000000640)="d5204d7a73d597c88432e7432dd872873a85db5ded7065e46f6a2c9efec437a320777e11d234c66d5117bd88885705f3f421f0367d88538223a56d238654317243d083504a4365738e", 0x49}], 0x3) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) fsmount(r3, 0x1, 0xf0) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet_mreq(r6, 0x0, 0x23, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRES32, @ANYBLOB=',cache=fscach']) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000340)={0x3, 0x4}, 0x4) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f0000000180)={0x0, 0x0, "a4cd91", 0x9}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 13m7.226456522s ago: executing program 1 (id=3386): r0 = openat$nvram(0xffffff9c, &(0x7f0000000740), 0x41, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xf8, r1, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x400}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xa}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf2}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x80}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0xc}, {0x5}, {0x6, 0x11, 0xaa6}, {0x8, 0xb, 0x18000000}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000940), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r6, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa004081}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x100, 0x70bd27, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x840}, 0x80881) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x1c, 0x17, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4400}, 0x4008001) sendmmsg(r6, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}}], 0x1, 0x40002) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect(r8, &(0x7f0000000100)=@nfc={0x27, 0x0, 0x0, 0x3}, 0x80) sendmsg(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000000)="befe8b53e1bb74576d180d9411a60ea5f9318b85c5854ed48ad404a88e584e533cfe76c7f4d7be90938c02d3d3a8ade1aea7b8acf13c43ca46f27469c79035af14ee6967af9de1434493f581b35937088d3e1bd9cdadcd6c7f6a497700ae15a70753df920d6d6ef733afd40abf06cb56ba1c0e71ed0d4576290a1fe8db3d896283d40b7d9a77a1ac8b62ca93025b28bfe87fe75b21225fb0fca6a8850ac3572a648bf6808289063cd975b173515996b4d9f78521f3eb4e1cb61f52900b942251b8fd87fb12dc9b1598b8c48d294964971dbb6e7c54d1eadb82fc30e0dd0ab9fd747f943ffdeeb3", 0xe7}, {&(0x7f0000000100)="447aa634b193b7343ecd553e8a00af13df1e9c35cda0b8ba3d26216b73e777d18c394d657c874693acdb740308df683a6a0b34e8417be62abc9821a99716a7426723221868c5218e2d6bec5abf9f987620eb145a5b8b70fbe60813fb1b3c69e89e08b33f55e31fd13fe5ecb7c6819b1ae714f02dff2e843a240f9f20", 0x7c}, {&(0x7f0000000600)="de45395634716bdf927eba5b22c0a206211042c851da15b5189faee8793316723343e611b3a9ed6e4fd6f22a573b71ff0112f4b8fc34e93e62abb3fada0144dc96ea1e30ab66ab93267dd7829147a8636759f7cbb461851eca5f323fc220ba3f8574ec38f0b41606cab46e83fd95ccbbd7fc5bb86f96f2b41cfbc9de2b4c80c9e99fc5569f2a5df8f0bbf35b3ac411dd8969c22345e2", 0x96}, {&(0x7f0000000240)="b0e6a603d882e9bddfb80a10203fdb5bcaf943a2ffea2cb763c9fc1bbc7b705b1b0befc0f5af50504a8a697247887640c0386df46b0a3af70a242debb38b1e25f553f21ab1b514a6536fe87d39949a7bddc9e07c666f1b4e79dd09aa2714e2ab2421a0610e349aa9aef9baffd2f9600fc0e994edf5ec6f9a87d492a487ad6a565a73921ab2542f08f4e3ea753389bc6ec591eb2c437909e69d0a764663bedbd8b785900c9b7f05f582c64eef05c127593c7961c84681af250eeacd46526dff72b88a44f1887b58387119fe970a1ba22c3c4d4085394ac55e6d", 0xd9}, {&(0x7f0000000980)="930413f9e02342c4e68cfc79a17d373b55bebd05e954ca120b47e5c07d7c327ddfcfc2b60e6393a46a2972bf62a0aab8d0b72d84a2c77e2dde879bb44e610746c3f92c962bc7bfed7f6b9c429fca2acc2cdeaa3690b5ec734f28b34ba1c010e7ab24128c9b8babb041e80ba4d35fcdbab84f4d806d5c87f0e920a557e285ed0d783a87a818fb17318baa3f30fa30749d1bce263e521a9c97db5dd6fc829e0f77e7dccc8eb0645f0c3acd2421e7f9725b4aba7d03016823f7efc0f0805ee5d9942eae1c73fd99efa89b09e252df488176315291676f4cc08eee03cf1c0fd13e484b8d9a5ba31ad9900a7ed6d17a7a073fcf0db768f36d", 0xf6}], 0x5, &(0x7f0000000380)=[{0x2c, 0x101, 0x5, "2f856afeb6e12f7e719b771deb3ddc4926716eaa89adca8ee8ee703e7c62779d"}, {0xb0, 0x101, 0x800, "d1f5208fa23b4eea4c2d62d93c6356ddd6deb897a2f1448d1260b2da36dfd870ddd99c78ac81312795236fbc080b7fbd27216555867e71b058de7e6ac05cf24b917d1b60c8f4c4efa4b61df24fd7a1ff345363dd41a888c74286326da78e869924a941776e04b5e2e2fb7ab8231da8e1932c039c2ed7bea9ecfb6aa93c97c246ce51b94bcb4ff4093e4601a385a276d88d0669ad62a7ef5149cc2a828f1bbda43d578d"}], 0xdc}, 0x40000845) 13m6.76964392s ago: executing program 1 (id=3387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r3}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r5, 0x208) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180), 0x8) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x6) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) 13m6.425299225s ago: executing program 1 (id=3388): r0 = socket$kcm(0x10, 0x4, 0x4) recvmsg$kcm(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f900000001ffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)="16a4e093b8f10d9f3f9cf72ace5f4fb0778b1b290fecfef9744041cf3e6ad7b0e33c2e83398e1af45744d9215e", &(0x7f00000006c0), 0x3, 0xffffffffffffffff, 0xace4085025a3d5db}, 0x38) r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185648, &(0x7f0000000100)={0x0, 0x400, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0x6, '\x00', @value64=0x4ad}}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x12}, 0x8}], 0x1c) openat$binderfs(0xffffff9c, &(0x7f0000000340)='./binderfs2/custom1\x00', 0x2, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0401273, &(0x7f0000000280)={'\x00', 0x80, 0xfffff9d1, 0xb, 0x9, 0x8001, r1}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) r6 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='gfs2meta\x00', 0x0, 0x0) 13m4.511877509s ago: executing program 9 (id=3389): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000000), 0x0, 0x10102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) r2 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000240)='id:Om\x84\xcf\xa4\xdb%iJ\xb10\xd7eym\xa6\x1f\xba~\"P\xac\x92\xc2c\xd7\x1b\x1e\x95\xc7\xea~>\xf1\xbf\xd6\xef\x81\xa9\xc3\xd8\xdd\xb1\x84?2\xfb\xddp\r\xf7\xb0\xa6\x0f\xd6\x1b\x81\xae\xbe\xd9\xef\xfep\xb1\xc3!\xa9\xb1\x05Q\v\x15X\xdf\xcdN\xec\x80\x8e\xe1\xfcd{+\xf4\xa0\xc40\xd4\xca\a\x00yUC:d\xb5\x9ar\x01Z\xb2\xa4\xf3\xbd\xe5\x13\x98\xad\xfc\xb6t\xd4\x16\x84\xd5\x9fE\xf0\x1b\x8bhw\xc2\xe7\x10e/\xba\xe6KG\xad\xfd\xa9+/T\xe7\x05\xc8J\xd3f}2\a:~\x81\xd8\xbe|\xf2\xd6\xdcp\x13\xc6\xe8\x19/*+\x06\xb3k\xa9\x8fZ\x86_\xedN\f<\xa3\xbcW\xdb\xc7Y\x9a\xc9,\x0fs\x9a_\x97\'\xc0\x8b\x82D\x82{\xe8\xd7\\\x96\x98\x904\xa2\x94\x1c\t--\xeb\x99\x88\xb3n\xbc\x1f\xdc\xd8\x12\xf4[\x92R;\xd0') bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000140)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x5c}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0x7) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2000000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, 0x0, 0x0, 0x40000c0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, &(0x7f0000002fc0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0xb}], 0x1c) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 13m3.098665111s ago: executing program 1 (id=3391): r0 = openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d608004500005803000000006c907803000000000000000800000086dd080088be00000000100000000100000000000000080022eb000000002000001d0300000000000000000000000800655800"/102], 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000040)={0x1, @vbi={0x7, 0x4, 0x2, 0x30385056, [0x8001, 0x5], [0x1, 0x4], 0x1}}) 13m2.252667328s ago: executing program 9 (id=3393): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x7, 0x1, 0x5, 0x7ff, 0x54, 0x7fffe002, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xb, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x3ff, 0x3, 0x2, 0xbaa3, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x6, 0x203, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x318ccbf2, 0x9, 0x4, 0x2, 0x1000, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x199, 0x1, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x80000000, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0xffffffa1, 0x9, 0x2, 0x8d1, 0x8fd, 0xfffffffa, 0xe4, 0x1, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0xb, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x81, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x2000007, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb11, 0x1a, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464f, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x101, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x5, 0x40, 0x3, 0x0, 0x1fc1, 0x7fffffff, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0x4, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x4, 0x5, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000403, 0xffffffff, 0xfffffffb, 0x40, 0x7fffffff, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x2, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000402, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0x7fff, 0x4000037d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ipv6_route\x00') sched_setscheduler(r1, 0x6, &(0x7f0000000300)=0x400) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r7, 0x289e0cb5, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@u}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 13m2.086666507s ago: executing program 1 (id=3394): mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 13m0.388319755s ago: executing program 7 (id=3396): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x7, 0x1, 0x5, 0x7ff, 0x54, 0x7fffe002, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xb, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x3ff, 0x3, 0x2, 0xbaa3, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x6, 0x203, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x318ccbf2, 0x9, 0x4, 0x2, 0x1000, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x199, 0x1, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x80000000, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0xffffffa1, 0x9, 0x2, 0x8d1, 0x8fd, 0xfffffffa, 0xe4, 0x1, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0xb, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x81, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x2000007, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb11, 0x1a, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464f, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x101, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x5, 0x40, 0x3, 0x0, 0x1fc1, 0x7fffffff, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0x4, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x4, 0x5, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000403, 0xffffffff, 0xfffffffb, 0x40, 0x7fffffff, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x2, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000402, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0x7fff, 0x4000037d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000300)=0x400) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r7, 0x289e0cb5, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@u}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 12m46.727084493s ago: executing program 39 (id=3392): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd60d2719c13f23a00fe800000000000000000000000000000ff0300000000000000000000000000010300907800fe88000000000000000000000000000100000000000000000000000000000001aaa1c58fbe614ac4cd88cb4fea511bcd27fb43be3fb4a1de795d6699ec290ad56b8ec5b5f66e40bb27a35b9ab4e6ad9039fc6dc6a88b24ce2f7e43bda5acf97638e547a670f365fc7810ed05a5639cff2014765a44efe7f2c7825f1e9e8fcd2767cadcb553f8d2ee00ba6281269c5770eb3f61e4f9d0dc2d8ce63c871a7bff91051ca3a4bf5613ed65681d26e3"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x200e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x6, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4000401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0c0400001001000500000000"], 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$cuse(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000680)=@newsa={0x138, 0x10, 0x5c3b37380d70341, 0x0, 0x0, {{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in6=@empty, 0x0, 0x32}, @in=@remote, {0x0, 0x1000, 0x0, 0xff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x51}, [@algo_aead={0x4c, 0x12, {{'morus640-generic\x00'}}}]}, 0x138}}, 0x8000) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@xdp={0x2c, 0x2, 0x0, 0x1d}, 0x80, 0x0}, 0x4004090) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa294}) 12m46.596389018s ago: executing program 40 (id=3394): mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='romfs\x00', 0x200000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 12m46.466994801s ago: executing program 41 (id=3393): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x7, 0x1, 0x5, 0x7ff, 0x54, 0x7fffe002, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xb, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x3ff, 0x3, 0x2, 0xbaa3, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x6, 0x203, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x318ccbf2, 0x9, 0x4, 0x2, 0x1000, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x199, 0x1, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x80000000, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0xffffffa1, 0x9, 0x2, 0x8d1, 0x8fd, 0xfffffffa, 0xe4, 0x1, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0xb, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x81, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x2000007, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb11, 0x1a, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464f, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x101, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x5, 0x40, 0x3, 0x0, 0x1fc1, 0x7fffffff, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0x4, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x4, 0x5, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000403, 0xffffffff, 0xfffffffb, 0x40, 0x7fffffff, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x2, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000402, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0x7fff, 0x4000037d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ipv6_route\x00') sched_setscheduler(r1, 0x6, &(0x7f0000000300)=0x400) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r7, 0x289e0cb5, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@u}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 12m46.447878301s ago: executing program 7 (id=3400): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0x0, 0xffff}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa6426000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/31) 12m43.942742208s ago: executing program 7 (id=3401): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x7, 0x1, 0x5, 0x7ff, 0x54, 0x7fffe002, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xb, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x3ff, 0x3, 0x2, 0xbaa3, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x6, 0x203, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x318ccbf2, 0x9, 0x4, 0x2, 0x1000, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x199, 0x1, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x80000000, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0xffffffa1, 0x9, 0x2, 0x8d1, 0x8fd, 0xfffffffa, 0xe4, 0x1, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0xb, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x81, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x2000007, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb11, 0x1a, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464f, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x101, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x5, 0x40, 0x3, 0x0, 0x1fc1, 0x7fffffff, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0x4, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x4, 0x5, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000403, 0xffffffff, 0xfffffffb, 0x40, 0x7fffffff, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x2, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000402, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0x7fff, 0x4000037d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ipv6_route\x00') sched_setscheduler(r1, 0x6, &(0x7f0000000300)=0x400) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r7, 0x289e0cb5, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@u}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 12m35.054812463s ago: executing program 7 (id=3402): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x100ba7) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81e8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000840)={0x4, 0x5, {0x1, @usage=0xff, 0x0, 0x5, 0x5, 0x3, 0x1, 0x2d6, 0x8c, @struct={0x8, 0x10001}, 0x4, 0x7fffffff, [0x149a8106, 0x2, 0x8, 0x5, 0xffffffffffffff29, 0x6]}, {0x3, @usage=0x5, 0x0, 0x6, 0x3, 0x6, 0x5, 0xf, 0x442, @struct={0x13, 0x8}, 0x80, 0x2, [0x6, 0x91a, 0xa060, 0x7, 0x0, 0x153e]}, {0x8000000000000001, @struct={0x12, 0xfb}, 0x0, 0xffffffffffffffff, 0x8, 0x9, 0x7, 0x2, 0x72, @usage=0x1, 0xc, 0x7, [0x81, 0x6, 0x8001, 0x0, 0x3, 0x3000]}, {0xe0, 0x8, 0x2}}) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000001180)={{}, r5, 0x8, @unused=[0x7, 0x9, 0x4545, 0x9], @devid=r6}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) shutdown(r4, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) syz_emit_ethernet(0x11, &(0x7f0000000280)={@random="8f5c13d4416e", @random="66b67138bb3c", @void, {@x25={0x805, {0x2, 0x7}}}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "7535f411f2f8735c", "9b668f078e28d63edcb811d519ecc828", "10cce4a3", "c1493db6097cb352"}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x2, 0x0, 0x4, {0xa, 0x4e24, 0x8001, @mcast2, 0x9}}}, 0x91) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000002c0)={'s526\x00', [0x3, 0xfffffffd, 0x13, 0x1, 0x2f, 0x7, 0x3, 0x7, 0xffe, 0xffffffff, 0x400000, 0x9, 0x1003, 0x4, 0xffff, 0x405c, 0xffffffa6, 0x7ffffffd, 0x1ff, 0x3, 0xfffff7ff, 0x0, 0x1, 0x5, 0x746b, 0x8, 0x6, 0x803, 0x8, 0x4, 0x8049]}) 12m31.867308628s ago: executing program 7 (id=3403): ioprio_set$uid(0x3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = memfd_secret(0x80000) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0xfffffffffffffc5e) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, r1, {0x85e0}}, 0x18) r2 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000020c0)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r2) ptrace(0x18, r2) ptrace(0x4208, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x200000) sendmsg$kcm(r3, &(0x7f000001bc00)={&(0x7f000001a240)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f000001b800)=[{&(0x7f000001a2c0)="73cbdd4e345fe29d6b04bd24c73dd523df8396d304a4c5e901636e6f12c2edbdb722ead8a675aaf9b891b5fa7801b341aebf7b979adfaeceb968a7f969c10231f552e835c9f1fc9d35d9f434d720d21d882c74ffd2fff45594f33d0fec84e4192827b58547d5817299dc10946e12605ce5bffce6c7814b01aeab196105d870dc2862dab61977b5f95397c1dd467184c74f05594f61a149d38293eb1c5f67a68585d91b57", 0xa4}, {&(0x7f000001a380)="1c52c1cbeb3017f7f7f8f2a022a60b65f41eb7ba69a3e52b9812c7605b02c1aac87af8eef7c5d78223664c1d3aa42085102bc312c95a4c988abf94a89189ffa3b51f68ae646e542a25e610e56912b0b33f77dede81d6546779a28897b9cf62b36d6c04403baaf6535621a623e21a9cd94606471b09118f9dc269bcba53665f7379f38e25ace94316e07d6400eae8000e628cf6afd59795f0cc5f8091ca7b73dbb482caf2e52e7c82d7b39eadcf353f1cde8ba9ee2a7b278db5f70b273a4dbc689707a66182093ce231707c9ce1ea8460c28b55fef2e6d4598b1e05693931eb045b71bbb3229ceeaaf85535", 0xeb}, {&(0x7f000001a480)="b97d66b64632496cde6668ecf3afed958df552f6d8ba1e965184aabfe21401bab5e415d7ac1ecab4e04dbad428627c22c67373426d44a75cf4a12c23743460c0694bba3fcf2bdbcaf9eae80149569b6bc42c0e", 0x53}, {&(0x7f000001a500)="c8b01bdccf4f982ba77938a5115f35dffd697b672ed087f33a13552df8685b976b203af67fa05f41b0cae68be3c5390aab983c8858f819b84ac5f83081b31cfd69ba3484e256f10de0ced5a7215e6db185d9631055a3639040b2cca1ecb8ab5bf475a646009533be68779db202ae", 0x6e}, {&(0x7f000001a580)="f24e20f5a291ede22e17dc88e249ceb568504a6d388ede2cdf13a669fa76167444f6f99a545a554356947d1953405076f39a16074b9a9c0319dfb9bdc418b41de49e20a04a3d6ae9154f57b340ab7a09693efbef9460f281ec8ae2894533e8a6a37a6aacd1", 0x65}, {&(0x7f000001a600)="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", 0x1000}, {&(0x7f000001b600)="da28bb10868f0c574e9880da8b6aeea369477fbefa291e61649b2a4298ce15d18dbf6f8fb48f437d11e79a474ef817356c4ebc", 0x33}, {&(0x7f000001b640)="92977b431785951ce4829cfb041eabdc211d3ae74c4678a88afefada005f2eded6ea5abd4ee4b73d758b177b613ebd", 0x2f}, {&(0x7f000001b680)="a5daaebba4ff4ca3e1f477faed1b4130dfcede03cf9cb3ffa64b6e56ae5279e507337ba4b9379ec238281269193881dc89369dd77177bc44c7d767e37de74beb65ca0c5caaf795dbdb81a1a1d5f5e6f9845393b5e84e10c2f530d7052ac149232e2eeadfa34ad37561fce41af84b27d8d2097ac8eb958a392d8f6b56a812d38cc821e1d4e9fd5d4319909f76200492b0d978f11acb2c7a", 0x97}, {&(0x7f000001b740)="4b20a5e68539c5ff0757766809280741284f3c1f2ca9d0f61ff8cb521fcc1584d287323b82689163ff2faf9301f5d8f68306932ee959889e173641cdeead10a9b2efbbed776df08e2e0dc0a693c176881484c2530ac441883d8ff452a46047047d7bd4951c8bd2a9fe54931cd92f71080200b87e3318f549d97df1e7a6499ae6ce684b8a10573cdb50403d84e28b1e2d991fdd0a609cd05358fa2b939aa7134ad6395f9810a2c883794880f512cf54d412c19d4a181e09b4dd67", 0xba}], 0xa, &(0x7f000001b880)=[{0x18, 0x29, 0x3, "15710286a8e3d2080ee342"}, {0xd4, 0x0, 0x3, "8e785347915b72a492ee3e39a25fd25b81613ba2400c34e664e107edc41dce8509b7fda757ec88814495b572cc65c7baf3cc9698fa59b1d118d020725eb78681ccfedb808a9c40dbfd4bc8899c94e2f89134b8411231df6ea459ccce5aed581a3be6f55d6d98ea01cfc850612934d593aed943da995381b16ec40325f929c7265ff9da6de931989b14ceaa585cc162c8fae3f60da7c7c377a4f2f68126fceb9722a9ed67eee097b690fcfc45ff90912876091d139756dc8298dd228b9b5460e65d22067e86224b"}, {0xb0, 0x117, 0x2, "b592948213a9041736836a6017673185f5802a4ab512cf8b6ee1bdf8b7708266662dce1d38e81e5b3cfc9753e918419f3aa88a1d7764919444fe40f25933a4fe2c3a8b70a4c58bdd13cbc86f403644d23da50379a7efb2ceb0cd6cb7d07a797c9e92d929f98e5e762b8f3ac6601bb008048e8cc9d25fdb9362f44ea148962acb9f743d7d6fb7382724239a93165dcd8e1b6ee5d07e88888178e694ef3bc24118992a"}, {0x5c, 0x112, 0xf9, "a1bf29adf994e5732697f3fdc82500803d8e6922e1af1281d5ba40787b4e7bba2e1b19af0b927a4ef5b2275b88e4252c9b2b249ec65e72e62be57a5584e417c6d2f564b72dbd4a459870104a1219"}, {0xb4, 0x104, 0x3, "0e9806c36822c0ac8e234715d998008e7e9933c156135e6bfb4d5f25f2334cb6cb4ebf87d707d23562690cafc7b5eca033a96c933973a42a55c582c5c6b8b796429cf4e0ce934a535f3798d44dd646dd2524edb6934be989b739e50cfad78b698cfde6ced6219438940269c752c65a39892a2eb09a4f3762a158ecd7979bac142af4cc21d1de8d1025a21ee60698ef134926655ec6f96571de2ecabeaef20564ec698965aab2"}, {0x9c, 0x104, 0x3, "54a0bbd4458fa1d5426d56c2a85345b68cf6b7665c7fac814d3c6aeaac7df0ed7e2082ca141030734c63d35ac23c72e9f24f7ff5b5753d40688120820c5f4873b6f335db7eb8b9aa75ac393e51803efbb45c7336433ce0f0c11a665fcdaf9f36badc435e1f2a8589a6711954bda05c7733718fb5e853fff68da43bc713d2cb0347c74a04866798faab6b871f471d"}], 0x348}, 0x4008854) ioctl$KVM_RUN(r0, 0xae80, 0x0) 12m30.972239213s ago: executing program 7 (id=3404): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r4, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000024c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300), 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x0) 12m15.136132451s ago: executing program 42 (id=3404): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r4, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000024c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300), 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r6, &(0x7f0000000980)={0x2020}, 0x2020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x0) 7m1.323367521s ago: executing program 0 (id=5189): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x8840) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000006c0), 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4004014) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000180)={0x3, 0x1000, 0x4, 0xa1, 0x5, 0x0, [{0x80000001, 0x5, 0x511, '\x00', 0x20a}, {0x4, 0x4, 0x5, '\x00', 0x502}, {0x8, 0x64f8a8ac, 0x16, '\x00', 0x80c}, {0x7, 0x4, 0x5, '\x00', 0x220a}, {0x3, 0x200, 0x8, '\x00', 0x2008}]}) 7m1.014747481s ago: executing program 0 (id=5190): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030002ac0f000500090001"], 0x58}}, 0x0) 7m1.002810754s ago: executing program 0 (id=5191): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000007dc0)) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x9, 0x5, 0x81, 0xffffbfff}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x11, 0x9}, 0x0, 0x0, 0x26, 0x54f, 0x23, 0x5, 0xfffffe01, 0x6f4, 0x4, 0x98, 0x0, r1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000100), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private2}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_FAMILY={0x5, 0xd, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 7m0.91617878s ago: executing program 0 (id=5192): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x6, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x5c}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x5e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f00000002c0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0xc0844123, &(0x7f0000002fc0)) r5 = syz_io_uring_setup(0x1e20, &(0x7f0000000200)={0x0, 0x86f4, 0x10100}, &(0x7f00000005c0)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x10, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x48e9, 0xe2fe, 0x9, 0x0, 0xfffffffffffffdcb) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e22, @loopback}], 0x10) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000140)=0x5, 0x4) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 6m59.352303855s ago: executing program 0 (id=5200): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0xfdf9, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 6m59.255701423s ago: executing program 0 (id=5201): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r1, r1, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) connect$phonet_pipe(r4, &(0x7f0000000040), 0x10) dup3(r4, r3, 0x80000) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="05", 0x1}]) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x6f631b4376e74f1e, {0x2, 0x0, @broadcast}, 'team_slave_0\x00'}) getsockopt$bt_hci(r0, 0x84, 0x1a, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f040000000000000000008500000005000000850000007d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket(0x1d, 0x2, 0x7) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x6b, 0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r5}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) syz_open_dev$MSR(&(0x7f0000000000), 0x800, 0x0) 6m43.846647955s ago: executing program 43 (id=5201): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r1, r1, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) connect$phonet_pipe(r4, &(0x7f0000000040), 0x10) dup3(r4, r3, 0x80000) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="05", 0x1}]) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x6f631b4376e74f1e, {0x2, 0x0, @broadcast}, 'team_slave_0\x00'}) getsockopt$bt_hci(r0, 0x84, 0x1a, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f040000000000000000008500000005000000850000007d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket(0x1d, 0x2, 0x7) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x6b, 0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r5}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) syz_open_dev$MSR(&(0x7f0000000000), 0x800, 0x0) 6m29.580965708s ago: executing program 4 (id=5348): syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x391e1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000040000000000070004dcc8045e900000000000001b00"/34]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r4, 0x1, &(0x7f0000000300)="fff0eaaffdbf3a", 0x7, 0x3}) io_uring_enter(r4, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c9, &(0x7f0000000100)) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r9) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) readv(r7, &(0x7f0000000000)=[{&(0x7f0000000100)=""/54, 0x36}], 0x1) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_usb_disconnect(0xffffffffffffffff) fchdir(r10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') 6m27.983272464s ago: executing program 4 (id=5356): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xce) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) fcntl$setlease(r7, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x2, 0x136, 0x0) 6m26.485767168s ago: executing program 4 (id=5359): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r5, 0x1, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x20}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000002c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f00000009c0)={0x17df000000000000, r9, r8}) unshare(0x40020000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x620b}, 0x0) 6m25.45429843s ago: executing program 4 (id=5362): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x80010, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) getpid() fcntl$lock(r1, 0x5, &(0x7f0000000140)={0x0, 0x2, 0x88, 0x1ff}) fcntl$lock(r1, 0x24, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x81}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) chdir(0x0) getpid() r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x50) recvfrom(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYRES64=r2, @ANYRES8=r2, @ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="afad2648f25c5c53636c3ac1d0222e178440452742db08e09a86007a95f1a3fa84ad7feb05b51274174c6b21aa2a3937dd45abebd28b1fc6ab3ca36ae0d81518207de00c518df517705db9c202f3dfc13ecdd767bcc616ae850cf057bdca1a54311b5716f228b2e52f3ad4346bd1d9befc8ab437730ac0b00346baf22024a71e958e47c484cae2e85b850efe2b97e0df8adae5185a8ecf9d1d5bb550da2b8273420ada4cfedba4b5e685c500778ed3fc998535f11d5b4869d504f4e5754b6cb7043c5d8e3780c8e09e8c8985e77e2b472d825c184c350b4da91f46cb300511"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x44010) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)=0xb5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x3b49470, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) pselect6(0x0, 0x0, &(0x7f0000000100)={0x10007a0f, 0x40000000000000ff, 0x9, 0x2, 0x1, 0x40006, 0xc, 0xf5}, &(0x7f0000000340)={0x7c1fb6, 0x8, 0x5, 0xfff, 0x1, 0x3800, 0x7ff, 0x662e}, 0x0, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x21514d1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffd, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000200)={0x9, 0x2, 0x80000000, 0x5, '\x00', 0x13}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x9, 0x5, 0x74, 0x10000, 'syz1\x00', 0x4000000}) umount2(&(0x7f0000000040)='.\x00', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x80) 6m24.515827262s ago: executing program 4 (id=5365): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x8840) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000006c0), 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4004014) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000180)={0x3, 0x1000, 0x4, 0xa1, 0x5, 0x0, [{0x80000001, 0x5, 0x511, '\x00', 0x20a}, {0x4, 0x4, 0x5, '\x00', 0x502}, {0x8, 0x64f8a8ac, 0x16, '\x00', 0x80c}, {0x7, 0x4, 0x5, '\x00', 0x220a}, {0x3, 0x200, 0x8, '\x00', 0x2008}]}) 6m24.227577005s ago: executing program 4 (id=5367): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xce) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) fcntl$setlease(r7, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x2, 0x136, 0x0) 6m24.077067226s ago: executing program 44 (id=5367): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xce) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) fcntl$setlease(r7, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x2, 0x136, 0x0) 3m44.76147804s ago: executing program 5 (id=6184): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r2, 0xc048aeca, &(0x7f0000003680)={{0x3, 0x0, 0x80, {0xeeef0000, 0x2000, 0x3}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606000000000000007fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc557aa5509defcb77c236e43b579c0000e5c8d8f8fa71ad876b96069f2e4352c8aa716e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0531d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f486e379601514219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fc0987c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b0700b1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1df5dcf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d5cbefd0b3406af2b3816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b90165a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7ba0ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x256581, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x9, 0x2, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) pipe2(&(0x7f0000000000), 0x80000) 3m43.895834035s ago: executing program 5 (id=6189): io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0x10c, 0x150, 0x150, 0x0, 0xf8010000, 0x1d4, 0x238, 0x238, 0x1d4, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'tunl0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xff], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) 3m43.106378146s ago: executing program 5 (id=6190): r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 3m42.791506051s ago: executing program 5 (id=6191): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r3}, 0x18) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shutdown(r1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 3m41.707666896s ago: executing program 5 (id=6192): io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64}) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0x10c, 0x150, 0x150, 0x0, 0xf8010000, 0x1d4, 0x238, 0x238, 0x1d4, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'tunl0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xff], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) 3m41.616139847s ago: executing program 5 (id=6193): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x4, 0x40000060, 0x100007f, 0x17, "9f940b3491d052d172e0e573229ac6de50806c"}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r3, 0x4) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) (async) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 3m26.199174731s ago: executing program 45 (id=6193): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x4, 0x40000060, 0x100007f, 0x17, "9f940b3491d052d172e0e573229ac6de50806c"}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r3, 0x4) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) (async) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 6.161211189s ago: executing program 8 (id=6912): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = syz_create_resource$binfmt(&(0x7f0000000140)='./mnt\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000500)=ANY=[@ANYRESDEC=r3], 0x78) close(r6) 5.13259912s ago: executing program 6 (id=6915): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900"], 0x60}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x14, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x8041) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x17, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet6(r3, &(0x7f0000001b80)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000140)="e0ed91c0c3408d0c8e18ee022fbd0c27b6fb90858655ab3a0223f90050420af79d5feb145318a6ee3ca0a32b81f47348eb6f61d3fdfa6dc194964a", 0x3b}, {&(0x7f0000000180)="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", 0xfc}], 0x2, &(0x7f00000002c0)=[@flowinfo={{0x10, 0x29, 0xb, 0x8}}, @rthdrdstopts={{0x2c, 0x29, 0x37, {0x6c, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0x6, [0xfffffffffffffffe]}}]}}}, @hopopts={{0x1c, 0x29, 0x36, {0x3b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}}}, @tclass={{0x10, 0x29, 0x43, 0x8}}], 0x68}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x0, @empty, 0x25}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000000380)="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", 0xff}, {&(0x7f0000000480)="9fb8e34405124393ff5f48aeba5ced61513b5487f4992c7d1499b4471681d1e6f74c104d74eaabdc32161d7d64cd8e5452d36abb105b1c6b8ddf289ec1d5f528f617c59343a0ace5b197ee06507b0b69e3dc7b8938fb5ecda2f744f0806d991fc245a748ec119bb8a626b461229d77ae6f55282dd9eb8c098f7055a9409d5015cf478b4d43425b4b46634a87d2cb2d318742e67d3a6667f0388a671bf3ef6cff43f3cd5dc4b79fb08dd9ca675cb39a0d77eed256b63d12658e089affeb3bd374e731fdec7a5817", 0xc7}, {&(0x7f0000000580)="effcf769b947bf60001b305d217f3a38e4c5ee76ed9783cb837d1d71c7ad24a1eeac0f565fc0e0589659163eafc8c733bb45b1d1dd71770d326694d06c7de2868f044392ad96a9fe0095e528427708b110bcc8b35e7ffbe4250cb912ed1c6edd73b2d59b4ed31b254af17ed3bd3eb512edd0da3c95ee216eab34e6228236c9f3ca78628652b40beadbcddf394120190c39a405752ca492e9dca06dcba196afec135700d2ce9adb06bd99257ac0", 0xad}, {&(0x7f0000001640)="c3be85f8fd5251cfa469c960c5cb43cdbea5971e115203c0827e9a6f748dac9e5855bd6df072c1fabe9ddcdd9fc51b8b730bb9bc66721c0af0330a727ee553be154fe27b6524cff3fbd51b01f005d012dc14f351f824d848f3045ebba224fbfa486791195894a06d51d958b9b9a7", 0x6e}], 0x4, &(0x7f0000001700)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x6}}, @rthdr_2292={{0x44, 0x29, 0x39, {0x5e, 0x6, 0x0, 0xf, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}}}], 0x54}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001780)="83da623003", 0x5}, {&(0x7f00000017c0)="5981e5bbe422b7672346cc8ff91b9422385f051ae4ba48d6a004aa5e63313557dbcd19f56e67cb2164cbeb147c634fb4040f43a3763bf1ba3f0b3aeba4e0addf0b74604df26cef2ee0df22cd417f61bbf400f2d77de0e671d03a9948b52f64332ad8d1b9c6e6ec543284d157f32aebec288c144c5025bc8ab4c5e5cc53aa6b6b807b8d47076ac854c61f465425249aa4a9d0c9d6d34e3c84f7993aaa42bd607cf47853db28b8c353", 0xa8}], 0x2, &(0x7f0000001dc0)=[@flowinfo={{0x10, 0x29, 0xb, 0x5}}, @dstopts_2292={{0x1c, 0x29, 0x4, {0x0, 0x0, '\x00', [@pad1]}}}, @rthdr={{0xa4, 0x29, 0x39, {0xff, 0x12, 0x1, 0x6, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @hopopts={{0x7c, 0x29, 0x36, {0x2c, 0xc, '\x00', [@enc_lim={0x4, 0x1, 0xe}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0x1, [0x1]}}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x20, {0x3, 0x6, 0xd9, 0x5, [0x7, 0x9e22, 0x8]}}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr={{0xa4, 0x29, 0x39, {0x92, 0x12, 0x2, 0xfc, 0x0, [@private1, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @local, @dev={0xfe, 0x80, '\x00', 0x24}, @rand_addr=' \x01\x00', @private1]}}}, @tclass={{0x10, 0x29, 0x43, 0xbc}}, @tclass={{0x10}}, @rthdrdstopts={{0x1c, 0x29, 0x37, {0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}]}}}, @rthdr_2292={{0x64, 0x29, 0x39, {0x87, 0xa, 0x0, 0x0, 0x0, [@mcast1, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3c}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x1}}], 0x2a0}}], 0x3, 0x40000) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x8, &(0x7f0000000000)={0x0, 0x1, 0x7}) mq_timedreceive(r4, &(0x7f0000000640)=""/4096, 0x1000, 0x1, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 4.772090347s ago: executing program 8 (id=6917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 4.399272588s ago: executing program 8 (id=6918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x1000000, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 4.304812976s ago: executing program 2 (id=6919): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r3}, 0x18) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "06000000e380ff03", "5615c6170f365581598bfabd2e006a7a2a6ea19e000000000000000800", '\x00', "b6405ad112e098b1"}, 0x38) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shutdown(r1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 4.228409831s ago: executing program 8 (id=6920): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x3000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x214, 0x90, 0x11, 0x148, 0x90, 0x0, 0x180, 0x2a8, 0x2a8, 0x180, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @rand_addr=0x64010100, 0xff, 0xff000000, 'veth1_to_bond\x00', 'wlan0\x00', {}, {}, 0x88, 0x2}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@connmark={{0x2c}, {0x8, 0xfffffff7}}, @common=@addrtype={{0x2c}, {0xd29, 0x328, 0x1, 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0xc}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x270) 4.119414453s ago: executing program 8 (id=6922): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfeff, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0x8}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 4.023570599s ago: executing program 8 (id=6923): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xce) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r8 = mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setlease(r8, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x2, 0x136, 0x0) 3.669544442s ago: executing program 2 (id=6925): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = syz_create_resource$binfmt(&(0x7f0000000140)='./mnt\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000500)=ANY=[@ANYRESDEC=r3], 0x78) close(r6) 3.588713177s ago: executing program 3 (id=6927): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) readv(r0, &(0x7f0000000380), 0x0) io_submit(r1, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r0, 0x0}]) 3.509578775s ago: executing program 6 (id=6928): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x80108907, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x6, 0x40c, 0x3}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x4040, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=virtio,afmd=0x0000000000000008,\x00']) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f000000c1c0)={0x2020}, 0x2020) (async) read$FUSE(r5, &(0x7f000000c1c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) (async) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xb55d7c2bf1a44d63, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580001000000000000c7748f71086165cb7a7753", @ANYRES32=0x0, @ANYRES64=r6], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xb55d7c2bf1a44d63, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580001000000000000c7748f71086165cb7a7753", @ANYRES32=0x0, @ANYRES64=r6], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 2.789845133s ago: executing program 6 (id=6929): add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2255, &(0x7f0000000440)={0x0, 0x6aec, 0x2000, 0x1, 0x38}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0xa1e3a9fe3eb9c551) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0xb0, 0x2020}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r4, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1ff}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x56}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}]]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) geteuid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 2.619460393s ago: executing program 2 (id=6930): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f00000002c0)={0x11, 0x18, r2, 0x1, 0x4, 0x6, @broadcast}, 0x14) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000180)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x2c, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x4, @void}, 0x10) socket$inet6(0xa, 0x2, 0x3a) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000006180)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') exit(0xffff) fstat(r4, &(0x7f0000000200)) syz_emit_ethernet(0x4e, &(0x7f0000002500)=ANY=[], 0x0) 2.41828382s ago: executing program 3 (id=6931): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r2, 0x9, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x401}}, './bus\x00'}) (async) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) (async) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0xff97, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) (async) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040044) (async) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x3}, {0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x240001a0) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) 2.08468891s ago: executing program 3 (id=6932): syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = openat$nci(0xffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r2) sendmsg$NFC_CMD_DEV_UP(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003980)=@newtfilter={0x2674, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2644, 0x2, [@TCA_BASIC_POLICE={0xca4, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x5, 0x9, 0x6, {0x7f, 0x1, 0x7, 0x8001, 0x80, 0x7}, {0x23, 0x1, 0x6, 0xb, 0x7, 0x9}, 0x8, 0x4, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x10, 0x3, 0x6, 0x5, 0x10, 0x3ff, 0x2, 0x7, 0x9, 0x2, 0x7, 0x43f, 0x6, 0xe, 0x28000000, 0x5, 0x4c45a5e3, 0x3, 0x4, 0x8, 0x7, 0xfff4, 0x200, 0x1, 0xb1, 0x7, 0x2, 0xfffff39a, 0xb, 0xffffffff, 0x4b, 0x3, 0x0, 0x8, 0x6, 0x2be, 0x0, 0x8, 0x9, 0x2, 0x4, 0x5, 0x401, 0x1000000, 0x74, 0x5, 0x1000, 0x5c, 0xfffffffc, 0x7, 0x5, 0x401, 0x5, 0x4, 0x9, 0x5, 0x7, 0x7, 0x6, 0x6, 0x7, 0x0, 0x1f2f, 0x8e, 0x7d, 0x7, 0xc, 0x10, 0x6, 0x8, 0x40, 0x7fffffff, 0x7, 0xc, 0x9, 0xec0, 0xffff, 0x5, 0x7, 0x9, 0x8, 0x200, 0x20, 0xa, 0x6, 0x7, 0xb6f3, 0x10, 0x6, 0x7, 0x8, 0xfffffff8, 0x0, 0x7, 0x7f, 0x0, 0x6d7df340, 0x6, 0x4, 0x3, 0x5, 0x32, 0x10, 0xfffffffc, 0x800, 0x8, 0x7ff, 0x6, 0xa, 0xb5, 0x100, 0x101, 0x9, 0x7, 0x4, 0xd9, 0x6, 0x4, 0x8, 0x9a9, 0x5, 0x9, 0x7, 0xd, 0x4, 0x80000000, 0x9, 0x2, 0x80000, 0x8, 0xebd, 0xffff7fff, 0xfffffffe, 0x9, 0x10, 0x0, 0x8000, 0x9, 0x81, 0x6, 0x61, 0x3, 0xddb, 0x5, 0x7fff, 0xff, 0x8da, 0x0, 0xb, 0x8, 0x10001, 0x1ff, 0x1, 0xeba, 0x1, 0x91e3, 0x6, 0x9, 0x2, 0x1, 0x2, 0xffffffa0, 0x7, 0x5, 0x1ff, 0x9, 0x8, 0x5, 0xffff, 0x101, 0x1, 0x80000001, 0x19b, 0x3, 0x7, 0x2000, 0x7f, 0x3, 0x8, 0x44a, 0x8, 0xb4, 0x3ff, 0x5, 0x3, 0x1, 0x8001, 0x3, 0x7fffffff, 0x5, 0x7, 0x6d8f, 0x474, 0x6, 0x8, 0xffffffff, 0x6fe0, 0x8, 0x5, 0x1, 0xeb50052, 0x14, 0xa, 0x10, 0xd24, 0x5b, 0x9, 0x3ff, 0x2, 0x0, 0x0, 0x4e1, 0x4, 0x4, 0x1, 0x65, 0x6, 0x6, 0xb510, 0x3, 0xfff, 0x6, 0xffff, 0x2, 0xa, 0x0, 0x6, 0x7, 0x1, 0x3, 0x3f0, 0x1, 0x7f, 0x3, 0x4, 0x9, 0x1, 0x2, 0x2, 0x0, 0x8, 0x0, 0x3, 0x584c8a3c, 0x32, 0x13, 0x7, 0x8e8, 0x3, 0x8, 0x4, 0x80, 0x7, 0x9, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x63c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x10, 0x100, 0x3, 0x2, 0x6fad, 0x0, 0x0, 0x7fffffff, 0x5, 0x7, 0xfffffffe, 0x7, 0x2, 0x8, 0xfffffffe, 0x0, 0x0, 0x5b6, 0x2, 0xf, 0x2, 0x2, 0x2, 0x0, 0x0, 0xfa, 0xffff12b3, 0xff, 0x9, 0x0, 0x9d, 0x0, 0x2, 0x0, 0x2, 0x0, 0x101, 0xfffffff8, 0x1000, 0x77bf8f33, 0xfb, 0x2, 0xfff, 0xcf, 0xb, 0x1000, 0x400, 0x899, 0x4, 0xa025, 0x2a, 0x7fff, 0x4, 0x1000, 0x4, 0x0, 0x1, 0x1, 0x10001, 0xade7, 0x0, 0x7fff, 0xfffffffe, 0x4, 0x6, 0x8, 0x2, 0x8000, 0x9, 0x5, 0x9, 0x8, 0xbf, 0x100, 0x101, 0xc72, 0xfffffff8, 0x197, 0x8, 0xe2da6a47, 0x9, 0x6, 0x8, 0x5, 0x9, 0x200, 0x6, 0x6, 0x7ff, 0x40, 0x0, 0x7, 0x7, 0x3, 0x7, 0x4, 0x200, 0x0, 0xff, 0x4, 0x7ff, 0x3, 0x3d8, 0x8000, 0x5, 0x8, 0x1, 0xff, 0x7, 0x101, 0x2, 0xe, 0x100, 0x6, 0x8, 0x17, 0x8000000, 0x3, 0xfffffffe, 0xd, 0x3, 0x4, 0x5, 0x9, 0x1, 0x4, 0x3, 0x2, 0xfffffff7, 0x7, 0x6, 0x7, 0xfffff4ef, 0x5, 0x80000000, 0x80000000, 0x6, 0x9, 0x6ec, 0x5, 0x800, 0x8, 0x1, 0x0, 0x0, 0x4, 0x0, 0x9, 0xa69e, 0x822, 0x1, 0xfffffe01, 0x3, 0x7, 0x2, 0x0, 0x2, 0x3, 0x800, 0x4, 0x1, 0x3, 0x401, 0x1, 0x2, 0xe, 0x8, 0xffff, 0x5, 0x5, 0x1ff, 0x4, 0x8, 0x401, 0x5ac, 0x1, 0x148, 0x200, 0x400, 0x2, 0x5, 0x34a, 0x80000000, 0xffff, 0x5, 0x62000000, 0x9, 0x7, 0xd980, 0x1ff, 0x1, 0x9, 0x9, 0xfffffff0, 0x7, 0x1, 0x2, 0xfffffffb, 0x10, 0x8, 0x1, 0xffffffff, 0x5, 0x809, 0x5, 0x9, 0x7f, 0x6, 0x3, 0x4, 0x400, 0x8, 0xd, 0xfffffff9, 0xfffffffb, 0x200, 0xfffffffc, 0x10001, 0x1, 0x8, 0xf2c5, 0x4, 0x5, 0x800, 0x2, 0x3, 0xb, 0x7, 0x3, 0x4, 0x9f, 0x572e, 0x4, 0x8, 0x8, 0x6, 0x5, 0xa, 0x4da, 0x5, 0x9, 0x80000000, 0x5, 0x8, 0x0, 0xf, 0x3bc8, 0x8, 0xf8, 0x101, 0xda7, 0x400, 0xfffffffa, 0x1, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x58c, 0x6, 0x6964, 0x3, 0x6cd, {0x2, 0x0, 0xe46c, 0x3, 0x8001, 0x400}, {0x7f, 0x2, 0x9, 0x9, 0x2, 0x5}, 0x0, 0x5, 0x4}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x800}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x2, 0x9273, 0x59, 0x3, 0xe14b, 0x24000, 0xfffffffc, 0x69ae2d5a, 0x6, 0x723, 0x81, 0x7, 0x9, 0x10000, 0x496fa31, 0x9, 0x5, 0x6642, 0x0, 0x3ff, 0x5, 0x1, 0x3, 0x9, 0xb, 0x7, 0x7, 0x9, 0x3d0, 0x3, 0x1, 0xfb8, 0x2, 0x200, 0x5, 0x4, 0x80, 0x6, 0x8, 0x0, 0xffffffc0, 0x1, 0x80000000, 0x7f, 0x0, 0x800, 0xbd6, 0x9, 0x3ff, 0x7, 0x6, 0x9, 0x100, 0x1000, 0xb, 0xfffffff2, 0x0, 0x7, 0x10, 0x3, 0x5, 0x7, 0x200, 0x2019e027, 0xecc9, 0x8, 0x80000000, 0x4, 0x8a7, 0x7, 0x5, 0x8001, 0xaff, 0x3, 0x0, 0x5, 0xfffffbff, 0x38, 0x0, 0x2, 0x3, 0x4, 0x3, 0x1, 0xffc447f, 0x7, 0xfff, 0x4, 0x62, 0x0, 0x0, 0x10, 0x28, 0x7, 0xffffffab, 0xff, 0x8, 0x6, 0x7, 0x2, 0xd, 0x73d, 0x3800000, 0x7fffffff, 0x3, 0x0, 0x3, 0x9, 0x5, 0x0, 0x8, 0x5, 0x80e, 0x4, 0x7a11, 0xf, 0x2, 0xfffffff7, 0x2, 0x86, 0x8, 0xfffffffb, 0x9, 0x9, 0x0, 0xffff, 0x4ebe, 0xd3, 0x7f, 0x8, 0x8, 0x0, 0x9, 0x8000, 0x3ff, 0xcb9, 0x6c, 0x9, 0x75, 0x3, 0x2, 0x7, 0xfffffffe, 0xe, 0x9, 0xb, 0x7, 0x3, 0x7ff, 0x2, 0x0, 0xd, 0x0, 0x9, 0x0, 0xf, 0x3, 0x800, 0x9, 0x4, 0xe, 0x7fff, 0x7f, 0x6, 0x0, 0x4, 0x5b, 0x4, 0x44, 0x9, 0x3, 0x3, 0xeebd, 0x8, 0x8, 0x9ec, 0x0, 0x3, 0x7, 0x8, 0x353, 0xff, 0x7, 0x2, 0x401, 0x8, 0xe, 0x6, 0xffffffff, 0x2, 0x4a4, 0x24, 0x1, 0x6, 0xfffff24f, 0x3, 0x8001, 0x40, 0x7ff, 0x1, 0x7, 0x1, 0x2800000, 0x3, 0x5, 0x3, 0x2, 0x5, 0x9, 0x7, 0x5, 0x1, 0x2, 0x6, 0xfffffff8, 0x8, 0x1, 0xe, 0x2, 0x683, 0x0, 0x8, 0x8, 0xf, 0xd, 0x6d, 0x4, 0x6, 0x3, 0x9, 0x8, 0x970, 0x1000, 0x8001, 0x4, 0x3, 0x9, 0x1, 0x4, 0x8, 0x3, 0x2, 0x7, 0xffffffff, 0x9, 0xb, 0x7, 0x6, 0x2, 0x7fffffff, 0x4cd, 0xe8c, 0x8, 0x80]}]}, @TCA_BASIC_POLICE={0xc2c, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0xd}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x7, 0x2, 0x0, 0xa, 0x7fff, 0x5, 0x6, 0xfffff703, 0xffffffff, 0x1000, 0x5, 0x80, 0xc, 0x2f5, 0x4, 0x3, 0x401, 0x7, 0xa, 0x5, 0x80, 0x4, 0xfffff801, 0x11, 0x3f8, 0x1, 0x3, 0x4, 0x3, 0x7, 0x9, 0x222, 0x3d3a, 0x1, 0x4, 0x9, 0x1, 0x1, 0x1ff, 0x401, 0x6, 0x8, 0x3, 0x8, 0x8, 0xc, 0x80000001, 0x40, 0x8, 0x7, 0x5, 0x5, 0x7fff, 0x0, 0x1, 0x8, 0x5, 0x5, 0xa3, 0x7fffffff, 0xac7, 0xfffffff7, 0x7, 0x6, 0xffffffff, 0xe85c, 0xffffff01, 0xb, 0x5, 0x6, 0x6fc1, 0x9, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x9, 0x4, 0x9, 0x38, 0x2, 0x93, 0x9, 0x4, 0x8, 0xfffffff7, 0x80, 0x3, 0xfffeffff, 0xd, 0x535d, 0x200, 0x5, 0x9, 0x4, 0xe8, 0x6fff7b3c, 0x1, 0x2, 0x2, 0x7fffffff, 0x0, 0x50000000, 0x12, 0x9, 0x9, 0xe, 0x5, 0x949d, 0x2, 0x4, 0xffff0001, 0x2, 0x200, 0xfff, 0x1000, 0x0, 0xffff4e76, 0x6, 0x5, 0x7fffffff, 0x5, 0x3, 0x40, 0xe83, 0x8, 0x8, 0x8, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0x3ec, 0x7, 0x5, 0x3, 0x528, 0x3, 0xb8, 0x8, 0x9, 0x101, 0x2, 0x3, 0x8, 0x3, 0xf, 0xf0, 0x1, 0x1, 0x80000001, 0x401, 0x8, 0xffffffff, 0xc77, 0x6, 0x166, 0x34e, 0x7, 0xffff863d, 0xc, 0x7, 0x0, 0x5, 0x24c, 0x4, 0x2, 0x0, 0x81, 0x9, 0x1, 0x59e9, 0x9, 0x2, 0x100, 0x9, 0x9, 0x0, 0x0, 0x7f, 0x5, 0x200, 0xa, 0x12000000, 0xb1b4, 0x7fffffff, 0x0, 0x3, 0xfffffc00, 0xfd, 0x7fff, 0x100, 0x5, 0x7, 0x7, 0x5, 0x5, 0xd1, 0xfffffffc, 0x3, 0x8, 0x9, 0x0, 0x0, 0x1, 0x1, 0x40, 0x1, 0x4d719698, 0xfffffffd, 0x5c4, 0xfffffffb, 0x0, 0x8, 0x7, 0x0, 0x9, 0x3, 0x5, 0x7f, 0x200, 0x101, 0x401, 0x4, 0x80000000, 0xb1, 0x0, 0x8, 0x3, 0x4, 0xa, 0x4, 0x7, 0x8000, 0xfffff2c5, 0x7, 0x80000000, 0x81, 0xfff, 0x58, 0x9, 0x87e4, 0xd17, 0xaa, 0x7ff, 0x2, 0x2, 0x6, 0xd4, 0x7, 0x1, 0x196]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9e57, 0xbc, 0x1, 0x8be5, 0xfffffffe, 0x3ff, 0x10, 0x7, 0x34, 0x9, 0x6, 0x7, 0x10, 0x730f, 0x2, 0x8, 0x9, 0x20f, 0xfffffff8, 0x3, 0x441, 0x7, 0x174b, 0x0, 0x5, 0xc2e, 0x5, 0x9fae, 0x4, 0x9, 0xfffffffa, 0x0, 0xd7, 0x9, 0x8, 0xf2e, 0x5, 0x9, 0x7, 0x4, 0x6, 0x9, 0x1f69, 0x9, 0x200, 0x0, 0xbf07, 0x9, 0xff, 0x0, 0x3ff, 0x6, 0x7fff, 0x7f, 0x4, 0x80000001, 0x101, 0x28, 0x10001, 0xfff, 0x7fff, 0xffffc9f8, 0xff, 0x4, 0x6, 0x6, 0x8001, 0xb, 0x3dba, 0x38, 0x7, 0x8000, 0x1, 0x7, 0x1, 0x5, 0x3, 0x60000000, 0x0, 0x6, 0x0, 0x1, 0xc, 0x7a, 0x2, 0x7, 0x400, 0x0, 0x6, 0x15c0, 0xd8ce, 0x85bf, 0xc325, 0x6, 0x40, 0x0, 0xffff, 0x6, 0x4, 0x7, 0x5, 0xd, 0xfffffb79, 0x8, 0x4, 0x8ad, 0xb, 0x10000, 0x3, 0x5a, 0x10, 0xb, 0x5, 0x8000, 0x100, 0x7, 0xfffffffd, 0x4, 0xfffffff0, 0x3, 0x90, 0x101, 0x4, 0x2ff, 0x10, 0x0, 0x7, 0x7, 0x9, 0x5, 0x3, 0x9, 0x9, 0x4, 0x1, 0x3, 0xfffffffa, 0x4, 0x4, 0x2, 0x200, 0x2, 0x3, 0x6, 0xe0000000, 0x3, 0x8, 0x9, 0x400, 0xffffffff, 0x0, 0x4f7c, 0x1, 0xf8, 0xffff, 0x0, 0x4, 0x1b, 0x3, 0x101, 0x1, 0xc46b, 0x3ff, 0xf, 0xf0, 0x1004000, 0x81, 0x2, 0xd, 0x10000, 0x4e53, 0x10001, 0xc, 0x200, 0x7b3, 0x6, 0x9, 0x6, 0x5, 0x800, 0x0, 0x0, 0x777, 0x7, 0x401, 0x5, 0xffffffff, 0x4, 0x2, 0xa, 0x2, 0x8001, 0x10000, 0x3d, 0x5, 0x7, 0x1, 0x8, 0x7f, 0x8, 0x6, 0xfffffffe, 0x2, 0x10, 0x8000, 0x3, 0xcc2, 0x3, 0x0, 0xc78, 0x7, 0x6, 0xfff, 0xc, 0x20000000, 0x3, 0xffffffff, 0x3, 0x1, 0x8, 0x1, 0x2, 0x6, 0x16, 0x9, 0x3, 0x7, 0xfff, 0xc95, 0x1000, 0x5, 0x81, 0x9, 0x5, 0xfff, 0x7, 0x20000000, 0x2, 0x3, 0x80, 0x6, 0x1c88, 0xde, 0x6, 0x7, 0x1, 0x0, 0x1, 0x80, 0x4, 0x5, 0x3, 0x18, 0xd0a0, 0x4, 0x82]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x472ffad8, 0x8, 0x6f8, 0x10b6, 0x1, 0xf5a, 0x1c36, 0xdf, 0x1, 0xfffffffe, 0x1, 0x98a, 0x3, 0x4b, 0x8, 0xf77, 0x7, 0x0, 0x8, 0x5, 0x6, 0x218005bc, 0x200, 0x23, 0x3, 0x0, 0x0, 0x9, 0x6, 0x4, 0x6, 0x9, 0x6, 0x5, 0x9, 0x81, 0x4, 0x101, 0x401, 0x8000, 0x5, 0x2, 0x7, 0x0, 0x402b, 0x49d, 0xa, 0x3e3, 0x6, 0x6, 0x9, 0x8, 0x8, 0x800, 0xceb3, 0xdd69, 0x0, 0x4b0, 0xfffffffc, 0x8000, 0x9, 0xa6, 0x2, 0x5b, 0xff, 0xdc0, 0x5, 0x0, 0x6, 0x0, 0x3, 0x1, 0x7, 0x800, 0x46f, 0x5, 0x1, 0xffffffff, 0xabc1, 0x6, 0x4bdc, 0x2, 0x3, 0x100, 0x10000, 0xe07, 0x4, 0x0, 0xfa3, 0x3, 0xe, 0xe8ec, 0x27f, 0x3, 0x4, 0x1, 0xfba, 0x6, 0x9, 0x7, 0x2, 0x0, 0x7, 0x7ff, 0x3, 0x1, 0xd, 0x6, 0xf156, 0xf54, 0x8001, 0x8000, 0x1ff, 0x17, 0x21, 0xfff, 0x7fff, 0xe8b, 0x1, 0xa9a, 0x1, 0x800, 0xff, 0x2, 0x3, 0x1000, 0x1, 0x5, 0x6, 0x8, 0x4, 0x5cc, 0x3, 0x2, 0x15, 0x6, 0x3, 0x9, 0x4, 0x0, 0x3, 0xffffff51, 0xd2c8, 0x8001, 0x5, 0x4, 0x7, 0x8, 0x6, 0xd9c, 0x3, 0x9, 0x5, 0x8, 0x1, 0x5be6, 0x3ff, 0x9, 0x0, 0xdac5, 0xe2fb, 0x8, 0x3, 0x3, 0x0, 0xb, 0xf, 0x0, 0x5, 0x2, 0x6, 0x2, 0x89, 0x9, 0x2, 0x1, 0xffffffff, 0x30e, 0x7, 0x9, 0x1, 0x6, 0x5, 0x3, 0xfffffc00, 0x44, 0xfffffffd, 0xa, 0x5, 0x2, 0x7, 0x9, 0xe, 0x1e, 0x0, 0x0, 0x7, 0x4b, 0x2, 0xf, 0xb, 0x400, 0x9, 0xfffffff8, 0xfff, 0x414d, 0xfffffffa, 0x80000000, 0x1, 0x4, 0xffffff70, 0x4, 0x800, 0x3ff, 0x0, 0x3, 0x3, 0x10, 0x5, 0x33aa9201, 0xffffffbe, 0x1, 0x4, 0x7b, 0x4, 0x9, 0x6, 0x3, 0x8, 0x6, 0x7fffffff, 0x2, 0xf6e, 0x8000, 0x4, 0x6, 0x7f, 0x5, 0x4, 0x401, 0x6, 0xffffffe2, 0x3, 0xfff, 0x5, 0x1, 0x1, 0x7, 0x80000000, 0xc2d, 0xb, 0x8000, 0xf, 0xa905, 0x42]}]}, @TCA_BASIC_POLICE={0x860, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x91, 0x0, 0x6, 0x9, 0xf, 0x4, 0xc52, 0x4, 0x6, 0xff, 0x9, 0x6, 0x80000001, 0x200, 0x93, 0x6, 0x3, 0x0, 0x7, 0xfffffe01, 0x18, 0x5, 0x1ff, 0x1, 0x3, 0xfffff188, 0x100, 0x7, 0xc1, 0x8000, 0x5, 0xd72, 0x800, 0xc713, 0x7, 0x5, 0x7, 0xffffffff, 0x1d, 0x0, 0x5, 0x8, 0x8000, 0x40, 0x5, 0xffffff80, 0xe1bc, 0x40, 0x8, 0x4140, 0x7, 0x2, 0x401, 0x1, 0x7f, 0xfffffffb, 0x1, 0x7, 0x8, 0x280000, 0x7, 0x6, 0xfff, 0x7fff, 0x5, 0x0, 0x7, 0x9973, 0x0, 0x8, 0xfffff36a, 0x78, 0x1, 0x914, 0x0, 0x7f, 0xffff, 0x3, 0xfffffffa, 0x2, 0xfffffffa, 0x7, 0x101, 0x0, 0x1, 0x1ff, 0x400, 0x3, 0xf981, 0x2, 0xffffffff, 0x7f, 0x4, 0x5, 0xffff, 0x0, 0xc0, 0x2, 0x1, 0x0, 0x7, 0xe, 0x401, 0x5, 0x90d, 0x23, 0x1, 0xd448, 0x8, 0xffffed11, 0x8, 0xc, 0x8, 0xfe3, 0x6, 0x6, 0x3, 0x0, 0xe, 0x4, 0x2, 0x37, 0x4, 0x3, 0x3, 0xec10, 0x8b, 0xe, 0x4, 0x9, 0xfffffff7, 0xff, 0x6395, 0x4, 0x8c, 0xa, 0xe50a, 0xfffffffc, 0x400, 0x80000000, 0x3, 0x1ac4, 0x71, 0x61cc, 0x0, 0x7, 0x81, 0x5, 0x3, 0x9, 0x11, 0x8, 0x3, 0x98e, 0x4, 0xfffffffa, 0x4, 0xe1, 0x10000, 0xec8, 0x3, 0xd, 0x0, 0xfffffffa, 0xffffffff, 0x1, 0x10000, 0x9, 0xc0000000, 0xfff, 0x10, 0x87, 0x5, 0x4, 0x401, 0x800, 0x10000, 0x5, 0xb, 0x7, 0x800, 0x99a5, 0xaf5, 0x0, 0x67df, 0x1, 0x4, 0x1, 0x9, 0x101, 0x8, 0x3, 0xfffffffe, 0x2, 0x5, 0xe, 0x1, 0x9, 0x99, 0x2, 0x2, 0xd, 0x1de, 0x1, 0x6, 0x80000001, 0xcad, 0x9, 0x80000001, 0x8, 0x9, 0x8, 0x53c, 0x7, 0x3ff, 0xfffffffd, 0x7fffffff, 0x5, 0xf17e076d, 0x3, 0x2, 0x6, 0x6, 0x40, 0x4, 0x8, 0x3, 0x9930, 0x9, 0x154cdb26, 0x5, 0x80000001, 0x4, 0x6, 0xe, 0x0, 0x6, 0xd, 0x2, 0x4, 0x7, 0x0, 0x1ff, 0x2, 0x400, 0x0, 0x7a7f485f, 0x8, 0xffff, 0x7a, 0x3ff, 0x8, 0x3, 0x101, 0x4, 0x683]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffe2d}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x200, 0x4, 0x2, 0x1, 0x8, 0x200, 0x81, 0x5, 0x601, 0x6, 0x0, 0x4, 0x7, 0x80000001, 0x10001, 0x2, 0x75, 0x9, 0xfffff04b, 0x2, 0xffffff1e, 0x9, 0x6, 0x1, 0x7, 0x2, 0xa0e8, 0xe550, 0x8, 0x6, 0x288, 0x9, 0x9, 0x9, 0x5, 0x6, 0x80000000, 0x8ae, 0x8000, 0x400000, 0x4, 0x0, 0x6, 0x25, 0x0, 0x15c, 0xe0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x2b, 0xffffffc0, 0x66a, 0x180000, 0x964, 0x2614, 0x4, 0x7, 0x0, 0xfffffffe, 0x100, 0xa, 0x0, 0xfffffff3, 0x11b, 0x9, 0xfffff001, 0xaef, 0x1ff, 0xc075, 0xfffff12d, 0x8, 0x822f, 0x80, 0x8bf5, 0x8, 0x9, 0x7ff, 0x6, 0x0, 0xa, 0x1, 0x0, 0x5, 0xb, 0x0, 0x0, 0xf0bc, 0x8, 0x9, 0x2b7, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x0, 0xf, 0xab, 0xb9df, 0x7f, 0x5, 0x0, 0x5, 0x4000, 0x351, 0x80000001, 0x6, 0xfffffff9, 0xa13, 0xfffffff9, 0x9a, 0x2, 0x2, 0x7, 0x7, 0xa0, 0x2, 0x9, 0x6, 0xd9, 0xa, 0x3, 0x7, 0x6c5, 0xffffffb6, 0x3, 0x7, 0x8, 0x4, 0x2, 0xffff, 0x58dc, 0xfff, 0x2, 0x100, 0x7, 0x4, 0xcd, 0x8, 0x0, 0x3, 0x7, 0x7, 0x0, 0x487, 0x6, 0x0, 0xf8000000, 0xd, 0x4, 0x2, 0x4, 0x10000, 0xa, 0x0, 0x2, 0x10000000, 0x5, 0x5, 0x1, 0x0, 0xbe7, 0x1, 0x7fffffff, 0xffffffd6, 0x3, 0x0, 0x7fff, 0xfffffff9, 0x2, 0x7ff, 0x99bb, 0xfffffff2, 0x8, 0x1000, 0x7, 0x5, 0x9, 0xe, 0x3, 0x1ca2, 0x6, 0xe, 0x0, 0x4, 0xff, 0x4, 0x0, 0x3, 0x1, 0x80, 0x10000, 0x9, 0xe, 0x7, 0x8, 0xd9, 0xffffff01, 0x1, 0x4, 0x81, 0x46, 0x9, 0x6, 0x2, 0x8, 0x7, 0x7, 0x1, 0x4, 0x8, 0xa, 0x2, 0xffffcfba, 0x8001, 0x5, 0x4c7, 0x5, 0x3, 0x2, 0x5, 0x0, 0xffffffff, 0x2, 0x78, 0xfffffffa, 0x0, 0xabc, 0x2, 0x2b, 0x3d, 0x4, 0xc6, 0xb4c, 0x100, 0x2, 0x81, 0x1, 0x800, 0x6, 0x1, 0xffff7fff, 0x1ff00000, 0x8, 0x5, 0x7ff, 0x5, 0x9, 0x5, 0x2, 0x9, 0x7fff, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0xf}}, @TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffaf10}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}]}, @TCA_BASIC_EMATCHES={0x4bc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x8001}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}, @TCA_EMATCH_TREE_LIST={0x234, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x2, 0x7}, {0x6, 0x9, 0x0, "2fd117cd82a9523b8b"}}}, @TCF_EM_IPT={0x10c, 0x1, 0x0, 0x0, {{0xa, 0x9, 0xffff}, [@TCA_EM_IPT_MATCH_DATA={0xbf, 0x5, "648f89c0aaaca31c1dbcfcc159702d219bc34e422a389acbf1c5da0b57f4156c396944893cd0082b01688141ad845958ae396bbcd6f9b2a32a42fd980058518777b43dc9c9da1a6972b790fcfba773b29b5b49320782180e2db0a71154be3f35e8b156cf3cd1edb647d79d5508289f2119e08962d9356070830106d77cb8dfc18dbe004297077e64082a890c34efd347a7acb7c440fed587fa0d5b92e46bba2804cb51c7f837f358fc4fc9a9ed930233b04a81c2916b4b2769ca14"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x5}, {0xb42, 0xfffffff3, 0x0, 0x3ad}}}, @TCF_EM_META={0x84, 0x2, 0x0, 0x0, {{0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xfffb, 0x1a}, {0x1ff, 0x9}}}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="324187bb", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR="2a015c"]}, @TCA_EM_META_LVALUE={0x33, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="0ec6044d0b726775", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="2dffcc18da76e734", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="db6287747c1d88"]}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_VAR="db", @TCF_META_TYPE_VAR="a6899ffa19", @TCF_META_TYPE_VAR="a37f0eac0c816b86c1"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}]}}, @TCF_EM_META={0x4c, 0x3, 0x0, 0x0, {{0x7fff, 0x4, 0x4}, [@TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_VAR="306a0978a3", @TCF_META_TYPE_VAR="f8fb967a83c1bc", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR="3f861d38"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xb7fa, 0x7f, 0x1}, {0x9, 0xf9}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xc}, {0xf7fa, 0x2}}}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x2}, {0x1, 0x4, 0x8, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x198, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x50, 0x2, 0x0, 0x0, {{0x101, 0x0, 0x6}, "78877cc8be657b1099077417bf7074cb83d9fdd37aa27a1ad55394a7bebe336e78ed3b84127053962fb9d9cfce477d1c5c17195c236bf0fa16f217df490915608cae81"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x86}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8, 0x7, 0x81}, {{0x4, 0x0, 0x1}, {0x1, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x3}, {0x3, 0x3, 0x2, "a73fb8"}}}, @TCF_EM_CONTAINER={0xb8, 0x3, 0x0, 0x0, {{0xb31}, "b3124bcb72385002493e538dbe7bc1da6ab95e9945be3c8da5fac131ca2f46aa27e2cd56438058f734ace652f25a565f8c00dc9a893629597ee48c967aab71c5310990026e45daf125902be80127be1fb63bfd616406b30c10f13e3add7763267c010061fc0e210667f7e7890ab98d97220008830c95eba257fc0fdcd247796049c0c34a0b88a1370b6cf60f39bed62c79fa0033acd8de1dc60bf64b0900a370d60fd79102da5d541373bd"}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="8b857521f723944b", @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x2d}, {0x9, 0x6a8, 0x3, 0x900}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0x3}, {0x0, 0x2, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0xbc, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x341}, {0x6, 0x6c8b, 0x2, 0x0, 0xb, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0xa0, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x1}, "2f5e5b8c4ed5a56367aa3cc3da9561acd42cb1a7a00edcaaea668793bb98750777c965f30f2c34a8b50d5de69a579de890f37948a538b3246b2549856c587d16d9b9375eeef9cd6b5b7ded018bafd3c92ae4d97b6b89775bd1759e6702bf481f60cd04126bc8112c527b76e168078251e71fc82e66f6f24e60c9f5a32b32244a692ab1729022a98f6e92de7c0ba2b5613c3c97e3"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}, @TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}]}}]}, 0x2674}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 1.648841064s ago: executing program 6 (id=6933): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r3}, 0x18) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "06000000e380ff03", "5615c6170f365581598bfabd2e006a7a2a6ea19e000000000000000800", '\x00', "b6405ad112e098b1"}, 0x38) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shutdown(r1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 1.647639742s ago: executing program 3 (id=6934): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_SCRNMAP(r8, 0x4b41, &(0x7f0000000000)) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sysfs$2(0x2, 0x817fff, &(0x7f0000000300)=""/101) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.557639752s ago: executing program 2 (id=6935): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rseq_update\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}}, 0x0) 1.499532959s ago: executing program 2 (id=6936): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900"], 0x60}, 0x1, 0x0, 0x0, 0x24004011}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x14, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x8041) r2 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x17, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet6(r3, &(0x7f0000001b80)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000140)="e0ed91c0c3408d0c8e18ee022fbd0c27b6fb90858655ab3a0223f90050420af79d5feb145318a6ee3ca0a32b81f47348eb6f61d3fdfa6dc194964a", 0x3b}, {&(0x7f0000000180)="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", 0xfc}], 0x2, &(0x7f00000002c0)=[@flowinfo={{0x10, 0x29, 0xb, 0x8}}, @rthdrdstopts={{0x2c, 0x29, 0x37, {0x6c, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0x6, [0xfffffffffffffffe]}}]}}}, @hopopts={{0x1c, 0x29, 0x36, {0x3b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}}}, @tclass={{0x10, 0x29, 0x43, 0x8}}], 0x68}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x0, @empty, 0x25}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000000380)="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", 0xff}, {&(0x7f0000000480)="9fb8e34405124393ff5f48aeba5ced61513b5487f4992c7d1499b4471681d1e6f74c104d74eaabdc32161d7d64cd8e5452d36abb105b1c6b8ddf289ec1d5f528f617c59343a0ace5b197ee06507b0b69e3dc7b8938fb5ecda2f744f0806d991fc245a748ec119bb8a626b461229d77ae6f55282dd9eb8c098f7055a9409d5015cf478b4d43425b4b46634a87d2cb2d318742e67d3a6667f0388a671bf3ef6cff43f3cd5dc4b79fb08dd9ca675cb39a0d77eed256b63d12658e089affeb3bd374e731fdec7a5817", 0xc7}, {&(0x7f0000000580)="effcf769b947bf60001b305d217f3a38e4c5ee76ed9783cb837d1d71c7ad24a1eeac0f565fc0e0589659163eafc8c733bb45b1d1dd71770d326694d06c7de2868f044392ad96a9fe0095e528427708b110bcc8b35e7ffbe4250cb912ed1c6edd73b2d59b4ed31b254af17ed3bd3eb512edd0da3c95ee216eab34e6228236c9f3ca78628652b40beadbcddf394120190c39a405752ca492e9dca06dcba196afec135700d2ce9adb06bd99257ac0", 0xad}, {&(0x7f0000001640)="c3be85f8fd5251cfa469c960c5cb43cdbea5971e115203c0827e9a6f748dac9e5855bd6df072c1fabe9ddcdd9fc51b8b730bb9bc66721c0af0330a727ee553be154fe27b6524cff3fbd51b01f005d012dc14f351f824d848f3045ebba224fbfa486791195894a06d51d958b9b9a7", 0x6e}], 0x4, &(0x7f0000001700)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x6}}, @rthdr_2292={{0x44, 0x29, 0x39, {0x5e, 0x6, 0x0, 0xf, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}}}], 0x54}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001780)="83da623003", 0x5}, {&(0x7f00000017c0)="5981e5bbe422b7672346cc8ff91b9422385f051ae4ba48d6a004aa5e63313557dbcd19f56e67cb2164cbeb147c634fb4040f43a3763bf1ba3f0b3aeba4e0addf0b74604df26cef2ee0df22cd417f61bbf400f2d77de0e671d03a9948b52f64332ad8d1b9c6e6ec543284d157f32aebec288c144c5025bc8ab4c5e5cc53aa6b6b807b8d47076ac854c61f465425249aa4a9d0c9d6d34e3c84f7993aaa42bd607cf47853db28b8c353", 0xa8}], 0x2, &(0x7f0000001dc0)=[@flowinfo={{0x10, 0x29, 0xb, 0x5}}, @dstopts_2292={{0x1c, 0x29, 0x4, {0x0, 0x0, '\x00', [@pad1]}}}, @rthdr={{0xa4, 0x29, 0x39, {0xff, 0x12, 0x1, 0x6, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @hopopts={{0x7c, 0x29, 0x36, {0x2c, 0xc, '\x00', [@enc_lim={0x4, 0x1, 0xe}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0x1, [0x1]}}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x20, {0x3, 0x6, 0xd9, 0x5, [0x7, 0x9e22, 0x8]}}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr={{0xa4, 0x29, 0x39, {0x92, 0x12, 0x2, 0xfc, 0x0, [@private1, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @local, @dev={0xfe, 0x80, '\x00', 0x24}, @rand_addr=' \x01\x00', @private1]}}}, @tclass={{0x10, 0x29, 0x43, 0xbc}}, @tclass={{0x10}}, @rthdrdstopts={{0x1c, 0x29, 0x37, {0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}]}}}, @rthdr_2292={{0x64, 0x29, 0x39, {0x87, 0xa, 0x0, 0x0, 0x0, [@mcast1, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3c}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @flowinfo={{0x10, 0x29, 0xb, 0x1}}], 0x2a0}}], 0x3, 0x40000) syz_usb_control_io$hid(r2, 0x0, 0x0) r4 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x8, &(0x7f0000000000)={0x0, 0x1, 0x7}) mq_timedreceive(r4, &(0x7f0000000640)=""/4096, 0x1000, 0x1, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 1.351826475s ago: executing program 6 (id=6937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3b0, 0x0, 0x0, 0x1f0, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xbc, 0xe4}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xbc, 0x10c, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @private=0xa010102, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0xfc, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xbc, 0xe0}, {0x24, '\x00', 0x0, 0xfffffffb}}}}, 0x3fc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x30}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r5, 0xc0405619, &(0x7f0000000040)={0xf, 0x3424003, "964d86271b501b5ce79368c900691e97afae7964d52ad288", {0x0, 0x6}, 0xffffffb6}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@gre={{0x27, 0x4, 0x0, 0x1d, 0x2a9, 0x68, 0x0, 0x8, 0x2f, 0x0, @private=0xa010100, @broadcast, {[@lsrr={0x83, 0x17, 0xb5, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @empty]}, @rr={0x7, 0xb, 0x12, [@broadcast, @remote]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x4e, [@rand_addr=0x64010102, @remote]}, @lsrr={0x83, 0x1b, 0x2d, [@dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010102, @remote, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}]}, @lsrr={0x83, 0x17, 0xe3, [@remote, @dev={0xac, 0x14, 0x14, 0x40}, @private=0xa010100, @empty, @multicast1]}, @timestamp_addr={0x44, 0xc, 0x7c, 0x1, 0xc, [{@multicast2, 0x9}]}, @ssrr={0x89, 0x17, 0xbc, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010100, @remote, @broadcast]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x9, 0x2, [], "9a763470b5aa08416c"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "a6bcca7db7d1870c2ff768eb53880f9672429412ecae0a9fd95f383de47ad9947e8c4deed1fa69ff73cfe29308be6f25b1ac9ec5c22b41b588a51c5d122a5f6b1d6ecf347d637f27e3b6149a32067d01abf4e858855c1e0b0e83d5552cf0945036686d490e67553d16de7135ecaf7da0a1dae9b294078db4920549511ede76839f6280f8b7933850c4bf"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x3, 0x800, 0x5], "ed753f5dfbe57080e7486d661c65e91bedc13803c447bac44b1361dcb55641ad7d551918f36a75fc5b66e5cc5d4ccdea0a020592f15a8e15fdd867fb08c552ca528de04b90062f6596f519835d62f2177718a7e6e0e4e15e7973d2d8f3fa06c972dab62c1b7a8e06db08326d4e79d436db79494437a97ea50c01c0d83cfa580819e7dac2511e752f3deaed25f9410950f2518fc1500f3e2fd94ff913646df744903b27e5be36a5e0f1d7d6fa2f2396783c6a1fbe6a74b94af9c96332"}, {0x8, 0x88be, 0x3, {{0x3, 0x1, 0x2, 0x1, 0x1, 0x0, 0x3, 0x6}, 0x1, {0xfffffffd}}}, {0x8, 0x22eb, 0x3, {{0x9, 0x2, 0x4, 0x1, 0x0, 0x2, 0x0, 0x9}, 0x2, {0xffff7fff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "6705266a2893389550526705c78d1d33ab703a083c68d2446142ced7a4d55cc3d11c09f907fd9e12b54ab3f81abd8f2fdc6caef6f9471e40d619dcc58d62940b79980b6574b8dce9480dd1a725ff57826e44ffa2f6c0707679059d5ad02d652465fd01077dbe8820d9197462b18c7b012298c35f"}}}}, 0x2b7) 810.081679ms ago: executing program 2 (id=6938): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000000)=0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = syz_create_resource$binfmt(&(0x7f0000000140)='./mnt\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000500)=ANY=[@ANYRESDEC=r3], 0x78) close(r6) 753.23027ms ago: executing program 6 (id=6939): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000000000400"/38], 0x0, 0x26}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="fff7ce1692de7b97c3646e1d0f79fe9ce704b7eda1eb64d402a99b47bb456b71949efc3a6bd8b922e0eac38485ae87b7e6ae2b4b8fcc84b5d305ea51887cf793e09865be9de382db0860f1ba724034debda60669f456cdd006847cf7b8171e8c9a99529e2b010000000100000013600b2ae939f6c5cb8a8d810600934c620ffa69f0da9c6b88ff84e622c7ccbafba392af0e7d22c10e7ff70850a3b34fe4e9d87978170940778bf8c53e9bafce1e", @ANYBLOB="7f5e28a5620d68b83e06deb3bb31c3fd010026d37099ff5c6e6331229e24b1e12190ad9100926e23a21dc189b7f77f7c191d003953c36f13527542c3636456105dabd25c30f83393331b616fcb34ab35eebc37667a80867078f62b08b51bfe185db15f39c8021f79dc9d577c103295902298d198f51e319cb7"], 0x14}, 0x1, 0x0, 0x0, 0x40004801}, 0x4000810) socket$inet_mptcp(0x2, 0x1, 0x106) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) landlock_create_ruleset(&(0x7f00000001c0)={0x1407, 0x3, 0x1}, 0x14, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(sha3-224-generic,ctr-blowfish-asm)\x00'}, 0x58) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r2) socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000540)=ANY=[]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty=0x1000000}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="bd320000433678087b8f03ba7b4f548114ad259aafb6b9dc14b2a0d168e8fed11967f230b06d2484fe93b75e3c50281dbbb7aa34a1ae6303fce3e21c24147685e47286f606e9a8549522c07508021542f8eea543d0b8a3b93e7dee5322914da2c2211a022f2f29936c665b6bd77afc4a276ebe743fb30831f5de3423bcadec00379c9592d443522325673dde4c7f7a613e77b6072b300ad4587933f2cbcbd83f2553992db4baa057f97d35b6aff01c4e419527f34276044a843d2f929ef46e6aec075d1581a5dfbcf3047a1b8aa93da328bfec7024dd471fa54327fa7a9f5f5b648501fef761e742b255444ed1a7bf05", @ANYRES16=r6, @ANYBLOB="01002cbd7000ffdbdf2504000000080004000f000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24048810}, 0x800) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) 158.879075ms ago: executing program 3 (id=6940): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), 0x0, 0x3f00000000000000, 0x1}) 0s ago: executing program 3 (id=6941): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0xec, 0x111, 0x4b4, 0x7000000, 0xd4feffff, 0x298, 0x202, 0x225, 0x298, 0x278, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xfc}, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00', {0xfffffffc}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00], [0x0, 0xffffffff], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0x164, 0x1ac, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x401, 0x9, 'fsm\x00', "68ef0ef2500fd729dffe0a4c238077e685c7dcb139c725366ef502549f813fd75e85e4fa7a292ea462b0fbdf4bd7380c58a5b0471f8f7d22cc5e0de67801c89b8dbd542372f6a87a27e053aa0daeaa8962911042fe7e8cb5d83540b390c27d5c24d15c080369dac9def6f20d55b18c42a7149324a111fac9ff47289c5eb0015c", 0x6c, 0x0, {0x1}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xa, 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3bc) kernel console output (not intermixed with test programs): 000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1576.751344][ T40] audit: type=1326 audit(3101.146:5615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28981 comm="syz.2.5910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1576.758575][ T40] audit: type=1326 audit(3101.146:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28981 comm="syz.2.5910" exe="/syz-executor" sig=0 arch=40000003 syscall=237 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1576.765926][ T40] audit: type=1326 audit(3101.146:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28981 comm="syz.2.5910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1576.772659][ T40] audit: type=1326 audit(3101.146:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28981 comm="syz.2.5910" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1576.779460][ T40] audit: type=1326 audit(3101.146:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28981 comm="syz.2.5910" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 1576.789245][ T40] audit: type=1326 audit(3101.146:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28981 comm="syz.2.5910" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 1577.555969][T28997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5915'. [ 1577.597889][T29003] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5917'. [ 1577.797258][T17128] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1577.815727][T17128] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1578.624764][T29034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5927'. [ 1578.823751][T19796] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1578.987081][T19796] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1578.990040][T19796] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.992586][T19796] usb 8-1: Product: syz [ 1579.003498][T19796] usb 8-1: Manufacturer: syz [ 1579.005033][T19796] usb 8-1: SerialNumber: syz [ 1579.012460][T19796] usb 8-1: config 0 descriptor?? [ 1579.439615][T19530] usb 8-1: USB disconnect, device number 40 [ 1580.304142][T29087] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1580.854571][T29111] gfs2: not a GFS2 filesystem [ 1580.886567][T29114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5948'. [ 1580.986879][T29117] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1580.989466][T29117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1581.378485][T27646] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1581.396120][T29134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5950'. [ 1582.116299][T29150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5955'. [ 1582.278601][T29161] netlink: 'syz.2.5960': attribute type 4 has an invalid length. [ 1583.359301][T29183] netlink: 'syz.6.5966': attribute type 2 has an invalid length. [ 1583.366096][T29183] !: entered promiscuous mode [ 1583.373187][T29183] netlink: 'syz.6.5966': attribute type 2 has an invalid length. [ 1583.375764][T29183] !: left promiscuous mode [ 1583.457532][T29186] 9pnet_virtio: no channels available for device syz [ 1583.647605][T29190] netlink: 'syz.5.5969': attribute type 2 has an invalid length. [ 1584.106473][T29195] block device autoloading is deprecated and will be removed. [ 1584.130756][T29195] netlink: 'syz.5.5970': attribute type 1 has an invalid length. [ 1584.862697][T29218] gfs2: not a GFS2 filesystem [ 1584.922110][T29220] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5978'. [ 1585.347956][T29231] mkiss: ax0: crc mode is auto. [ 1585.716782][T29254] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5983'. [ 1585.773561][T29258] 9pnet_virtio: no channels available for device syz [ 1585.836872][T29261] netlink: 'syz.6.5986': attribute type 1 has an invalid length. [ 1585.853599][T26812] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1585.936982][T29266] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1585.957570][T29261] bond1: entered promiscuous mode [ 1585.969366][T29261] bond1: entered allmulticast mode [ 1585.985957][T29261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1586.190498][ T5306] Bluetooth: hci3: command 0x0406 tx timeout [ 1586.226769][T29280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5990'. [ 1596.753569][T29340] input: syz1 as /devices/virtual/input/input232 [ 1597.730768][T29346] random: crng reseeded on system resumption [ 1598.344756][T29355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6006'. [ 1598.714618][T29366] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1599.680425][T29390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6015'. [ 1599.789723][T29392] 9pnet_virtio: no channels available for device syz [ 1601.172077][T29396] netlink: 'syz.2.6019': attribute type 10 has an invalid length. [ 1601.179457][T29396] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1601.430904][T29404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6017'. [ 1602.408639][T29426] overlayfs: failed to decode file handle (len=7, type=78, flags=0, err=-22) [ 1602.609358][ T40] kauditd_printk_skb: 406 callbacks suppressed [ 1602.609370][ T40] audit: type=1326 audit(3383.028:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29425 comm="syz.2.6027" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 1602.633448][ T40] audit: type=1326 audit(3383.038:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29425 comm="syz.2.6027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1602.650082][ T40] audit: type=1326 audit(3383.038:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29425 comm="syz.2.6027" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 1602.658430][ T40] audit: type=1326 audit(3383.038:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29425 comm="syz.2.6027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1602.679887][ T40] audit: type=1326 audit(3383.038:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29425 comm="syz.2.6027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1602.694072][ T40] audit: type=1326 audit(3383.038:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29425 comm="syz.2.6027" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1602.711966][ T40] audit: type=1326 audit(3383.038:6033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29425 comm="syz.2.6027" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 1602.737396][ T40] audit: type=1326 audit(3383.038:6034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29425 comm="syz.2.6027" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 1602.756724][ T40] audit: type=1326 audit(3383.038:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29425 comm="syz.2.6027" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 1602.765142][ T40] audit: type=1326 audit(3383.038:6036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29425 comm="syz.2.6027" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ed598 code=0x7ffc0000 [ 1602.791075][T29437] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1602.928156][T29441] overlayfs: missing 'lowerdir' [ 1603.150052][T29449] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1603.203567][T29453] netlink: 'syz.3.6033': attribute type 10 has an invalid length. [ 1603.210526][T29453] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 1603.214967][T29453] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1603.258396][T29449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.261306][T29449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.323734][T29449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1603.338973][T29449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1604.054305][ T9611] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.058038][ T9611] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.064393][ T9611] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.068405][ T9611] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1604.096919][T29470] wg2 speed is unknown, defaulting to 1000 [ 1604.161890][T29476] overlayfs: missing 'lowerdir' [ 1604.173921][T29473] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(9) [ 1604.176932][T29473] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1604.184424][T29473] vhci_hcd vhci_hcd.0: Device attached [ 1604.184439][T29468] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1604.188855][T29468] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1604.202115][T29468] vhci_hcd vhci_hcd.0: Device attached [ 1604.224001][T29478] vhci_hcd: connection closed [ 1604.225870][T21053] vhci_hcd: stop threads [ 1604.229578][T21053] vhci_hcd: release socket [ 1604.231109][T21053] vhci_hcd: disconnect device [ 1604.233057][T29477] vhci_hcd: connection closed [ 1604.233260][T21053] vhci_hcd: stop threads [ 1604.236373][T21053] vhci_hcd: release socket [ 1604.237958][T21053] vhci_hcd: disconnect device [ 1604.570083][T29470] lo speed is unknown, defaulting to 1000 [ 1605.186522][T29497] fuse: Bad value for 'fd' [ 1605.489293][T29510] openvswitch: netlink: Invalid VLAN frame [ 1605.542637][T29513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6049'. [ 1606.216955][T29525] wg2 speed is unknown, defaulting to 1000 [ 1606.236370][T27646] Bluetooth: hci1: Unable to find connection for big 0x00 [ 1606.515336][T29537] FAULT_INJECTION: forcing a failure. [ 1606.515336][T29537] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.522164][T29537] CPU: 0 UID: 0 PID: 29537 Comm: syz.5.6057 Not tainted syzkaller #0 PREEMPT(full) [ 1606.522192][T29537] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1606.522203][T29537] Call Trace: [ 1606.522212][T29537] [ 1606.522220][T29537] dump_stack_lvl+0x16c/0x1f0 [ 1606.522245][T29537] should_fail_ex+0x512/0x640 [ 1606.522265][T29537] ? __kmalloc_node_track_caller_noprof+0xcb/0x890 [ 1606.522289][T29537] should_failslab+0xc2/0x120 [ 1606.522312][T29537] __kmalloc_node_track_caller_noprof+0xde/0x890 [ 1606.522333][T29537] ? simple_xattr_set+0x5b/0x3e0 [ 1606.522348][T29537] ? simple_xattr_alloc+0x46/0xa0 [ 1606.522369][T29537] ? kstrdup+0x53/0x100 [ 1606.522384][T29537] kstrdup+0x53/0x100 [ 1606.522401][T29537] simple_xattr_set+0x5b/0x3e0 [ 1606.522422][T29537] shmem_xattr_handler_set+0x31b/0x3b0 [ 1606.522446][T29537] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 1606.522465][T29537] __vfs_setxattr+0x175/0x1e0 [ 1606.522491][T29537] ? __pfx___vfs_setxattr+0x10/0x10 [ 1606.522513][T29537] ? apparmor_capable+0x1d8/0x4e0 [ 1606.522540][T29537] __vfs_setxattr_noperm+0x127/0x660 [ 1606.522569][T29537] __vfs_setxattr_locked+0x17d/0x250 [ 1606.522596][T29537] vfs_setxattr+0x145/0x350 [ 1606.522623][T29537] ? __pfx_vfs_setxattr+0x10/0x10 [ 1606.522647][T29537] ? __lock_acquire+0x433/0x22f0 [ 1606.522670][T29537] ovl_check_setxattr+0x181/0x320 [ 1606.522722][T29537] ovl_set_protattr+0x1ea/0x570 [ 1606.522788][T29537] ? __pfx_ovl_set_protattr+0x10/0x10 [ 1606.522810][T29537] ? mnt_get_write_access+0x1e9/0x2f0 [ 1606.522833][T29537] ovl_fileattr_set+0x158/0x300 [ 1606.522857][T29537] ? __pfx_ovl_fileattr_set+0x10/0x10 [ 1606.522879][T29537] ? bpf_lsm_capable+0x9/0x10 [ 1606.522896][T29537] ? security_capable+0x7e/0x260 [ 1606.522917][T29537] vfs_fileattr_set+0x77c/0xb80 [ 1606.522943][T29537] ? __pfx_vfs_fileattr_set+0x10/0x10 [ 1606.522969][T29537] ? __asan_memset+0x23/0x50 [ 1606.522990][T29537] ioctl_setflags+0x1c7/0x200 [ 1606.523013][T29537] ? __pfx_ioctl_setflags+0x10/0x10 [ 1606.523045][T29537] do_vfs_ioctl+0x120/0x14f0 [ 1606.523065][T29537] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1606.523091][T29537] ? find_held_lock+0x2b/0x80 [ 1606.523113][T29537] ? hook_file_ioctl_common+0x145/0x410 [ 1606.523140][T29537] ? __fget_files+0x20e/0x3c0 [ 1606.523159][T29537] ? __pfx_fput+0x10/0x10 [ 1606.523180][T29537] __ia32_compat_sys_ioctl+0x1c0/0x370 [ 1606.523202][T29537] __do_fast_syscall_32+0xe8/0x680 [ 1606.523225][T29537] do_fast_syscall_32+0x32/0x80 [ 1606.523244][T29537] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1606.523264][T29537] RIP: 0023:0xf70fd579 [ 1606.523278][T29537] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1606.523292][T29537] RSP: 002b:00000000f54ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1606.523308][T29537] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040086602 [ 1606.523318][T29537] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1606.523328][T29537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1606.523338][T29537] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1606.523348][T29537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1606.523373][T29537] [ 1607.038969][T29525] lo speed is unknown, defaulting to 1000 [ 1607.386600][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.909126][T29550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6060'. [ 1608.156047][T29554] overlayfs: missing 'lowerdir' [ 1609.249117][T29564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6064'. [ 1610.099299][T29574] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1610.151734][T29578] fuse: Bad value for 'fd' [ 1610.293561][T29583] binder: 29581:29583 ioctl c0306201 800003c0 returned -14 [ 1610.300098][T29583] input: syz0 as /devices/virtual/input/input234 [ 1610.427318][T29587] netlink: 160 bytes leftover after parsing attributes in process `syz.6.6071'. [ 1610.578016][T29590] 9pnet_fd: Insufficient options for proto=fd [ 1611.405975][ T5306] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1611.417368][ T5306] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1611.433217][ T5306] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1611.439120][T22185] syz_tun (unregistering): left allmulticast mode [ 1611.442412][T22185] syz_tun (unregistering): left promiscuous mode [ 1611.443890][ T5306] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1611.445927][T22185] bridge0: port 1(syz_tun) entered disabled state [ 1611.453677][T25461] smc: removing ib device syz1 [ 1611.457556][ T5306] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1611.578105][T29603] wg2 speed is unknown, defaulting to 1000 [ 1611.609124][T29607] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 1611.612033][T29607] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1611.621992][T29607] vhci_hcd vhci_hcd.0: Device attached [ 1611.830769][T29611] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6073'. [ 1611.883271][ T29] usb 48-1: SetAddress Request (93) to port 0 [ 1611.886012][ T29] usb 48-1: new SuperSpeed USB device number 93 using vhci_hcd [ 1611.966097][T29613] FAULT_INJECTION: forcing a failure. [ 1611.966097][T29613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1611.971292][T29613] CPU: 0 UID: 0 PID: 29613 Comm: syz.2.6077 Not tainted syzkaller #0 PREEMPT(full) [ 1611.971309][T29613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1611.971316][T29613] Call Trace: [ 1611.971321][T29613] [ 1611.971327][T29613] dump_stack_lvl+0x16c/0x1f0 [ 1611.971344][T29613] should_fail_ex+0x512/0x640 [ 1611.971360][T29613] save_fsave_header+0x14c/0x2f0 [ 1611.971376][T29613] ? __pfx_save_fsave_header+0x10/0x10 [ 1611.971397][T29613] ? copy_fpstate_to_sigframe+0x2c3/0xad0 [ 1611.971412][T29613] ? rcu_is_watching+0x12/0xc0 [ 1611.971428][T29613] ? __local_bh_enable_ip+0xa4/0x120 [ 1611.971446][T29613] copy_fpstate_to_sigframe+0x74f/0xad0 [ 1611.971463][T29613] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1611.971478][T29613] ? posixtimer_deliver_signal+0x105/0x6b0 [ 1611.971496][T29613] ? posixtimer_deliver_signal+0x1c7/0x6b0 [ 1611.971510][T29613] ? x86_task_fpu+0x5f/0x90 [ 1611.971521][T29613] ? xstate_sigframe_size+0x48/0x60 [ 1611.971538][T29613] get_sigframe+0x475/0x960 [ 1611.971554][T29613] ? __pfx_get_sigframe+0x10/0x10 [ 1611.971568][T29613] ? _raw_spin_unlock_irq+0x23/0x50 [ 1611.971580][T29613] ? siginfo_layout+0x177/0x290 [ 1611.971603][T29613] ia32_setup_rt_frame+0xe4/0xb30 [ 1611.971622][T29613] ? getname_flags.part.0+0x376/0x550 [ 1611.971646][T29613] ? getname_flags.part.0+0x1c5/0x550 [ 1611.971667][T29613] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 1611.971684][T29613] ? user_path_at+0x44/0x60 [ 1611.971699][T29613] arch_do_signal_or_restart+0x475/0x7a0 [ 1611.971714][T29613] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1611.971734][T29613] ? __pfx_do_compat_futimesat+0x10/0x10 [ 1611.971748][T29613] exit_to_user_mode_loop+0x8c/0x540 [ 1611.971764][T29613] __do_fast_syscall_32+0x4a4/0x680 [ 1611.971780][T29613] do_fast_syscall_32+0x32/0x80 [ 1611.971794][T29613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1611.971808][T29613] RIP: 0023:0xf70ed579 [ 1611.971818][T29613] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1611.971829][T29613] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 000000000000010f [ 1611.971840][T29613] RAX: fffffffffffffff2 RBX: 0000000000000000 RCX: 0000000000000000 [ 1611.971847][T29613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1611.971853][T29613] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1611.971859][T29613] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1611.971865][T29613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1611.971878][T29613] [ 1612.133815][T29603] lo speed is unknown, defaulting to 1000 [ 1612.271169][T29617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6078'. [ 1612.387174][T29603] chnl_net:caif_netlink_parms(): no params data found [ 1612.550328][T29603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.580765][T29603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.596961][T29603] bridge_slave_0: entered allmulticast mode [ 1612.600138][T29603] bridge_slave_0: entered promiscuous mode [ 1612.616178][T29603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.619449][T29603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.622406][T29603] bridge_slave_1: entered allmulticast mode [ 1612.625501][T29603] bridge_slave_1: entered promiscuous mode [ 1612.644811][T29626] wg2 speed is unknown, defaulting to 1000 [ 1612.727541][T29603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1612.732100][T29603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1612.805952][T29631] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6081'. [ 1612.833947][T29608] vhci_hcd: connection reset by peer [ 1612.834200][T29626] lo speed is unknown, defaulting to 1000 [ 1612.843135][T25489] vhci_hcd: stop threads [ 1612.844933][T25489] vhci_hcd: release socket [ 1612.847079][T25489] vhci_hcd: disconnect device [ 1612.851823][T29603] team0: Port device team_slave_0 added [ 1612.868880][T29603] team0: Port device team_slave_1 added [ 1612.900848][T29603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1612.903868][T29603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.915243][T29603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1612.921526][T29603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1612.924508][T29603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.933852][T29603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1612.967334][T29603] hsr_slave_0: entered promiscuous mode [ 1612.970145][T29603] hsr_slave_1: entered promiscuous mode [ 1612.972457][T29603] debugfs: 'hsr0' already exists in 'hsr' [ 1612.974516][T29603] Cannot create hsr debugfs directory [ 1613.256396][T29637] netlink: 360 bytes leftover after parsing attributes in process `syz.2.6083'. [ 1613.263629][T29638] netlink: 360 bytes leftover after parsing attributes in process `syz.2.6083'. [ 1613.459260][T29641] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6084'. [ 1613.549356][ T5306] Bluetooth: hci4: command tx timeout [ 1613.575219][T29603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1613.579825][T29603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1613.585204][T29603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1613.590619][T29603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1613.640482][T29603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1613.651575][T29603] 8021q: adding VLAN 0 to HW filter on device team0 [ 1613.657706][ T9602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.660155][ T9602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1613.667148][T25489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.670284][T25489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1613.717464][T29603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1613.840826][T29670] syzkaller0: entered promiscuous mode [ 1613.842615][T29670] syzkaller0: entered allmulticast mode [ 1613.948291][T29603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1613.971133][T29676] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1614.005050][T29603] veth0_vlan: entered promiscuous mode [ 1614.013256][T29603] veth1_vlan: entered promiscuous mode [ 1614.013548][T29681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1614.032457][T29603] veth0_macvtap: entered promiscuous mode [ 1614.038741][T29603] veth1_macvtap: entered promiscuous mode [ 1614.052866][T29603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1614.062394][T29603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1614.074115][ T1166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.077488][ T1166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.081076][ T1166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.086788][ T1166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.131182][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.135963][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1614.151398][ T9597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.155487][ T9597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1614.309107][T29691] netlink: 'syz.3.6076': attribute type 10 has an invalid length. [ 1614.315127][T29691] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1614.412839][T29693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.648111][T29698] netlink: 'syz.2.6098': attribute type 3 has an invalid length. [ 1614.933250][T19639] usb 11-1: new high-speed USB device number 67 using dummy_hcd [ 1615.214182][T19639] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1615.217343][T19639] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.220218][T19639] usb 11-1: Product: syz [ 1615.221864][T19639] usb 11-1: Manufacturer: syz [ 1615.239376][T19639] usb 11-1: SerialNumber: syz [ 1615.245297][T19639] usb 11-1: config 0 descriptor?? [ 1615.372684][T29709] FAULT_INJECTION: forcing a failure. [ 1615.372684][T29709] name failslab, interval 1, probability 0, space 0, times 0 [ 1615.377322][T29709] CPU: 3 UID: 0 PID: 29709 Comm: syz.3.6103 Not tainted syzkaller #0 PREEMPT(full) [ 1615.377347][T29709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1615.377358][T29709] Call Trace: [ 1615.377365][T29709] [ 1615.377372][T29709] dump_stack_lvl+0x16c/0x1f0 [ 1615.377398][T29709] should_fail_ex+0x512/0x640 [ 1615.377417][T29709] ? kmem_cache_alloc_noprof+0x62/0x720 [ 1615.377441][T29709] should_failslab+0xc2/0x120 [ 1615.377464][T29709] kmem_cache_alloc_noprof+0x75/0x720 [ 1615.377484][T29709] ? vm_area_dup+0x27/0x8d0 [ 1615.377512][T29709] ? vm_area_dup+0x27/0x8d0 [ 1615.377535][T29709] vm_area_dup+0x27/0x8d0 [ 1615.377555][T29709] __split_vma+0x18e/0x1050 [ 1615.377566][T29709] ? is_bpf_text_address+0x8a/0x1a0 [ 1615.377581][T29709] ? __pfx___split_vma+0x10/0x10 [ 1615.377593][T29709] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1615.377622][T29709] vma_modify+0xee1/0x2030 [ 1615.377648][T29709] ? _parse_integer_limit+0x17f/0x1d0 [ 1615.377674][T29709] ? __pfx_vma_modify+0x10/0x10 [ 1615.377689][T29709] ? _kstrtoull+0x145/0x200 [ 1615.377718][T29709] vma_modify_flags+0x212/0x2d0 [ 1615.377735][T29709] ? __pfx_vma_modify_flags+0x10/0x10 [ 1615.377785][T29709] mprotect_fixup+0x1df/0xb40 [ 1615.377812][T29709] ? __pfx_mprotect_fixup+0x10/0x10 [ 1615.377833][T29709] do_mprotect_pkey+0x774/0xc40 [ 1615.377854][T29709] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1615.377871][T29709] ? __mutex_unlock_slowpath+0x161/0x790 [ 1615.377892][T29709] ? __fget_files+0x20e/0x3c0 [ 1615.377912][T29709] ? __pfx_ksys_write+0x10/0x10 [ 1615.377930][T29709] __ia32_sys_mprotect+0x75/0xb0 [ 1615.377946][T29709] ? lockdep_hardirqs_on+0x7c/0x110 [ 1615.377959][T29709] __do_fast_syscall_32+0xe8/0x680 [ 1615.377974][T29709] do_fast_syscall_32+0x32/0x80 [ 1615.377988][T29709] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1615.378002][T29709] RIP: 0023:0xf7f83579 [ 1615.378012][T29709] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1615.378022][T29709] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 000000000000007d [ 1615.378033][T29709] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000004000 [ 1615.378040][T29709] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 1615.378047][T29709] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1615.378053][T29709] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1615.378059][T29709] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1615.378073][T29709] [ 1615.488504][ C3] vkms_vblank_simulate: vblank timer overrun [ 1615.632886][ T5306] Bluetooth: hci4: command tx timeout [ 1615.735978][T19431] usb 11-1: USB disconnect, device number 67 [ 1615.896253][T29719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6105'. [ 1615.995867][T29721] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6106'. [ 1616.392917][T29728] FAULT_INJECTION: forcing a failure. [ 1616.392917][T29728] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.399359][T29728] CPU: 3 UID: 0 PID: 29728 Comm: syz.5.6107 Not tainted syzkaller #0 PREEMPT(full) [ 1616.399382][T29728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1616.399392][T29728] Call Trace: [ 1616.399398][T29728] [ 1616.399405][T29728] dump_stack_lvl+0x16c/0x1f0 [ 1616.399430][T29728] should_fail_ex+0x512/0x640 [ 1616.399450][T29728] ? kmem_cache_alloc_node_noprof+0x65/0x7b0 [ 1616.399472][T29728] should_failslab+0xc2/0x120 [ 1616.399498][T29728] kmem_cache_alloc_node_noprof+0x78/0x7b0 [ 1616.399515][T29728] ? kasan_save_track+0x14/0x30 [ 1616.399537][T29728] ? __alloc_skb+0x2b2/0x380 [ 1616.399552][T29728] ? genl_start+0x1e8/0x980 [ 1616.399580][T29728] ? __alloc_skb+0x2b2/0x380 [ 1616.399594][T29728] __alloc_skb+0x2b2/0x380 [ 1616.399611][T29728] ? __pfx___alloc_skb+0x10/0x10 [ 1616.399644][T29728] netlink_dump+0x19b/0xd30 [ 1616.399668][T29728] ? __pfx_netlink_dump+0x10/0x10 [ 1616.399700][T29728] ? __asan_memset+0x23/0x50 [ 1616.399720][T29728] ? genl_start+0x67f/0x980 [ 1616.399747][T29728] __netlink_dump_start+0x6d6/0x990 [ 1616.399772][T29728] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 1616.399799][T29728] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1616.399824][T29728] ? genl_op_from_small+0x25/0x440 [ 1616.399852][T29728] ? __pfx_genl_get_cmd+0x10/0x10 [ 1616.399873][T29728] ? __pfx_genl_start+0x10/0x10 [ 1616.399894][T29728] ? __pfx_genl_dumpit+0x10/0x10 [ 1616.399917][T29728] ? __pfx_genl_done+0x10/0x10 [ 1616.399943][T29728] ? __radix_tree_lookup+0x21f/0x2c0 [ 1616.399967][T29728] genl_rcv_msg+0x46e/0x800 [ 1616.399993][T29728] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1616.400018][T29728] ? __pfx_nl80211_dump_survey+0x10/0x10 [ 1616.400047][T29728] netlink_rcv_skb+0x158/0x420 [ 1616.400068][T29728] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1616.400092][T29728] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1616.400124][T29728] ? netlink_deliver_tap+0x1ae/0xd30 [ 1616.400149][T29728] genl_rcv+0x28/0x40 [ 1616.400169][T29728] netlink_unicast+0x5aa/0x870 [ 1616.400192][T29728] ? __pfx_netlink_unicast+0x10/0x10 [ 1616.400221][T29728] netlink_sendmsg+0x8c8/0xdd0 [ 1616.400246][T29728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1616.400270][T29728] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1616.400296][T29728] ____sys_sendmsg+0xa5d/0xc30 [ 1616.400324][T29728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1616.400344][T29728] ? get_compat_msghdr+0x11a/0x170 [ 1616.400385][T29728] ___sys_sendmsg+0x134/0x1d0 [ 1616.400407][T29728] ? __pfx____sys_sendmsg+0x10/0x10 [ 1616.400437][T29728] ? find_held_lock+0x2b/0x80 [ 1616.400477][T29728] __sys_sendmsg+0x16d/0x220 [ 1616.400497][T29728] ? __pfx___sys_sendmsg+0x10/0x10 [ 1616.400534][T29728] __do_fast_syscall_32+0xe8/0x680 [ 1616.400558][T29728] do_fast_syscall_32+0x32/0x80 [ 1616.400577][T29728] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1616.400599][T29728] RIP: 0023:0xf70fd579 [ 1616.400612][T29728] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1616.400629][T29728] RSP: 002b:00000000f54ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1616.400655][T29728] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1616.400667][T29728] RDX: 0000000000040010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1616.400679][T29728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1616.400689][T29728] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1616.400699][T29728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1616.400723][T29728] [ 1616.552019][ C3] vkms_vblank_simulate: vblank timer overrun [ 1616.983390][ T29] usb 48-1: device descriptor read/8, error -110 [ 1617.447689][ T40] kauditd_printk_skb: 452 callbacks suppressed [ 1617.447708][ T40] audit: type=1326 audit(3397.869:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29741 comm="syz.2.6113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1617.460067][ T40] audit: type=1326 audit(3397.869:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29741 comm="syz.2.6113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1617.467052][ T29] usb usb48-port1: attempt power cycle [ 1617.469379][ T40] audit: type=1326 audit(3397.879:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29741 comm="syz.2.6113" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1617.569188][ T40] audit: type=1326 audit(3397.979:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29741 comm="syz.2.6113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1617.577757][ T40] audit: type=1326 audit(3397.979:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29741 comm="syz.2.6113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 1617.655991][T29736] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1617.658290][T29736] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1617.666772][T29736] vhci_hcd vhci_hcd.0: Device attached [ 1617.702712][ T5306] Bluetooth: hci4: command tx timeout [ 1617.962818][T19639] usb 44-1: SetAddress Request (114) to port 0 [ 1617.965715][T19639] usb 44-1: new SuperSpeed USB device number 114 using vhci_hcd [ 1618.105153][ T29] usb usb48-port1: unable to enumerate USB device [ 1618.157764][T29754] vhci_hcd: connection reset by peer [ 1618.162830][T25489] vhci_hcd: stop threads [ 1618.164258][T25489] vhci_hcd: release socket [ 1618.172609][T25489] vhci_hcd: disconnect device [ 1618.672629][ T1455] usb 11-1: new high-speed USB device number 68 using dummy_hcd [ 1618.824647][ T1455] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 1618.828369][ T1455] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1618.832824][ T1455] usb 11-1: config 0 interface 0 has no altsetting 0 [ 1618.844403][ T1455] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1618.852199][ T1455] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1618.858656][ T1455] usb 11-1: Product: syz [ 1618.860535][ T1455] usb 11-1: Manufacturer: syz [ 1618.868832][ T1455] usb 11-1: SerialNumber: syz [ 1618.873118][ T1455] usb 11-1: config 0 descriptor?? [ 1618.883443][ T1455] hub 11-1:0.0: bad descriptor, ignoring hub [ 1618.886172][ T1455] hub 11-1:0.0: probe with driver hub failed with error -5 [ 1618.893956][ T1455] usb 11-1: selecting invalid altsetting 0 [ 1618.986005][T29773] overlay: Unknown parameter 'GPL' [ 1619.434722][T29788] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1619.436888][T29788] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1619.452784][T29788] vhci_hcd vhci_hcd.0: Device attached [ 1619.705258][T29798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6122'. [ 1619.783255][ T5306] Bluetooth: hci4: command tx timeout [ 1619.785992][T29766] usb 11-1: reset high-speed USB device number 68 using dummy_hcd [ 1620.155426][T29789] vhci_hcd: connection closed [ 1620.157544][ T1166] vhci_hcd: stop threads [ 1620.161184][ T1166] vhci_hcd: release socket [ 1620.163633][ T1166] vhci_hcd: disconnect device [ 1620.363127][T27955] usb 11-1: USB disconnect, device number 68 [ 1620.663953][T29803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6127'. [ 1620.749365][T29807] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6129'. [ 1620.830075][T29809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6130'. [ 1620.877338][T29816] 9pnet_fd: Insufficient options for proto=fd [ 1621.136160][T29816] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1621.296899][T29827] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.443790][T29827] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.625597][T29827] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.716457][T29827] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.849899][ T9583] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.861809][ T9583] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.875435][ T9583] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1621.886217][ T9583] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.271251][T29844] netlink: 63 bytes leftover after parsing attributes in process `syz.2.6140'. [ 1622.552460][ T5306] Bluetooth: hci4: ACL packet for unknown connection handle 46 [ 1623.063037][T19639] usb 44-1: device descriptor read/8, error -110 [ 1623.445913][ T9583] bond0 (unregistering): left promiscuous mode [ 1623.448022][ T9583] mac80211_hwsim hwsim37 wlan1: left promiscuous mode [ 1623.452911][ T9583] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1623.464080][ T9583] bond0 (unregistering): Released all slaves [ 1623.474947][T19639] usb usb44-port1: attempt power cycle [ 1623.697066][ T9583] bond1 (unregistering): (slave veth3): Releasing active interface [ 1623.701991][ T9583] bond1 (unregistering): Released all slaves [ 1623.720259][ T9583] bond2 (unregistering): Released all slaves [ 1623.871498][T29859] wg2 speed is unknown, defaulting to 1000 [ 1624.093863][ T9583] IPVS: stopping master sync thread 22506 ... [ 1624.407481][T29859] lo speed is unknown, defaulting to 1000 [ 1624.551363][ T9583] batadv0: left promiscuous mode [ 1624.557015][ T9583] hsr_slave_0: left promiscuous mode [ 1624.560562][ T9583] hsr_slave_1: left promiscuous mode [ 1624.665998][T19639] usb usb44-port1: unable to enumerate USB device [ 1626.477795][ T9583] IPVS: stop unused estimator thread 0... [ 1628.780220][T29913] trusted_key: encrypted_key: keyword 'nåw' not recognized [ 1629.688622][ T40] audit: type=1326 audit(3410.099:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.6166" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1629.717787][ T40] audit: type=1326 audit(3410.139:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.6166" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1629.766738][ T40] audit: type=1326 audit(3410.139:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.6166" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1629.934778][ T40] audit: type=1326 audit(3410.139:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.6166" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1629.942753][T27646] Bluetooth: hci1: command 0x0406 tx timeout [ 1629.999757][ T40] audit: type=1326 audit(3410.139:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.6166" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1630.082766][ T40] audit: type=1326 audit(3410.139:6499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.6166" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1630.130128][ T40] audit: type=1326 audit(3410.139:6500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.6166" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1630.150406][ T40] audit: type=1326 audit(3410.139:6501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.6166" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1630.168138][ T40] audit: type=1326 audit(3410.139:6502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.6166" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1630.192024][ T40] audit: type=1326 audit(3410.139:6503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.5.6166" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1631.023822][T29951] Invalid logical block size (16646144) [ 1631.323854][T29959] 9pnet_virtio: no channels available for device syz [ 1631.353046][T29957] mmap: syz.5.6176 (29957): VmData 37507072 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1633.584180][T29961] wireguard0: entered promiscuous mode [ 1633.591432][T29961] wireguard0: entered allmulticast mode [ 1634.381359][T29969] openvswitch: netlink: Tunnel attr 148 out of range max 16 [ 1639.004124][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 1639.004139][ T40] audit: type=1326 audit(3419.429:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30020 comm="syz.5.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1639.022631][ T40] audit: type=1326 audit(3419.439:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30020 comm="syz.5.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1639.038222][ T40] audit: type=1326 audit(3419.459:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30020 comm="syz.5.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=165 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1639.051036][ T40] audit: type=1326 audit(3419.459:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30020 comm="syz.5.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1639.076713][ T40] audit: type=1326 audit(3419.459:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30020 comm="syz.5.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1639.103224][ T40] audit: type=1326 audit(3419.499:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30020 comm="syz.5.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1639.130389][ T40] audit: type=1326 audit(3419.499:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30020 comm="syz.5.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1639.213020][ T40] audit: type=1326 audit(3419.499:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30020 comm="syz.5.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1639.310636][ T40] audit: type=1326 audit(3419.499:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30020 comm="syz.5.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1639.372552][ T40] audit: type=1326 audit(3419.499:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30020 comm="syz.5.6193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000 [ 1639.654066][T30033] FAULT_INJECTION: forcing a failure. [ 1639.654066][T30033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1639.671624][T30033] CPU: 2 UID: 0 PID: 30033 Comm: syz.3.6196 Not tainted syzkaller #0 PREEMPT(full) [ 1639.671650][T30033] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1639.671661][T30033] Call Trace: [ 1639.671669][T30033] [ 1639.671676][T30033] dump_stack_lvl+0x16c/0x1f0 [ 1639.671705][T30033] should_fail_ex+0x512/0x640 [ 1639.671730][T30033] _copy_to_user+0x32/0xd0 [ 1639.671755][T30033] simple_read_from_buffer+0xcb/0x170 [ 1639.671783][T30033] proc_fail_nth_read+0x197/0x240 [ 1639.671812][T30033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1639.671842][T30033] ? rw_verify_area+0xcf/0x6c0 [ 1639.671863][T30033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1639.671892][T30033] vfs_read+0x1e4/0xcf0 [ 1639.671915][T30033] ? __pfx___mutex_lock+0x10/0x10 [ 1639.671942][T30033] ? __pfx_vfs_read+0x10/0x10 [ 1639.671963][T30033] ? find_held_lock+0x2b/0x80 [ 1639.671995][T30033] ? __fget_files+0x20e/0x3c0 [ 1639.672027][T30033] ksys_read+0x12a/0x250 [ 1639.672049][T30033] ? __pfx_ksys_read+0x10/0x10 [ 1639.672072][T30033] ? fput+0x70/0xf0 [ 1639.672278][T30033] __do_fast_syscall_32+0xe8/0x680 [ 1639.672305][T30033] do_fast_syscall_32+0x32/0x80 [ 1639.672329][T30033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1639.672352][T30033] RIP: 0023:0xf7f83579 [ 1639.672367][T30033] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1639.672384][T30033] RSP: 002b:00000000f5476590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1639.672402][T30033] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5476620 [ 1639.672413][T30033] RDX: 000000000000000f RSI: 00000000f7416ff4 RDI: 0000000000000000 [ 1639.672424][T30033] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1639.672435][T30033] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1639.672444][T30033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1639.672477][T30033] [ 1640.047168][T30036] wireguard0: entered promiscuous mode [ 1640.048666][T30036] wireguard0: entered allmulticast mode [ 1641.914626][ C3] vkms_vblank_simulate: vblank timer overrun [ 1642.627058][ C3] vkms_vblank_simulate: vblank timer overrun [ 1642.966514][ C3] vkms_vblank_simulate: vblank timer overrun [ 1643.026585][ C3] vkms_vblank_simulate: vblank timer overrun [ 1644.940809][ C3] vkms_vblank_simulate: vblank timer overrun [ 1645.066627][ C3] vkms_vblank_simulate: vblank timer overrun [ 1645.582683][T27955] usb 11-1: new full-speed USB device number 69 using dummy_hcd [ 1645.689719][ C3] vkms_vblank_simulate: vblank timer overrun [ 1645.781243][T27955] usb 11-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.802300][T27955] usb 11-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1645.811444][T27955] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.817013][T27955] usb 11-1: Product: syz [ 1645.819082][T27955] usb 11-1: Manufacturer: syz [ 1645.822030][T27955] usb 11-1: SerialNumber: syz [ 1646.034342][ T5306] Bluetooth: hci3: Unknown advertising packet type: 0x1e [ 1646.034495][ T5306] Bluetooth: hci3: Unknown advertising packet type: 0x30 [ 1646.038493][ T5306] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1646.481449][T30091] netlink: 'syz.3.6216': attribute type 1 has an invalid length. [ 1647.404253][T30099] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6215'. [ 1647.455688][T30100] netlink: 'syz.6.6215': attribute type 16 has an invalid length. [ 1647.461730][T30100] netlink: 'syz.6.6215': attribute type 17 has an invalid length. [ 1648.322733][T30100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1648.354494][T30100] 8021q: adding VLAN 0 to HW filter on device team0 [ 1648.388434][T30100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1649.856749][T27955] as10x_usb: device has been detected [ 1649.893556][T27955] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1649.995639][T27955] usb 11-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1650.042038][T27955] as10x_usb: error during firmware upload part1 [ 1650.048862][T27955] Registered device Elgato EyeTV DTT Deluxe [ 1650.049981][T27955] usb 11-1: USB disconnect, device number 69 [ 1650.073129][T27955] Unregistered device Elgato EyeTV DTT Deluxe [ 1650.074192][T27955] as10x_usb: device has been disconnected [ 1650.593426][T30117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1650.597890][T30117] IPv6: NLM_F_CREATE should be set when creating new route [ 1650.654143][T30091] Set syz1 is full, maxelem 65536 reached [ 1654.861735][T27646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1654.926896][T27646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1654.936867][T27646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1654.956943][T27646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1654.978917][T27646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1655.346985][T30140] wg2 speed is unknown, defaulting to 1000 [ 1655.542857][T30140] lo speed is unknown, defaulting to 1000 [ 1655.739741][T30140] chnl_net:caif_netlink_parms(): no params data found [ 1655.760524][T30155] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 1655.903331][T30140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1655.907034][T30140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1655.910186][T30140] bridge_slave_0: entered allmulticast mode [ 1655.925092][T30140] bridge_slave_0: entered promiscuous mode [ 1655.929850][T30140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.933086][T30140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.936544][T30140] bridge_slave_1: entered allmulticast mode [ 1655.940906][T30140] bridge_slave_1: entered promiscuous mode [ 1655.964733][T30140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1655.973757][T30140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1656.004621][T30140] team0: Port device team_slave_0 added [ 1656.010791][T30140] team0: Port device team_slave_1 added [ 1656.044829][T30140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1656.048559][T30140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1656.061859][T30140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1656.165362][T30140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1656.178011][T30140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1656.198718][T30140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1656.600169][T30140] hsr_slave_0: entered promiscuous mode [ 1656.618219][T30140] hsr_slave_1: entered promiscuous mode [ 1656.649460][T30140] debugfs: 'hsr0' already exists in 'hsr' [ 1656.660181][T30140] Cannot create hsr debugfs directory [ 1657.064230][T27646] Bluetooth: hci2: command tx timeout [ 1657.388884][T30189] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1658.104835][T30140] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1658.163942][T30140] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1658.404230][T30140] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1658.456368][T30140] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1658.838627][T30140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1658.856063][T25488] wlan0: Trigger new scan to find an IBSS to join [ 1658.862808][T30140] 8021q: adding VLAN 0 to HW filter on device team0 [ 1658.877806][T25488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.883663][T25488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1658.985301][T25488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.000582][T25488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1659.167662][T27646] Bluetooth: hci2: command tx timeout [ 1659.294585][T30223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6249'. [ 1659.440624][T30223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6249'. [ 1659.531184][T30228] sctp: [Deprecated]: syz.3.6250 (pid 30228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1659.531184][T30228] Use struct sctp_sack_info instead [ 1659.693366][T30140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1660.764703][T30140] veth0_vlan: entered promiscuous mode [ 1660.777134][T30140] veth1_vlan: entered promiscuous mode [ 1660.828926][T30140] veth0_macvtap: entered promiscuous mode [ 1660.835427][T30140] veth1_macvtap: entered promiscuous mode [ 1660.884200][T30140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1660.941460][T30140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1661.077522][ T1238] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.099628][ T1238] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.115196][ T1238] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.129302][ T1238] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.254001][T27646] Bluetooth: hci2: command tx timeout [ 1661.932615][ T1238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1661.942357][ T1238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.003856][ T9611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1662.007641][ T9611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.499134][T30265] syzkaller0: entered promiscuous mode [ 1662.503001][T30265] syzkaller0: entered allmulticast mode [ 1663.146099][ T1166] wlan0: Trigger new scan to find an IBSS to join [ 1663.312177][T27646] Bluetooth: hci2: command tx timeout [ 1664.470618][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.502340][ C2] vkms_vblank_simulate: vblank timer overrun [ 1666.690453][ C2] vkms_vblank_simulate: vblank timer overrun [ 1666.812945][ C2] vkms_vblank_simulate: vblank timer overrun [ 1667.171098][ C2] vkms_vblank_simulate: vblank timer overrun [ 1667.776977][T30299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6264'. [ 1667.800727][T30299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6264'. [ 1668.834296][ C2] vkms_vblank_simulate: vblank timer overrun [ 1668.837412][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.885287][ C2] vkms_vblank_simulate: vblank timer overrun [ 1668.963091][ C2] vkms_vblank_simulate: vblank timer overrun [ 1668.986222][ C2] vkms_vblank_simulate: vblank timer overrun [ 1669.021592][ C2] vkms_vblank_simulate: vblank timer overrun [ 1669.073288][ C2] vkms_vblank_simulate: vblank timer overrun [ 1669.117660][ C2] vkms_vblank_simulate: vblank timer overrun [ 1669.202293][ C2] vkms_vblank_simulate: vblank timer overrun [ 1669.491658][ C2] vkms_vblank_simulate: vblank timer overrun [ 1669.937823][ C2] vkms_vblank_simulate: vblank timer overrun [ 1670.004710][ C2] vkms_vblank_simulate: vblank timer overrun [ 1670.059856][ C2] vkms_vblank_simulate: vblank timer overrun [ 1670.296657][ C2] vkms_vblank_simulate: vblank timer overrun [ 1670.318440][ C2] vkms_vblank_simulate: vblank timer overrun [ 1670.366311][ C2] vkms_vblank_simulate: vblank timer overrun [ 1670.430300][ C2] vkms_vblank_simulate: vblank timer overrun [ 1671.027528][ C2] vkms_vblank_simulate: vblank timer overrun [ 1671.050756][ C2] vkms_vblank_simulate: vblank timer overrun [ 1671.238248][ C2] vkms_vblank_simulate: vblank timer overrun [ 1671.468606][ C2] vkms_vblank_simulate: vblank timer overrun [ 1674.176869][T30348] FAULT_INJECTION: forcing a failure. [ 1674.176869][T30348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1674.181924][T30348] CPU: 2 UID: 0 PID: 30348 Comm: syz.3.6278 Not tainted syzkaller #0 PREEMPT(full) [ 1674.181949][T30348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1674.181959][T30348] Call Trace: [ 1674.181966][T30348] [ 1674.181974][T30348] dump_stack_lvl+0x16c/0x1f0 [ 1674.182000][T30348] should_fail_ex+0x512/0x640 [ 1674.182023][T30348] _copy_from_user+0x2e/0xd0 [ 1674.182046][T30348] get_compat_msghdr+0xa7/0x170 [ 1674.182066][T30348] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1674.182093][T30348] ___sys_sendmsg+0x1ae/0x1d0 [ 1674.182141][T30348] ? __pfx____sys_sendmsg+0x10/0x10 [ 1674.182174][T30348] ? find_held_lock+0x2b/0x80 [ 1674.182210][T30348] __sys_sendmsg+0x16d/0x220 [ 1674.182229][T30348] ? __pfx___sys_sendmsg+0x10/0x10 [ 1674.182257][T30348] ? fput+0x70/0xf0 [ 1674.182278][T30348] __do_fast_syscall_32+0xe8/0x680 [ 1674.182302][T30348] do_fast_syscall_32+0x32/0x80 [ 1674.182324][T30348] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1674.182343][T30348] RIP: 0023:0xf7f83579 [ 1674.182359][T30348] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1674.182374][T30348] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1674.182391][T30348] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 1674.182402][T30348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1674.182419][T30348] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1674.182428][T30348] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1674.182438][T30348] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1674.182463][T30348] [ 1674.231435][T30346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6277'. [ 1674.344820][T30352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6277'. [ 1674.358501][T30351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6277'. [ 1674.450491][T30356] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1676.857008][T30380] wg2 speed is unknown, defaulting to 1000 [ 1677.071672][T30380] lo speed is unknown, defaulting to 1000 [ 1677.797354][T30394] program syz.6.6291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1677.897787][ C1] hrtimer: interrupt took 5011916 ns [ 1677.909105][T30395] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1677.912160][T30395] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1678.082322][T30395] vhci_hcd vhci_hcd.0: Device attached [ 1678.410185][ T29] usb 44-1: SetAddress Request (118) to port 0 [ 1678.537401][ T29] usb 44-1: new SuperSpeed USB device number 118 using vhci_hcd [ 1678.706121][T30396] vhci_hcd: connection reset by peer [ 1678.791294][ T95] vhci_hcd: stop threads [ 1678.822255][ T95] vhci_hcd: release socket [ 1678.825204][ T95] vhci_hcd: disconnect device [ 1679.671363][T30415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6297'. [ 1680.351658][T30427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6300'. [ 1680.496120][T30431] netlink: 'syz.3.6302': attribute type 1 has an invalid length. [ 1680.499890][T30431] netlink: 216 bytes leftover after parsing attributes in process `syz.3.6302'. [ 1680.527532][T30429] FAULT_INJECTION: forcing a failure. [ 1680.527532][T30429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1680.546158][T30431] ata1.00: invalid cdb length 6 [ 1680.546221][T30429] CPU: 2 UID: 0 PID: 30429 Comm: syz.2.6301 Not tainted syzkaller #0 PREEMPT(full) [ 1680.546244][T30429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1680.546255][T30429] Call Trace: [ 1680.546263][T30429] [ 1680.546270][T30429] dump_stack_lvl+0x16c/0x1f0 [ 1680.546297][T30429] should_fail_ex+0x512/0x640 [ 1680.546317][T30429] _copy_from_user+0x2e/0xd0 [ 1680.546340][T30429] do_sys_poll+0x1d5/0xdf0 [ 1680.546365][T30429] ? __lock_acquire+0x433/0x22f0 [ 1680.546388][T30429] ? __pfx_do_sys_poll+0x10/0x10 [ 1680.546409][T30429] ? __lock_acquire+0x433/0x22f0 [ 1680.546451][T30429] ? __lock_acquire+0x433/0x22f0 [ 1680.546507][T30429] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1680.546530][T30429] ? ktime_get_ts64+0x2d2/0x400 [ 1680.546551][T30429] ? read_tsc+0x9/0x20 [ 1680.546573][T30429] ? ktime_get_ts64+0x256/0x400 [ 1680.546597][T30429] __ia32_sys_poll+0x1a9/0x450 [ 1680.546621][T30429] ? __pfx___ia32_sys_poll+0x10/0x10 [ 1680.546651][T30429] __do_fast_syscall_32+0xe8/0x680 [ 1680.546676][T30429] do_fast_syscall_32+0x32/0x80 [ 1680.546698][T30429] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1680.546719][T30429] RIP: 0023:0xf70ed579 [ 1680.546734][T30429] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1680.546750][T30429] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 00000000000000a8 [ 1680.546767][T30429] RAX: ffffffffffffffda RBX: 0000000080000740 RCX: 0000000000000001 [ 1680.546779][T30429] RDX: 00000000000000ed RSI: 0000000000000000 RDI: 0000000000000000 [ 1680.546789][T30429] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1680.546799][T30429] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1680.546809][T30429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1680.546833][T30429] [ 1681.773723][T30443] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1681.776715][T30443] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1681.781692][T30443] vhci_hcd vhci_hcd.0: Device attached [ 1681.865659][T30448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6306'. [ 1682.163085][T19371] usb 42-1: SetAddress Request (123) to port 0 [ 1682.167509][T19371] usb 42-1: new SuperSpeed USB device number 123 using vhci_hcd [ 1682.248124][T30457] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1682.251618][T30457] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1682.265087][T30457] vhci_hcd vhci_hcd.0: Device attached [ 1682.286272][T30445] vhci_hcd: connection reset by peer [ 1682.289327][ T1166] vhci_hcd: stop threads [ 1682.291388][ T1166] vhci_hcd: release socket [ 1682.310820][ T1166] vhci_hcd: disconnect device [ 1682.542736][T29090] usb 49-1: new low-speed USB device number 3 using vhci_hcd [ 1682.840011][T30458] vhci_hcd: connection reset by peer [ 1682.843482][ T95] vhci_hcd: stop threads [ 1682.845749][ T95] vhci_hcd: release socket [ 1682.849390][ T95] vhci_hcd: disconnect device [ 1683.623167][ T29] usb 44-1: device descriptor read/8, error -110 [ 1684.015708][ T29] usb usb44-port1: attempt power cycle [ 1684.492399][T27646] block nbd3: Receive control failed (result -32) [ 1684.515610][T30463] block nbd3: shutting down sockets [ 1684.584102][ T29] usb usb44-port1: unable to enumerate USB device [ 1684.707504][T30487] fuse: Bad value for 'fd' [ 1685.037992][T30491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1685.043914][T30491] IPv6: NLM_F_CREATE should be set when creating new route [ 1685.049820][T30491] IPv6: NLM_F_CREATE should be set when creating new route [ 1685.052769][T30491] IPv6: NLM_F_CREATE should be set when creating new route [ 1685.276223][T30503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6321'. [ 1685.423945][T30500] wg2 speed is unknown, defaulting to 1000 [ 1687.558852][T19371] usb 42-1: device descriptor read/8, error -110 [ 1687.670999][T30500] lo speed is unknown, defaulting to 1000 [ 1687.956769][T19371] usb usb42-port1: attempt power cycle [ 1688.527070][T19371] usb usb42-port1: unable to enumerate USB device [ 1688.532696][T29090] vhci_hcd: vhci_device speed not set [ 1689.113457][T19371] usb usb42-port2: attempt power cycle [ 1689.216601][T30535] tipc: Started in network mode [ 1689.221257][T30535] tipc: Node identity 4, cluster identity 4711 [ 1689.229299][T30535] tipc: Node number set to 4 [ 1689.592855][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 1689.592870][ T40] audit: type=1326 audit(3470.019:6529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30539 comm="syz.3.6332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 1689.659292][ T40] audit: type=1326 audit(3470.029:6530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30539 comm="syz.3.6332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 1689.687620][T19371] usb usb42-port2: unable to enumerate USB device [ 1689.734139][ T40] audit: type=1326 audit(3470.039:6531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30539 comm="syz.3.6332" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 1689.758681][ T40] audit: type=1326 audit(3470.039:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30539 comm="syz.3.6332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 1689.790614][ T40] audit: type=1326 audit(3470.039:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30539 comm="syz.3.6332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 1689.800426][ T40] audit: type=1326 audit(3470.039:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30539 comm="syz.3.6332" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 1689.820773][ T40] audit: type=1326 audit(3470.039:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30539 comm="syz.3.6332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 1689.850786][ T40] audit: type=1326 audit(3470.039:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30539 comm="syz.3.6332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 1689.862942][ T40] audit: type=1326 audit(3470.039:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30539 comm="syz.3.6332" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 1689.889668][ T40] audit: type=1326 audit(3470.039:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30539 comm="syz.3.6332" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 1690.151311][T30548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.155108][T30548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.282806][T19431] usb 11-1: new high-speed USB device number 70 using dummy_hcd [ 1690.480096][T19431] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1690.535549][T19431] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1690.553671][T19431] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.559873][T19431] usb 11-1: Product: syz [ 1690.572674][T19431] usb 11-1: Manufacturer: syz [ 1690.579005][T19431] usb 11-1: SerialNumber: syz [ 1690.597578][T19431] usb 11-1: config 0 descriptor?? [ 1691.058133][T26743] usb 11-1: USB disconnect, device number 70 [ 1691.993195][T30575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6345'. [ 1692.197833][T30593] "syz.8.6348" (30593) uses obsolete ecb(arc4) skcipher [ 1692.256616][T30595] netlink: 'syz.3.6343': attribute type 10 has an invalid length. [ 1692.269026][T30595] 8021q: adding VLAN 0 to HW filter on device team0 [ 1692.285753][T30595] bond0: (slave team0): Enslaving as an active interface with an up link [ 1694.059882][T30621] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1694.065538][T30621] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1694.081800][T30621] vhci_hcd vhci_hcd.0: Device attached [ 1694.254956][T30622] vhci_hcd: connection closed [ 1694.256082][T25484] vhci_hcd: stop threads [ 1694.264110][T25484] vhci_hcd: release socket [ 1694.275591][T25484] vhci_hcd: disconnect device [ 1694.342769][T29090] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 1694.346470][T29090] usb 41-1: enqueue for inactive port 0 [ 1694.412745][T29090] vhci_hcd: vhci_device speed not set [ 1696.986423][T25484] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1697.463602][T30628] tmpfs: Bad value for 'mpol' [ 1699.216110][T30654] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1699.224122][T30654] IPv6: NLM_F_CREATE should be set when creating new route [ 1699.235621][T30654] IPv6: NLM_F_CREATE should be set when creating new route [ 1699.241670][T30654] IPv6: NLM_F_CREATE should be set when creating new route [ 1699.273169][T30667] netlink: get zone limit has 4 unknown bytes [ 1699.371463][T30672] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6367'. [ 1699.530714][T30675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6369'. [ 1700.196144][T30696] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6373'. [ 1700.330867][ C3] vkms_vblank_simulate: vblank timer overrun [ 1700.527326][ T40] kauditd_printk_skb: 428 callbacks suppressed [ 1700.527340][ T40] audit: type=1326 audit(3480.949:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30704 comm="syz.3.6378" exe="/syz-executor" sig=31 arch=40000003 syscall=354 compat=1 ip=0xf7f83579 code=0x0 [ 1700.732709][ C3] vkms_vblank_simulate: vblank timer overrun [ 1700.995939][ C3] vkms_vblank_simulate: vblank timer overrun [ 1701.450027][ C3] vkms_vblank_simulate: vblank timer overrun [ 1701.778644][T30725] fuse: Unknown parameter 'grou00000000000000000000' [ 1701.810178][T30727] usb 2-1: USB disconnect, device number 2 [ 1702.214076][ C3] vkms_vblank_simulate: vblank timer overrun [ 1702.266421][ C3] vkms_vblank_simulate: vblank timer overrun [ 1702.469949][ C3] vkms_vblank_simulate: vblank timer overrun [ 1703.134043][ C3] vkms_vblank_simulate: vblank timer overrun [ 1703.541969][ C3] vkms_vblank_simulate: vblank timer overrun [ 1703.661233][T30750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6393'. [ 1703.684707][T30750] veth1_macvtap: left promiscuous mode [ 1703.698171][T30758] fuse: Unknown parameter 'grou00000000000000000000' [ 1704.249651][ C3] vkms_vblank_simulate: vblank timer overrun [ 1704.433508][ C3] vkms_vblank_simulate: vblank timer overrun [ 1704.681402][ C3] vkms_vblank_simulate: vblank timer overrun [ 1704.733972][ C3] vkms_vblank_simulate: vblank timer overrun [ 1705.099240][ C3] vkms_vblank_simulate: vblank timer overrun [ 1705.149932][ C3] vkms_vblank_simulate: vblank timer overrun [ 1705.205934][ C3] vkms_vblank_simulate: vblank timer overrun [ 1705.298056][ C3] vkms_vblank_simulate: vblank timer overrun [ 1705.753411][T30785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6402'. [ 1705.901710][T30787] fuse: Unknown parameter 'grou00000000000000000000' [ 1706.390036][ C3] vkms_vblank_simulate: vblank timer overrun [ 1706.814751][T30799] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1706.817938][T30799] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1706.946610][ C3] vkms_vblank_simulate: vblank timer overrun [ 1707.362161][T30799] vhci_hcd vhci_hcd.0: Device attached [ 1707.432442][T30807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6409'. [ 1707.593483][T19371] usb 44-1: SetAddress Request (122) to port 0 [ 1707.599502][T19371] usb 44-1: new SuperSpeed USB device number 122 using vhci_hcd [ 1707.751595][T30800] vhci_hcd: connection reset by peer [ 1707.786741][ T1166] vhci_hcd: stop threads [ 1707.825502][ T1166] vhci_hcd: release socket [ 1707.828229][ T1166] vhci_hcd: disconnect device [ 1708.085918][ C3] vkms_vblank_simulate: vblank timer overrun [ 1708.234725][T30816] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6412'. [ 1708.390418][T30818] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6413'. [ 1708.397691][T30818] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6413'. [ 1708.448369][ C3] vkms_vblank_simulate: vblank timer overrun [ 1709.008117][ C3] vkms_vblank_simulate: vblank timer overrun [ 1709.052743][ C3] vkms_vblank_simulate: vblank timer overrun [ 1709.309907][ C3] vkms_vblank_simulate: vblank timer overrun [ 1709.497297][ C3] vkms_vblank_simulate: vblank timer overrun [ 1709.629750][T30845] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6421'. [ 1709.796380][ C3] vkms_vblank_simulate: vblank timer overrun [ 1710.066352][T19530] usb 11-1: new high-speed USB device number 71 using dummy_hcd [ 1710.213158][T19530] usb 11-1: Using ep0 maxpacket: 32 [ 1710.229820][T19530] usb 11-1: config 0 has no interfaces? [ 1710.254532][T19530] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1710.258920][T19530] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.276893][T19530] usb 11-1: Product: syz [ 1710.278904][T19530] usb 11-1: Manufacturer: syz [ 1710.280987][T19530] usb 11-1: SerialNumber: syz [ 1710.285424][T19530] usb 11-1: config 0 descriptor?? [ 1710.507960][T19567] usb 11-1: USB disconnect, device number 71 [ 1710.781963][ C3] vkms_vblank_simulate: vblank timer overrun [ 1711.096879][ C3] vkms_vblank_simulate: vblank timer overrun [ 1711.197901][ C3] vkms_vblank_simulate: vblank timer overrun [ 1711.362841][ C3] vkms_vblank_simulate: vblank timer overrun [ 1711.387718][ T40] audit: type=1804 audit(3491.809:6968): pid=30867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.6428" name="/newroot/167/file1" dev="fuse" ino=1 res=1 errno=0 [ 1711.589759][T30875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6431'. [ 1711.862718][T19567] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1711.878203][T30860] netlink: 'syz.8.6424': attribute type 10 has an invalid length. [ 1712.006094][ C3] vkms_vblank_simulate: vblank timer overrun [ 1712.006478][T30883] netlink: 'syz.8.6424': attribute type 10 has an invalid length. [ 1712.026700][T19567] usb 8-1: Using ep0 maxpacket: 32 [ 1712.056535][T30883] netlink: 2 bytes leftover after parsing attributes in process `syz.8.6424'. [ 1712.067152][T19567] usb 8-1: config 0 has no interfaces? [ 1712.094331][T30860] batman_adv: batadv0: Adding interface: team0 [ 1712.108424][T30860] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1712.127341][T19567] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1712.147128][T19567] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.182248][T30860] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1712.186546][ C3] vkms_vblank_simulate: vblank timer overrun [ 1712.187204][T19567] usb 8-1: Product: syz [ 1712.187219][T19567] usb 8-1: Manufacturer: syz [ 1712.187229][T19567] usb 8-1: SerialNumber: syz [ 1712.188778][T19567] usb 8-1: config 0 descriptor?? [ 1712.292671][T30883] team0: entered promiscuous mode [ 1712.294786][T30883] team_slave_0: entered promiscuous mode [ 1712.297749][T30883] team_slave_1: entered promiscuous mode [ 1712.303931][T30883] 8021q: adding VLAN 0 to HW filter on device team0 [ 1712.333047][T30883] batman_adv: batadv0: Interface activated: team0 [ 1712.441910][T30883] batman_adv: batadv0: Interface deactivated: team0 [ 1712.444673][T30883] batman_adv: batadv0: Removing interface: team0 [ 1712.470797][T30891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1712.481644][T30883] bridge0: port 3(team0) entered blocking state [ 1712.509100][T30883] bridge0: port 3(team0) entered disabled state [ 1712.518711][T30883] team0: entered allmulticast mode [ 1712.522320][T30883] team_slave_0: entered allmulticast mode [ 1712.556257][T30883] team_slave_1: entered allmulticast mode [ 1712.591954][T19567] usb 8-1: USB disconnect, device number 41 [ 1712.664612][T19371] usb 44-1: device descriptor read/8, error -110 [ 1713.128699][T19371] usb usb44-port1: attempt power cycle [ 1713.340383][T30903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.499310][T30906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6440'. [ 1713.724812][T19371] usb usb44-port1: unable to enumerate USB device [ 1713.847926][T30914] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6442'. [ 1716.177300][T30940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6449'. [ 1722.465720][T30973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6457'. [ 1722.473330][T30975] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6457'. [ 1722.702649][T19530] usb 13-1: new full-speed USB device number 2 using dummy_hcd [ 1722.901420][T19530] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1722.907516][T19530] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64 [ 1722.921935][T19530] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1722.957589][T19530] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1722.975024][T19530] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.237536][T19530] usb 13-1: usb_control_msg returned -32 [ 1723.252831][T19530] usbtmc 13-1:16.0: can't read capabilities [ 1725.515313][T27955] usb 13-1: USB disconnect, device number 2 [ 1726.304787][T30998] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6464'. [ 1726.501912][T31000] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6465'. [ 1727.865032][T19530] usb 11-1: new high-speed USB device number 72 using dummy_hcd [ 1728.157616][T19530] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1728.164867][T19530] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1728.170980][T19530] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.176416][T19530] usb 11-1: Product: syz [ 1728.179162][T19530] usb 11-1: Manufacturer: syz [ 1728.181365][T19530] usb 11-1: SerialNumber: syz [ 1728.185110][T19530] usb 11-1: config 0 descriptor?? [ 1728.659506][T19530] usb 11-1: USB disconnect, device number 72 [ 1728.982726][ T9602] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1729.355853][T31025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6473'. [ 1729.370487][T31026] fuse: Bad value for 'user_id' [ 1729.374013][T31026] fuse: Bad value for 'user_id' [ 1729.858479][T31030] netlink: 'syz.6.6475': attribute type 6 has an invalid length. [ 1730.100340][T31036] ubi: mtd0 is already attached to ubi31 [ 1730.299990][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.866344][T31059] fuse: Bad value for 'fd' [ 1732.995724][ T5981] usb 11-1: new high-speed USB device number 73 using dummy_hcd [ 1733.235509][ T5981] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1733.244924][ T5981] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1733.261526][ T5981] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.266242][ T5981] usb 11-1: Product: syz [ 1733.277450][ T5981] usb 11-1: Manufacturer: syz [ 1733.279632][ T5981] usb 11-1: SerialNumber: syz [ 1733.283607][ T5981] usb 11-1: config 0 descriptor?? [ 1733.552802][T19431] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1733.732622][T19431] usb 8-1: Using ep0 maxpacket: 8 [ 1733.738054][T19431] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1733.746062][T19431] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1733.754801][T19431] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1733.762234][T19431] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1733.770966][T19431] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1733.808693][T19431] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.707245][T31085] fuse: Bad value for 'fd' [ 1736.913093][ T5981] usb 11-1: USB disconnect, device number 73 [ 1737.221451][T19431] usb 8-1: usb_control_msg returned -71 [ 1737.225254][T19431] usbtmc 8-1:16.0: can't read capabilities [ 1737.253273][T19431] usb 8-1: USB disconnect, device number 42 [ 1737.468534][ T5306] Bluetooth: hci4: command 0x0406 tx timeout [ 1738.185849][T31124] fuse: Bad value for 'fd' [ 1738.814825][T19567] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 1739.096676][T19567] usb 8-1: not running at top speed; connect to a high speed hub [ 1739.131908][T19567] usb 8-1: config 1 interface 0 altsetting 131 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1739.210578][T19567] usb 8-1: config 1 interface 0 altsetting 131 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1739.236822][T19567] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1739.258381][T19567] usb 8-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 1739.268827][T19567] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.277469][T19567] usb 8-1: Product: à ¬ [ 1739.280493][T19567] usb 8-1: Manufacturer:  [ 1739.303462][T31136] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1739.553199][T19567] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input236 [ 1739.575912][T19567] usb 8-1: USB disconnect, device number 43 [ 1739.576575][ T5340] bcm5974 8-1:1.0: could not read from device [ 1740.395347][T31159] fuse: Bad value for 'fd' [ 1742.149389][T31189] netlink: 'syz.2.6519': attribute type 2 has an invalid length. [ 1742.778719][T31193] fuse: Bad value for 'fd' [ 1744.710825][T31216] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6529'. [ 1744.720722][T31216] vlan1: entered allmulticast mode [ 1744.723078][T31216] veth0_vlan: entered allmulticast mode [ 1744.726117][T31216] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1746.835081][T31235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6534'. [ 1747.069032][T31237] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6536'. [ 1748.929110][T31265] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6543'. [ 1749.335498][T31274] fuse: Invalid rootmode [ 1749.668859][T31281] netlink: 10 bytes leftover after parsing attributes in process `syz.8.6551'. [ 1749.792119][T31287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6552'. [ 1751.914080][T31310] random: crng reseeded on system resumption [ 1752.195888][T31314] fuse: Invalid rootmode [ 1755.074083][T27646] Bluetooth: hci2: connection err: -111 [ 1755.840839][T31361] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6572'. [ 1755.869560][T31361] sctp: [Deprecated]: syz.8.6572 (pid 31361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1755.869560][T31361] Use struct sctp_sack_info instead [ 1756.538855][T31369] wg2 speed is unknown, defaulting to 1000 [ 1756.852133][T31369] lo speed is unknown, defaulting to 1000 [ 1757.699392][T31384] netlink: 264 bytes leftover after parsing attributes in process `syz.3.6579'. [ 1757.899221][T31389] wg2 speed is unknown, defaulting to 1000 [ 1758.320773][T31389] lo speed is unknown, defaulting to 1000 [ 1758.684019][T31404] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6583'. [ 1759.592858][T31410] wg2 speed is unknown, defaulting to 1000 [ 1759.931073][T31410] lo speed is unknown, defaulting to 1000 [ 1760.038138][T31420] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1760.042145][T31420] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1760.048692][T31420] vhci_hcd vhci_hcd.0: Device attached [ 1760.283065][T19371] usb 43-1: new high-speed USB device number 6 using vhci_hcd [ 1760.995001][ T9602] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1762.934805][T31422] vhci_hcd: connection reset by peer [ 1762.945848][T25460] vhci_hcd: stop threads [ 1762.980633][T25460] vhci_hcd: release socket [ 1762.982736][T25460] vhci_hcd: disconnect device [ 1763.202465][T31465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6598'. [ 1763.453526][ C3] vkms_vblank_simulate: vblank timer overrun [ 1763.561501][ C3] vkms_vblank_simulate: vblank timer overrun [ 1764.498399][T31498] fuse: Unknown parameter 'use00000000000000000000' [ 1764.641710][ T40] audit: type=1804 audit(3545.049:6969): pid=31499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6607" name="/newroot/228/bus/bus" dev="overlay" ino=1245 res=1 errno=0 [ 1764.653390][ C3] vkms_vblank_simulate: vblank timer overrun [ 1764.670674][ T40] audit: type=1804 audit(3545.069:6970): pid=31499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.6607" name="/newroot/228/bus/bus" dev="overlay" ino=1245 res=1 errno=0 [ 1764.679678][ T40] audit: type=1800 audit(3545.069:6971): pid=31499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6607" name="bus" dev="overlay" ino=1245 res=0 errno=0 [ 1765.404872][T19371] vhci_hcd: vhci_device speed not set [ 1765.423683][ C3] vkms_vblank_simulate: vblank timer overrun [ 1765.695883][ C3] vkms_vblank_simulate: vblank timer overrun [ 1765.813421][ C3] vkms_vblank_simulate: vblank timer overrun [ 1766.045414][ C3] vkms_vblank_simulate: vblank timer overrun [ 1766.400148][ C3] vkms_vblank_simulate: vblank timer overrun [ 1766.849495][ C3] vkms_vblank_simulate: vblank timer overrun [ 1766.881865][T31531] fuse: Unknown parameter 'user_i00000000000000000000' [ 1766.979912][T31534] wg2 speed is unknown, defaulting to 1000 [ 1766.998009][ C3] vkms_vblank_simulate: vblank timer overrun [ 1767.225196][T31537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6615'. [ 1767.455917][ C3] vkms_vblank_simulate: vblank timer overrun [ 1767.613848][ C3] vkms_vblank_simulate: vblank timer overrun [ 1767.668654][T31534] lo speed is unknown, defaulting to 1000 [ 1768.897810][T31565] fuse: Unknown parameter 'user_i00000000000000000000' [ 1769.224785][T31574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6630'. [ 1769.240734][T31574] netlink: 'syz.3.6630': attribute type 3 has an invalid length. [ 1769.247560][T31574] netlink: 'syz.3.6630': attribute type 3 has an invalid length. [ 1769.251865][T31574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6630'. [ 1769.456746][T31583] Bluetooth: MGMT ver 1.23 [ 1770.387862][T31593] netlink: 'syz.2.6636': attribute type 8 has an invalid length. [ 1770.716015][T31603] fuse: Unknown parameter 'user_i00000000000000000000' [ 1771.028220][T31609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6639'. [ 1771.032149][T31609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6639'. [ 1771.040206][T31609] netlink: 'syz.2.6639': attribute type 11 has an invalid length. [ 1771.573067][ T5306] Bluetooth: hci2: command 0x0401 tx timeout [ 1771.587905][T27646] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1771.918499][T31627] IPv6: Can't replace route, no match found [ 1772.391858][T31635] fuse: Unknown parameter 'user_id00000000000000000000' [ 1776.489042][T31652] syzkaller0: entered promiscuous mode [ 1776.491636][T31652] syzkaller0: entered allmulticast mode [ 1776.670252][T31652] tipc: Started in network mode [ 1776.676471][T31652] tipc: Node identity c29f36f6d6ab, cluster identity 4711 [ 1776.679800][T31652] tipc: Enabled bearer , priority 0 [ 1776.742121][T31652] binder_alloc: 31651: binder_alloc_buf, no vma [ 1776.826342][T31651] tipc: Resetting bearer [ 1776.997882][T31658] netlink: 'syz.8.6655': attribute type 3 has an invalid length. [ 1777.027300][T31664] FAULT_INJECTION: forcing a failure. [ 1777.027300][T31664] name failslab, interval 1, probability 0, space 0, times 0 [ 1777.048449][T31664] CPU: 0 UID: 0 PID: 31664 Comm: syz.2.6654 Not tainted syzkaller #0 PREEMPT(full) [ 1777.048493][T31664] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1777.048505][T31664] Call Trace: [ 1777.048512][T31664] [ 1777.048521][T31664] dump_stack_lvl+0x16c/0x1f0 [ 1777.048549][T31664] should_fail_ex+0x512/0x640 [ 1777.048570][T31664] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1777.048594][T31664] should_failslab+0xc2/0x120 [ 1777.048617][T31664] kmem_cache_alloc_noprof+0x75/0x720 [ 1777.048635][T31664] ? skb_clone+0x190/0x3f0 [ 1777.048657][T31664] ? skb_clone+0x190/0x3f0 [ 1777.048673][T31664] skb_clone+0x190/0x3f0 [ 1777.048691][T31664] netlink_deliver_tap+0xabd/0xd30 [ 1777.048715][T31664] netlink_unicast+0x64c/0x870 [ 1777.048738][T31664] ? __pfx_netlink_unicast+0x10/0x10 [ 1777.048767][T31664] netlink_sendmsg+0x8c8/0xdd0 [ 1777.048791][T31664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1777.048815][T31664] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1777.048840][T31664] ____sys_sendmsg+0xa5d/0xc30 [ 1777.048867][T31664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1777.048890][T31664] ? get_compat_msghdr+0x11a/0x170 [ 1777.048920][T31664] ___sys_sendmsg+0x134/0x1d0 [ 1777.048942][T31664] ? __pfx____sys_sendmsg+0x10/0x10 [ 1777.048972][T31664] ? find_held_lock+0x2b/0x80 [ 1777.049014][T31664] __sys_sendmsg+0x16d/0x220 [ 1777.049034][T31664] ? __pfx___sys_sendmsg+0x10/0x10 [ 1777.049073][T31664] __do_fast_syscall_32+0xe8/0x680 [ 1777.049098][T31664] do_fast_syscall_32+0x32/0x80 [ 1777.049120][T31664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1777.049142][T31664] RIP: 0023:0xf70ed579 [ 1777.049156][T31664] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1777.049172][T31664] RSP: 002b:00000000f54bc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1777.049214][T31664] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1777.049226][T31664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1777.049236][T31664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1777.049245][T31664] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1777.049255][T31664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1777.049280][T31664] [ 1777.076109][T31651] tipc: Disabling bearer [ 1777.371695][T31658] netlink: 'syz.8.6655': attribute type 3 has an invalid length. [ 1777.993238][T19567] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1778.092967][T31680] netlink: 4008 bytes leftover after parsing attributes in process `syz.6.6662'. [ 1778.136243][T31680] netlink: 8172 bytes leftover after parsing attributes in process `syz.6.6662'. [ 1778.138189][T19567] usb 8-1: device descriptor read/64, error -71 [ 1778.412753][T19567] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1778.432969][ T5306] Bluetooth: hci2: command 0x0401 tx timeout [ 1778.553045][T19567] usb 8-1: device descriptor read/64, error -71 [ 1778.673333][T19567] usb usb8-port1: attempt power cycle [ 1778.900941][T31685] overlay: Unknown parameter 'obj_type' [ 1779.036642][T19567] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1779.081600][T19567] usb 8-1: device descriptor read/8, error -71 [ 1779.363079][T19567] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1779.415003][T19567] usb 8-1: device descriptor read/8, error -71 [ 1779.523294][T19567] usb usb8-port1: unable to enumerate USB device [ 1781.208454][T31701] syzkaller0: entered promiscuous mode [ 1781.272479][T31701] syzkaller0: entered allmulticast mode [ 1781.335705][T31701] tipc: Enabled bearer , priority 0 [ 1781.409722][T31700] tipc: Resetting bearer [ 1781.600988][T31700] tipc: Disabling bearer [ 1782.303080][T31712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.324540][T31712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1784.202842][T27955] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1784.361374][T31740] fuse: Bad value for 'fd' [ 1784.407945][T27955] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1784.413660][T27955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.419547][T27955] usb 8-1: Product: syz [ 1784.459842][T27955] usb 8-1: Manufacturer: syz [ 1784.472086][T31742] tipc: Enabling of bearer rejected, failed to enable media [ 1784.485003][T27955] usb 8-1: SerialNumber: syz [ 1784.493164][T27955] usb 8-1: config 0 descriptor?? [ 1785.038395][T19796] usb 8-1: USB disconnect, device number 48 [ 1786.244321][T31764] fuse: Unknown parameter '0x0000000000000003' [ 1786.436160][T31766] tipc: Enabling of bearer rejected, failed to enable media [ 1786.477244][T31755] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1786.481392][T31755] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1786.485610][T31755] vhci_hcd vhci_hcd.0: Device attached [ 1786.647918][T31772] netlink: 'syz.3.6689': attribute type 1 has an invalid length. [ 1786.790350][T19796] usb 42-1: SetAddress Request (5) to port 0 [ 1786.796115][T19796] usb 42-1: new SuperSpeed USB device number 5 using vhci_hcd [ 1786.827913][T31767] vhci_hcd: connection reset by peer [ 1786.830758][T25488] vhci_hcd: stop threads [ 1786.832814][T25488] vhci_hcd: release socket [ 1786.838526][T25488] vhci_hcd: disconnect device [ 1788.162798][T29682] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1788.332084][T29682] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1788.354568][T29682] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.368449][T29682] usb 8-1: Product: syz [ 1788.370787][T29682] usb 8-1: Manufacturer: syz [ 1788.386169][T29682] usb 8-1: SerialNumber: syz [ 1788.392187][T29682] usb 8-1: config 0 descriptor?? [ 1788.906816][T29682] usb 8-1: USB disconnect, device number 49 [ 1789.486047][T31793] fuse: Unknown parameter '0x0000000000000003' [ 1789.603933][T31797] tipc: Enabling of bearer rejected, failed to enable media [ 1790.133190][T31807] FAULT_INJECTION: forcing a failure. [ 1790.133190][T31807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1790.140963][T31807] CPU: 3 UID: 0 PID: 31807 Comm: syz.6.6701 Not tainted syzkaller #0 PREEMPT(full) [ 1790.140993][T31807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1790.141006][T31807] Call Trace: [ 1790.141016][T31807] [ 1790.141025][T31807] dump_stack_lvl+0x16c/0x1f0 [ 1790.141066][T31807] should_fail_ex+0x512/0x640 [ 1790.141126][T31807] _copy_to_user+0x32/0xd0 [ 1790.141153][T31807] simple_read_from_buffer+0xcb/0x170 [ 1790.141180][T31807] proc_fail_nth_read+0x197/0x240 [ 1790.141211][T31807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1790.141237][T31807] ? rw_verify_area+0xcf/0x6c0 [ 1790.141256][T31807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1790.141280][T31807] vfs_read+0x1e4/0xcf0 [ 1790.141304][T31807] ? __pfx___mutex_lock+0x10/0x10 [ 1790.141328][T31807] ? __pfx_vfs_read+0x10/0x10 [ 1790.141347][T31807] ? find_held_lock+0x2b/0x80 [ 1790.141376][T31807] ? __fget_files+0x20e/0x3c0 [ 1790.141405][T31807] ksys_read+0x12a/0x250 [ 1790.141425][T31807] ? __pfx_ksys_read+0x10/0x10 [ 1790.141453][T31807] __do_fast_syscall_32+0xe8/0x680 [ 1790.141477][T31807] do_fast_syscall_32+0x32/0x80 [ 1790.141499][T31807] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1790.141523][T31807] RIP: 0023:0xf6ffd579 [ 1790.141539][T31807] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1790.141556][T31807] RSP: 002b:00000000f53ed590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1790.141576][T31807] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53ed620 [ 1790.141588][T31807] RDX: 000000000000000f RSI: 00000000f7396ff4 RDI: 0000000000000000 [ 1790.141598][T31807] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1790.141609][T31807] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1790.141621][T31807] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1790.141647][T31807] [ 1791.125710][T31813] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1791.131158][T31813] block device autoloading is deprecated and will be removed. [ 1791.716686][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.873275][T19796] usb 42-1: device descriptor read/8, error -110 [ 1792.162703][T29682] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1792.223184][T31824] syzkaller0: entered promiscuous mode [ 1792.225759][T31824] syzkaller0: entered allmulticast mode [ 1792.304011][T19796] usb usb42-port1: attempt power cycle [ 1792.340161][T29682] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1792.345175][T29682] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.354311][T29682] usb 8-1: Product: syz [ 1792.359834][T29682] usb 8-1: Manufacturer: syz [ 1792.363141][T29682] usb 8-1: SerialNumber: syz [ 1792.367215][T25460] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1792.396311][T29682] usb 8-1: config 0 descriptor?? [ 1792.933846][ T1455] usb 8-1: USB disconnect, device number 50 [ 1793.479335][T19796] usb usb42-port1: unable to enumerate USB device [ 1794.139416][T19796] usb usb42-port2: attempt power cycle [ 1794.591819][T31854] sp0: Synchronizing with TNC [ 1794.858788][T19589] usb 11-1: new low-speed USB device number 74 using dummy_hcd [ 1794.917359][T19796] usb usb42-port2: unable to enumerate USB device [ 1795.022739][T19589] usb 11-1: Invalid ep0 maxpacket: 64 [ 1795.192751][T19589] usb 11-1: new low-speed USB device number 75 using dummy_hcd [ 1795.362643][T19589] usb 11-1: Invalid ep0 maxpacket: 64 [ 1795.365349][T19589] usb usb11-port1: attempt power cycle [ 1795.712900][T19589] usb 11-1: new low-speed USB device number 76 using dummy_hcd [ 1795.753934][T19589] usb 11-1: Invalid ep0 maxpacket: 64 [ 1795.874440][T31859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6715'. [ 1795.893003][T19589] usb 11-1: new low-speed USB device number 77 using dummy_hcd [ 1795.986858][T19589] usb 11-1: Invalid ep0 maxpacket: 64 [ 1795.992744][T19589] usb usb11-port1: unable to enumerate USB device [ 1796.038714][T31861] syzkaller0: entered promiscuous mode [ 1796.040817][T31861] syzkaller0: entered allmulticast mode [ 1796.497376][T31867] 9pnet_fd: Insufficient options for proto=fd [ 1797.091862][T31870] fuse: Unknown parameter '0x0000000000000003' [ 1797.441245][ C0] vkms_vblank_simulate: vblank timer overrun [ 1797.627951][T31854] [U] è [ 1798.445107][ C0] vkms_vblank_simulate: vblank timer overrun [ 1798.685264][ C0] vkms_vblank_simulate: vblank timer overrun [ 1798.727215][ C0] vkms_vblank_simulate: vblank timer overrun [ 1799.121146][ C0] vkms_vblank_simulate: vblank timer overrun [ 1799.573608][ C0] vkms_vblank_simulate: vblank timer overrun [ 1800.194894][ C0] vkms_vblank_simulate: vblank timer overrun [ 1800.404673][ T40] audit: type=1326 audit(3580.829:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31905 comm="syz.6.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 1800.429225][ T40] audit: type=1326 audit(3580.829:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31905 comm="syz.6.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 1800.455746][ T40] audit: type=1326 audit(3580.839:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31905 comm="syz.6.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 1800.469483][ T40] audit: type=1326 audit(3580.839:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31905 comm="syz.6.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 1800.483836][ T40] audit: type=1326 audit(3580.839:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31905 comm="syz.6.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 1800.498080][ T40] audit: type=1326 audit(3580.839:6977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31905 comm="syz.6.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 1800.512737][ T40] audit: type=1326 audit(3580.839:6978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31905 comm="syz.6.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 1800.530339][ T40] audit: type=1326 audit(3580.839:6979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31905 comm="syz.6.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 1800.562639][ T40] audit: type=1326 audit(3580.849:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31905 comm="syz.6.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 1800.587049][ T40] audit: type=1326 audit(3580.849:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31905 comm="syz.6.6731" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd579 code=0x7ffc0000 [ 1800.748717][T31907] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1800.764710][T31907] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1800.772223][T31907] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1800.890374][T31912] syzkaller0: entered promiscuous mode [ 1800.893138][T31912] syzkaller0: entered allmulticast mode [ 1801.964256][ C0] vkms_vblank_simulate: vblank timer overrun [ 1802.066148][ C0] vkms_vblank_simulate: vblank timer overrun [ 1802.558159][T31923] fuse: Unknown parameter '0x0000000000000003' [ 1803.247938][T31929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6738'. [ 1803.969294][ C0] vkms_vblank_simulate: vblank timer overrun [ 1804.116450][ C0] vkms_vblank_simulate: vblank timer overrun [ 1804.982676][ C0] vkms_vblank_simulate: vblank timer overrun [ 1805.092035][T31946] syzkaller0: entered promiscuous mode [ 1805.095168][T31946] syzkaller0: entered allmulticast mode [ 1805.767237][ C0] vkms_vblank_simulate: vblank timer overrun [ 1805.833387][T29682] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1806.028145][ C0] vkms_vblank_simulate: vblank timer overrun [ 1806.127350][T29682] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1806.131004][T29682] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.134182][T29682] usb 8-1: Product: syz [ 1806.137075][T29682] usb 8-1: Manufacturer: syz [ 1806.139926][T29682] usb 8-1: SerialNumber: syz [ 1806.156175][T29682] usb 8-1: config 0 descriptor?? [ 1806.332878][ C0] vkms_vblank_simulate: vblank timer overrun [ 1806.706107][ C0] vkms_vblank_simulate: vblank timer overrun [ 1806.711080][T29682] usb 8-1: USB disconnect, device number 51 [ 1806.783918][T31967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1807.401085][ C0] vkms_vblank_simulate: vblank timer overrun [ 1807.465777][T31971] syzkaller0: entered promiscuous mode [ 1807.468463][T31971] syzkaller0: entered allmulticast mode [ 1807.763353][T31977] geneve2: entered promiscuous mode [ 1808.049960][T31983] nfs4: Bad value for 'source' [ 1808.381523][T31992] random: crng reseeded on system resumption [ 1808.451481][ C0] vkms_vblank_simulate: vblank timer overrun [ 1809.050037][T31998] netlink: zone id is out of range [ 1809.271873][T31998] netlink: set zone limit has 4 unknown bytes [ 1810.412411][T32011] syzkaller0: entered promiscuous mode [ 1810.431047][T32011] syzkaller0: entered allmulticast mode [ 1810.526684][T32012] tipc: Enabled bearer , priority 0 [ 1810.565497][T32010] tipc: Resetting bearer [ 1810.755784][T32010] tipc: Disabling bearer [ 1811.570828][T32026] binder: 32025:32026 ioctl c0306201 80000040 returned -14 [ 1811.993955][T32028] 9pnet_virtio: no channels available for device syz [ 1813.613348][ T1455] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1813.622193][T32043] syzkaller0: entered promiscuous mode [ 1813.624992][T32043] syzkaller0: entered allmulticast mode [ 1813.779931][ T1455] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1813.805652][T32044] tipc: Started in network mode [ 1813.808041][T32044] tipc: Node identity 8a402f15862d, cluster identity 4711 [ 1813.811752][T32044] tipc: Enabled bearer , priority 0 [ 1813.854655][T32042] tipc: Resetting bearer [ 1813.857602][ T1455] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.861107][ T1455] usb 8-1: Product: syz [ 1813.862969][ T1455] usb 8-1: Manufacturer: syz [ 1813.865337][ T1455] usb 8-1: SerialNumber: syz [ 1813.869612][ T1455] usb 8-1: config 0 descriptor?? [ 1813.903830][T32042] tipc: Disabling bearer [ 1814.394589][ T1455] usb 8-1: USB disconnect, device number 52 [ 1816.298070][T32084] syzkaller0: entered promiscuous mode [ 1816.306513][T32084] syzkaller0: entered allmulticast mode [ 1816.390836][T32084] tipc: Enabled bearer , priority 0 [ 1816.411708][T32083] tipc: Resetting bearer [ 1816.516852][T32083] tipc: Disabling bearer [ 1817.102747][ T5981] usb 11-1: new high-speed USB device number 78 using dummy_hcd [ 1817.448925][ T5981] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1817.468800][ T5981] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.490113][ T5981] usb 11-1: Product: syz [ 1817.527015][ T5981] usb 11-1: Manufacturer: syz [ 1817.528915][ T5981] usb 11-1: SerialNumber: syz [ 1817.580154][ T5981] usb 11-1: config 0 descriptor?? [ 1818.078973][ T5981] usb 11-1: USB disconnect, device number 78 [ 1819.367316][T32118] syzkaller0: entered promiscuous mode [ 1819.370113][T32118] syzkaller0: entered allmulticast mode [ 1819.378987][T32118] tipc: Started in network mode [ 1819.382003][T32118] tipc: Node identity 36b74e606e71, cluster identity 4711 [ 1819.401352][T32118] tipc: Enabled bearer , priority 0 [ 1819.417129][T32117] tipc: Resetting bearer [ 1819.493877][T32117] tipc: Disabling bearer [ 1819.539759][T32122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6800'. [ 1819.722839][ T1455] usb 11-1: new high-speed USB device number 79 using dummy_hcd [ 1819.752960][T32126] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6801'. [ 1819.756923][T32126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6801'. [ 1819.873002][ T1455] usb 11-1: Using ep0 maxpacket: 8 [ 1819.877463][ T1455] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 1819.884075][ T1455] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1819.892708][ T1455] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1819.916112][ T1455] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1819.927308][ T1455] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1819.934702][ T1455] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1819.944368][ T1455] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.202748][ T1455] usb 11-1: GET_CAPABILITIES returned 0 [ 1820.208244][ T1455] usbtmc 11-1:16.0: can't read capabilities [ 1820.405234][T32122] 9pnet_fd: Insufficient options for proto=fd [ 1820.409338][T32122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6800'. [ 1820.438370][T19567] usb 11-1: USB disconnect, device number 79 [ 1820.722634][ T1455] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 1820.879902][T27646] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1820.888142][T27646] CPU: 0 UID: 0 PID: 27646 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 1820.888170][T27646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1820.888183][T27646] Workqueue: hci1 hci_rx_work [ 1820.888209][T27646] Call Trace: [ 1820.888216][T27646] [ 1820.888224][T27646] dump_stack_lvl+0x16c/0x1f0 [ 1820.888338][T27646] sysfs_warn_dup+0x7f/0xa0 [ 1820.888365][T27646] sysfs_create_dir_ns+0x24b/0x2b0 [ 1820.888398][T27646] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1820.888417][T27646] ? find_held_lock+0x2b/0x80 [ 1820.888450][T27646] ? do_raw_spin_unlock+0x172/0x230 [ 1820.888475][T27646] kobject_add_internal+0x2c4/0x9b0 [ 1820.888511][T27646] kobject_add+0x16e/0x240 [ 1820.888536][T27646] ? __pfx_kobject_add+0x10/0x10 [ 1820.888561][T27646] ? do_raw_spin_unlock+0x172/0x230 [ 1820.888583][T27646] ? kobject_put+0xab/0x590 [ 1820.888629][T27646] device_add+0x288/0x1950 [ 1820.888651][T27646] ? __pfx_dev_set_name+0x10/0x10 [ 1820.888674][T27646] ? __pfx_device_add+0x10/0x10 [ 1820.888694][T27646] ? mgmt_send_event_skb+0x2fb/0x460 [ 1820.888720][T27646] hci_conn_add_sysfs+0x17e/0x230 [ 1820.888742][T27646] le_conn_complete_evt+0x1260/0x2150 [ 1820.888762][T27646] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1820.888784][T27646] ? hci_event_packet+0x459/0x11c0 [ 1820.888855][T27646] hci_le_conn_complete_evt+0x23c/0x370 [ 1820.888885][T27646] hci_le_meta_evt+0x357/0x5e0 [ 1820.888906][T27646] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1820.888934][T27646] hci_event_packet+0x685/0x11c0 [ 1820.888955][T27646] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1820.888987][T27646] ? __pfx_hci_event_packet+0x10/0x10 [ 1820.889011][T27646] ? kcov_remote_start+0x384/0x670 [ 1820.889040][T27646] ? lockdep_hardirqs_on+0x7c/0x110 [ 1820.889082][T27646] hci_rx_work+0x2c9/0xeb0 [ 1820.889111][T27646] process_one_work+0x9ba/0x1b20 [ 1820.889149][T27646] ? __pfx_process_one_work+0x10/0x10 [ 1820.889178][T27646] ? assign_work+0x1a0/0x250 [ 1820.889201][T27646] worker_thread+0x6c8/0xf10 [ 1820.889229][T27646] ? __kthread_parkme+0x19e/0x250 [ 1820.889258][T27646] ? __pfx_worker_thread+0x10/0x10 [ 1820.889279][T27646] kthread+0x3c5/0x780 [ 1820.889295][T27646] ? __pfx_kthread+0x10/0x10 [ 1820.889313][T27646] ? rcu_is_watching+0x12/0xc0 [ 1820.889348][T27646] ? __pfx_kthread+0x10/0x10 [ 1820.889370][T27646] ret_from_fork+0x983/0xb10 [ 1820.889389][T27646] ? __pfx_ret_from_fork+0x10/0x10 [ 1820.889407][T27646] ? __switch_to+0x7af/0x10d0 [ 1820.889426][T27646] ? __pfx_kthread+0x10/0x10 [ 1820.889444][T27646] ret_from_fork_asm+0x1a/0x30 [ 1820.889482][T27646] [ 1820.889568][T27646] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1820.889956][ T1455] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1820.893729][T32132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6803'. [ 1820.909743][T27646] Bluetooth: hci1: failed to register connection device [ 1820.916855][ T1455] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.254764][ T1455] usb 13-1: Product: syz [ 1821.258072][ T1455] usb 13-1: Manufacturer: syz [ 1821.261592][ T1455] usb 13-1: SerialNumber: syz [ 1821.283895][ T1455] usb 13-1: config 0 descriptor?? [ 1821.781148][ T1455] usb 13-1: USB disconnect, device number 3 [ 1822.204376][T32148] syzkaller0: entered promiscuous mode [ 1822.210129][T32148] syzkaller0: entered allmulticast mode [ 1822.234426][T32148] tipc: Enabled bearer , priority 0 [ 1822.259591][T32147] tipc: Resetting bearer [ 1822.373108][T32147] tipc: Disabling bearer [ 1822.863172][T32162] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6814'. [ 1822.867923][T32162] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6814'. [ 1824.295137][T32171] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 1824.301310][T32171] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6815'. [ 1824.344430][ T9597] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1825.261168][T32181] syzkaller0: entered promiscuous mode [ 1825.266339][T32181] syzkaller0: entered allmulticast mode [ 1825.298850][T32181] tipc: Enabled bearer , priority 0 [ 1825.303125][T19567] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 1825.326078][T32180] tipc: Resetting bearer [ 1825.383536][T32180] tipc: Disabling bearer [ 1825.481249][T19567] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1825.487838][T19567] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.501096][T19567] usb 13-1: Product: syz [ 1825.503369][T19567] usb 13-1: Manufacturer: syz [ 1825.506524][T19567] usb 13-1: SerialNumber: syz [ 1825.519711][T19567] usb 13-1: config 0 descriptor?? [ 1825.726345][T32191] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6823'. [ 1825.967995][T19567] usb 13-1: USB disconnect, device number 4 [ 1826.977798][T32207] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 1826.983044][T32207] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1826.983300][T32207] vhci_hcd vhci_hcd.0: Device attached [ 1827.201640][T32197] netlink: 'syz.6.6825': attribute type 1 has an invalid length. [ 1827.247357][T32197] bond3: entered promiscuous mode [ 1827.252237][T32197] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1827.282922][T19589] usb 54-1: SetAddress Request (6) to port 0 [ 1827.316921][T19589] usb 54-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1827.536252][T32208] vhci_hcd: connection reset by peer [ 1827.542077][T25487] vhci_hcd: stop threads [ 1827.572820][T25487] vhci_hcd: release socket [ 1827.615733][T25487] vhci_hcd: disconnect device [ 1827.837302][T32227] syzkaller0: entered promiscuous mode [ 1827.850994][T32227] syzkaller0: entered allmulticast mode [ 1827.869270][T32227] tipc: Enabled bearer , priority 0 [ 1827.876217][T32226] tipc: Resetting bearer [ 1827.947478][T32226] tipc: Disabling bearer [ 1828.332852][ C0] vkms_vblank_simulate: vblank timer overrun [ 1828.552664][T19567] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 1828.717002][ C0] vkms_vblank_simulate: vblank timer overrun [ 1828.750745][T19567] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1828.755104][T19567] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.762686][T19567] usb 13-1: Product: syz [ 1828.773925][T19567] usb 13-1: Manufacturer: syz [ 1828.778517][T19567] usb 13-1: SerialNumber: syz [ 1828.783252][T19567] usb 13-1: config 0 descriptor?? [ 1829.241214][T19567] usb 13-1: USB disconnect, device number 5 [ 1829.470646][ C0] vkms_vblank_simulate: vblank timer overrun [ 1829.652507][ C0] vkms_vblank_simulate: vblank timer overrun [ 1829.832829][ C0] vkms_vblank_simulate: vblank timer overrun [ 1829.932259][ C0] vkms_vblank_simulate: vblank timer overrun [ 1830.035256][ C0] vkms_vblank_simulate: vblank timer overrun [ 1831.020889][ C0] vkms_vblank_simulate: vblank timer overrun [ 1831.554581][T32261] syzkaller0: entered promiscuous mode [ 1831.557161][T32261] syzkaller0: entered allmulticast mode [ 1831.577225][T32261] tipc: Enabled bearer , priority 0 [ 1831.611150][T32259] tipc: Resetting bearer [ 1831.615529][ C0] vkms_vblank_simulate: vblank timer overrun [ 1831.680225][T32259] tipc: Disabling bearer [ 1832.037235][T32276] FAULT_INJECTION: forcing a failure. [ 1832.037235][T32276] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.044202][T32276] CPU: 2 UID: 0 PID: 32276 Comm: syz.2.6846 Not tainted syzkaller #0 PREEMPT(full) [ 1832.044229][T32276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1832.044240][T32276] Call Trace: [ 1832.044247][T32276] [ 1832.044254][T32276] dump_stack_lvl+0x16c/0x1f0 [ 1832.044280][T32276] should_fail_ex+0x512/0x640 [ 1832.044299][T32276] ? __kmalloc_noprof+0xca/0x870 [ 1832.044319][T32276] should_failslab+0xc2/0x120 [ 1832.044345][T32276] __kmalloc_noprof+0xdd/0x870 [ 1832.044362][T32276] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1832.044395][T32276] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1832.044419][T32276] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1832.044449][T32276] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1832.044475][T32276] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1832.044500][T32276] ? genl_get_cmd+0x194/0x580 [ 1832.044528][T32276] ? bpf_lsm_capable+0x9/0x10 [ 1832.044546][T32276] ? security_capable+0x7e/0x260 [ 1832.044571][T32276] genl_rcv_msg+0x55c/0x800 [ 1832.044598][T32276] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1832.044623][T32276] ? __pfx_ip_vs_genl_set_cmd+0x10/0x10 [ 1832.044660][T32276] netlink_rcv_skb+0x158/0x420 [ 1832.044681][T32276] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1832.044736][T32276] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1832.044765][T32276] ? netlink_deliver_tap+0x1ae/0xd30 [ 1832.044787][T32276] genl_rcv+0x28/0x40 [ 1832.044806][T32276] netlink_unicast+0x5aa/0x870 [ 1832.044830][T32276] ? __pfx_netlink_unicast+0x10/0x10 [ 1832.044859][T32276] netlink_sendmsg+0x8c8/0xdd0 [ 1832.044883][T32276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1832.044907][T32276] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1832.044930][T32276] ____sys_sendmsg+0xa5d/0xc30 [ 1832.044955][T32276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1832.044974][T32276] ? get_compat_msghdr+0x11a/0x170 [ 1832.045003][T32276] ___sys_sendmsg+0x134/0x1d0 [ 1832.045022][T32276] ? __pfx____sys_sendmsg+0x10/0x10 [ 1832.045051][T32276] ? find_held_lock+0x2b/0x80 [ 1832.045087][T32276] __sys_sendmsg+0x16d/0x220 [ 1832.045170][T32276] ? __pfx___sys_sendmsg+0x10/0x10 [ 1832.045217][T32276] __do_fast_syscall_32+0xe8/0x680 [ 1832.045240][T32276] do_fast_syscall_32+0x32/0x80 [ 1832.045260][T32276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1832.045280][T32276] RIP: 0023:0xf70ed579 [ 1832.045293][T32276] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1832.045307][T32276] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1832.045321][T32276] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 1832.045331][T32276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1832.045340][T32276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1832.045349][T32276] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1832.045358][T32276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1832.045380][T32276] [ 1832.190534][ C0] vkms_vblank_simulate: vblank timer overrun [ 1832.262480][ C0] vkms_vblank_simulate: vblank timer overrun [ 1832.422773][T19589] usb 54-1: device descriptor read/8, error -110 [ 1832.843499][T19589] usb usb54-port1: attempt power cycle [ 1833.439364][T19589] usb usb54-port1: unable to enumerate USB device [ 1833.454600][T32292] syzkaller0: entered promiscuous mode [ 1833.457323][T32292] syzkaller0: entered allmulticast mode [ 1833.472297][T32292] tipc: Enabled bearer , priority 0 [ 1833.493830][T32291] tipc: Resetting bearer [ 1833.630067][T32291] tipc: Disabling bearer [ 1835.914043][T32330] syzkaller0: entered promiscuous mode [ 1835.916457][T32330] syzkaller0: entered allmulticast mode [ 1835.924506][T32330] tipc: Enabled bearer , priority 0 [ 1835.964274][T32329] tipc: Resetting bearer [ 1836.056262][T32329] tipc: Disabling bearer [ 1836.649719][ T5981] usb 11-1: new high-speed USB device number 80 using dummy_hcd [ 1836.866573][T19589] IPVS: starting estimator thread 0... [ 1836.999382][ T5981] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1837.003257][ T5981] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.018561][ T5981] usb 11-1: Product: syz [ 1837.020594][ T5981] usb 11-1: Manufacturer: syz [ 1837.023904][ T5981] usb 11-1: SerialNumber: syz [ 1837.078759][ T5981] usb 11-1: config 0 descriptor?? [ 1837.083455][T32346] IPVS: using max 28 ests per chain, 67200 per kthread [ 1837.513784][T19589] usb 11-1: USB disconnect, device number 80 [ 1839.094369][T32377] syzkaller0: entered promiscuous mode [ 1839.100380][T32377] syzkaller0: entered allmulticast mode [ 1839.126788][T32377] tipc: Enabled bearer , priority 0 [ 1839.172421][T32376] tipc: Resetting bearer [ 1839.286368][T32376] tipc: Disabling bearer [ 1839.406133][T32388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6879'. [ 1840.558579][T32396] 9pnet_virtio: no channels available for device syz [ 1841.905229][T32407] netlink: 'syz.6.6884': attribute type 3 has an invalid length. [ 1841.908350][T32407] netlink: 'syz.6.6884': attribute type 1 has an invalid length. [ 1842.460457][T32421] tmpfs: Bad value for 'mpol' [ 1842.588476][T32423] syzkaller0: entered promiscuous mode [ 1842.613175][T32423] syzkaller0: entered allmulticast mode [ 1842.655731][T32423] tipc: Enabled bearer , priority 0 [ 1842.695917][T32422] tipc: Resetting bearer [ 1842.807961][T32422] tipc: Disabling bearer [ 1843.000233][T32420] infiniband syz1: set active [ 1843.002337][T32420] infiniband syz1: added syz_tun [ 1843.115425][T32420] RDS/IB: syz1: added [ 1843.126430][T32420] smc: adding ib device syz1 with port count 1 [ 1843.173925][T32420] smc: ib device syz1 port 1 has no pnetid [ 1845.371725][T32433] ip6tnl1: entered promiscuous mode [ 1845.564680][T32433] ip6tnl1: entered allmulticast mode [ 1846.505114][T32436] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1846.508419][T32436] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1846.513595][T32436] vhci_hcd vhci_hcd.0: Device attached [ 1846.538864][T32436] fuse: Bad value for 'user_id' [ 1846.554108][T32436] fuse: Bad value for 'user_id' [ 1846.825475][T19371] usb 42-1: SetAddress Request (13) to port 0 [ 1846.830740][T19371] usb 42-1: new SuperSpeed USB device number 13 using vhci_hcd [ 1846.876829][T32438] vhci_hcd: connection reset by peer [ 1846.881298][T25487] vhci_hcd: stop threads [ 1846.884320][T25487] vhci_hcd: release socket [ 1846.900033][T25487] vhci_hcd: disconnect device [ 1847.261829][T32441] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6894'. [ 1848.204726][T32459] syzkaller0: entered promiscuous mode [ 1848.207261][T32459] syzkaller0: entered allmulticast mode [ 1848.214654][T32459] tipc: Enabled bearer , priority 0 [ 1848.256908][T32458] tipc: Resetting bearer [ 1848.450107][T32458] tipc: Disabling bearer [ 1849.052701][T19589] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1849.292956][T19589] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1849.315317][T19589] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.322742][T19589] usb 8-1: Product: syz [ 1849.324662][T19589] usb 8-1: Manufacturer: syz [ 1849.331569][T19589] usb 8-1: SerialNumber: syz [ 1849.342958][T19589] usb 8-1: config 0 descriptor?? [ 1849.772184][T19589] usb 8-1: USB disconnect, device number 53 [ 1850.240165][T32469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1850.284649][T32469] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6903'. [ 1852.205969][T19371] usb 42-1: device descriptor read/8, error -110 [ 1852.800354][T19371] usb usb42-port1: attempt power cycle [ 1853.256866][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.546016][T19371] usb usb42-port1: unable to enumerate USB device [ 1854.133458][T19371] usb usb42-port2: attempt power cycle [ 1855.114031][T32511] binder: 32510:32511 ioctl 4018620d 0 returned -22 [ 1855.234075][T19371] usb usb42-port2: unable to enumerate USB device [ 1855.772993][T19567] usb 11-1: new high-speed USB device number 81 using dummy_hcd [ 1855.901629][T32523] syzkaller0: entered promiscuous mode [ 1855.905530][T32523] syzkaller0: entered allmulticast mode [ 1855.929619][T19567] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1855.945712][T19567] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.953443][T19567] usb 11-1: Product: syz [ 1855.972446][T19567] usb 11-1: Manufacturer: syz [ 1855.978617][T19567] usb 11-1: SerialNumber: syz [ 1855.992314][T32523] tipc: Enabled bearer , priority 0 [ 1855.997293][T19567] usb 11-1: config 0 descriptor?? [ 1855.997318][T32522] tipc: Resetting bearer [ 1856.041575][T32522] tipc: Disabling bearer [ 1856.345949][ T9611] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1856.445824][T19567] usb 11-1: USB disconnect, device number 81 [ 1856.475484][T32531] openvswitch: netlink: Multiple metadata blocks provided [ 1856.931387][T32549] netlink: 592 bytes leftover after parsing attributes in process `syz.3.6926'. [ 1857.105788][T32552] serio: Serial port ptm0 [ 1859.330269][T32593] syzkaller1: entered promiscuous mode [ 1859.338025][T32593] syzkaller1: entered allmulticast mode [ 1859.663480][T32595] ceph: No mds server is up or the cluster is laggy [ 1859.666896][T19796] libceph: connect (1)[c::]:6789 error -101 [ 1859.710815][T19796] libceph: mon0 (1)[c::]:6789 connect error [ 1859.934987][T32603] random: crng reseeded on system resumption [ 1860.664661][ C0] vkms_vblank_simulate: vblank timer overrun [ 1860.713473][ C0] ================================================================== [ 1860.718138][T32601] PM: hibernation: Basic memory bitmaps freed [ 1860.721251][ C0] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 1860.721287][ C0] Read of size 1 at addr ffff888011f87418 by task swapper/0/0 [ 1860.721301][ C0] [ 1860.721310][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1860.721329][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1860.721340][ C0] Call Trace: [ 1860.721348][ C0] [ 1860.721626][ C0] dump_stack_lvl+0x116/0x1f0 [ 1860.721648][ C0] print_report+0xcd/0x630 [ 1860.721671][ C0] ? __virt_addr_valid+0x81/0x610 [ 1860.721695][ C0] ? __phys_addr+0xe8/0x180 [ 1860.721720][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1860.721736][ C0] kasan_report+0xe0/0x110 [ 1860.721758][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1860.721777][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1860.721795][ C0] __kasan_check_byte+0x36/0x50 [ 1860.721817][ C0] lock_acquire+0xfc/0x330 [ 1860.721837][ C0] ? do_raw_spin_unlock+0x53/0x230 [ 1860.721858][ C0] ? .slowpath+0x9/0x18 [ 1860.721878][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 1860.721896][ C0] ? p9_req_put+0xaf/0x250 [ 1860.721917][ C0] p9_req_put+0xaf/0x250 [ 1860.721937][ C0] req_done+0x1dc/0x2e0 [ 1860.721957][ C0] ? __pfx_req_done+0x10/0x10 [ 1860.721973][ C0] ? __lock_acquire+0x433/0x22f0 [ 1860.721990][ C0] ? clockevents_program_event+0x151/0x370 [ 1860.722010][ C0] ? __pfx_req_done+0x10/0x10 [ 1860.722025][ C0] vring_interrupt+0x31e/0x400 [ 1860.722043][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 1860.722062][ C0] __handle_irq_event_percpu+0x236/0x890 [ 1860.722090][ C0] handle_irq_event+0xab/0x1e0 [ 1860.722114][ C0] handle_edge_irq+0x3ca/0x9e0 [ 1860.722138][ C0] __common_interrupt+0xd0/0x2f0 [ 1860.722164][ C0] common_interrupt+0xba/0xe0 [ 1860.722190][ C0] [ 1860.722196][ C0] [ 1860.722204][ C0] asm_common_interrupt+0x26/0x40 [ 1860.722223][ C0] RIP: 0010:sched_core_balance+0x9d/0xe70 [ 1860.722243][ C0] Code: a0 95 1c 8e e8 64 07 0e 00 e8 af e3 d0 09 5b 85 c0 0f 85 f3 09 00 00 48 89 ef e8 ee 3c ff ff e8 09 7a 3a 00 fb 48 63 44 24 50 <48> c7 c3 80 5b 89 93 48 89 44 24 08 48 83 f8 07 0f 87 66 0d 00 00 [ 1860.722260][ C0] RSP: 0018:ffffffff8de07b68 EFLAGS: 00000202 [ 1860.722275][ C0] RAX: 0000000000000000 RBX: ffffffff818ac3bb RCX: ffffffff81c53cff [ 1860.722287][ C0] RDX: 0000000000000000 RSI: ffffffff8d89f477 RDI: ffffffff8bd1d1a0 [ 1860.722299][ C0] RBP: ffff88802b23ab80 R08: 0000000000000001 R09: 0000000000000001 [ 1860.722310][ C0] R10: ffffffff9065eed7 R11: 00000000ffffffff R12: ffff88802b23ab80 [ 1860.722321][ C0] R13: ffff88801dab8000 R14: 0000000000000000 R15: dffffc0000000000 [ 1860.722334][ C0] ? sched_core_balance+0x6b/0xe70 [ 1860.722353][ C0] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 1860.722378][ C0] ? sched_core_balance+0x97/0xe70 [ 1860.722392][ C0] ? lock_acquire+0x179/0x330 [ 1860.722415][ C0] ? __schedule+0x19b1/0x6150 [ 1860.722435][ C0] finish_task_switch.isra.0+0x458/0xbc0 [ 1860.722461][ C0] ? __schedule+0x10b9/0x6150 [ 1860.722480][ C0] __schedule+0x1141/0x6150 [ 1860.722892][ C0] ? tick_nohz_next_event+0x231/0x400 [ 1860.722917][ C0] ? __pfx___schedule+0x10/0x10 [ 1860.722934][ C0] ? rcu_is_watching+0x12/0xc0 [ 1860.722960][ C0] schedule_idle+0x5c/0x90 [ 1860.722976][ C0] do_idle+0x2b3/0x500 [ 1860.722999][ C0] ? __pfx_do_idle+0x10/0x10 [ 1860.723023][ C0] cpu_startup_entry+0x4f/0x60 [ 1860.723044][ C0] rest_init+0x16b/0x2b0 [ 1860.723066][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1860.723095][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1860.723113][ C0] start_kernel+0x3f6/0x4d0 [ 1860.723130][ C0] x86_64_start_reservations+0x18/0x30 [ 1860.723148][ C0] x86_64_start_kernel+0x130/0x190 [ 1860.723165][ C0] common_startup_64+0x13e/0x148 [ 1860.723190][ C0] [ 1860.723197][ C0] [ 1860.723202][ C0] Allocated by task 32610: [ 1860.723212][ C0] kasan_save_stack+0x33/0x60 [ 1860.723231][ C0] kasan_save_track+0x14/0x30 [ 1860.723249][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1860.723265][ C0] p9_client_create+0xc7/0x11d0 [ 1860.723285][ C0] v9fs_session_init+0x1f7/0x1a80 [ 1860.723308][ C0] v9fs_mount+0xc5/0xa90 [ 1860.723325][ C0] legacy_get_tree+0x10c/0x220 [ 1860.723345][ C0] vfs_get_tree+0x8e/0x330 [ 1860.723361][ C0] path_mount+0x7bf/0x23a0 [ 1860.723382][ C0] __ia32_sys_mount+0x291/0x310 [ 1860.723392][ C0] __do_fast_syscall_32+0xe8/0x680 [ 1860.723409][ C0] do_fast_syscall_32+0x32/0x80 [ 1860.723425][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1860.723442][ C0] [ 1860.723446][ C0] Freed by task 32610: [ 1860.723454][ C0] kasan_save_stack+0x33/0x60 [ 1860.723470][ C0] kasan_save_track+0x14/0x30 [ 1860.723496][ C0] __kasan_save_free_info+0x3b/0x60 [ 1860.723510][ C0] __kasan_slab_free+0x5f/0x80 [ 1860.723527][ C0] kfree+0x29e/0x710 [ 1860.723539][ C0] p9_client_create+0xa28/0x11d0 [ 1860.723555][ C0] v9fs_session_init+0x1f7/0x1a80 [ 1860.723572][ C0] v9fs_mount+0xc5/0xa90 [ 1860.723585][ C0] legacy_get_tree+0x10c/0x220 [ 1860.723602][ C0] vfs_get_tree+0x8e/0x330 [ 1860.723615][ C0] path_mount+0x7bf/0x23a0 [ 1860.723633][ C0] __ia32_sys_mount+0x291/0x310 [ 1860.723644][ C0] __do_fast_syscall_32+0xe8/0x680 [ 1860.723659][ C0] do_fast_syscall_32+0x32/0x80 [ 1860.723675][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1860.723690][ C0] [ 1860.723694][ C0] The buggy address belongs to the object at ffff888011f87400 [ 1860.723694][ C0] which belongs to the cache kmalloc-512 of size 512 [ 1860.723707][ C0] The buggy address is located 24 bytes inside of [ 1860.723707][ C0] freed 512-byte region [ffff888011f87400, ffff888011f87600) [ 1860.723723][ C0] [ 1860.723727][ C0] The buggy address belongs to the physical page: [ 1860.723734][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11f84 [ 1860.723892][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1860.723904][ C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1860.723918][ C0] page_type: f5(slab) [ 1860.723931][ C0] raw: 00fff00000000040 ffff88801b442c80 0000000000000000 dead000000000001 [ 1860.723945][ C0] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1860.723959][ C0] head: 00fff00000000040 ffff88801b442c80 0000000000000000 dead000000000001 [ 1860.723972][ C0] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 1860.723985][ C0] head: 00fff00000000002 ffffea000047e101 00000000ffffffff 00000000ffffffff [ 1860.723999][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1860.724008][ C0] page dumped because: kasan: bad access detected [ 1860.724016][ C0] page_owner tracks the page as allocated [ 1860.724021][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 25489, tgid 25489 (kworker/u32:45), ts 1834109913571, free_ts 1831012090264 [ 1860.724046][ C0] post_alloc_hook+0x1af/0x220 [ 1860.724060][ C0] get_page_from_freelist+0xd0b/0x31a0 [ 1860.724074][ C0] __alloc_frozen_pages_noprof+0x25f/0x2440 [ 1860.724090][ C0] alloc_pages_mpol+0x1fb/0x550 [ 1860.724110][ C0] new_slab+0x24a/0x360 [ 1860.724122][ C0] ___slab_alloc+0xee7/0x1cd0 [ 1860.724133][ C0] __slab_alloc.constprop.0+0x63/0x110 [ 1860.724259][ C0] __kmalloc_cache_noprof+0x477/0x770 [ 1860.724275][ C0] batadv_forw_packet_alloc+0x3ad/0x4e0 [ 1860.724293][ C0] batadv_iv_ogm_aggregate_new+0x13c/0x4c0 [ 1860.724308][ C0] batadv_iv_ogm_schedule_buff+0xeb4/0x14c0 [ 1860.724322][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920 [ 1860.724339][ C0] process_one_work+0x9ba/0x1b20 [ 1860.724356][ C0] worker_thread+0x6c8/0xf10 [ 1860.724371][ C0] kthread+0x3c5/0x780 [ 1860.724386][ C0] ret_from_fork+0x983/0xb10 [ 1860.724399][ C0] page last free pid 19796 tgid 19796 stack trace: [ 1860.724408][ C0] __free_frozen_pages+0x7df/0x1160 [ 1860.724448][ C0] kasan_depopulate_vmalloc_pte+0x5b/0x80 [ 1860.724467][ C0] __apply_to_page_range+0x920/0x1260 [ 1860.724494][ C0] kasan_release_vmalloc+0xd1/0xe0 [ 1860.724511][ C0] purge_vmap_node+0x1ba/0xad0 [ 1860.724530][ C0] __purge_vmap_area_lazy+0x9d2/0xc00 [ 1860.724548][ C0] drain_vmap_area_work+0x27/0x40 [ 1860.724564][ C0] process_one_work+0x9ba/0x1b20 [ 1860.724579][ C0] worker_thread+0x6c8/0xf10 [ 1860.724593][ C0] kthread+0x3c5/0x780 [ 1860.724605][ C0] ret_from_fork+0x983/0xb10 [ 1860.724616][ C0] ret_from_fork_asm+0x1a/0x30 [ 1860.724636][ C0] [ 1860.724640][ C0] Memory state around the buggy address: [ 1860.724648][ C0] ffff888011f87300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1860.724659][ C0] ffff888011f87380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1860.724670][ C0] >ffff888011f87400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1860.724679][ C0] ^ [ 1860.724687][ C0] ffff888011f87480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1860.724698][ C0] ffff888011f87500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1860.724706][ C0] ================================================================== [ 1860.724716][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1860.724729][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1860.724746][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1860.724756][ C0] Call Trace: [ 1860.724764][ C0] [ 1860.724771][ C0] dump_stack_lvl+0x3d/0x1f0 [ 1860.724788][ C0] vpanic+0x640/0x6f0 [ 1860.724805][ C0] panic+0xca/0xd0 [ 1860.724819][ C0] ? __pfx_panic+0x10/0x10 [ 1860.724835][ C0] ? end_report+0x4c/0x160 [ 1860.724855][ C0] ? rcu_is_watching+0x12/0xc0 [ 1860.725028][ C0] ? lock_release+0x201/0x2d0 [ 1860.725046][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 1860.725062][ C0] check_panic_on_warn+0xab/0xb0 [ 1860.725080][ C0] end_report+0x107/0x160 [ 1860.725099][ C0] kasan_report+0xee/0x110 [ 1860.725119][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1860.725137][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1860.725151][ C0] __kasan_check_byte+0x36/0x50 [ 1860.725171][ C0] lock_acquire+0xfc/0x330 [ 1860.725188][ C0] ? do_raw_spin_unlock+0x53/0x230 [ 1860.725207][ C0] ? .slowpath+0x9/0x18 [ 1860.725225][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 1860.725241][ C0] ? p9_req_put+0xaf/0x250 [ 1860.725260][ C0] p9_req_put+0xaf/0x250 [ 1860.725280][ C0] req_done+0x1dc/0x2e0 [ 1860.725298][ C0] ? __pfx_req_done+0x10/0x10 [ 1860.725313][ C0] ? __lock_acquire+0x433/0x22f0 [ 1860.725330][ C0] ? clockevents_program_event+0x151/0x370 [ 1860.725351][ C0] ? __pfx_req_done+0x10/0x10 [ 1860.725367][ C0] vring_interrupt+0x31e/0x400 [ 1860.725386][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 1860.725403][ C0] __handle_irq_event_percpu+0x236/0x890 [ 1860.725428][ C0] handle_irq_event+0xab/0x1e0 [ 1860.725451][ C0] handle_edge_irq+0x3ca/0x9e0 [ 1860.725474][ C0] __common_interrupt+0xd0/0x2f0 [ 1860.725505][ C0] common_interrupt+0xba/0xe0 [ 1860.725647][ C0] [ 1860.725654][ C0] [ 1860.725661][ C0] asm_common_interrupt+0x26/0x40 [ 1860.725678][ C0] RIP: 0010:sched_core_balance+0x9d/0xe70 [ 1860.725696][ C0] Code: a0 95 1c 8e e8 64 07 0e 00 e8 af e3 d0 09 5b 85 c0 0f 85 f3 09 00 00 48 89 ef e8 ee 3c ff ff e8 09 7a 3a 00 fb 48 63 44 24 50 <48> c7 c3 80 5b 89 93 48 89 44 24 08 48 83 f8 07 0f 87 66 0d 00 00 [ 1860.725711][ C0] RSP: 0018:ffffffff8de07b68 EFLAGS: 00000202 [ 1860.725725][ C0] RAX: 0000000000000000 RBX: ffffffff818ac3bb RCX: ffffffff81c53cff [ 1860.725736][ C0] RDX: 0000000000000000 RSI: ffffffff8d89f477 RDI: ffffffff8bd1d1a0 [ 1860.725746][ C0] RBP: ffff88802b23ab80 R08: 0000000000000001 R09: 0000000000000001 [ 1860.725756][ C0] R10: ffffffff9065eed7 R11: 00000000ffffffff R12: ffff88802b23ab80 [ 1860.725766][ C0] R13: ffff88801dab8000 R14: 0000000000000000 R15: dffffc0000000000 [ 1860.725780][ C0] ? sched_core_balance+0x6b/0xe70 [ 1860.725797][ C0] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 1860.725824][ C0] ? sched_core_balance+0x97/0xe70 [ 1860.725841][ C0] ? lock_acquire+0x179/0x330 [ 1860.725860][ C0] ? __schedule+0x19b1/0x6150 [ 1860.725879][ C0] finish_task_switch.isra.0+0x458/0xbc0 [ 1860.725904][ C0] ? __schedule+0x10b9/0x6150 [ 1860.725921][ C0] __schedule+0x1141/0x6150 [ 1860.725939][ C0] ? tick_nohz_next_event+0x231/0x400 [ 1860.725963][ C0] ? __pfx___schedule+0x10/0x10 [ 1860.725981][ C0] ? rcu_is_watching+0x12/0xc0 [ 1860.726006][ C0] schedule_idle+0x5c/0x90 [ 1860.726172][ C0] do_idle+0x2b3/0x500 [ 1860.726195][ C0] ? __pfx_do_idle+0x10/0x10 [ 1860.726219][ C0] cpu_startup_entry+0x4f/0x60 [ 1860.726241][ C0] rest_init+0x16b/0x2b0 [ 1860.726263][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1860.726278][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1860.726296][ C0] start_kernel+0x3f6/0x4d0 [ 1860.727039][ C0] x86_64_start_reservations+0x18/0x30 [ 1860.727056][ C0] x86_64_start_kernel+0x130/0x190 [ 1860.727071][ C0] common_startup_64+0x13e/0x148 [ 1860.727093][ C0] [ 1860.734243][ C0] Kernel Offset: disabled VM DIAGNOSIS: 13:11:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852745f5 RDI=ffffffff9ac2f060 RBP=ffffffff9ac2f020 RSP=ffffc90000007810 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9ac2f020 R15=ffffffff85274590 RIP=ffffffff8527461f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979a5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c36c0c8 CR3=000000000df84000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81615af3 RDX=ffff88801daf24c0 RSI=ffffffff81615b3b RDI=ffffffff938cdfe0 RBP=ffff88802b320000 RSP=ffffc90000590fd0 R8 =0000000000000001 R9 =fffffbfff2719bfc R10=ffffffff938cdfe7 R11=00000000ffffffff R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81615b3c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff888097aa5000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f739436c CR3=000000006b598000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=0040 FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81615af3 RDX=ffff88801bf7c980 RSI=ffffffff81615b3b RDI=ffffffff938cdfe0 RBP=ffff88802b420000 RSP=ffffc90000538fd0 R8 =0000000000000001 R9 =fffffbfff2719bfc R10=ffffffff938cdfe7 R11=00000000ffffffff R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81615b3c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ba5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080003000 CR3=0000000057dfd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000010001 RBX=0000000000000000 RCX=ffffffff81615af3 RDX=ffff888024c80000 RSI=ffffffff81615b3b RDI=ffffffff938cdfe0 RBP=ffff88802b520000 RSP=ffffc900005e8fd0 R8 =0000000000000001 R9 =fffffbfff2719bfc R10=ffffffff938cdfe7 R11=00000000ffffffff R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81615b3c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097ca5000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c407430 CR3=0000000057dfd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000