last executing test programs: 12m24.125707464s ago: executing program 32 (id=90): recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/216, 0xd8}], 0x1}, 0x80000000}], 0x1, 0x40008062, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x1}, 0x24}}, 0x2400c041) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}], 0x2}}], 0x2, 0x10, 0x0) 12m10.473291137s ago: executing program 33 (id=157): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x8, 0xa0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x18, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8000, 0x0, 0x0, 0x20}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) lsm_get_self_attr(0xab, 0x0, 0x0, 0x1) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000003c0)=@overlay={0x1, 0x1, 0x4, 0x400, 0x9, {}, {0x1, 0x1, 0x3, 0x0, 0x4, 0x3, "129f89fd"}, 0x2, 0x3, {}, 0x2}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x118, 0x50000089) r7 = openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$CDROM_NEXT_WRITABLE(r7, 0x40041271, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000001000)=@getsa={0xf8, 0x12, 0x324, 0x70bd26, 0x25dfdbfc, {@in=@multicast2, 0x4d5, 0x2, 0x2b}, [@algo_auth={0x8a, 0x1, {{'rmd160-generic\x00'}, 0x210, "4a011b939175383327d1669467ecccafe6d0703ec604a146fbf4e71beba21ebe5a803d35daf243f78e7a13e737bd71b482e1631c734314cdfa7ecd8b63878c3ccda5"}}, @tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x4d5, 0x2b}, 0xa, @in6=@empty, 0x3501, 0x4, 0x0, 0x3, 0xe2, 0x6, 0x28}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x24044004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) 11m43.340512965s ago: executing program 34 (id=323): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2810002, &(0x7f0000000280)={[{@subsystem='rdma'}, {@subsystem='memory'}, {}, {@subsystem='net_prio'}, {@noprefix}], [{@smackfshat={'smackfshat', 0x3d, 'all'}}]}) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) unshare(0x40020000) 6m50.934841497s ago: executing program 35 (id=2090): syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$adsp1(0xffffff9c, &(0x7f0000000000), 0x20801, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r2 = dup(r1) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (async) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000200)=0x3) (async) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000200)=0x3) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x11d2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) (async) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) 5m35.861883425s ago: executing program 6 (id=2531): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="23af95c4d83c18cbd81291a651976662b63ba4dcb1dc27cb066793353a30fa5fa163b56b15111d6cf657b9ee6903d2e975cf854950ef6022156f50bd957ffce445c9ce423be36eb9fbfa72aae99873fb6b65e73cf955811a86684d51dfac3a1ba4384e", 0x63}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r8, @rand_addr=0x64010102, @local}}}], 0x40}}, {{&(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000500)="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", 0xfa}, {&(0x7f0000000600)="0cc1a284f2b1026f86a424d7135c07259ae0422140ff992f5da39d7041a2eb0ec769f6589107a7607a8a2911cf5aa1ac5f4e62c863957ba498ec211330cc6dbea3d91224f41504c88dde266314a95253f6d7ac697a43f61b4f68c278fe7cbdb3b2eb6be286507c836ce47071a1fc7eaf2937471e66b5780f7aa743b0d7b9ae083c81bb22d3cccf919f0de9771aa15514bcf9e09f9cd20284b91046c4ce917f3c3d232faae69718107233bbc81d88dc9ff27f7112967a5dd81861d2c5b46d5361cea0b0", 0xc3}, {&(0x7f0000000700)="d829543d58ed27bc4e7cf12c5c41a2801c16ef8f128bbe3b759f942c783a73507e42330cfa4faf3b2c8964d410a31cdc5cc95a680d6936bcb68879987cbf9ff95e74fe7be2e51fbb76cc3acd41a79ca615ea5db8438c963926264766fc7d26ff8b0113108da67f218b32c193789e94e4fa8e11d7c0914bf7a160a6f03e0c4911fefc7446abff96719503125906e1954acf05f83d420a507a39a091f071d06a4ef479b8", 0xa3}, {&(0x7f0000000440)="90ab1009b29b3aee0442f863ab0ff49abcd2af2e6e8736b177be822be9215cc250dccb4a3ef5666c619214fe99bbc5c992bc57a4190334a5d8ed4abaa6f3965c84285979f1a71042dbf648dca77f9c8ef7d5a2b6425b96ba9313e29e75794abc0d95cd97bf5d8bd570856bd489", 0x6d}, {&(0x7f0000000880)="fdac4933714fd96ef06f3b2277ba4cf693c3b16f4e392926e5e2a20b9e7b3b92f3d9bacdd22dfb972697e823f4fd7cac2a556c5f98187734bb36ad39b4ea2d9d93e9144809781d615b1e3d612fec4c93082d6f0689eb1dd37c782eb425b2665d9223dca606271200819b3beb8430137ee79ea2bc52bd0003b45963e2124c0dcc7ae434a2c5b4def89297ba56aa1d14556758a0d480d311b2d0037e521c", 0x9d}, {&(0x7f00000007c0)="0f7bb9d772a8f3ccf5aca372eed421c3f45e7f0f7cd0509a47f2621a170b358d8fbd9b6e24501a5a81665aa1ddbf1fd973e5104e7bc56cafe9ce099a23696b95d842db0b655c899792587ab4c018f03e8b7685cbee8a79fc700b225d46b8292175bc9e09187b", 0x66}, {&(0x7f0000000940)="3f160be17365d53f52c0052d51ee7640f2f4f533be7e1b8812ffef927ee30fbefef3153e5943591bcf78ac4d433f911184700085c7c3301a7eb73aff49e5b4d7945f01760cd8545ae266057466b9c0e277352df142780bcf7dcc043302259023fabb61c120011699bead407a17cb2edcde649653919a4a3b9e271b54ce7da0fc13cd625df4312d88f0b06e6f065c7b9ea882170eeda9ab8f8d7ee83a7d5038b25b05", 0xa2}, {&(0x7f0000000a00)="fbd0879aad7a6aea4787b0ef3bb54aaf666cbb96bf26ffbbdd99ab45efd761c30acbfe25c1adc82a32afa5516b53df1fca7054ad86a13eed96d7fedd47c17a47d6fb40e84c8ea69f4a8dda8bbc25c4b4b2ad113ba4f453243bf1bbf2370c7fa37b7afe4006ddfe7fe7e2f2b73dafc7a73df89197f7da0962f7c6638bad9be8c91a0344e28cf196a3c1bf0606da9b94dbe73b2ebd86bb08e3fed2a4f423e57acf83d0c6e71576988b1f56", 0xaa}, {&(0x7f0000000ac0)="e9f031aad601a315d7554ed4aa2f1d9aade73d380bcf81ed1b3e5c280b73c60659ddfcb3f4ef538b7f6d75aef1c6c5015993cf3ec5a0a7fdbf34cb0239d6a94c824c8b91c5169c39bae78c68b799dc09b2045b81b2d8ff9408d45850ccb1e00f2b43c9078ef36441b4", 0x69}], 0x9, &(0x7f0000000bc0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9f}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x72, 0x1, 0x7, [{@remote, 0x315}, {@private=0xa010100, 0x8}, {@local, 0x8}, {@empty, 0x1}, {@rand_addr=0x64010100, 0x10000}, {@local, 0x5}]}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xb, "1a6fe680b1dea2e572"}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x89, 0x3, ';'}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @broadcast, @rand_addr=0x64010102}}}], 0xa8}}], 0x2, 0x4000001) 5m35.082603885s ago: executing program 6 (id=2533): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000080)={r4, 0x4, 0x20, 0x3}, &(0x7f0000000840)=0x18) 5m34.99407893s ago: executing program 6 (id=2536): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000240)="0f01c3660f388173000f23d80f21f8b800018ec80f23f8660fc7764d660f388296f1ff66b9210800000f32ee0f01ca0f320f32660fd3db", 0x37}], 0x1, 0x1, 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) futex_waitv(&(0x7f0000001f40)=[{0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x4000000, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x4}, {0x0, 0x0}, {0x5, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0, 0x82}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0, 0x82}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0xffffffffffffffff, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0, 0x2}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, &(0x7f0000000f80)}, {0x0, 0x0}, {0x1, 0x0}, {0x0, 0x0}, {0x5, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x3d, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000005400014c8d7540058c746769f6779a1e240026bc70010000001807000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="d3000200ff02000000000000000000000000000108000000"], 0x38}}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x11, r5, 0xdcbdf000) write$hidraw(r4, &(0x7f0000000280)="cb7a", 0x2) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r7 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r6, &(0x7f0000001000)=""/90, 0x5a) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e40)={@fallback, 0x2f, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5m34.437749772s ago: executing program 6 (id=2538): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000000)={{0x1000, 0x30000, 0xb, 0xa, 0x6c, 0xf9, 0x99, 0xfe, 0x6, 0xfe, 0xff, 0x4}, {0xe000, 0xfec00000, 0x10, 0x2, 0x1, 0x4, 0x1, 0x16, 0xb, 0x2, 0x10, 0x6}, {0xa000, 0xfec00000, 0x8, 0x3, 0x3, 0x7, 0xc, 0xf0, 0x6, 0x5, 0x8, 0x6}, {0x8080000, 0xdddd1000, 0xf, 0x6, 0x81, 0x4, 0x6, 0xae, 0xa, 0x56, 0xe, 0x1}, {0x7000, 0x80a0000, 0x4, 0x2, 0x30, 0x9, 0x3, 0xe9, 0x4, 0x1, 0x4, 0x8}, {0xb000, 0xddc89000, 0x3, 0xfb, 0x2, 0x17, 0x2, 0x86, 0x4, 0x7, 0x0, 0xe}, {0x9000, 0xe000, 0x8, 0x0, 0x9, 0x81, 0x7, 0x1, 0x5, 0x5, 0x1, 0xa}, {0x25000, 0xf000, 0xe, 0x0, 0x1, 0x6, 0xf, 0x8, 0x9, 0x14, 0x40, 0x2}, {0x1, 0x160e}, {0xdddd0000, 0x10}, 0x80000011, 0x0, 0x2, 0x208, 0xf, 0x2000, 0x25000, 0x1, [0x101, 0x0, 0x1000, 0x1]}) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0xbcbf3de3fcc2fa9a, 0x0, &(0x7f0000000380)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f00000035c0)={{0x2, 0xffff, @multicast2}, {0x0, @random="d8046de4e402"}, 0x4, {0x2, 0x0, @private=0xa010100}, 'wg2\x00'}) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180), &(0x7f00000001c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x400000, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9fdef306844268cb89614f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000400000000000100009cff00000087080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b703000000bf03ccd4209ae20700008500000086000000bf0900000000000055090100000000009500000000000000cd3a0100000000004500000008000000180000000900000000000000010000002d90feff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xe}, 0x94) r8 = socket$can_j1939(0x1d, 0x2, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000000)='./file0/file0\x00', r9, &(0x7f0000000180)='./file0\x00', 0x101) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e3502020001ffffffff685f"], 0x38) r11 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r11, &(0x7f0000000040)={0x1d, r10, 0x2, {0x1, 0xf0, 0x3}, 0xff}, 0x18) bind$can_j1939(r8, &(0x7f0000000240)={0x1d, r10, 0x1, {0x2, 0xf0}, 0x3}, 0x18) r12 = creat(&(0x7f0000000240)='./file0\x00', 0x0) dup(r12) 5m34.084163481s ago: executing program 6 (id=2541): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c00)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x7fff, 0x7ff, 0x19, 0x0, 0xb, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="23af95c4d83c18cbd81291a651976662b63ba4dcb1dc27cb066793353a30fa5fa163b56b15111d6cf657b9ee6903d2e975cf854950ef6022156f50bd957ffce445c9ce423be36eb9fbfa72aae99873fb6b65e73cf955811a86684d51dfac3a1ba4384e", 0x63}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r8, @rand_addr=0x64010102, @local}}}], 0x40}}, {{&(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000003c0)="35ce7d8aa78e34b763ac96cc0d579afc7f77c17f0517b464e8ed329e68be26c91e21cb1c3b05bf8b68e4b2e9080fe0e847b3cb0ea83b52f2e7b15d3668392847bef990efaa80ad6881d0aebfde8240c89553b62cce7056ba0130b063e4ed6690", 0x60}, {&(0x7f0000000600)="0cc1a284f2b1026f86a424d7135c07259ae0422140ff992f5da39d7041a2eb0ec769f6589107a7607a8a2911cf5aa1ac5f4e62c863957ba498ec211330cc6dbea3d91224f41504c88dde266314a95253f6d7ac697a43f61b4f68c278fe7cbdb3b2eb6be286507c836ce47071a1fc7eaf2937471e66b5780f7aa743b0d7b9ae083c81bb22d3cccf919f0de9771aa15514bcf9e09f9cd20284b91046c4ce917f3c3d232faae69718107233bbc81d88dc9ff27f7112967a5dd81861d2c5b46d5361cea0b0", 0xc3}, {&(0x7f0000000700)="d829543d58ed27bc4e7cf12c5c41a2801c16ef8f128bbe3b759f942c783a73507e42330cfa4faf3b2c8964d410a31cdc5cc95a680d6936bcb68879987cbf9ff95e74fe7be2e51fbb76cc3acd41a79ca615ea5db8438c963926264766fc7d26ff8b0113108da67f218b32c193789e94e4fa8e11d7c0914bf7a160a6f03e0c4911fefc7446abff96719503125906e1954acf05f83d420a507a39a091f071d06a4ef479b8", 0xa3}, {&(0x7f0000000440)="90ab1009b29b3aee0442f863ab0ff49abcd2af2e6e8736b177be822be9215cc250dccb4a3ef5666c619214fe99bbc5c992bc57a4190334a5d8ed4abaa6f3965c84285979f1a71042dbf648dca77f9c8ef7d5a2b6425b96ba9313e29e75794abc0d95cd97bf5d8bd570856bd489", 0x6d}, {&(0x7f0000000880)="fdac4933714fd96ef06f3b2277ba4cf693c3b16f4e392926e5e2a20b9e7b3b92f3d9bacdd22dfb972697e823f4fd7cac2a556c5f98187734bb36ad39b4ea2d9d93e9144809781d615b1e3d612fec4c93082d6f0689eb1dd37c782eb425b2665d9223dca606271200819b3beb8430137ee79ea2bc52bd0003b45963e2124c0dcc7ae434a2c5b4def89297ba56aa1d14556758a0d480d311b2d0037e521c", 0x9d}, {&(0x7f00000007c0)="0f7bb9d772a8f3ccf5aca372eed421c3f45e7f0f7cd0509a47f2621a170b358d8fbd9b6e24501a5a81665aa1ddbf1fd973e5104e7bc56cafe9ce099a23696b95d842db0b655c899792587ab4c018f03e8b7685cbee8a79fc700b225d46b8292175bc9e09187b", 0x66}, {&(0x7f0000000940)="3f160be17365d53f52c0052d51ee7640f2f4f533be7e1b8812ffef927ee30fbefef3153e5943591bcf78ac4d433f911184700085c7c3301a7eb73aff49e5b4d7945f01760cd8545ae266057466b9c0e277352df142780bcf7dcc043302259023fabb61c120011699bead407a17cb2edcde649653919a4a3b9e271b54ce7da0fc13cd625df4312d88f0b06e6f065c7b9ea882170eeda9ab8f8d7ee83a7d5038b25b05", 0xa2}, {&(0x7f0000000a00)="fbd0879aad7a6aea4787b0ef3bb54aaf666cbb96bf26ffbbdd99ab45efd761c30acbfe25c1adc82a32afa5516b53df1fca7054ad86a13eed96d7fedd47c17a47d6fb40e84c8ea69f4a8dda8bbc25c4b4b2ad113ba4f453243bf1bbf2370c7fa37b7afe4006ddfe7fe7e2f2b73dafc7a73df89197f7da0962f7c6638bad9be8c91a0344e28cf196a3c1bf0606da9b94dbe73b2ebd86bb08e3fed2a4f423e57acf83d0c6e71576988b1f56", 0xaa}, {&(0x7f0000000ac0)="e9f031aad601a315d7554ed4aa2f1d9aade73d380bcf81ed1b3e5c280b73c60659ddfcb3f4ef538b7f6d75aef1c6c5015993cf3ec5a0a7fdbf34cb0239d6a94c824c8b91c5169c39bae78c68b799dc09b2045b81b2d8ff9408d45850ccb1e00f2b43c9078ef36441b4", 0x69}], 0x9, &(0x7f0000000bc0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9f}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x72, 0x1, 0x7, [{@remote, 0x315}, {@private=0xa010100, 0x8}, {@local, 0x8}, {@empty, 0x1}, {@rand_addr=0x64010100, 0x10000}, {@local, 0x5}]}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xb, "1a6fe680b1dea2e572"}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x89, 0x3, ';'}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @broadcast, @rand_addr=0x64010102}}}], 0xa8}}], 0x2, 0x4000001) 5m33.961778072s ago: executing program 6 (id=2543): socket$nl_route(0x10, 0x3, 0x0) (async) landlock_create_ruleset(&(0x7f0000000040)={0xc015}, 0x18, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000280)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @link_local}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x7}, @IFLA_HSR_VERSION={0x5, 0x6, 0x3}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @broadcast}, @IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x94}}, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fff8, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r9}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 5m33.870134583s ago: executing program 36 (id=2543): socket$nl_route(0x10, 0x3, 0x0) (async) landlock_create_ruleset(&(0x7f0000000040)={0xc015}, 0x18, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000280)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="08e7eebc872f"}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @link_local}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x7}, @IFLA_HSR_VERSION={0x5, 0x6, 0x3}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @broadcast}, @IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x94}}, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x7fff8, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r9}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 4m35.927784143s ago: executing program 1 (id=2830): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c00)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x7fff, 0x7ff, 0x19, 0x0, 0xb, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="23af95c4d83c18cbd81291a651976662b63ba4dcb1dc27cb066793353a30fa5fa163b56b15111d6cf657b9ee6903d2e975cf854950ef6022156f50bd957ffce445c9ce423be36eb9fbfa72aae99873fb6b65e73cf955811a86684d51dfac3a1ba4384e", 0x63}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r8, @rand_addr=0x64010102, @local}}}], 0x40}}, {{&(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000003c0)="35ce7d8aa78e34b763ac96cc0d579afc7f77c17f0517b464e8ed329e68be26c91e21cb1c3b05bf8b68e4b2e9080fe0e847b3cb0ea83b52f2e7b15d3668392847bef990efaa80ad6881d0aebfde8240c89553b62cce7056ba0130b063e4ed6690", 0x60}, {&(0x7f0000000500)="992400d4b0829c90bcaa17ac944bfee84e8321bba8e628a30f294a31b2afbe5dfe695958cdb3d9a6b57ea005129c36b8e5b13fbe482f081bb8e01ba2b64e05463bc5395178b822398515c059c7fab469ed123110b0c3970c69d32fb819daa3691649817d68419c61e8e947e15f445e8feb24a247c8fb609a7d450f848ce4f45ead11afccba0660cabde4070576faafa5fcadab6f518d5b472f98a3297ea149c92687827a0cc62aa2149ec11eafa90f9fdeb7fc96b3da40ebb2bbaeca58d23c3d4f20b382964c448f93507b9636e063a3b7d6ff522e29249e55cfeba3ba1bd4657f88e30657f1f51e3bbe56", 0xeb}, {&(0x7f0000000600)="0cc1a284f2b1026f86a424d7135c07259ae0422140ff992f5da39d7041a2eb0ec769f6589107a7607a8a2911cf5aa1ac5f4e62c863957ba498ec211330cc6dbea3d91224f41504c88dde266314a95253f6d7ac697a43f61b4f68c278fe7cbdb3b2eb6be286507c836ce47071a1fc7eaf2937471e66b5780f7aa743b0d7b9ae083c81bb22d3cccf919f0de9771aa15514bcf9e09f9cd20284b91046c4ce917f3c3d232faae69718107233bbc81d88dc9ff27f7112967a5dd81861d2c5b46d5361cea0b0", 0xc3}, {&(0x7f0000000700)="d829543d58ed27bc4e7cf12c5c41a2801c16ef8f128bbe3b759f942c783a73507e42330cfa4faf3b2c8964d410a31cdc5cc95a680d6936bcb68879987cbf9ff95e74fe7be2e51fbb76cc3acd41a79ca615ea5db8438c963926264766fc7d26ff8b0113108da67f218b32c193789e94e4fa8e11d7c0914bf7a160a6f03e0c4911fefc7446abff96719503125906e1954acf05f83d420a507a39a091f071d06a4ef479b8", 0xa3}, {&(0x7f0000000440)="90ab1009b29b3aee0442f863ab0ff49abcd2af2e6e8736b177be822be9215cc250dccb4a3ef5666c619214fe99bbc5c992bc57a4190334a5d8ed4abaa6f3965c84285979f1a71042dbf648dca77f9c8ef7d5a2b6425b96ba9313e29e75794abc0d95cd97bf5d8bd570856bd489", 0x6d}, {&(0x7f0000000880)="fdac4933714fd96ef06f3b2277ba4cf693c3b16f4e392926e5e2a20b9e7b3b92f3d9bacdd22dfb972697e823f4fd7cac2a556c5f98187734bb36ad39b4ea2d9d93e9144809781d615b1e3d612fec4c93082d6f0689eb1dd37c782eb425b2665d9223dca606271200819b3beb8430137ee79ea2bc52bd0003b45963e2124c0dcc7ae434a2c5b4def89297ba56aa1d14556758a0d480d311b2d0037e521c", 0x9d}, {&(0x7f00000007c0)="0f7bb9d772a8f3ccf5aca372eed421c3f45e7f0f7cd0509a47f2621a170b358d8fbd9b6e24501a5a81665aa1ddbf1fd973e5104e7bc56cafe9ce099a23696b95d842db0b655c899792587ab4c018f03e8b7685cbee8a79fc700b225d46b8292175bc9e09187b", 0x66}, {&(0x7f0000000940)="3f160be17365d53f52c0052d51ee7640f2f4f533be7e1b8812ffef927ee30fbefef3153e5943591bcf78ac4d433f911184700085c7c3301a7eb73aff49e5b4d7945f01760cd8545ae266057466b9c0e277352df142780bcf7dcc043302259023fabb61c120011699bead407a17cb2edcde649653919a4a3b9e271b54ce7da0fc13cd625df4312d88f0b06e6f065c7b9ea882170eeda9ab8f8d7ee83a7d5038b25b05", 0xa2}, {&(0x7f0000000a00)="fbd0879aad7a6aea4787b0ef3bb54aaf666cbb96bf26ffbbdd99ab45efd761c30acbfe25c1adc82a32afa5516b53df1fca7054ad86a13eed96d7fedd47c17a47d6fb40e84c8ea69f4a8dda8bbc25c4b4b2ad113ba4f453243bf1bbf2370c7fa37b7afe4006ddfe7fe7e2f2b73dafc7a73df89197f7da0962f7c6638bad9be8c91a0344e28cf196a3c1bf0606da9b94dbe73b2ebd86bb08e3fed2a4f423e57acf83d0c6e71576988b1f56", 0xaa}, {&(0x7f0000000ac0)="e9f031aad601a315d7554ed4aa2f1d9aade73d380bcf81ed1b3e5c280b73c60659ddfcb3f4ef538b7f6d75aef1c6c5015993cf3ec5a0a7fdbf34cb0239d6a94c824c8b91c5169c39bae78c68b799dc09b2045b81b2d8ff9408d45850ccb1e00f2b43c9078ef36441b4", 0x69}], 0xa, &(0x7f0000000bc0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9f}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x72, 0x1, 0x7, [{@remote, 0x315}, {@private=0xa010100, 0x8}, {@local, 0x8}, {@empty, 0x1}, {@rand_addr=0x64010100, 0x10000}, {@local, 0x5}]}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xb, "1a6fe680b1dea2e572"}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x89, 0x3, ';'}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @broadcast, @rand_addr=0x64010102}}}], 0xa8}}], 0x2, 0x4000001) 4m34.950007832s ago: executing program 1 (id=2833): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="23af95c4d83c18cbd81291a651976662b63ba4dcb1dc27cb066793353a30fa5fa163b56b15111d6cf657b9ee6903d2e975cf854950ef6022156f50bd957ffce445c9ce423be36eb9fbfa72aae99873fb6b65e73cf955811a86684d51dfac3a1ba4384e", 0x63}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r8, @rand_addr=0x64010102, @local}}}], 0x40}}, {{&(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000003c0)="35ce7d8aa78e34b763ac96cc0d579afc7f77c17f0517b464e8ed329e68be26c91e21cb1c3b05bf8b68e4b2e9080fe0e847b3cb0ea83b52f2e7b15d3668392847bef990efaa80ad6881d0aebfde8240c89553b62cce7056ba0130b063e4ed66", 0x5f}, {&(0x7f0000000500)="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", 0xfa}, {&(0x7f0000000600)="0cc1a284f2b1026f86a424d7135c07259ae0422140ff992f5da39d7041a2eb0ec769f6589107a7607a8a2911cf5aa1ac5f4e62c863957ba498ec211330cc6dbea3d91224f41504c88dde266314a95253f6d7ac697a43f61b4f68c278fe7cbdb3b2eb6be286507c836ce47071a1fc7eaf2937471e66b5780f7aa743b0d7b9ae083c81bb22d3cccf919f0de9771aa15514bcf9e09f9cd20284b91046c4ce917f3c3d232faae69718107233bbc81d88dc9ff27f7112967a5dd81861d2c5b46d5361cea0b0", 0xc3}, {&(0x7f0000000700)="d829543d58ed27bc4e7cf12c5c41a2801c16ef8f128bbe3b759f942c783a73507e42330cfa4faf3b2c8964d410a31cdc5cc95a680d6936bcb68879987cbf9ff95e74fe7be2e51fbb76cc3acd41a79ca615ea5db8438c963926264766fc7d26ff8b0113108da67f218b32c193789e94e4fa8e11d7c0914bf7a160a6f03e0c4911fefc7446abff96719503125906e1954acf05f83d420a507a39a091f071d06a4ef479b8", 0xa3}, {&(0x7f0000000440)="90ab1009b29b3aee0442f863ab0ff49abcd2af2e6e8736b177be822be9215cc250dccb4a3ef5666c619214fe99bbc5c992bc57a4190334a5d8ed4abaa6f3965c84285979f1a71042dbf648dca77f9c8ef7d5a2b6425b96ba9313e29e75794abc0d95cd97bf5d8bd570856bd489", 0x6d}, {&(0x7f0000000880)="fdac4933714fd96ef06f3b2277ba4cf693c3b16f4e392926e5e2a20b9e7b3b92f3d9bacdd22dfb972697e823f4fd7cac2a556c5f98187734bb36ad39b4ea2d9d93e9144809781d615b1e3d612fec4c93082d6f0689eb1dd37c782eb425b2665d9223dca606271200819b3beb8430137ee79ea2bc52bd0003b45963e2124c0dcc7ae434a2c5b4def89297ba56aa1d14556758a0d480d311b2d0037e521c", 0x9d}, {&(0x7f00000007c0)="0f7bb9d772a8f3ccf5aca372eed421c3f45e7f0f7cd0509a47f2621a170b358d8fbd9b6e24501a5a81665aa1ddbf1fd973e5104e7bc56cafe9ce099a23696b95d842db0b655c899792587ab4c018f03e8b7685cbee8a79fc700b225d46b8292175bc9e09187b", 0x66}, {&(0x7f0000000940)="3f160be17365d53f52c0052d51ee7640f2f4f533be7e1b8812ffef927ee30fbefef3153e5943591bcf78ac4d433f911184700085c7c3301a7eb73aff49e5b4d7945f01760cd8545ae266057466b9c0e277352df142780bcf7dcc043302259023fabb61c120011699bead407a17cb2edcde649653919a4a3b9e271b54ce7da0fc13cd625df4312d88f0b06e6f065c7b9ea882170eeda9ab8f8d7ee83a7d5038b25b05", 0xa2}, {&(0x7f0000000a00)="fbd0879aad7a6aea4787b0ef3bb54aaf666cbb96bf26ffbbdd99ab45efd761c30acbfe25c1adc82a32afa5516b53df1fca7054ad86a13eed96d7fedd47c17a47d6fb40e84c8ea69f4a8dda8bbc25c4b4b2ad113ba4f453243bf1bbf2370c7fa37b7afe4006ddfe7fe7e2f2b73dafc7a73df89197f7da0962f7c6638bad9be8c91a0344e28cf196a3c1bf0606da9b94dbe73b2ebd86bb08e3fed2a4f423e57acf83d0c6e71576988b1f56", 0xaa}, {&(0x7f0000000ac0)="e9f031aad601a315d7554ed4aa2f1d9aade73d380bcf81ed1b3e5c280b73c60659ddfcb3f4ef538b7f6d75aef1c6c5015993cf3ec5a0a7fdbf34cb0239d6a94c824c8b91c5169c39bae78c68b799dc09b2045b81b2d8ff9408d45850ccb1e00f2b43c9078ef36441b4", 0x69}], 0xa, &(0x7f0000000bc0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9f}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x72, 0x1, 0x7, [{@remote, 0x315}, {@private=0xa010100, 0x8}, {@local, 0x8}, {@empty, 0x1}, {@rand_addr=0x64010100, 0x10000}, {@local, 0x5}]}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xb, "1a6fe680b1dea2e572"}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x89, 0x3, ';'}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @broadcast, @rand_addr=0x64010102}}}], 0xa8}}], 0x2, 0x4000001) 4m34.884776182s ago: executing program 5 (id=2834): prctl$PR_SCHED_CORE(0x3e, 0x403, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xfffffff3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7fffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x10000000001000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_usbip_server_init(0x6) (async) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x0, 0x19, 0x36f51d35, 0x1, 0x8, 0x8000000000000001, 0xfffffffffffffff7, 0x5, 0x8}, 0x0) socket$netlink(0x10, 0x3, 0x15) (async) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) rseq(0x0, 0x0, 0x0, 0x0) (async) r6 = mq_open(0x0, 0x8c2, 0x30, 0x0) mq_timedreceive(r6, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) r7 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r7, 0x400000) mq_timedsend(r6, 0x0, 0x0, 0x5, 0x0) 4m33.180330965s ago: executing program 1 (id=2844): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000480)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close_range(r1, r1, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x36a3, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x3, 0xfefffffd}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3, 0x0, 0x9}, 0x18) openat$fb1(0xffffffffffffff9c, 0x0, 0x102, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x46}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r5 = syz_clone(0x26020000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r5, 0x6, &(0x7f00000007c0)={0x1b, 0x0, 0xefffffc0}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40585414, &(0x7f00000000c0)={0x2, 0x0, 0x40, 0x0, 0x8}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) close(r2) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="e000000200006e0000003457953f8f794744f0c920d5a846e6cfd5f0080000000000000025768bb1d5000000000000"], 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000004000000040000000800000004080000ef456d614867368495ef75e578b5278290d90be6286405ed3e67939a1b7d4a4b2b183814", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES16=r5, @ANYBLOB='\x00'/28], 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'bpf\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}}, 0x0) 4m32.676837713s ago: executing program 5 (id=2847): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x7b9c, 0x1, 0x1, 0x1e}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000000c0)={0xa, 0x0, 0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x7f}, 0x80}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0xfffffc43) socket$nl_route(0x10, 0x3, 0x0) 4m32.186683657s ago: executing program 1 (id=2850): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905899b"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x18, 0x0, 0x1) syz_genetlink_get_family_id$l2tp(0x0, r4) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x4000005) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x40, 0x1) r5 = openat(0xffffffffffffff9c, 0x0, 0x1c1202, 0x0) timer_create(0x2, 0x0, &(0x7f0000000100)) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) openat$adsp1(0xffffff9c, &(0x7f00000000c0), 0x100, 0x0) mount$cgroup2(0x0, &(0x7f0000000600)='./bus\x00', &(0x7f0000000700), 0x8080, &(0x7f0000000280)=ANY=[@ANYBLOB="6e7364656c65676174652c6d656d6f7279036c6f63616c6576657a83cc70df11be6a03df6e74732c00"]) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 4m31.517073193s ago: executing program 5 (id=2852): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) umount2(&(0x7f00000001c0)='./cgroup\x00', 0x3) (async) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 4m31.236921717s ago: executing program 5 (id=2853): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="23af95c4d83c18cbd81291a651976662b63ba4dcb1dc27cb066793353a30fa5fa163b56b15111d6cf657b9ee6903d2e975cf854950ef6022156f50bd957ffce445c9ce423be36eb9fbfa72aae99873fb6b65e73cf955811a86684d51dfac3a1ba4384e", 0x63}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r8, @rand_addr=0x64010102, @local}}}], 0x40}}, {{&(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000003c0)="35ce7d8aa78e34b763ac96cc0d579afc7f77c17f0517b464e8ed329e68be26c91e21cb1c3b05bf8b68e4b2e9080fe0e847b3cb0ea83b52f2e7b15d3668392847bef990efaa80ad6881d0aebfde8240c89553b62cce7056ba0130b063e4ed66", 0x5f}, {&(0x7f0000000500)="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", 0xfa}, {&(0x7f0000000600)="0cc1a284f2b1026f86a424d7135c07259ae0422140ff992f5da39d7041a2eb0ec769f6589107a7607a8a2911cf5aa1ac5f4e62c863957ba498ec211330cc6dbea3d91224f41504c88dde266314a95253f6d7ac697a43f61b4f68c278fe7cbdb3b2eb6be286507c836ce47071a1fc7eaf2937471e66b5780f7aa743b0d7b9ae083c81bb22d3cccf919f0de9771aa15514bcf9e09f9cd20284b91046c4ce917f3c3d232faae69718107233bbc81d88dc9ff27f7112967a5dd81861d2c5b46d5361cea0b0", 0xc3}, {&(0x7f0000000700)="d829543d58ed27bc4e7cf12c5c41a2801c16ef8f128bbe3b759f942c783a73507e42330cfa4faf3b2c8964d410a31cdc5cc95a680d6936bcb68879987cbf9ff95e74fe7be2e51fbb76cc3acd41a79ca615ea5db8438c963926264766fc7d26ff8b0113108da67f218b32c193789e94e4fa8e11d7c0914bf7a160a6f03e0c4911fefc7446abff96719503125906e1954acf05f83d420a507a39a091f071d06a4ef479b8", 0xa3}, {&(0x7f0000000440)="90ab1009b29b3aee0442f863ab0ff49abcd2af2e6e8736b177be822be9215cc250dccb4a3ef5666c619214fe99bbc5c992bc57a4190334a5d8ed4abaa6f3965c84285979f1a71042dbf648dca77f9c8ef7d5a2b6425b96ba9313e29e75794abc0d95cd97bf5d8bd570856bd489", 0x6d}, {&(0x7f0000000880)="fdac4933714fd96ef06f3b2277ba4cf693c3b16f4e392926e5e2a20b9e7b3b92f3d9bacdd22dfb972697e823f4fd7cac2a556c5f98187734bb36ad39b4ea2d9d93e9144809781d615b1e3d612fec4c93082d6f0689eb1dd37c782eb425b2665d9223dca606271200819b3beb8430137ee79ea2bc52bd0003b45963e2124c0dcc7ae434a2c5b4def89297ba56aa1d14556758a0d480d311b2d0037e521c", 0x9d}, {&(0x7f00000007c0)="0f7bb9d772a8f3ccf5aca372eed421c3f45e7f0f7cd0509a47f2621a170b358d8fbd9b6e24501a5a81665aa1ddbf1fd973e5104e7bc56cafe9ce099a23696b95d842db0b655c899792587ab4c018f03e8b7685cbee8a79fc700b225d46b8292175bc9e09187b", 0x66}, {&(0x7f0000000940)="3f160be17365d53f52c0052d51ee7640f2f4f533be7e1b8812ffef927ee30fbefef3153e5943591bcf78ac4d433f911184700085c7c3301a7eb73aff49e5b4d7945f01760cd8545ae266057466b9c0e277352df142780bcf7dcc043302259023fabb61c120011699bead407a17cb2edcde649653919a4a3b9e271b54ce7da0fc13cd625df4312d88f0b06e6f065c7b9ea882170eeda9ab8f8d7ee83a7d5038b25b05", 0xa2}, {&(0x7f0000000a00)="fbd0879aad7a6aea4787b0ef3bb54aaf666cbb96bf26ffbbdd99ab45efd761c30acbfe25c1adc82a32afa5516b53df1fca7054ad86a13eed96d7fedd47c17a47d6fb40e84c8ea69f4a8dda8bbc25c4b4b2ad113ba4f453243bf1bbf2370c7fa37b7afe4006ddfe7fe7e2f2b73dafc7a73df89197f7da0962f7c6638bad9be8c91a0344e28cf196a3c1bf0606da9b94dbe73b2ebd86bb08e3fed2a4f423e57acf83d0c6e71576988b1f56", 0xaa}, {&(0x7f0000000ac0)="e9f031aad601a315d7554ed4aa2f1d9aade73d380bcf81ed1b3e5c280b73c60659ddfcb3f4ef538b7f6d75aef1c6c5015993cf3ec5a0a7fdbf34cb0239d6a94c824c8b91c5169c39bae78c68b799dc09b2045b81b2d8ff9408d45850ccb1e00f2b43c9078ef36441b4", 0x69}], 0xa, &(0x7f0000000bc0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9f}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x72, 0x1, 0x7, [{@remote, 0x315}, {@private=0xa010100, 0x8}, {@local, 0x8}, {@empty, 0x1}, {@rand_addr=0x64010100, 0x10000}, {@local, 0x5}]}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xb, "1a6fe680b1dea2e572"}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x89, 0x3, ';'}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @broadcast, @rand_addr=0x64010102}}}], 0xa8}}], 0x2, 0x4000001) 4m30.674540537s ago: executing program 8 (id=2856): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1fd, 0x1, 0xdddd1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x2, 0x80a0000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000380)={0x7, 0x1, 0x0, "6eccdf9b2ed51e03e6cdde42e5b9b568a530b0f30894c86c95a533c225abce37"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100007800c000080080003400000000214000000100001000000e011f700000000000000"], 0xe0}}, 0x0) setfsgid(0xee00) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) fchdir(0xffffffffffffffff) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x9e, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r7, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x80a0000, 0x1000, &(0x7f0000fd3000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xa) 4m30.25561701s ago: executing program 7 (id=2857): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000001c0)=""/4096, 0x1000, 0x0, &(0x7f00000011c0)=""/98, 0x62}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r5, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) 4m29.715595455s ago: executing program 5 (id=2858): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000480)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close_range(r1, r1, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x36a3, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x3, 0xfefffffd}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3, 0x0, 0x9}, 0x18) openat$fb1(0xffffffffffffff9c, 0x0, 0x102, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x46}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r5 = syz_clone(0x26020000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r5, 0x6, &(0x7f00000007c0)={0x1b, 0x0, 0xefffffc0}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40585414, &(0x7f00000000c0)={0x2, 0x0, 0x40, 0x0, 0x8}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) close(r2) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="e000000200006e0000003457953f8f794744f0c920d5a846e6cfd5f0080000000000000025768bb1d5000000000000"], 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000004000000040000000800000004080000ef456d614867368495ef75e578b5278290d90be6286405ed3e67939a1b7d4a4b2b183814", @ANYRES32, @ANYBLOB="02000000000000000000", @ANYRES32=0x0, @ANYRES16=r5, @ANYBLOB='\x00'/28], 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'bpf\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}}, 0x0) 4m29.554372621s ago: executing program 8 (id=2859): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000004c0)={0x7e, 0x43353039, 0x3, @stepwise={0x3, 0x2, 0x8, 0x8, 0x0, 0x1ff}}) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000004c0)={0x7e, 0x43353039, 0x3, @stepwise={0x3, 0x2, 0x8, 0x8, 0x0, 0x1ff}}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000002008d0000000800009f03830000000000000000000000000000910000000000000000000000003d7abc807f0cbbb3a6"], 0x44) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) (async) sendmmsg$inet(r2, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) membarrier(0x40, 0x0) membarrier(0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=@newtaction={0x428, 0x30, 0x100, 0x0, 0x0, {}, [{0x414, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x128, 0x17, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4e, 0x9, 0x3, 0x9, 0x80000000}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0xf, 0x0, 0x80, 0x3}, 0x9}}]}, {0xbd, 0x6, "b9c710f02fc213bb3b593ff90d610b574668c8407228bbd1059dd9171618cfae5205263964cc3d2cf2141394d56ea465ca66619c77f70bf7cf89d7ac84564fa118dc54cdfc379c876e3822fafeede549de6f076cc94dd2a13a13fabd367c04981fea145ce910d8259ee0c6b9b4891615abe40635fa9c7b1207eaad54ebfa02ee16f8550da1bb7a42ae2c56272186dc854c1b9e0314c3927bd41922bd5db6cdc3056d8f53be40a7a453e01d1aa57bf0e1a8e9e879b5d34f1469"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x140, 0x14, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x1}, @TCA_CT_NAT_PORT_MIN={0xffffffffffffff0f, 0xd, 0x4e21}, @TCA_CT_LABELS={0x14, 0x7, "4de30fa1e5b820bbca8f3cf1c8e46a00"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "6b84e7ea27311ad3879acbfc00c7a632"}, @TCA_CT_MARK={0x8, 0x5, 0x27}, @TCA_CT_ZONE={0x6, 0x4, 0x75d0}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}]}, {0xb8, 0x6, "f344a580b4e6474c96703ca72718db9bf262f00861d1f5b0b7b613178cef577ff8941352e27bf5d1ba0db1e4fcfc222d6809181b95a9d0935fb8339268ee8a226a24ebf03d4faab7edef27a66a0fe4bf4d504a497a7ff14d98c205d45554751f4125b3c60f6756db36594ea790b26afa2448c10bb58dac9db10b09fbeaa312a8c295df239f60c86cf04aba89f448730d8097c4e8ce6f88dc4dda39cae34754d72440571af610e0d8555320b1617d56ad64eafdb3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x164, 0x2, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0xe4, 0xd, 0x5, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x5, 0x9, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0xc03, 0x0, 0x4f, 0x3ff}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x0, 0x5, 0x9, 0x10000}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x1, 0xff, 0x2}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb7b1, 0xc91, 0x6, 0xd0, 0x2}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x0, 0x80, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7f, 0x3, 0x9f3, 0x208}, 0x100}}]}, {0x53, 0x6, "ead3b1218cb7c4a9abfe8bac0468aec4035d0a36f518974d18ef4aaf0169f93f4c7cfcc6341141ce5f76db150081c560ae8f64423b3c597bb14daf007c06887a96c1e2dd0cff5627f430213bda3a0f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x428}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) (async) syz_usbip_server_init(0x6) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) (async) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m29.293378806s ago: executing program 7 (id=2860): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000100f2aff4ec00000d000000185b00000a0000000000000000000000d52d100009000000185400000500000000000000000000009500020000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018400000f8ffffff000000000000000095000000000000003ec0baefd668939f0d61da528d5c1ee0c38e887c7cecd72c8b7f45fee72903292d3a9f00e56161fe03b7fa590961f739e75ccaa8945c9c03a43f9ffaaeb0f0637e41a08f2b193531101b90a2bbc83ea0ce619e"], &(0x7f0000000040)='GPL\x00', 0xa, 0x95, &(0x7f00000003c0)=""/149, 0x41000, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x7, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x2, 0x2, 0x2, 0x8}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffd85) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000080)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x80) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) mkdir(0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = getpid() process_vm_readv(r6, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r5}, 0x8) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r8, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r10, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r9, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 4m28.878289785s ago: executing program 1 (id=2861): socket$xdp(0x2c, 0x3, 0x0) (async) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) socket$inet_udplite(0x2, 0x2, 0x88) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 4m28.489054178s ago: executing program 8 (id=2862): syz_open_dev$vcsa(&(0x7f0000000300), 0xb523f08, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x3, 0x7}, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0x1000) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) umount2(&(0x7f0000000100)='./file0\x00', 0x8) syz_open_dev$sndpcmp(0x0, 0x1, 0x40842) 4m28.434535259s ago: executing program 5 (id=2863): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000380)=[{0x0}], 0x1, 0x6, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x1020, @remote}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x5}]}, &(0x7f0000000140)=0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8, {0x1ff, 0x5}}, './file0\x00'}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000000)='./file0\x00', r9, 0x4000, r10}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 4m27.324751974s ago: executing program 7 (id=2864): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0900000000000035090100000000009500000000001900b7020000000000007b9af8ff0000000065090000000000007baaf0ff00000000ad9900000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000200000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m27.321713479s ago: executing program 7 (id=2865): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x401, 0x4, 0x400003, 0x4, "3ecc44443dff03f9d300"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xb) r1 = openat$vcs(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f00000004c0)={{&(0x7f0000000440)={'Accelerator0\x00', {}, {&(0x7f00000003c0)={'Accelerator1\x00', {&(0x7f0000000300)=@adf_hex={@bank={'Bank', '3', 'CoreAffinity\x00'}, {0x3}, {&(0x7f0000000240)=@adf_str={@normal='NumberCyInstances\x00', {"56a06482837e40caa5f5b0155a934a7d8e705cb7327555b12dd61db0635082f1d95b706951079ef970be6bf8bacfb586e5e64f5c304d98ddfa9ec71f491ba680"}}}}}}}}}, 0x41}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x60) 4m27.224062416s ago: executing program 7 (id=2866): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp}, 0xc1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181242, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) read$msr(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) openat$uinput(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) sched_getattr(r3, &(0x7f0000000080)={0x38}, 0x38, 0x0) socket$netlink(0x10, 0x3, 0xf) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102384, 0x18ff0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioperm(0x6, 0x88, 0x8) r6 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x6, 0x2, 0x2, '\x00', 0x100000001}) r7 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xd811, 0x10100, 0x0, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000002c0)=0x10000) 4m26.346163398s ago: executing program 7 (id=2867): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="23af95c4d83c18cbd81291a651976662b63ba4dcb1dc27cb066793353a30fa5fa163b56b15111d6cf657b9ee6903d2e975cf854950ef6022156f50bd957ffce445c9ce423be36eb9fbfa72aae99873fb6b65e73cf955811a86684d51dfac3a1ba4384e", 0x63}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r8, @rand_addr=0x64010102, @local}}}], 0x40}}, {{&(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000003c0)="35ce7d8aa78e34b763ac96cc0d579afc7f77c17f0517b464e8ed329e68be26c91e21cb1c3b05bf8b68e4b2e9080fe0e847b3cb0ea83b52f2e7b15d3668392847bef990efaa80ad6881d0aebfde8240c89553b62cce7056ba0130b063e4ed66", 0x5f}, {&(0x7f0000000500)="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", 0xfa}, {&(0x7f0000000600)="0cc1a284f2b1026f86a424d7135c07259ae0422140ff992f5da39d7041a2eb0ec769f6589107a7607a8a2911cf5aa1ac5f4e62c863957ba498ec211330cc6dbea3d91224f41504c88dde266314a95253f6d7ac697a43f61b4f68c278fe7cbdb3b2eb6be286507c836ce47071a1fc7eaf2937471e66b5780f7aa743b0d7b9ae083c81bb22d3cccf919f0de9771aa15514bcf9e09f9cd20284b91046c4ce917f3c3d232faae69718107233bbc81d88dc9ff27f7112967a5dd81861d2c5b46d5361cea0b0", 0xc3}, {&(0x7f0000000700)="d829543d58ed27bc4e7cf12c5c41a2801c16ef8f128bbe3b759f942c783a73507e42330cfa4faf3b2c8964d410a31cdc5cc95a680d6936bcb68879987cbf9ff95e74fe7be2e51fbb76cc3acd41a79ca615ea5db8438c963926264766fc7d26ff8b0113108da67f218b32c193789e94e4fa8e11d7c0914bf7a160a6f03e0c4911fefc7446abff96719503125906e1954acf05f83d420a507a39a091f071d06a4ef479b8", 0xa3}, {&(0x7f0000000440)="90ab1009b29b3aee0442f863ab0ff49abcd2af2e6e8736b177be822be9215cc250dccb4a3ef5666c619214fe99bbc5c992bc57a4190334a5d8ed4abaa6f3965c84285979f1a71042dbf648dca77f9c8ef7d5a2b6425b96ba9313e29e75794abc0d95cd97bf5d8bd570856bd489", 0x6d}, {&(0x7f0000000880)="fdac4933714fd96ef06f3b2277ba4cf693c3b16f4e392926e5e2a20b9e7b3b92f3d9bacdd22dfb972697e823f4fd7cac2a556c5f98187734bb36ad39b4ea2d9d93e9144809781d615b1e3d612fec4c93082d6f0689eb1dd37c782eb425b2665d9223dca606271200819b3beb8430137ee79ea2bc52bd0003b45963e2124c0dcc7ae434a2c5b4def89297ba56aa1d14556758a0d480d311b2d0037e521c", 0x9d}, {&(0x7f00000007c0)="0f7bb9d772a8f3ccf5aca372eed421c3f45e7f0f7cd0509a47f2621a170b358d8fbd9b6e24501a5a81665aa1ddbf1fd973e5104e7bc56cafe9ce099a23696b95d842db0b655c899792587ab4c018f03e8b7685cbee8a79fc700b225d46b8292175bc9e09187b", 0x66}, {&(0x7f0000000940)="3f160be17365d53f52c0052d51ee7640f2f4f533be7e1b8812ffef927ee30fbefef3153e5943591bcf78ac4d433f911184700085c7c3301a7eb73aff49e5b4d7945f01760cd8545ae266057466b9c0e277352df142780bcf7dcc043302259023fabb61c120011699bead407a17cb2edcde649653919a4a3b9e271b54ce7da0fc13cd625df4312d88f0b06e6f065c7b9ea882170eeda9ab8f8d7ee83a7d5038b25b05", 0xa2}, {&(0x7f0000000a00)="fbd0879aad7a6aea4787b0ef3bb54aaf666cbb96bf26ffbbdd99ab45efd761c30acbfe25c1adc82a32afa5516b53df1fca7054ad86a13eed96d7fedd47c17a47d6fb40e84c8ea69f4a8dda8bbc25c4b4b2ad113ba4f453243bf1bbf2370c7fa37b7afe4006ddfe7fe7e2f2b73dafc7a73df89197f7da0962f7c6638bad9be8c91a0344e28cf196a3c1bf0606da9b94dbe73b2ebd86bb08e3fed2a4f423e57acf83d0c6e71576988b1f56", 0xaa}, {&(0x7f0000000ac0)="e9f031aad601a315d7554ed4aa2f1d9aade73d380bcf81ed1b3e5c280b73c60659ddfcb3f4ef538b7f6d75aef1c6c5015993cf3ec5a0a7fdbf34cb0239d6a94c824c8b91c5169c39bae78c68b799dc09b2045b81b2d8ff9408d45850ccb1e00f2b43c9078ef36441b4", 0x69}], 0xa, &(0x7f0000000bc0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9f}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x72, 0x1, 0x7, [{@remote, 0x315}, {@private=0xa010100, 0x8}, {@local, 0x8}, {@empty, 0x1}, {@rand_addr=0x64010100, 0x10000}, {@local, 0x5}]}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xb, "1a6fe680b1dea2e572"}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x89, 0x3, ';'}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @broadcast, @rand_addr=0x64010102}}}], 0xa8}}], 0x2, 0x4000001) 4m22.341534456s ago: executing program 8 (id=2868): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0900000000000035090100000000009500000000001900b7020000000000007b9af8ff0000000065090000000000007baaf0ff00000000ad9900000000000007130000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m22.281777274s ago: executing program 8 (id=2869): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/254, 0xfe}], 0x1) timerfd_create(0x9, 0x80000) (async) syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0xb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x80}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x40000c0) (async) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) (rerun: 64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r5, 0x8800000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (rerun: 64) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x214, 0xf0, 0x11, 0x148, 0xf0, 0x0, 0x180, 0x2a8, 0x2a8, 0x180, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {}, {}, 0x67, 0x3, 0x2}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@ttl={{0x24}, {0x0, 0x9}}, @common=@unspec=@limit={{0x3c}, {0x10001, 0x2, 0xa, 0x8, 0x5, 0x4}}]}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'macvtap0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x270) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 4m21.540375249s ago: executing program 8 (id=2870): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x48002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0xc000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000780)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r6, &(0x7f0000000880), 0x10) connect$unix(r6, 0x0, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x4e27, 0x5, 0x3, 0x40300000, 0xe7, 0x8, 0x8, 0xa82, 0xff46, 0x100, 0xcf3, 0xb, 0x1db, 0x2, 0x6, 0x101, 0x10001, 0x10087, 0x3, 0x0, 0x2, 0x80000001, 0xf23, 0x2000007, 0xb, 0xbfd, 0x3c, 0x5, 0x6, 0x0, 0xfffffff8]}) 4m19.480599828s ago: executing program 1 (id=2871): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000480)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close_range(r1, r1, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x36a3, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x3, 0xfefffffd}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3, 0x0, 0x9}, 0x18) openat$fb1(0xffffffffffffff9c, 0x0, 0x102, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x46}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r5 = syz_clone(0x26020000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r5, 0x6, &(0x7f00000007c0)={0x1b, 0x0, 0xefffffc0}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40585414, &(0x7f00000000c0)={0x2, 0x0, 0x40, 0x0, 0x8}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) close(r2) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="e000000200006e0000003457953f8f794744f0c920d5a846e6cfd5f0080000000000000025768bb1d5000000000000"], 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000004000000040000000800000004080000ef456d614867368495ef75e578b5278290d90be6286405ed3e67939a1b7d4a4b2b183814", @ANYRES32, @ANYBLOB="02000000000000000000", @ANYRES32=0x0, @ANYRES16=r5, @ANYBLOB='\x00'/28], 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'bpf\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}}, 0x0) 4m13.218041518s ago: executing program 37 (id=2863): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x301880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000380)=[{0x0}], 0x1, 0x6, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x1020, @remote}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x5}]}, &(0x7f0000000140)=0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r8, {0x1ff, 0x5}}, './file0\x00'}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000000)='./file0\x00', r9, 0x4000, r10}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 4m11.21389507s ago: executing program 38 (id=2867): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="23af95c4d83c18cbd81291a651976662b63ba4dcb1dc27cb066793353a30fa5fa163b56b15111d6cf657b9ee6903d2e975cf854950ef6022156f50bd957ffce445c9ce423be36eb9fbfa72aae99873fb6b65e73cf955811a86684d51dfac3a1ba4384e", 0x63}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r8, @rand_addr=0x64010102, @local}}}], 0x40}}, {{&(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000003c0)="35ce7d8aa78e34b763ac96cc0d579afc7f77c17f0517b464e8ed329e68be26c91e21cb1c3b05bf8b68e4b2e9080fe0e847b3cb0ea83b52f2e7b15d3668392847bef990efaa80ad6881d0aebfde8240c89553b62cce7056ba0130b063e4ed66", 0x5f}, {&(0x7f0000000500)="992400d4b0829c90bcaa17ac944bfee84e8321bba8e628a30f294a31b2afbe5dfe695958cdb3d9a6b57ea005129c36b8e5b13fbe482f081bb8e01ba2b64e05463bc5395178b822398515c059c7fab469ed123110b0c3970c69d32fb819daa3691649817d68419c61e8e947e15f445e8feb24a247c8fb609a7d450f848ce4f45ead11afccba0660cabde4070576faafa5fcadab6f518d5b472f98a3297ea149c92687827a0cc62aa2149ec11eafa90f9fdeb7fc96b3da40ebb2bbaeca58d23c3d4f20b382964c448f93507b9636e063a3b7d6ff522e29249e55cfeba3ba1bd4657f88e30657f1f51e3bbe5653aa1af11710c4a71052e415d8c721", 0xfa}, {&(0x7f0000000600)="0cc1a284f2b1026f86a424d7135c07259ae0422140ff992f5da39d7041a2eb0ec769f6589107a7607a8a2911cf5aa1ac5f4e62c863957ba498ec211330cc6dbea3d91224f41504c88dde266314a95253f6d7ac697a43f61b4f68c278fe7cbdb3b2eb6be286507c836ce47071a1fc7eaf2937471e66b5780f7aa743b0d7b9ae083c81bb22d3cccf919f0de9771aa15514bcf9e09f9cd20284b91046c4ce917f3c3d232faae69718107233bbc81d88dc9ff27f7112967a5dd81861d2c5b46d5361cea0b0", 0xc3}, {&(0x7f0000000700)="d829543d58ed27bc4e7cf12c5c41a2801c16ef8f128bbe3b759f942c783a73507e42330cfa4faf3b2c8964d410a31cdc5cc95a680d6936bcb68879987cbf9ff95e74fe7be2e51fbb76cc3acd41a79ca615ea5db8438c963926264766fc7d26ff8b0113108da67f218b32c193789e94e4fa8e11d7c0914bf7a160a6f03e0c4911fefc7446abff96719503125906e1954acf05f83d420a507a39a091f071d06a4ef479b8", 0xa3}, {&(0x7f0000000440)="90ab1009b29b3aee0442f863ab0ff49abcd2af2e6e8736b177be822be9215cc250dccb4a3ef5666c619214fe99bbc5c992bc57a4190334a5d8ed4abaa6f3965c84285979f1a71042dbf648dca77f9c8ef7d5a2b6425b96ba9313e29e75794abc0d95cd97bf5d8bd570856bd489", 0x6d}, {&(0x7f0000000880)="fdac4933714fd96ef06f3b2277ba4cf693c3b16f4e392926e5e2a20b9e7b3b92f3d9bacdd22dfb972697e823f4fd7cac2a556c5f98187734bb36ad39b4ea2d9d93e9144809781d615b1e3d612fec4c93082d6f0689eb1dd37c782eb425b2665d9223dca606271200819b3beb8430137ee79ea2bc52bd0003b45963e2124c0dcc7ae434a2c5b4def89297ba56aa1d14556758a0d480d311b2d0037e521c", 0x9d}, {&(0x7f00000007c0)="0f7bb9d772a8f3ccf5aca372eed421c3f45e7f0f7cd0509a47f2621a170b358d8fbd9b6e24501a5a81665aa1ddbf1fd973e5104e7bc56cafe9ce099a23696b95d842db0b655c899792587ab4c018f03e8b7685cbee8a79fc700b225d46b8292175bc9e09187b", 0x66}, {&(0x7f0000000940)="3f160be17365d53f52c0052d51ee7640f2f4f533be7e1b8812ffef927ee30fbefef3153e5943591bcf78ac4d433f911184700085c7c3301a7eb73aff49e5b4d7945f01760cd8545ae266057466b9c0e277352df142780bcf7dcc043302259023fabb61c120011699bead407a17cb2edcde649653919a4a3b9e271b54ce7da0fc13cd625df4312d88f0b06e6f065c7b9ea882170eeda9ab8f8d7ee83a7d5038b25b05", 0xa2}, {&(0x7f0000000a00)="fbd0879aad7a6aea4787b0ef3bb54aaf666cbb96bf26ffbbdd99ab45efd761c30acbfe25c1adc82a32afa5516b53df1fca7054ad86a13eed96d7fedd47c17a47d6fb40e84c8ea69f4a8dda8bbc25c4b4b2ad113ba4f453243bf1bbf2370c7fa37b7afe4006ddfe7fe7e2f2b73dafc7a73df89197f7da0962f7c6638bad9be8c91a0344e28cf196a3c1bf0606da9b94dbe73b2ebd86bb08e3fed2a4f423e57acf83d0c6e71576988b1f56", 0xaa}, {&(0x7f0000000ac0)="e9f031aad601a315d7554ed4aa2f1d9aade73d380bcf81ed1b3e5c280b73c60659ddfcb3f4ef538b7f6d75aef1c6c5015993cf3ec5a0a7fdbf34cb0239d6a94c824c8b91c5169c39bae78c68b799dc09b2045b81b2d8ff9408d45850ccb1e00f2b43c9078ef36441b4", 0x69}], 0xa, &(0x7f0000000bc0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9f}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x72, 0x1, 0x7, [{@remote, 0x315}, {@private=0xa010100, 0x8}, {@local, 0x8}, {@empty, 0x1}, {@rand_addr=0x64010100, 0x10000}, {@local, 0x5}]}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xb, "1a6fe680b1dea2e572"}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x89, 0x3, ';'}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @broadcast, @rand_addr=0x64010102}}}], 0xa8}}], 0x2, 0x4000001) 4m6.210500567s ago: executing program 39 (id=2870): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x48002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0xc000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000780)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r6, &(0x7f0000000880), 0x10) connect$unix(r6, 0x0, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x4e27, 0x5, 0x3, 0x40300000, 0xe7, 0x8, 0x8, 0xa82, 0xff46, 0x100, 0xcf3, 0xb, 0x1db, 0x2, 0x6, 0x101, 0x10001, 0x10087, 0x3, 0x0, 0x2, 0x80000001, 0xf23, 0x2000007, 0xb, 0xbfd, 0x3c, 0x5, 0x6, 0x0, 0xfffffff8]}) 4m3.707837865s ago: executing program 40 (id=2871): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000480)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close_range(r1, r1, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x36a3, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x3, 0xfefffffd}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3, 0x0, 0x9}, 0x18) openat$fb1(0xffffffffffffff9c, 0x0, 0x102, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x46}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r5 = syz_clone(0x26020000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r5, 0x6, &(0x7f00000007c0)={0x1b, 0x0, 0xefffffc0}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40585414, &(0x7f00000000c0)={0x2, 0x0, 0x40, 0x0, 0x8}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) close(r2) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="e000000200006e0000003457953f8f794744f0c920d5a846e6cfd5f0080000000000000025768bb1d5000000000000"], 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000004000000040000000800000004080000ef456d614867368495ef75e578b5278290d90be6286405ed3e67939a1b7d4a4b2b183814", @ANYRES32, @ANYBLOB="02000000000000000000", @ANYRES32=0x0, @ANYRES16=r5, @ANYBLOB='\x00'/28], 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'bpf\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}}, 0x0) 3m7.132046583s ago: executing program 0 (id=3012): r0 = socket(0x10, 0x5, 0xfff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f00000008c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) 3m7.131177656s ago: executing program 0 (id=3013): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002b80)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000040)='@', 0x1}], 0x1, &(0x7f0000001480)=[@prinfo={0x14, 0x84, 0x5, {0x20}}, @sndinfo={0x1c, 0x84, 0x2, {0x0, 0x2}}], 0x30}], 0x1, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) (async) r3 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r3, 0x207a98, 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000a400)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r6, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x3, 0x1, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r8, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) (async) writev(r8, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 3m6.90157431s ago: executing program 0 (id=3014): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0900000000000035090100000000009500000000001900b7020000000000007b9af8ff0000000065090000000000007baaf0ff00000000ad9900000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000b0ffffff0000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m6.832716539s ago: executing program 0 (id=3015): r0 = syz_io_uring_setup(0x8bb, &(0x7f00000000c0)={0x0, 0x7069, 0x1, 0x2, 0x2fc}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x15, @random="e62166ef05ef", 'vcan0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r4 = socket(0x200000000000011, 0x2, 0x1) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3d, 0x8, 0x2}, 0x48) fgetxattr(r5, &(0x7f0000000380)=@known='system.posix_acl_access\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x202, &(0x7f0000000040)={0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x6}, {0xffff}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000028c0)={0x14c, 0x0, &(0x7f0000002700)=[@dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002400)={@ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/150, 0x96, 0x1, 0x1f}, @ptr={0x70742a85, 0x1, &(0x7f0000001400)=""/4096, 0x1000, 0x0, 0x29}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/33, 0x21, 0x1, 0xce9}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}, 0x400}, @enter_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000024c0)={@ptr={0x70742a85, 0x0, &(0x7f0000002480)=""/3, 0x3, 0x1, 0x14}, @flat=@weak_binder={0x77622a85, 0x10a}, @flat=@weak_handle={0x77682a85, 0x1001, 0x2}}, &(0x7f0000002540)={0x0, 0x28, 0x40}}}, @clear_death={0x400c630f, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002580)={@fda={0x66646185, 0x9, 0x0, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000002600)={0x0, 0x1c, 0x34}}}, @enter_looper, @increfs, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002640)={@fda={0x66646185, 0x2, 0x1, 0x29}, @fda={0x66646185, 0x6, 0x2, 0x17}, @flat=@weak_binder={0x77622a85, 0xe, 0x3}}, &(0x7f00000026c0)={0x0, 0x1c, 0x38}}, 0x400}], 0x36, 0x0, &(0x7f0000002880)="9d9146a2b2aebab6ae4ed4d31b5879b095f9a419cdb18b3e2ed7e9dbe057d753bd90b8c0310d41410a239f9cff4333a1e8ee27c3c834"}) getdents64(r6, &(0x7f0000000400)=""/4096, 0x1000) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000010240)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) sync_file_range(r4, 0x3, 0xc719, 0x6) 3m6.65230278s ago: executing program 0 (id=3016): io_setup(0x9, &(0x7f0000000b80)=0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x101400, 0x0) syz_open_dev$video(0x0, 0x7efffffe, 0x101302) socket(0x2a, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a02000000fffd180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008b9f922108574317f381dad08440000300012800b00010067656e6576650000200002800500030004000000140007000000000000000000", @ANYRES32=r8, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) setrlimit(0x7, &(0x7f0000000640)) 3m6.341832484s ago: executing program 0 (id=3018): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014001680100008800c00028008"], 0x38}}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x5c}}, 0x0) (async, rerun: 64) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) (async, rerun: 64) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32) syz_io_uring_setup(0x2c61, &(0x7f0000000200)={0x0, 0x6f5e, 0x100, 0x3, 0x149}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x80, &(0x7f0000000300)=0x2, 0x0, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000)=0x5, 0x4) (async, rerun: 32) openat$nullb(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) r5 = dup(r4) write$6lowpan_enable(r5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x2000000000000288, &(0x7f0000000700)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b63051"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x6}, 0x94) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)=0x8000000) (async, rerun: 64) r6 = dup(0xffffffffffffffff) (rerun: 64) write$UHID_INPUT(r6, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d52f90b9b6e0987f70e06d038e7ff7fc6e5539b3248298b089b0708346d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1040}}, 0x1006) (async) set_mempolicy(0x4002, &(0x7f0000000140)=0x9, 0x5) 3m6.165794303s ago: executing program 41 (id=3018): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014001680100008800c00028008"], 0x38}}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x5c}}, 0x0) (async, rerun: 64) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) (async, rerun: 64) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32) syz_io_uring_setup(0x2c61, &(0x7f0000000200)={0x0, 0x6f5e, 0x100, 0x3, 0x149}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x80, &(0x7f0000000300)=0x2, 0x0, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000)=0x5, 0x4) (async, rerun: 32) openat$nullb(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) r5 = dup(r4) write$6lowpan_enable(r5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x2000000000000288, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x6}, 0x94) (async) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)=0x8000000) (async, rerun: 64) r6 = dup(0xffffffffffffffff) (rerun: 64) write$UHID_INPUT(r6, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) (async) set_mempolicy(0x4002, &(0x7f0000000140)=0x9, 0x5) 4.153675334s ago: executing program 9 (id=3933): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000300)="580000001500add427323b472545b456020200ffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000040)={0x9, {0x5, 0x2, 0x9, 0x3}}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x5) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) io_setup(0x200, &(0x7f00000010c0)) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x20000000, 0x143d03) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/snmp6\x00') lseek(r5, 0x9, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x330, 0x0, 0x0, 0x148, 0xf0, 0x148, 0x29c, 0x240, 0x240, 0x29c, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'ip6gretap0\x00', 'bond_slave_1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x2}}, @common=@unspec=@connmark={{0x2c}, {0xfffffffc, 0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x3, 0x8, 0x1}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x188, 0x1ac, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x8, 0x0, 0x1, 0x1, 'syz1\x00'}}, @common=@unspec=@state={{0x24}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x0, 0x3ff}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x38c) 3.630276265s ago: executing program 4 (id=3936): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000185802002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) 3.599993089s ago: executing program 4 (id=3937): r0 = syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x20800) readv(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000200)=""/54, 0x36}], 0x2) semctl$IPC_INFO(0x0, 0x2, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0xc1945000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000e40)=[{{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)=""/235, 0xeb}], 0x1, &(0x7f0000000540)=""/192, 0xc0}, 0x8}, {{&(0x7f0000000600)=@nfc, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000700)=""/241, 0xf1}, {&(0x7f0000000900)=""/127, 0x7f}, {&(0x7f0000000980)=""/87, 0x57}, {&(0x7f0000000a00)=""/223, 0xdf}, {&(0x7f0000000380)=""/1, 0x1}, {&(0x7f0000000b00)=""/218, 0xda}, {&(0x7f0000000c00)=""/195, 0xc3}, {&(0x7f0000000d00)=""/192, 0xc0}, {&(0x7f0000000680)}], 0x9, &(0x7f0000000800)=""/30, 0x1e}, 0x7}], 0x2, 0x2, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000008ec0)=ANY=[@ANYBLOB="0c0e0000000501040000000000000000050000075402010084ac89e7030000000300090009000d0073797a3000000000000000000000000000000000000000000000000000000000bbcea6d610"], 0xe0c}, 0x1, 0x0, 0x0, 0xbfd619eeaff13930}, 0x20000080) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x18, 0x3, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x1}, 0x6) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f00000006c0)={0x9, 0x0, '\x00', 0x0, 0x0}) ioctl$sock_bt_hci(r5, 0x800448d7, &(0x7f0000000240)) syz_open_procfs(r2, &(0x7f00000000c0)='net/raw6\x00') r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x7) 3.331076406s ago: executing program 4 (id=3941): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) get_robust_list(r1, 0x0, &(0x7f0000000500)) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.789777274s ago: executing program 9 (id=3944): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000001c0)=""/4096, 0x1000, 0x0, &(0x7f00000011c0)=""/98, 0x62}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r5, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) 2.410846878s ago: executing program 2 (id=3947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) (async) openat$audio(0xffffff9c, &(0x7f00000004c0), 0x800, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) r8 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x3e2}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x0, 0x0}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) (async) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000700)={0x2, 0x0, [{0x0, 0x2, 0x1, 0x0, @adapter={0x10, 0x62e98893, 0x2, 0xfffffbfb, 0x2}}, {0x4, 0x2, 0x0, 0x0, @adapter={0x9, 0xe323, 0x4, 0x2, 0x6}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.329523136s ago: executing program 3 (id=3949): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) mount(0x0, 0x0, 0x0, 0x40078, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="92f5785c7000ffdbdf25110000000800eeff0700000008000300980f441f072b50a7db9aa2f778e6e45ce262bf5e3c71221b5418", @ANYRES32=0x0, @ANYBLOB="0500380000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf255a00000008000300", @ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) setrlimit(0x6, &(0x7f0000000180)={0x6, 0x1fffe}) dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x9) ioperm(0x0, 0x83, 0x1f) gettid() add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "ae8726ab5188a0f5067e3bd54759496126c86baf237e45829712ce015304b94835019543b83b67ddd04d71425cd7e91c2002d71e8c58555fea7b2b3e9571a19f", 0x23}, 0x48, 0xfffffffffffffffd) 2.080335739s ago: executing program 2 (id=3950): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0xfffffffe, 0x2d0}, &(0x7f0000000040), &(0x7f0000000400)) io_uring_enter(r1, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000080)={r1}, 0x1) (rerun: 64) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x32, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x11, r3, 0x646ea000) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe7}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x25702020}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000440)=""/167, 0xa7) (rerun: 32) r5 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72da, 0x800, 0x0, 0x3a8}, &(0x7f0000000140), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x51}, 0x20) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000280)=@multiplanar_overlay={0xfffff001, 0x7, 0x4, 0x10000, 0x8, {}, {0x5, 0xc, 0x22, 0xa7, 0x58, 0x9b, "dae7b783"}, 0xf47b, 0x3, {&(0x7f0000000200)=[{0x80, 0x6, {0x100}, 0x81}, {0xfffffffc, 0x4, {0x3}, 0x5}]}, 0xfffffff0, 0x0, r2}) (async) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)={0x84, 0x16, '\x00', [@hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x9}, @generic={0x10, 0x49, "cbea1fc24c37708f16fd9be308756ab4fe62a9b7b833bcfc3dcdeb3a311e7a4e09f274f0bc3159824a54fd123006f4151dce3d1d650f1517e2b1952eae2f023f0226d503b444671c3f"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x3, 0x33, [0x3, 0x4be, 0x8, 0x6, 0x7f]}}, @enc_lim={0x4, 0x1, 0xa5}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @empty}]}, 0xc0) 1.979011465s ago: executing program 2 (id=3951): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xb, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24004884}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r0, 0x0, 0x4) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x8abb29e09f442f35, 0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@mask_fadd={0x58, 0x114, 0x8, {{0xf, 0x1}, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0x7, 0x3, 0x28, 0x5}}], 0x58}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x6, 0x0, &(0x7f0000000000)="432275040000", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 1.689887382s ago: executing program 2 (id=3952): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(0xffffffffffffffff, r2, 0x80000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="29eabf5f060b5f06e0d662409b", 0xd) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000c80)={0x44, 0x0, &(0x7f0000000ac0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xfdfdffff, &(0x7f0000000bc0)='I'}) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$apparmor_exec(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="65006563203a043416dedef62806ef078df2419df9a1f6aac30db162cfc2202334ca2318e2bfe49eee4632650a6b0f062bf6c301d8533e17ac56491f818be24337f042d3483dea38519d42bcc88617b08429bda01ce020c42c48e51750727db20a9db01c4fc954c8c062610e84ff054ea5d46bc73be34f42ca4a35261baf11786c48675db5d45d494c7850d91a885cbf9e057acc61ed9ef1411ebbba7ce85df7b2f1df6b48301d07da5724ed8b08102fd2"], 0x7) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close(0x3) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0300ffff0000", 0x6}]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r4, @ANYRES16=r10, @ANYBLOB="170900020000000000000100000005000700000000000800090002000000060002000100000008000a000000000008001800e000000208001900ac1414aa"], 0x44}}, 0x4010) 1.689382884s ago: executing program 4 (id=3953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r1, 0x1, 0xfffffffd, 0x0, {0x23}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.689192435s ago: executing program 9 (id=3954): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffd, 0x2, 0x0, @scatter={0x0, 0xf5ff, 0x0}, &(0x7f00000001c0)="a2b2", 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00200008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200020000000800030005ac0f"], 0x58}}, 0x0) 1.629990929s ago: executing program 4 (id=3955): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000fec000/0x12000)=nil, 0x12000, 0xb635773f06ebbeed, 0x80010, 0xffffffffffffffff, 0xce399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0xc48, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x2003, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}]}, 0xc48}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r5, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448e0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r5) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x2) dup(r7) syz_io_uring_submit(0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x48) write$cgroup_int(r8, &(0x7f0000000000)=0xfe8e, 0x12) 1.557810511s ago: executing program 9 (id=3956): sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000100001002abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="80210000000000b80000000000000800fcb9bb362e09cdc89212e0de723f5818aa4e5c36ebbd0ee9c670c6abf5ab66cd3f245ecc19a392a746dd3ba0a3444a40ebf7"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x4, &(0x7f0000000280)=[{0x4, 0x7, 0x8, 0xff}, {0x4, 0x4, 0xf9, 0x1}, {0xf4e, 0x4, 0x0, 0x4}, {0x0, 0x8, 0x2, 0x6}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x85c68e8ab9c77084, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.40626187s ago: executing program 3 (id=3957): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="36894a56cfe51cc53b68e485bea7e8120ba28cfedcbf4f"]) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x10201, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1880000001e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e654b00a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2600000000000000feffffffffff"], 0x0, 0x0, 0x0}) 1.405271348s ago: executing program 2 (id=3958): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000280)="c6a2df5b40a88f13b14b695dcff8bdf91bee7d5d3192038a00d99b16e5cc480a5acfb12448ecd50d96cc503dc30db319dbd926973d11195e8bd225df76d8d3c5d34e68829bb7c5bfcb51f0ab73d2e4500a669b1270c2e96266", 0x59}], 0x1) socket(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) r8 = socket$packet(0x11, 0x3, 0x300) dup3(r7, r8, 0x80000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x4c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000688000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000100)) syz_io_uring_setup(0x608b, &(0x7f0000000140)={0x0, 0x8c36, 0x14, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 1.300279247s ago: executing program 3 (id=3959): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c00)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x7fff, 0x7ff, 0x19, 0x0, 0xb, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="23af95c4d83c18cbd81291a651976662b63ba4dcb1dc27cb066793353a30fa5fa163b56b15111d6cf657b9ee6903d2e975cf854950ef6022156f50bd957ffce445c9ce423be36eb9fbfa72aae99873fb6b65e73cf955811a86684d51dfac3a1ba4384e", 0x63}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r8, @rand_addr=0x64010102, @local}}}], 0x40}}, {{&(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000003c0)="35ce7d8aa78e34b763ac96cc0d579afc7f77c17f0517b464e8ed329e68be26c91e21cb1c3b05bf8b68e4b2e9080fe0e847b3cb0ea83b52f2e7b15d3668392847bef990efaa80ad6881d0aebfde8240c89553b62cce7056ba0130b063e4ed6690", 0x60}, {&(0x7f0000000500)="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", 0xfa}, {&(0x7f0000000600)="0cc1a284f2b1026f86a424d7135c07259ae0422140ff992f5da39d7041a2eb0ec769f6589107a7607a8a2911cf5aa1ac5f4e62c863957ba498ec211330cc6dbea3d91224f41504c88dde266314a95253f6d7ac697a43f61b4f68c278fe7cbdb3b2eb6be286507c836ce47071a1fc7eaf2937471e66b5780f7aa743b0d7b9ae083c81bb22d3cccf919f0de9771aa15514bcf9e09f9cd20284b91046c4ce917f3c3d232faae69718107233bbc81d88dc9ff27f7112967a5dd81861d2c5b46d5361cea0b0", 0xc3}, {&(0x7f0000000700)="d829543d58ed27bc4e7cf12c5c41a2801c16ef8f128bbe3b759f942c783a73507e42330cfa4faf3b2c8964d410a31cdc5cc95a680d6936bcb68879987cbf9ff95e74fe7be2e51fbb76cc3acd41a79ca615ea5db8438c963926264766fc7d26ff8b0113108da67f218b32c193789e94e4fa8e11d7c0914bf7a160a6f03e0c4911fefc7446abff96719503125906e1954acf05f83d420a507a39a091f071d06a4ef479b8", 0xa3}, {&(0x7f0000000440)="90ab1009b29b3aee0442f863ab0ff49abcd2af2e6e8736b177be822be9215cc250dccb4a3ef5666c619214fe99bbc5c992bc57a4190334a5d8ed4abaa6f3965c84285979f1a71042dbf648dca77f9c8ef7d5a2b6425b96ba9313e29e75794abc0d95cd97bf5d8bd570856bd489", 0x6d}, {&(0x7f0000000880)="fdac4933714fd96ef06f3b2277ba4cf693c3b16f4e392926e5e2a20b9e7b3b92f3d9bacdd22dfb972697e823f4fd7cac2a556c5f98187734bb36ad39b4ea2d9d93e9144809781d615b1e3d612fec4c93082d6f0689eb1dd37c782eb425b2665d9223dca606271200819b3beb8430137ee79ea2bc52bd0003b45963e2124c0dcc7ae434a2c5b4def89297ba56aa1d14556758a0d480d311b2d0037e521c", 0x9d}, {&(0x7f00000007c0)="0f7bb9d772a8f3ccf5aca372eed421c3f45e7f0f7cd0509a47f2621a170b358d8fbd9b6e24501a5a81665aa1ddbf1fd973e5104e7bc56cafe9ce099a23696b95d842db0b655c899792587ab4c018f03e8b7685cbee8a79fc700b225d46b8292175bc9e09187b", 0x66}, {&(0x7f0000000940)="3f160be17365d53f52c0052d51ee7640f2f4f533be7e1b8812ffef927ee30fbefef3153e5943591bcf78ac4d433f911184700085c7c3301a7eb73aff49e5b4d7945f01760cd8545ae266057466b9c0e277352df142780bcf7dcc043302259023fabb61c120011699bead407a17cb2edcde649653919a4a3b9e271b54ce7da0fc13cd625df4312d88f0b06e6f065c7b9ea882170eeda9ab8f8d7ee83a7d5038b25b05", 0xa2}, {&(0x7f0000000a00)="fbd0879aad7a6aea4787b0ef3bb54aaf666cbb96bf26ffbbdd99ab45efd761c30acbfe25c1adc82a32afa5516b53df1fca7054ad86a13eed96d7fedd47c17a47d6fb40e84c8ea69f4a8dda8bbc25c4b4b2ad113ba4f453243bf1bbf2370c7fa37b7afe4006ddfe7fe7e2f2b73dafc7a73df89197f7da0962f7c6638bad9be8c91a0344e28cf196a3c1bf0606da9b94dbe73b2ebd86bb08e3fed2a4f423e57acf83d0c6e71576988b1f56", 0xaa}, {&(0x7f0000000ac0)="e9f031aad601a315d7554ed4aa2f1d9aade73d380bcf81ed1b3e5c280b73c60659ddfcb3f4ef538b7f6d75aef1c6c5015993cf3ec5a0a7fdbf34cb0239d6a94c824c8b91c5169c39bae78c68b799dc09b2045b81b2d8ff9408d45850ccb1e00f2b43c9078ef36441b4", 0x69}], 0xa, &(0x7f0000000bc0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9f}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_retopts={{0xc}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xb, "1a6fe680b1dea2e572"}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x89, 0x3, ';'}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @broadcast, @rand_addr=0x64010102}}}], 0x74}}], 0x2, 0x4000001) 660.22142ms ago: executing program 4 (id=3960): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c00)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x7fff, 0x7ff, 0x19, 0x0, 0xb, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="23af95c4d83c18cbd81291a651976662b63ba4dcb1dc27cb066793353a30fa5fa163b56b15111d6cf657b9ee6903d2e975cf854950ef6022156f50bd957ffce445c9ce423be36eb9fbfa72aae99873fb6b65e73cf955811a86684d51dfac3a1ba4384e", 0x63}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r8, @rand_addr=0x64010102, @local}}}], 0x40}}, {{&(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000b40)=[{&(0x7f00000003c0)="35ce7d8aa78e34b763ac96cc0d579afc7f77c17f0517b464e8ed329e68be26c91e21cb1c3b05bf8b68e4b2e9080fe0e847b3cb0ea83b52f2e7b15d3668392847bef990efaa80ad6881d0aebfde8240c89553b62cce7056ba0130b063e4ed6690", 0x60}, {&(0x7f0000000500)="992400d4b0829c90bcaa17ac944bfee84e8321bba8e628a30f294a31b2afbe5dfe695958cdb3d9a6b57ea005129c36b8e5b13fbe482f081bb8e01ba2b64e05463bc5395178b822398515c059c7fab469ed123110b0c3970c69d32fb819daa3691649817d68419c61e8e947e15f445e8feb24a247c8fb609a7d450f848ce4f45ead11afccba0660cabde4070576faafa5fcadab6f518d5b472f98a3297ea149c92687827a0cc62aa2149ec11eafa90f9fdeb7fc96b3da40ebb2bbaeca58d23c3d4f20b382964c448f93507b9636e063a3b7d6ff522e29249e55cfeba3ba1bd4657f88e30657f1f51e3bbe5653aa1af11710c4a71052e415d8c721", 0xfa}, {&(0x7f0000000600)="0cc1a284f2b1026f86a424d7135c07259ae0422140ff992f5da39d7041a2eb0ec769f6589107a7607a8a2911cf5aa1ac5f4e62c863957ba498ec211330cc6dbea3d91224f41504c88dde266314a95253f6d7ac697a43f61b4f68c278fe7cbdb3b2eb6be286507c836ce47071a1fc7eaf2937471e66b5780f7aa743b0d7b9ae083c81bb22d3cccf919f0de9771aa15514bcf9e09f9cd20284b91046c4ce917f3c3d232faae69718107233bbc81d88dc9ff27f7112967a5dd81861d2c5b46d5361cea0b0", 0xc3}, {&(0x7f0000000700)="d829543d58ed27bc4e7cf12c5c41a2801c16ef8f128bbe3b759f942c783a73507e42330cfa4faf3b2c8964d410a31cdc5cc95a680d6936bcb68879987cbf9ff95e74fe7be2e51fbb76cc3acd41a79ca615ea5db8438c963926264766fc7d26ff8b0113108da67f218b32c193789e94e4fa8e11d7c0914bf7a160a6f03e0c4911fefc7446abff96719503125906e1954acf05f83d420a507a39a091f071d06a4ef479b8", 0xa3}, {&(0x7f0000000440)="90ab1009b29b3aee0442f863ab0ff49abcd2af2e6e8736b177be822be9215cc250dccb4a3ef5666c619214fe99bbc5c992bc57a4190334a5d8ed4abaa6f3965c84285979f1a71042dbf648dca77f9c8ef7d5a2b6425b96ba9313e29e75794abc0d95cd97bf5d8bd570856bd489", 0x6d}, {&(0x7f0000000880)="fdac4933714fd96ef06f3b2277ba4cf693c3b16f4e392926e5e2a20b9e7b3b92f3d9bacdd22dfb972697e823f4fd7cac2a556c5f98187734bb36ad39b4ea2d9d93e9144809781d615b1e3d612fec4c93082d6f0689eb1dd37c782eb425b2665d9223dca606271200819b3beb8430137ee79ea2bc52bd0003b45963e2124c0dcc7ae434a2c5b4def89297ba56aa1d14556758a0d480d311b2d0037e521c", 0x9d}, {&(0x7f00000007c0)="0f7bb9d772a8f3ccf5aca372eed421c3f45e7f0f7cd0509a47f2621a170b358d8fbd9b6e24501a5a81665aa1ddbf1fd973e5104e7bc56cafe9ce099a23696b95d842db0b655c899792587ab4c018f03e8b7685cbee8a79fc700b225d46b8292175bc9e09187b", 0x66}, {&(0x7f0000000940)="3f160be17365d53f52c0052d51ee7640f2f4f533be7e1b8812ffef927ee30fbefef3153e5943591bcf78ac4d433f911184700085c7c3301a7eb73aff49e5b4d7945f01760cd8545ae266057466b9c0e277352df142780bcf7dcc043302259023fabb61c120011699bead407a17cb2edcde649653919a4a3b9e271b54ce7da0fc13cd625df4312d88f0b06e6f065c7b9ea882170eeda9ab8f8d7ee83a7d5038b25b05", 0xa2}, {&(0x7f0000000a00)="fbd0879aad7a6aea4787b0ef3bb54aaf666cbb96bf26ffbbdd99ab45efd761c30acbfe25c1adc82a32afa5516b53df1fca7054ad86a13eed96d7fedd47c17a47d6fb40e84c8ea69f4a8dda8bbc25c4b4b2ad113ba4f453243bf1bbf2370c7fa37b7afe4006ddfe7fe7e2f2b73dafc7a73df89197f7da0962f7c6638bad9be8c91a0344e28cf196a3c1bf0606da9b94dbe73b2ebd86bb08e3fed2a4f423e57acf83d0c6e71576988b1f56", 0xaa}, {&(0x7f0000000ac0)="e9f031aad601a315d7554ed4aa2f1d9aade73d380bcf81ed1b3e5c280b73c60659ddfcb3f4ef538b7f6d75aef1c6c5015993cf3ec5a0a7fdbf34cb0239d6a94c824c8b91c5169c39bae78c68b799dc09b2045b81b2d8ff9408d45850ccb1e00f2b43c9078ef36441b4", 0x69}], 0xa, &(0x7f0000000bc0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9f}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_retopts={{0xc}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xb, "1a6fe680b1dea2e572"}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x89, 0x3, ';'}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @broadcast, @rand_addr=0x64010102}}}], 0x74}}], 0x2, 0x4000001) 569.89448ms ago: executing program 9 (id=3961): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x10) ioctl$TCSETA(r0, 0x8924, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) 510.258835ms ago: executing program 9 (id=3962): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) get_robust_list(r1, 0x0, &(0x7f0000000500)) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r6 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 508.059461ms ago: executing program 2 (id=3963): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000001c0)=""/4096, 0x1000, 0x0, &(0x7f00000011c0)=""/98, 0x62}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r5, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) 279.936623ms ago: executing program 3 (id=3964): ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffd, 0x2, 0x0, @scatter={0x0, 0xf5ff, 0x0}, &(0x7f00000001c0)="a2b2", 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00200008000300", @ANYRES32, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200020000000800030005ac0f"], 0x58}}, 0x0) 271.908µs ago: executing program 3 (id=3965): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x30, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) 0s ago: executing program 3 (id=3966): r0 = socket$inet(0x2, 0x800, 0x4) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40) openat$uinput(0xffffff9c, &(0x7f0000000180), 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc}) prlimit64(0x0, 0x1, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r3, r3) setpgid(0x0, r3) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r7 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x340) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000140)) sendto$inet(r0, 0x0, 0xab, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e21, @local}, 0x10) kernel console output (not intermixed with test programs): ibutes in process `syz.0.2915'. [ 620.324974][ T34] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 620.331217][T17614] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2916'. [ 620.561452][T17608] vhci_hcd: connection reset by peer [ 620.564681][ T6410] vhci_hcd vhci_hcd.0: stop threads [ 620.567612][ T6410] vhci_hcd vhci_hcd.0: release socket [ 620.569939][ T6410] vhci_hcd vhci_hcd.0: disconnect device [ 620.612353][T17620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2918'. [ 620.616833][T17620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2918'. [ 620.952932][T17615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2917'. [ 620.956482][T17615] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2917'. [ 621.058197][T17623] binder: 17612:17623 ioctl 0 80000040 returned -22 [ 622.188626][T17657] program syz.0.2929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.365861][T17659] ubi: mtd0 is already attached to ubi31 [ 622.471364][T17661] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 622.481447][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 622.481467][ T40] audit: type=1326 audit(1767335051.678:10208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17660 comm="syz.0.2930" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb3579 code=0x0 [ 622.838528][ T40] audit: type=1326 audit(1767335052.038:10209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17678 comm="syz.3.2937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 622.845408][ T40] audit: type=1326 audit(1767335052.038:10210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17678 comm="syz.3.2937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 622.866337][ T40] audit: type=1326 audit(1767335052.038:10211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17678 comm="syz.3.2937" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 622.875414][ T40] audit: type=1326 audit(1767335052.048:10212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17678 comm="syz.3.2937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 622.883129][ T40] audit: type=1326 audit(1767335052.048:10213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.3.2937" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 622.890137][ T40] audit: type=1326 audit(1767335052.048:10214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17678 comm="syz.3.2937" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 622.939600][T17683] __nla_validate_parse: 1 callbacks suppressed [ 622.939620][T17683] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2936'. [ 622.957822][T17683] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2936'. [ 622.958050][T17686] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 622.964256][T17686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.985122][T17686] vhci_hcd vhci_hcd.0: Device attached [ 622.998050][ T40] audit: type=1326 audit(1767335052.198:10215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.3.2937" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 623.028521][ T40] audit: type=1326 audit(1767335052.228:10216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17678 comm="syz.3.2937" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703d598 code=0x7ffc0000 [ 623.040310][ T40] audit: type=1326 audit(1767335052.228:10217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17678 comm="syz.3.2937" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 623.081108][T17686] netlink: 'syz.0.2934': attribute type 1 has an invalid length. [ 623.149823][T17686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 623.161116][T17700] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2934'. [ 623.398434][T17708] binder: 17705:17708 ioctl 84009422 0 returned -22 [ 623.401283][T17704] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2939'. [ 623.523687][ T59] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 623.688633][T17681] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 623.692998][T17681] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 623.724379][T17681] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 623.814661][T17681] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 623.846551][T17681] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 623.876932][T17681] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 623.931889][T17681] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 623.957551][T17681] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 623.999447][T17681] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 624.041960][T17681] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 624.097608][T17681] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 624.128900][T17681] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 624.224628][ T5950] Bluetooth: hci2: unexpected event 0x32 length: 12 > 9 [ 624.236373][T17687] vhci_hcd: connection closed [ 624.250654][T10719] vhci_hcd vhci_hcd.0: stop threads [ 624.254122][T10719] vhci_hcd vhci_hcd.0: release socket [ 624.256181][T10719] vhci_hcd vhci_hcd.0: disconnect device [ 624.350493][T17725] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2944'. [ 624.767776][T16072] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 624.937228][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 625.417279][ T34] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 625.450527][T17762] 9p: Unknown Cache mode or invalid value fscach [ 625.817515][ T5950] Bluetooth: hci6: command 0x0c1a tx timeout [ 625.860363][T17779] netlink: 'syz.2.2956': attribute type 21 has an invalid length. [ 625.862969][T17779] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2956'. [ 625.866238][T17779] netlink: 'syz.2.2956': attribute type 5 has an invalid length. [ 625.887517][T17779] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2956'. [ 625.979218][ T5950] Bluetooth: hci7: command 0x0c1a tx timeout [ 626.068317][ T5950] Bluetooth: hci8: command 0x0c1a tx timeout [ 626.381354][T17787] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 626.384241][T17787] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 626.398960][T17787] vhci_hcd vhci_hcd.0: Device attached [ 626.548265][T17787] netlink: 'syz.9.2958': attribute type 1 has an invalid length. [ 626.638677][ T59] usb 55-1: new low-speed USB device number 2 using vhci_hcd [ 626.746086][T17795] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2958'. [ 626.749470][T16072] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 626.790581][T17796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2956'. [ 626.838741][T17787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 627.028587][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 627.105635][T17789] vhci_hcd: connection reset by peer [ 627.110330][T10714] vhci_hcd vhci_hcd.9: stop threads [ 627.113129][T10714] vhci_hcd vhci_hcd.9: release socket [ 627.116081][T10714] vhci_hcd vhci_hcd.9: disconnect device [ 627.176939][T16072] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 627.184750][T16072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 627.198827][T16072] usb 5-1: Product: syz [ 627.200586][T16072] usb 5-1: Manufacturer: syz [ 627.202369][T16072] usb 5-1: SerialNumber: syz [ 627.206709][T16072] usb 5-1: config 0 descriptor?? [ 627.213263][T16072] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 627.216830][T16072] dvb-usb: bulk message failed: -22 (2/0) [ 627.242395][T16072] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 627.247160][T16072] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 627.316286][T16072] usb 5-1: media controller created [ 627.356093][T17800] bond0: (slave rose0): Enslaving as an active interface with an up link [ 627.491034][T17780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.495041][T17780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.566221][T16072] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 627.599003][T17804] netlink: 'syz.2.2961': attribute type 16 has an invalid length. [ 627.620541][T17804] netlink: 'syz.2.2961': attribute type 17 has an invalid length. [ 627.678895][T17804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 627.898507][ T5950] Bluetooth: hci6: command 0x0c1a tx timeout [ 628.058883][ T5950] Bluetooth: hci7: command 0x0c1a tx timeout [ 628.092068][T17822] bridge_slave_0: left allmulticast mode [ 628.095252][T17822] bridge_slave_0: left promiscuous mode [ 628.098283][T17822] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.161472][T17822] bridge_slave_1: left allmulticast mode [ 628.163963][T17822] bridge_slave_1: left promiscuous mode [ 628.167961][T17822] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.228434][T17822] bond0: (slave bond_slave_0): Releasing backup interface [ 628.249130][ T5950] Bluetooth: hci8: command 0x0c1a tx timeout [ 628.249933][T17822] bond0: (slave bond_slave_1): Releasing backup interface [ 628.270584][T17822] team0: Port device team_slave_0 removed [ 628.393055][T17822] team0: Port device team_slave_1 removed [ 628.395909][T17822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.402879][T17822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.407383][T17822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.411921][T17822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.417533][T17822] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 628.427654][T17823] team0: Mode changed to "activebackup" [ 628.431883][T17825] vlan0: entered promiscuous mode [ 628.442078][T17825] team0: Port device vlan0 added [ 628.455150][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2965'. [ 628.557280][T17817] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.560281][T17817] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.590637][T17830] syz.9.2965: page allocation failure: order:10, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 628.596480][T17830] CPU: 1 UID: 0 PID: 17830 Comm: syz.9.2965 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.596518][T17830] Tainted: [L]=SOFTLOCKUP [ 628.596525][T17830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 628.596538][T17830] Call Trace: [ 628.596546][T17830] [ 628.596556][T17830] dump_stack_lvl+0x16c/0x1f0 [ 628.596595][T17830] warn_alloc+0x248/0x3a0 [ 628.596618][T17830] ? __pfx_warn_alloc+0x10/0x10 [ 628.596640][T17830] ? psi_memstall_leave+0x1e6/0x2d0 [ 628.596672][T17830] ? __alloc_pages_direct_compact+0x466/0x580 [ 628.596734][T17830] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 628.596760][T17830] ? psi_memstall_leave+0x1e1/0x2d0 [ 628.596798][T17830] ? psi_memstall_leave+0x1e6/0x2d0 [ 628.596830][T17830] __alloc_frozen_pages_noprof+0xe9b/0x2430 [ 628.596868][T17830] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 628.596902][T17830] ? find_held_lock+0x2b/0x80 [ 628.596925][T17830] ? aa_file_perm+0x29e/0x1560 [ 628.596953][T17830] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 628.597010][T17830] ? policy_nodemask+0xea/0x4e0 [ 628.597043][T17830] alloc_pages_mpol+0x1fb/0x550 [ 628.597073][T17830] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 628.597103][T17830] ? stack_trace_save+0x8e/0xc0 [ 628.597130][T17830] ? __pfx_stack_trace_save+0x10/0x10 [ 628.597164][T17830] ___kmalloc_large_node+0x10c/0x150 [ 628.597199][T17830] __kmalloc_large_node_noprof+0x1c/0x70 [ 628.597219][T17830] __kmalloc_noprof.cold+0xc/0x62 [ 628.597246][T17830] ? common_file_perm+0x1b1/0x500 [ 628.597268][T17830] ? qrtr_tun_write_iter+0xc1/0x1b0 [ 628.597293][T17830] ? qrtr_tun_write_iter+0xc1/0x1b0 [ 628.597312][T17830] qrtr_tun_write_iter+0xc1/0x1b0 [ 628.597335][T17830] aio_write+0x3b9/0x910 [ 628.597367][T17830] ? __pfx_aio_write+0x10/0x10 [ 628.597395][T17830] ? __lock_acquire+0x436/0x2890 [ 628.597427][T17830] ? __might_fault+0xe3/0x190 [ 628.597447][T17830] ? __might_fault+0x13b/0x190 [ 628.597480][T17830] ? io_submit_one+0x1243/0x1e70 [ 628.597497][T17830] io_submit_one+0x1243/0x1e70 [ 628.597518][T17830] ? __lock_acquire+0x436/0x2890 [ 628.597539][T17830] ? __pfx_io_submit_one+0x10/0x10 [ 628.597565][T17830] ? __might_fault+0xe3/0x190 [ 628.597586][T17830] ? __might_fault+0x13b/0x190 [ 628.597612][T17830] ? __ia32_compat_sys_io_submit+0x1ad/0x3c0 [ 628.597633][T17830] __ia32_compat_sys_io_submit+0x1ad/0x3c0 [ 628.597656][T17830] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 628.597685][T17830] ? rcu_is_watching+0x12/0xc0 [ 628.597714][T17830] __do_fast_syscall_32+0xe8/0x680 [ 628.597747][T17830] do_fast_syscall_32+0x32/0x80 [ 628.597778][T17830] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.597807][T17830] RIP: 0023:0xf704d579 [ 628.597824][T17830] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 628.597844][T17830] RSP: 002b:00000000f4fd855c EFLAGS: 00000296 ORIG_RAX: 00000000000000f8 [ 628.597863][T17830] RAX: ffffffffffffffda RBX: 00000000f7f50000 RCX: 00000000000000e7 [ 628.597876][T17830] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 628.597888][T17830] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 628.597899][T17830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.597910][T17830] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 628.597935][T17830] [ 628.598113][T17830] Mem-Info: [ 628.775498][T17830] active_anon:2970 inactive_anon:3914 isolated_anon:0 [ 628.775498][T17830] active_file:418 inactive_file:3251 isolated_file:0 [ 628.775498][T17830] unevictable:1768 dirty:324 writeback:0 [ 628.775498][T17830] slab_reclaimable:6836 slab_unreclaimable:64126 [ 628.775498][T17830] mapped:39238 shmem:7530 pagetables:1049 [ 628.775498][T17830] sec_pagetables:323 bounce:0 [ 628.775498][T17830] kernel_misc_reclaimable:0 [ 628.775498][T17830] free:62095 free_pcp:3256 free_cma:0 [ 628.796803][T17830] Node 0 active_anon:232kB inactive_anon:4kB active_file:768kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5024kB dirty:80kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9632kB pagetables:1180kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB [ 628.808493][T17830] Node 1 active_anon:11648kB inactive_anon:15652kB active_file:904kB inactive_file:12804kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:151928kB dirty:1216kB writeback:0kB shmem:26584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5924kB pagetables:3016kB sec_pagetables:148kB all_unreclaimable? no Balloon:0kB [ 628.820698][T17830] Node 0 DMA free:2324kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.833386][T17830] lowmem_reserve[]: 0 289 289 289 289 [ 628.861038][T16072] cxusb: set interface failed [ 628.863372][T16072] dvb-usb: bulk message failed: -22 (1/0) [ 628.884336][T16072] DVB: Unable to find symbol mt352_attach() [ 628.886821][T16072] dvb-usb: bulk message failed: -22 (5/0) [ 628.890232][T16072] zl10353_read_register: readreg error (reg=127, ret==-121) [ 628.892729][T16072] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 628.939376][T16072] rc_core: IR keymap rc-dvico-mce not found [ 628.941471][T16072] Registered IR keymap rc-empty [ 628.945845][T16072] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 628.952588][T16072] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input25 [ 628.957779][T16072] dvb-usb: schedule remote query interval to 100 msecs. [ 628.960619][T16072] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 628.961302][T16072] usb 5-1: USB disconnect, device number 5 [ 629.004580][T16072] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 629.012074][T17830] Node 0 DMA32 free:17560kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:2048KB free_highatomic:1400KB active_anon:4184kB inactive_anon:0kB active_file:768kB inactive_file:200kB unevictable:3536kB writepending:80kB zspages:92kB present:1032196kB managed:296812kB mlocked:0kB bounce:0kB free_pcp:3084kB local_pcp:1964kB free_cma:0kB [ 629.024840][T17830] lowmem_reserve[]: 0 0 0 0 0 [ 629.026954][T17830] Node 1 DMA32 free:227256kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7648kB inactive_anon:15552kB active_file:904kB inactive_file:12804kB unevictable:3536kB writepending:1216kB zspages:4684kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:13616kB local_pcp:9080kB free_cma:0kB [ 629.040345][T17830] lowmem_reserve[]: 0 0 0 0 0 [ 629.046781][ T4020] libceph: connect (1)[c::]:6789 error -101 [ 629.050124][ T4020] libceph: mon0 (1)[c::]:6789 connect error [ 629.050204][T17830] Node 0 DMA: 13*4kB (UM) 7*8kB (UM) 8*16kB (U) 7*32kB (UM) 1*64kB (M) 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2060kB [ 629.058843][T17830] Node 0 DMA32: 736*4kB (UME) 124*8kB (UEH) 119*16kB (UEH) 78*32kB (UEH) 37*64kB (UMEH) 19*128kB (UMEH) 11*256kB (UEH) 1*512kB (H) 1*1024kB (U) 0*2048kB 0*4096kB = 17488kB [ 629.092543][T17830] Node 1 DMA32: 2226*4kB (UME) 1221*8kB (UME) 2091*16kB (UME) 573*32kB (UME) 468*64kB (UME) 208*128kB (UME) 89*256kB (UM) 37*512kB (UM) 37*1024kB (UM) 10*2048kB (UM) [ 629.093814][T17836] ceph: No mds server is up or the cluster is laggy [ 629.094488][T17830] 0*4096kB [ 629.104476][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 629.121434][T17830] = 227136kB [ 629.121455][T17830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 629.121466][T17830] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 629.121476][T17830] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 629.121486][T17830] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 629.122030][T17830] 11931 total pagecache pages [ 629.122037][T17830] 746 pages in swap cache [ 629.122042][T17830] Free swap = 107164kB [ 629.122047][T17830] Total swap = 124996kB [ 629.122053][T17830] 524155 pages RAM [ 629.122057][T17830] 0 pages HighMem/MovableOnly [ 629.122061][T17830] 209059 pages reserved [ 629.122066][T17830] 0 pages cma reserved [ 629.185033][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.305825][T17817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.316938][T17817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.430391][ T4020] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 629.527596][T17445] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.531213][T17445] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.536480][T17445] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.543090][T17445] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.583183][ T4020] usb 5-1: not running at top speed; connect to a high speed hub [ 629.587663][ T4020] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 629.593827][ T4020] usb 5-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40 [ 629.598022][ T4020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.602271][ T4020] usb 5-1: Product: syz [ 629.604057][ T4020] usb 5-1: Manufacturer: syz [ 629.606109][ T4020] usb 5-1: SerialNumber: syz [ 629.611841][T17844] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 629.755493][T17848] random: crng reseeded on system resumption [ 630.015908][ T5950] Bluetooth: hci6: command 0x0c1a tx timeout [ 630.140009][ T5950] Bluetooth: hci7: command 0x0c1a tx timeout [ 630.161614][ T4020] usbhid 5-1:1.0: can't add hid device: -71 [ 630.164229][ T4020] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 630.170242][ T4020] usb 5-1: USB disconnect, device number 6 [ 630.310094][ T5950] Bluetooth: hci8: command 0x0c1a tx timeout [ 630.482998][T17866] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 630.485584][T17866] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 630.491436][T17866] vhci_hcd vhci_hcd.0: Device attached [ 630.520822][T17866] netlink: 'syz.9.2974': attribute type 1 has an invalid length. [ 630.622982][T17870] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2974'. [ 630.662160][T17866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 630.926361][T17867] vhci_hcd: connection closed [ 630.934396][T17445] vhci_hcd vhci_hcd.9: stop threads [ 630.938156][T17445] vhci_hcd vhci_hcd.9: release socket [ 630.949893][T17445] vhci_hcd vhci_hcd.9: disconnect device [ 631.316263][T17882] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 631.319321][T17882] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 631.323506][T17882] vhci_hcd vhci_hcd.0: Device attached [ 631.329385][T17882] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.337004][T17889] vhci_hcd: connection closed [ 631.339260][T10713] vhci_hcd vhci_hcd.0: stop threads [ 631.344008][T10713] vhci_hcd vhci_hcd.0: release socket [ 631.346516][T10713] vhci_hcd vhci_hcd.0: disconnect device [ 631.730739][ T59] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 632.321897][T17904] tipc: Started in network mode [ 632.323885][T17904] tipc: Node identity ac1414aa, cluster identity 4711 [ 632.326950][T17904] tipc: Enabled bearer , priority 10 [ 632.992433][T17922] netlink: 'syz.0.2990': attribute type 7 has an invalid length. [ 633.010164][T10706] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.020374][T10706] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.024554][T10706] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.028855][T10706] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.351070][ T34] tipc: Node number set to 2886997162 [ 633.551116][T17951] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 633.553398][T17951] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 633.558790][T17951] vhci_hcd vhci_hcd.0: Device attached [ 633.615857][T17951] netlink: 'syz.9.2994': attribute type 1 has an invalid length. [ 633.666653][T17955] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2994'. [ 633.678348][T17951] 8021q: adding VLAN 0 to HW filter on device bond3 [ 633.821614][T17424] usb 55-1: new low-speed USB device number 3 using vhci_hcd [ 634.027987][T17952] vhci_hcd: connection reset by peer [ 634.031802][T10687] vhci_hcd vhci_hcd.9: stop threads [ 634.040068][T10687] vhci_hcd vhci_hcd.9: release socket [ 634.042534][T10687] vhci_hcd vhci_hcd.9: disconnect device [ 634.242770][ T977] libceph: connect (1)[c::]:6789 error -101 [ 634.245647][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 634.268168][T17966] ceph: No mds server is up or the cluster is laggy [ 634.512767][T17978] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3005'. [ 634.755710][T17980] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 634.757915][T17980] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 634.760942][T17980] vhci_hcd vhci_hcd.0: Device attached [ 634.844097][T17980] fuse: Unknown parameter '&xgroup_00000000000000000000' [ 634.884453][T17989] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 634.887004][T17989] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 634.891278][T17989] vhci_hcd vhci_hcd.0: Device attached [ 635.032738][ T59] usb 42-1: SetAddress Request (2) to port 0 [ 635.035673][ T59] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 635.093390][T17999] netlink: 'syz.0.3011': attribute type 11 has an invalid length. [ 635.095945][T17999] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3011'. [ 635.162121][T17318] usb 44-1: SetAddress Request (6) to port 0 [ 635.166233][T17318] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 635.287196][T17983] vhci_hcd: connection reset by peer [ 635.291123][T10717] vhci_hcd vhci_hcd.2: stop threads [ 635.293452][T10717] vhci_hcd vhci_hcd.2: release socket [ 635.295469][T10717] vhci_hcd vhci_hcd.2: disconnect device [ 635.534467][T17990] vhci_hcd: connection reset by peer [ 635.537756][ T8523] vhci_hcd vhci_hcd.3: stop threads [ 635.540712][ T8523] vhci_hcd vhci_hcd.3: release socket [ 635.542973][ T8523] vhci_hcd vhci_hcd.3: disconnect device [ 635.560039][T18014] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 636.329166][T10717] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.336046][T10717] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.410209][T14237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 636.415932][T14237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 636.419380][T14237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 636.424987][T14237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 636.428833][T14237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 636.499970][T10717] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.513502][T10717] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.764337][T10717] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.768710][T10717] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.859024][T18031] chnl_net:caif_netlink_parms(): no params data found [ 636.915119][T10717] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.918577][T10717] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.023611][T14237] Bluetooth: hci0: command 0x1003 tx timeout [ 637.028802][ T5950] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 637.106526][T18031] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.113720][T18031] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.120357][T18031] bridge_slave_0: entered allmulticast mode [ 637.126897][T18031] bridge_slave_0: entered promiscuous mode [ 637.139427][T18031] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.147438][T18031] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.153110][T18031] bridge_slave_1: entered allmulticast mode [ 637.156260][T18031] bridge_slave_1: entered promiscuous mode [ 637.184715][T10717] bridge_slave_1: left allmulticast mode [ 637.186947][T10717] bridge_slave_1: left promiscuous mode [ 637.189729][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.196817][T10717] bridge_slave_0: left allmulticast mode [ 637.198723][T10717] bridge_slave_0: left promiscuous mode [ 637.200771][T10717] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.729262][T18059] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 637.731609][T18059] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 637.743112][T18059] vhci_hcd vhci_hcd.0: Device attached [ 637.746875][T10717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.767773][T10717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.803684][T10717] bond0 (unregistering): Released all slaves [ 637.837689][T18059] netlink: 'syz.2.3027': attribute type 1 has an invalid length. [ 637.902418][T18062] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3027'. [ 637.977438][T10717] bond1 (unregistering): Released all slaves [ 637.990143][T18031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.996840][T18054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3026'. [ 638.016997][T18059] 8021q: adding VLAN 0 to HW filter on device bond2 [ 638.026200][T18031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.069493][T10717] tipc: Disabling bearer [ 638.071974][T10717] tipc: Left network mode [ 638.080424][T18031] team0: Port device team_slave_0 added [ 638.092330][T18031] team0: Port device team_slave_1 added [ 638.143639][T18031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.146669][T18031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.156826][T18031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.165398][T18031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.168040][T18031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.177985][T18031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.250278][T18031] hsr_slave_0: entered promiscuous mode [ 638.253677][T18031] hsr_slave_1: entered promiscuous mode [ 638.288894][T10717] hsr_slave_0: left promiscuous mode [ 638.291727][T10717] hsr_slave_1: left promiscuous mode [ 638.294380][T10717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.297478][T10717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.301614][T10717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.304959][T10717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.327324][T18060] vhci_hcd: connection closed [ 638.328777][T17439] vhci_hcd vhci_hcd.2: stop threads [ 638.332184][T17439] vhci_hcd vhci_hcd.2: release socket [ 638.334222][T17439] vhci_hcd vhci_hcd.2: disconnect device [ 638.342107][T10717] veth1_macvtap: left promiscuous mode [ 638.345034][T10717] veth0_macvtap: left promiscuous mode [ 638.347519][T10717] veth1_vlan: left promiscuous mode [ 638.349725][T10717] veth0_vlan: left promiscuous mode [ 638.469797][ T5950] Bluetooth: hci1: command tx timeout [ 638.627688][ T5950] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 638.933588][T17424] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 639.021986][T10717] team0 (unregistering): Port device team_slave_1 removed [ 639.082519][T10717] team0 (unregistering): Port device team_slave_0 removed [ 639.877552][T18031] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 639.883485][T18031] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.019977][T18031] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 640.024309][T18031] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.068259][ T59] usb 42-1: device descriptor read/8, error -110 [ 640.201226][T18031] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 640.204828][T18031] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.224315][T17318] usb 44-1: device descriptor read/8, error -110 [ 640.305755][T18031] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 640.308926][T18031] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.453118][T18031] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 640.456581][ T59] usb usb42-port1: attempt power cycle [ 640.467075][T18093] fuse: Unknown parameter '' [ 640.469314][T18031] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 640.477472][T18031] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 640.482872][T18031] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 640.524306][T17712] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 640.544462][ T5950] Bluetooth: hci1: command tx timeout [ 640.545275][T18105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.549406][T18105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.628322][T18031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.636838][T18031] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.645237][T18109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3040'. [ 640.654703][T18108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3040'. [ 640.795486][T17318] usb usb44-port1: attempt power cycle [ 641.050768][T10714] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.053286][T10714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.066081][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.068478][T10714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.296897][T18031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.492291][T18031] veth0_vlan: entered promiscuous mode [ 641.495675][T18126] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 641.497887][T18126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 641.501019][T18126] vhci_hcd vhci_hcd.0: Device attached [ 641.501983][T18031] veth1_vlan: entered promiscuous mode [ 641.524674][T18031] veth0_macvtap: entered promiscuous mode [ 641.529733][T18031] veth1_macvtap: entered promiscuous mode [ 641.540658][T18031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.548285][T18031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.554322][ T6339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.561561][ T6339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.570869][ T6339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.574825][ T6339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.615409][T17439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.618734][T17439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.627951][T10697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.631254][T10697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.745074][ T977] usb 55-1: new low-speed USB device number 4 using vhci_hcd [ 641.795848][ T59] usb usb42-port1: unable to enumerate USB device [ 641.814512][T18141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3043'. [ 641.845121][T18126] netlink: 'syz.9.3038': attribute type 1 has an invalid length. [ 641.861939][T18137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3019'. [ 641.896535][T18134] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3038'. [ 641.933241][T18126] 8021q: adding VLAN 0 to HW filter on device bond4 [ 641.939474][T18145] input: syz0 as /devices/virtual/input/input26 [ 641.953039][T17318] usb usb44-port1: unable to enumerate USB device [ 641.977192][T18144] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3043'. [ 641.987726][T18138] bridge0: port 1(netdevsim0) entered blocking state [ 641.991030][T18138] bridge0: port 1(netdevsim0) entered disabled state [ 642.004258][T18138] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 642.046697][T18138] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 642.062257][T18138] bridge0: port 1(netdevsim0) entered blocking state [ 642.064458][T18138] bridge0: port 1(netdevsim0) entered forwarding state [ 642.224449][T18128] vhci_hcd: connection reset by peer [ 642.232246][ T6339] vhci_hcd vhci_hcd.9: stop threads [ 642.236404][ T6339] vhci_hcd vhci_hcd.9: release socket [ 642.239951][ T6339] vhci_hcd vhci_hcd.9: disconnect device [ 642.665632][ T5950] Bluetooth: hci1: command tx timeout [ 642.828723][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 642.828736][ T40] audit: type=1326 audit(1767335072.019:10220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.3050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 642.855310][ T40] audit: type=1326 audit(1767335072.019:10221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.3050" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 642.858803][T18166] Cannot find set identified by id 0 to match [ 642.877325][T18166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 642.895426][ T40] audit: type=1326 audit(1767335072.019:10222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.3050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 642.896814][ T5950] Bluetooth: hci1: Unknown advertising packet type: 0x14 [ 642.935792][ T40] audit: type=1326 audit(1767335072.019:10223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.3050" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 642.946055][ T40] audit: type=1326 audit(1767335072.019:10224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.3050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 642.953028][ T40] audit: type=1326 audit(1767335072.019:10225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.3050" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 642.960444][ T40] audit: type=1326 audit(1767335072.019:10226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.3050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 642.967970][ T40] audit: type=1326 audit(1767335072.019:10227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.3050" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 642.974918][ T40] audit: type=1326 audit(1767335072.019:10228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.3050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 642.982614][ T40] audit: type=1326 audit(1767335072.019:10229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18168 comm="syz.3.3050" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 643.306619][T18176] macsec1: entered promiscuous mode [ 643.308530][T18176] macsec1: entered allmulticast mode [ 644.229259][T18197] loop9: detected capacity change from 0 to 7 [ 644.236167][T18197] Dev loop9: unable to read RDB block 7 [ 644.238463][T18197] loop9: AHDI p3 p4 [ 644.240095][T18197] loop9: partition table partially beyond EOD, truncated [ 644.243001][T18197] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 644.776197][ T5950] Bluetooth: hci1: command tx timeout [ 645.001522][T18208] loop2: detected capacity change from 0 to 7 [ 645.004904][T18208] Dev loop2: unable to read RDB block 7 [ 645.006767][T18208] loop2: unable to read partition table [ 645.008699][T18208] loop2: partition table beyond EOD, truncated [ 645.010640][T18208] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 646.857708][ T977] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 647.003604][T18229] bridge1: entered promiscuous mode [ 647.005979][T18229] bridge1: entered allmulticast mode [ 647.120807][T18237] binder: 18235:18237 unknown command 0 [ 647.123610][T18237] binder: 18235:18237 ioctl c0306201 80000080 returned -22 [ 647.146797][T18243] netlink: 'syz.4.3065': attribute type 1 has an invalid length. [ 647.157265][T18243] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3065'. [ 647.726835][T18263] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input27 [ 647.906633][T18269] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 647.908867][T18269] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 647.918830][T18269] vhci_hcd vhci_hcd.0: Device attached [ 647.945257][T18270] vhci_hcd: connection closed [ 647.945586][T10687] vhci_hcd vhci_hcd.4: stop threads [ 647.949411][T10687] vhci_hcd vhci_hcd.4: release socket [ 647.951840][T10687] vhci_hcd vhci_hcd.4: disconnect device [ 648.265022][T18275] netlink: 'syz.3.3077': attribute type 12 has an invalid length. [ 648.278078][T18275] input: syz1 as /devices/virtual/input/input28 [ 648.410689][T18282] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 648.413343][T18282] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 648.432576][T18282] vhci_hcd vhci_hcd.0: Device attached [ 648.442801][T18283] vhci_hcd: connection closed [ 648.443258][T10717] vhci_hcd vhci_hcd.2: stop threads [ 648.448669][T10717] vhci_hcd vhci_hcd.2: release socket [ 648.450860][T10717] vhci_hcd vhci_hcd.2: disconnect device [ 648.888464][T18293] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 648.890487][T18293] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 648.893283][T18293] vhci_hcd vhci_hcd.0: Device attached [ 648.939361][T18293] netlink: 'syz.3.3080': attribute type 1 has an invalid length. [ 648.993769][T18293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 649.024728][T18301] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3080'. [ 649.128812][T16072] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 649.329853][T18294] vhci_hcd: connection reset by peer [ 649.332603][T10706] vhci_hcd vhci_hcd.3: stop threads [ 649.334646][T10706] vhci_hcd vhci_hcd.3: release socket [ 649.337429][T10706] vhci_hcd vhci_hcd.3: disconnect device [ 650.542320][T18317] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(38) [ 650.545482][T18317] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 650.559120][T18317] vhci_hcd vhci_hcd.0: Device attached [ 650.939044][T17318] usb 46-1: SetAddress Request (17) to port 0 [ 650.941625][T17318] usb 46-1: new SuperSpeed USB device number 17 using vhci_hcd [ 652.589717][T18324] vhci_hcd: connection reset by peer [ 652.592163][T10717] vhci_hcd vhci_hcd.4: stop threads [ 652.594268][T10717] vhci_hcd vhci_hcd.4: release socket [ 652.597918][T10717] vhci_hcd vhci_hcd.4: disconnect device [ 653.166410][T18354] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 653.169873][T18354] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 653.272858][T18354] vhci_hcd vhci_hcd.0: Device attached [ 653.557771][T18354] netlink: 'syz.4.3094': attribute type 1 has an invalid length. [ 653.564186][T18354] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3094'. [ 653.682219][T18355] vhci_hcd: connection closed [ 653.682943][T10723] vhci_hcd vhci_hcd.4: stop threads [ 653.687849][T10723] vhci_hcd vhci_hcd.4: release socket [ 653.692526][T10723] vhci_hcd vhci_hcd.4: disconnect device [ 654.150449][T15840] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 654.220948][T16072] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 654.224922][T18373] Bluetooth: MGMT ver 1.23 [ 654.312032][T15840] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.315826][T15840] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.319965][T15840] usb 14-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 8.00 [ 654.323753][T15840] usb 14-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 654.326897][T15840] usb 14-1: Product: syz [ 654.329653][T15840] usb 14-1: config 0 descriptor?? [ 654.547712][T18381] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input29 [ 654.775369][T18395] syz_tun: entered allmulticast mode [ 654.810990][T15840] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 655.466276][T15840] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 655.489711][T15840] input: syz as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/0003:0D8C:0022.0008/input/input31 [ 655.505999][T15840] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 655.514749][T15840] usb 14-1: USB disconnect, device number 3 [ 655.931578][T18415] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 655.933880][T18415] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 655.937665][T18415] vhci_hcd vhci_hcd.0: Device attached [ 655.991288][T17318] usb 46-1: device descriptor read/8, error -110 [ 656.114467][T18415] netlink: 'syz.4.3111': attribute type 1 has an invalid length. [ 656.184383][T18415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 656.291614][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 656.291628][ T40] audit: type=1400 audit(1767335085.413:10264): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=232822 pid=18421 comm="syz.2.3114" [ 656.352628][T18433] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3111'. [ 656.356907][ T5950] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 656.362375][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 656.408179][T17318] usb usb46-port1: attempt power cycle [ 656.415279][T18429] XFS (nullb0): Invalid superblock magic number [ 656.520897][T18437] bond5 (unregistering): Released all slaves [ 656.572952][T18416] vhci_hcd: connection closed [ 656.573283][T17445] vhci_hcd vhci_hcd.4: stop threads [ 656.576906][T17445] vhci_hcd vhci_hcd.4: release socket [ 656.579600][T17445] vhci_hcd vhci_hcd.4: disconnect device [ 656.692034][T16073] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 657.912547][T17318] usb usb46-port1: unable to enumerate USB device [ 660.017545][T18459] netlink: 'syz.9.3121': attribute type 13 has an invalid length. [ 661.613569][T18498] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 661.615904][T18498] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 661.619324][T18498] vhci_hcd vhci_hcd.0: Device attached [ 661.758499][T18498] netlink: 'syz.4.3131': attribute type 1 has an invalid length. [ 661.865633][T17350] usb 45-1: new low-speed USB device number 14 using vhci_hcd [ 661.876859][T18503] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3131'. [ 662.435159][T18513] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 662.460752][T18512] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 662.463431][T18512] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 662.473250][T18512] vhci_hcd vhci_hcd.0: Device attached [ 662.557181][T18498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 662.689943][T18499] vhci_hcd: connection reset by peer [ 662.692095][T17445] vhci_hcd vhci_hcd.4: stop threads [ 662.694161][T17445] vhci_hcd vhci_hcd.4: release socket [ 662.696168][T17445] vhci_hcd vhci_hcd.4: disconnect device [ 662.854347][T17424] usb 44-1: SetAddress Request (10) to port 0 [ 662.856430][T17424] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 662.968416][T18514] vhci_hcd: connection reset by peer [ 662.970607][T10714] vhci_hcd vhci_hcd.3: stop threads [ 662.972686][T10714] vhci_hcd vhci_hcd.3: release socket [ 662.975185][T10714] vhci_hcd vhci_hcd.3: disconnect device [ 664.104409][T18463] syz.9.3121 (18463) used greatest stack depth: 18920 bytes left [ 664.386859][T16073] IPVS: starting estimator thread 0... [ 664.396362][T18529] IPVS: sh: FWM 3 0x00000003 - no destination available [ 664.494991][T18530] IPVS: using max 44 ests per chain, 105600 per kthread [ 664.499119][T18533] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3141'. [ 665.671019][T18557] netlink: 'syz.3.3144': attribute type 4 has an invalid length. [ 665.704973][T18557] netlink: 'syz.3.3144': attribute type 4 has an invalid length. [ 665.939814][T18569] overlayfs: missing 'lowerdir' [ 665.981726][T18558] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.982008][T18558] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.150061][T18558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.170203][T18558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.346425][T10717] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.355736][T10717] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.358553][T10717] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.361277][T10717] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.398598][T18569] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 666.400890][T18569] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 666.402861][T18569] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 666.415765][T18569] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 666.417843][T18569] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 666.505792][T18569] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 666.956143][T17350] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 667.048761][T18593] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3152'. [ 667.900881][T18611] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 667.920459][T18612] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 667.927362][T17424] usb 44-1: device descriptor read/8, error -110 [ 668.320558][T17424] usb usb44-port1: attempt power cycle [ 668.487177][T14237] Bluetooth: hci1: command 0x0405 tx timeout [ 668.487661][ T5950] Bluetooth: hci7: command 0x0c1a tx timeout [ 668.489250][T14237] Bluetooth: hci2: command 0x0c1a tx timeout [ 668.491802][ T5942] Bluetooth: hci6: command 0x0c1a tx timeout [ 668.917814][T17424] usb usb44-port1: unable to enumerate USB device [ 670.567637][T18033] Bluetooth: hci1: command 0x0405 tx timeout [ 671.699488][T18690] kAFS: unable to lookup cell '(,' [ 671.704821][T18690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3178'. [ 671.713749][T18690] bridge_slave_0: left allmulticast mode [ 671.715580][T18690] bridge_slave_0: left promiscuous mode [ 671.717485][T18690] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.725132][T18690] bridge_slave_1: left allmulticast mode [ 671.727163][T18690] bridge_slave_1: left promiscuous mode [ 671.731258][T18690] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.737664][T18690] bond0: (slave bond_slave_0): Releasing backup interface [ 671.745926][T18690] bond0: (slave bond_slave_1): Releasing backup interface [ 671.755201][T18690] team0: Port device team_slave_0 removed [ 671.767404][T18690] team0: Port device team_slave_1 removed [ 671.771088][T18690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.773744][T18690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.777782][T18690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.781480][T18690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.790582][T18690] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 671.990859][T18696] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 672.060137][T18699] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 672.062450][T18699] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 672.065296][T18699] vhci_hcd vhci_hcd.0: Device attached [ 672.119389][T18699] netlink: 'syz.9.3179': attribute type 1 has an invalid length. [ 672.194310][T18699] 8021q: adding VLAN 0 to HW filter on device bond5 [ 672.207221][T18703] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3179'. [ 672.308462][T17350] usb 55-1: new low-speed USB device number 5 using vhci_hcd [ 672.649080][T18033] Bluetooth: hci1: command 0x0405 tx timeout [ 672.689257][T18700] vhci_hcd: connection reset by peer [ 672.692593][T10713] vhci_hcd vhci_hcd.9: stop threads [ 672.694486][T10713] vhci_hcd vhci_hcd.9: release socket [ 672.696818][T10713] vhci_hcd vhci_hcd.9: disconnect device [ 672.845564][T18714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3183'. [ 674.283310][T18739] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 674.285474][T18739] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 674.288518][T18739] vhci_hcd vhci_hcd.0: Device attached [ 674.408198][T18747] xt_SECMARK: invalid mode: 0 [ 674.561126][T18744] vhci_hcd: connection closed [ 674.561598][ T6339] vhci_hcd vhci_hcd.2: stop threads [ 674.565202][ T6339] vhci_hcd vhci_hcd.2: release socket [ 674.567479][ T6339] vhci_hcd vhci_hcd.2: disconnect device [ 674.570839][T18748] 9p: Bad value for 'wfdno' [ 674.579320][T17238] usb 42-1: enqueue for inactive port 0 [ 674.902988][T18760] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3196'. [ 674.944050][ T977] kernel write not supported for file /snd/seq (pid: 977 comm: kworker/3:2) [ 675.018299][T18765] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 675.091187][T17238] usb usb42-port1: attempt power cycle [ 675.135869][ T40] audit: type=1326 audit(1767335104.314:10265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18771 comm="syz.3.3200" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x0 [ 675.463967][T18783] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 675.472010][T18783] exFAT-fs (nbd4): unable to read boot sector [ 675.474853][T18783] exFAT-fs (nbd4): failed to read boot sector [ 675.477507][T18783] exFAT-fs (nbd4): failed to recognize exfat type [ 675.761029][T17238] usb usb42-port1: unable to enumerate USB device [ 677.440729][T17350] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 683.924181][T18916] ip6_vti0 speed is unknown, defaulting to 1000 [ 683.927296][T18916] ip6_vti0 speed is unknown, defaulting to 1000 [ 683.936134][T18916] ip6_vti0 speed is unknown, defaulting to 1000 [ 684.146715][T18916] infiniband syz2: set down [ 684.148302][T17238] ip6_vti0 speed is unknown, defaulting to 1000 [ 684.150530][T18916] infiniband syz2: added ip6_vti0 [ 684.188250][T18916] RDS/IB: syz2: added [ 684.189602][T18916] smc: adding ib device syz2 with port count 1 [ 684.191574][T18916] smc: ib device syz2 port 1 has pnetid SYZ1 (user defined) [ 684.200604][T16261] ip6_vti0 speed is unknown, defaulting to 1000 [ 684.211046][T18916] ip6_vti0 speed is unknown, defaulting to 1000 [ 684.378907][T18916] ip6_vti0 speed is unknown, defaulting to 1000 [ 684.471554][T18916] ip6_vti0 speed is unknown, defaulting to 1000 [ 684.578674][T18916] ip6_vti0 speed is unknown, defaulting to 1000 [ 684.683183][T18916] ip6_vti0 speed is unknown, defaulting to 1000 [ 684.809862][T18916] ip6_vti0 speed is unknown, defaulting to 1000 [ 684.868397][ T40] audit: type=1804 audit(1767335114.040:10266): pid=18928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3234" name="/newroot/92/file0/file0" dev="9p" ino=71827745 res=1 errno=0 [ 684.995720][T18930] hfs: unable to load iocharset "io#harset" [ 685.108057][T18033] Bluetooth: hci7: unexpected event for opcode 0x9f22 [ 685.166185][T18935] netlink: 'syz.9.3236': attribute type 11 has an invalid length. [ 685.191661][T18936] ip6_vti0 speed is unknown, defaulting to 1000 [ 685.865439][T18942] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 685.867838][T18942] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 685.882241][T18942] vhci_hcd vhci_hcd.0: Device attached [ 686.134230][T16261] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 686.281505][T18942] netlink: 'syz.2.3237': attribute type 1 has an invalid length. [ 686.383035][T18959] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3237'. [ 686.419678][T18942] 8021q: adding VLAN 0 to HW filter on device bond3 [ 686.432224][T18958] tipc: Started in network mode [ 686.433896][T18958] tipc: Node identity 1ef35af19a6e, cluster identity 4711 [ 686.436745][T18958] tipc: Enabled bearer , priority 0 [ 686.440555][T18958] syzkaller0: entered promiscuous mode [ 686.442464][T18958] syzkaller0: entered allmulticast mode [ 686.480211][T18958] tipc: Resetting bearer [ 686.523637][T18955] tipc: Resetting bearer [ 686.567685][T18955] tipc: Disabling bearer [ 688.056608][T18943] vhci_hcd: connection reset by peer [ 688.062696][T10730] vhci_hcd vhci_hcd.2: stop threads [ 688.064824][T10730] vhci_hcd vhci_hcd.2: release socket [ 688.071696][T10730] vhci_hcd vhci_hcd.2: disconnect device [ 689.696565][T18033] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 689.712079][T18033] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 689.799858][T19021] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 689.942533][T19038] bridge_slave_0: entered promiscuous mode [ 690.070348][T19040] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 690.214683][T19047] dlm: non-version read from control device 8224 [ 690.217151][T19045] ip6_vti0 speed is unknown, defaulting to 1000 [ 690.571073][T19073] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20004 [ 690.661497][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.355479][T19075] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 691.446508][T16261] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 691.739539][T19101] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 691.798490][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3277'. [ 691.801771][T19107] openvswitch: netlink: Flow key attr not present in new flow. [ 691.804679][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3277'. [ 691.807964][T19106] openvswitch: netlink: Flow key attr not present in new flow. [ 691.876699][T19101] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 691.881271][T19101] overlayfs: failed to look up (tracing) for ino (-66) [ 694.043821][T19138] vlan2: entered allmulticast mode [ 694.045768][T19138] veth0_to_bond: entered allmulticast mode [ 694.065319][T19138] ata1.00: invalid multi_count 1 ignored [ 694.071023][T19143] syzkaller0: entered promiscuous mode [ 694.078697][T19143] syzkaller0: entered allmulticast mode [ 694.287752][T19151] bridge1: left promiscuous mode [ 694.289836][T19151] bridge1: left allmulticast mode [ 695.158387][T19163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3289'. [ 695.174407][T19166] netlink: 'syz.2.3288': attribute type 3 has an invalid length. [ 695.271770][T19170] afs: Bad value for 'flock' [ 695.649859][T19173] overlay: ./bus is not a directory [ 695.662337][T19186] wireguard0: entered promiscuous mode [ 695.664160][T19186] wireguard0: entered allmulticast mode [ 695.929042][T19173] netlink: 'syz.3.3286': attribute type 10 has an invalid length. [ 695.932116][T19173] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3286'. [ 696.128628][T19173] team0: Port device geneve0 added [ 696.131086][T17443] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.139972][ T6252] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.148806][ T6252] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.148831][ T6252] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.327328][T19204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3299'. [ 696.335609][T19204] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3299'. [ 696.339367][T19204] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3299'. [ 696.349768][T19204] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3299'. [ 696.721025][T19214] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3300'. [ 696.995724][T19221] overlay: ./file0 is not a directory [ 697.574464][T19234] 9pnet_virtio: no channels available for device syz [ 698.657845][T19236] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 698.869964][T18033] Bluetooth: hci2: unexpected event for opcode 0x9f22 [ 698.950983][T19252] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 698.951005][T19252] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 698.951092][T19252] vhci_hcd vhci_hcd.0: Device attached [ 699.176393][T19249] ip6_vti0 speed is unknown, defaulting to 1000 [ 699.359652][ T4020] usb 44-1: SetAddress Request (14) to port 0 [ 699.359694][ T4020] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 700.091370][T19253] vhci_hcd: connection reset by peer [ 700.093308][T10706] vhci_hcd vhci_hcd.3: stop threads [ 700.094855][T10706] vhci_hcd vhci_hcd.3: release socket [ 700.096637][T10706] vhci_hcd vhci_hcd.3: disconnect device [ 700.508605][T19271] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 702.911797][T19289] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 702.913799][T19289] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 702.916260][T19290] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 702.918300][T19290] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 702.920713][T19290] vhci_hcd vhci_hcd.0: Device attached [ 702.926576][T19289] vhci_hcd vhci_hcd.0: Device attached [ 702.934955][T19289] netlink: 'syz.9.3318': attribute type 1 has an invalid length. [ 703.153030][T19295] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3318'. [ 703.261910][ T59] usb 55-1: new low-speed USB device number 6 using vhci_hcd [ 703.264546][T16073] usb 45-1: new low-speed USB device number 15 using vhci_hcd [ 703.285202][T19289] 8021q: adding VLAN 0 to HW filter on device bond6 [ 703.489406][T19290] netlink: 'syz.4.3317': attribute type 1 has an invalid length. [ 703.512276][T19291] vhci_hcd: connection reset by peer [ 703.514292][T17439] vhci_hcd vhci_hcd.9: stop threads [ 703.516061][T17439] vhci_hcd vhci_hcd.9: release socket [ 703.518102][T17439] vhci_hcd vhci_hcd.9: disconnect device [ 703.600827][T19296] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3317'. [ 704.157848][T19290] 8021q: adding VLAN 0 to HW filter on device bond3 [ 704.411817][ T4020] usb 44-1: device descriptor read/8, error -110 [ 704.565461][T19292] vhci_hcd: connection reset by peer [ 704.567332][ T92] vhci_hcd vhci_hcd.4: stop threads [ 704.569332][ T92] vhci_hcd vhci_hcd.4: release socket [ 704.571111][ T92] vhci_hcd vhci_hcd.4: disconnect device [ 704.669904][T19341] ip6_vti0 speed is unknown, defaulting to 1000 [ 704.687143][T19345] IPVS: Error connecting to the multicast addr [ 704.812715][ T4020] usb usb44-port1: attempt power cycle [ 704.946234][T19344] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3330'. [ 705.133311][T19349] dlm: non-version read from control device 8224 [ 705.394058][ T4020] usb usb44-port1: unable to enumerate USB device [ 705.528588][T19361] trusted_key: encrypted_key: insufficient parameters specified [ 705.717836][T19364] ip6_vti0 speed is unknown, defaulting to 1000 [ 706.130455][T19367] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 706.130481][T19367] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 706.130596][T19367] vhci_hcd vhci_hcd.0: Device attached [ 706.248611][T19367] rdma_rxe: rxe_newlink: failed to add wg2 [ 706.363029][T19371] vhci_hcd: connection closed [ 706.363262][T10730] vhci_hcd vhci_hcd.4: stop threads [ 706.372260][T10730] vhci_hcd vhci_hcd.4: release socket [ 706.374968][T10730] vhci_hcd vhci_hcd.4: disconnect device [ 706.378738][T19375] tmpfs: Bad value for 'mpol' [ 706.689589][T19386] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 706.691969][T19386] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 706.707931][T19386] vhci_hcd vhci_hcd.0: Device attached [ 706.749235][T19386] netlink: 'syz.9.3338': attribute type 1 has an invalid length. [ 706.832179][T19394] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3338'. [ 706.837815][T19386] 8021q: adding VLAN 0 to HW filter on device bond7 [ 707.502947][T19387] vhci_hcd: connection closed [ 707.505451][T10703] vhci_hcd vhci_hcd.9: stop threads [ 707.513437][T10703] vhci_hcd vhci_hcd.9: release socket [ 707.516096][T10703] vhci_hcd vhci_hcd.9: disconnect device [ 707.989596][T19407] comedi comedi3: multiq3: a I/O base address must be specified [ 708.418501][ T59] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 708.429511][T16073] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 709.019397][T19433] netlink: 'syz.3.3350': attribute type 10 has an invalid length. [ 709.049438][T19433] team0: Port device geneve0 removed [ 709.054974][T10717] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.058386][T10717] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.061558][T10717] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.064927][T10717] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.238420][T19437] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.3351'. [ 709.462299][T19439] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 709.469311][T19439] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 709.472832][T19439] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 709.476007][T19439] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 709.724255][T17424] usb usb46-port1: attempt power cycle [ 709.908772][T19449] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 709.910900][T19449] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 709.913456][T19449] vhci_hcd vhci_hcd.0: Device attached [ 710.018152][T19449] netlink: 'syz.9.3355': attribute type 1 has an invalid length. [ 710.056297][T19449] 8021q: adding VLAN 0 to HW filter on device bond8 [ 710.116453][T19449] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3355'. [ 710.154163][ T977] usb 55-1: new low-speed USB device number 7 using vhci_hcd [ 710.314946][T17424] usb usb46-port1: unable to enumerate USB device [ 710.598455][T19450] vhci_hcd: connection reset by peer [ 710.600701][T10717] vhci_hcd vhci_hcd.9: stop threads [ 710.603471][T10717] vhci_hcd vhci_hcd.9: release socket [ 710.607108][T10717] vhci_hcd vhci_hcd.9: disconnect device [ 711.017058][ T40] audit: type=1804 audit(1767335140.180:10267): pid=19458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3356" name="/newroot/132/file0/file0" dev="9p" ino=71827745 res=1 errno=0 [ 711.454515][T18033] Bluetooth: hci2: command 0x0c1a tx timeout [ 711.544897][T18033] Bluetooth: hci1: command 0x0405 tx timeout [ 711.547349][ T5942] Bluetooth: hci6: command 0x0c1a tx timeout [ 711.550134][T18640] Bluetooth: hci7: command 0x0c1a tx timeout [ 713.440247][T19494] netlink: 'syz.9.3363': attribute type 2 has an invalid length. [ 715.286028][ T977] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 716.890533][T19524] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3371'. [ 716.921399][T19528] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.113320][T19524] batadv1: entered allmulticast mode [ 717.298947][T19528] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.354037][T19547] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 717.366150][T19547] CIFS mount error: No usable UNC path provided in device string! [ 717.366150][T19547] [ 717.370533][T19547] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 717.489909][T19528] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.646055][T19528] bridge0: port 1(netdevsim0) entered disabled state [ 717.683731][T19528] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 717.689615][T19528] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 717.696696][T19528] bridge0: port 1(netdevsim0) entered disabled state [ 717.720542][T19528] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.873751][T10719] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.894715][T10719] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.906153][T10719] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.928897][T10702] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.699495][T19576] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 718.702596][T19576] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 718.722150][T19576] vhci_hcd vhci_hcd.0: Device attached [ 718.968261][T16261] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 719.916633][T19597] afs: Unknown parameter 'measure' [ 719.989373][T19576] netlink: 'syz.2.3379': attribute type 1 has an invalid length. [ 720.132868][T19617] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3379'. [ 720.142244][T19618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3387'. [ 720.197150][T19576] 8021q: adding VLAN 0 to HW filter on device bond4 [ 721.506138][T19577] vhci_hcd: connection reset by peer [ 721.510024][T10692] vhci_hcd vhci_hcd.2: stop threads [ 721.512497][T10692] vhci_hcd vhci_hcd.2: release socket [ 721.514996][T10692] vhci_hcd vhci_hcd.2: disconnect device [ 722.239120][T19631] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 722.242447][T19631] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 722.254385][T19631] vhci_hcd vhci_hcd.0: Device attached [ 722.373007][T19631] netlink: 'syz.2.3391': attribute type 1 has an invalid length. [ 722.472929][T19642] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3391'. [ 722.601697][T19631] 8021q: adding VLAN 0 to HW filter on device bond5 [ 722.662186][T19645] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3393'. [ 722.777585][T19634] vhci_hcd: connection closed [ 722.777791][T17439] vhci_hcd vhci_hcd.2: stop threads [ 722.782042][T17439] vhci_hcd vhci_hcd.2: release socket [ 722.784437][T17439] vhci_hcd vhci_hcd.2: disconnect device [ 723.003149][T19646] binder: 19644:19646 ioctl 0 80000040 returned -22 [ 724.100898][T16261] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 725.285758][T19671] netlink: 105 bytes leftover after parsing attributes in process `syz.9.3399'. [ 725.296580][T19671] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3399'. [ 726.229106][T19676] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3401'. [ 727.985471][T19699] Cannot find set identified by id 0 to match [ 727.990534][T19699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.999237][T18640] Bluetooth: hci7: Unknown advertising packet type: 0x14 [ 729.366088][T19720] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3407'. [ 730.354037][T19727] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 730.357140][T19727] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 730.361694][T19727] vhci_hcd vhci_hcd.0: Device attached [ 730.426176][T19727] fuse: Unknown parameter '&xgroup_00000000000000000000' [ 730.545437][T19730] vhci_hcd: connection closed [ 730.546192][T10721] vhci_hcd vhci_hcd.3: stop threads [ 730.549585][T10721] vhci_hcd vhci_hcd.3: release socket [ 730.553198][T10721] vhci_hcd vhci_hcd.3: disconnect device [ 732.192228][T19737] netlink: 3 bytes leftover after parsing attributes in process `syz.9.3411'. [ 732.201449][T19737] batadv1: entered allmulticast mode [ 733.310506][T19763] netlink: 'syz.2.3424': attribute type 1 has an invalid length. [ 733.313835][T19763] netlink: 'syz.2.3424': attribute type 1 has an invalid length. [ 733.575545][T19776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3418'. [ 733.682660][ T59] IPVS: starting estimator thread 0... [ 733.692589][T19779] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 733.774798][T19780] IPVS: using max 46 ests per chain, 110400 per kthread [ 735.162834][T19793] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 735.166026][T19793] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 735.175036][T19793] vhci_hcd vhci_hcd.0: Device attached [ 735.251628][T19793] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3425'. [ 735.393461][T19798] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 735.409563][T19798] netlink: 'syz.4.3427': attribute type 10 has an invalid length. [ 735.413150][T19798] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3427'. [ 735.420231][T19798] team0: entered promiscuous mode [ 735.422294][T19798] bridge0: port 1(team0) entered blocking state [ 735.426080][T19798] bridge0: port 1(team0) entered disabled state [ 735.429754][T19798] team0: entered allmulticast mode [ 735.443099][T16261] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 735.724267][T19794] vhci_hcd: connection reset by peer [ 735.729114][T10706] vhci_hcd vhci_hcd.3: stop threads [ 735.731468][T10706] vhci_hcd vhci_hcd.3: release socket [ 735.736156][T10706] vhci_hcd vhci_hcd.3: disconnect device [ 738.480577][T19837] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3432'. [ 739.750156][T19845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3435'. [ 739.753126][T19845] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3435'. [ 739.757249][T19863] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 739.763567][T19863] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 739.768912][T19845] vlan3: entered allmulticast mode [ 739.770853][T19845] hsr0: entered allmulticast mode [ 739.772668][T19845] hsr_slave_0: entered allmulticast mode [ 739.774837][T19845] hsr_slave_1: entered allmulticast mode [ 739.775795][T19863] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 740.495819][T19876] ip6_vti0 speed is unknown, defaulting to 1000 [ 741.015769][ T40] audit: type=1326 audit(1767335170.158:10268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19873 comm="syz.9.3442" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x0 [ 741.088417][T16261] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 741.467685][ T6290] libceph: connect (1)[c::]:6789 error -101 [ 741.469861][ T6290] libceph: mon0 (1)[c::]:6789 connect error [ 741.501945][T19882] ceph: No mds server is up or the cluster is laggy [ 742.508181][T19909] input: syz0 as /devices/virtual/input/input34 [ 742.556940][T19915] dlm: Unknown command passed to DLM device : 3 [ 742.556940][T19915] [ 742.807531][T19923] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 743.631440][T18033] Bluetooth: hci1: command 0x0405 tx timeout [ 744.006620][ T53] libceph: connect (1)[c::]:6789 error -101 [ 744.008765][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 744.037565][T19951] ceph: No mds server is up or the cluster is laggy [ 744.261610][T19961] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3464'. [ 744.271289][T19961] batadv1: entered allmulticast mode [ 744.495111][T19973] IPVS: Error connecting to the multicast addr [ 744.526162][T19973] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 744.568530][T19974] netlink: 'syz.9.3469': attribute type 1 has an invalid length. [ 744.571188][T19974] netlink: 'syz.9.3469': attribute type 1 has an invalid length. [ 744.817941][ T59] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 744.979160][ T59] usb 14-1: config 0 has no interfaces? [ 744.981112][ T59] usb 14-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 745.081971][ T59] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.085982][ T59] usb 14-1: config 0 descriptor?? [ 745.291039][ T59] usb 14-1: USB disconnect, device number 4 [ 746.253874][T20004] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 746.259796][T20004] Error validating options; rc = [-22] [ 749.103297][T20044] fuse: Bad value for 'fd' [ 749.109818][T20044] fuse: Bad value for 'fd' [ 749.113309][T20044] fuse: Bad value for 'fd' [ 749.114952][T20044] fuse: Bad value for 'fd' [ 749.124891][T20044] fuse: Bad value for 'fd' [ 749.128547][T20044] fuse: Bad value for 'fd' [ 749.131713][T20044] fuse: Bad value for 'fd' [ 749.133542][T20044] fuse: Bad value for 'fd' [ 749.135196][T20044] fuse: Bad value for 'fd' [ 749.136768][T20044] fuse: Bad value for 'fd' [ 749.138716][T20044] fuse: Bad value for 'fd' [ 749.142900][T20044] fuse: Bad value for 'fd' [ 749.144975][T20044] fuse: Bad value for 'fd' [ 749.147144][T20044] fuse: Bad value for 'fd' [ 749.151539][T20044] fuse: Bad value for 'fd' [ 749.154024][T20044] fuse: Bad value for 'fd' [ 749.156254][T20044] fuse: Bad value for 'fd' [ 749.161830][T20044] fuse: Bad value for 'fd' [ 749.164169][T20044] fuse: Bad value for 'fd' [ 749.166321][T20044] fuse: Bad value for 'fd' [ 749.168379][T20044] fuse: Bad value for 'fd' [ 749.171040][T20044] fuse: Bad value for 'fd' [ 749.173329][T20044] fuse: Bad value for 'fd' [ 749.175620][T20044] fuse: Bad value for 'fd' [ 749.177680][T20044] fuse: Bad value for 'fd' [ 749.181513][T20044] fuse: Bad value for 'fd' [ 749.187002][T20044] fuse: Bad value for 'fd' [ 749.190205][T20044] fuse: Bad value for 'fd' [ 749.192503][T20044] fuse: Bad value for 'fd' [ 749.196932][T20044] fuse: Bad value for 'fd' [ 749.199980][T20044] fuse: Bad value for 'fd' [ 749.202165][T20044] fuse: Bad value for 'fd' [ 749.203815][T20044] fuse: Bad value for 'fd' [ 749.370367][T20056] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 750.332763][T20067] netlink: zone id is out of range [ 751.421503][T20084] netlink: 'syz.3.3503': attribute type 1 has an invalid length. [ 751.424646][T20084] netlink: 'syz.3.3503': attribute type 1 has an invalid length. [ 751.493376][T20097] sp0: Synchronizing with TNC [ 751.501059][T20096] [U] [ 751.556219][T18033] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 751.556346][T18033] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 751.563017][T18033] Bluetooth: hci6: SCO packet for unknown connection handle 201 [ 751.707665][T20110] netlink: 520 bytes leftover after parsing attributes in process `syz.2.3510'. [ 752.002553][T20120] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3512'. [ 752.078233][T20121] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 752.080936][T20121] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 752.084470][T20121] vhci_hcd vhci_hcd.0: Device attached [ 752.087719][T20121] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3512'. [ 752.115781][T20122] vhci_hcd: connection closed [ 752.116116][T17441] vhci_hcd vhci_hcd.9: stop threads [ 752.119680][T17441] vhci_hcd vhci_hcd.9: release socket [ 752.122787][T17441] vhci_hcd vhci_hcd.9: disconnect device [ 752.710314][T20130] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 752.804560][T20136] sp0: Synchronizing with TNC [ 752.820407][T20135] [U] [ 753.250232][T20156] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 753.252374][T20156] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 753.296116][T20156] vhci_hcd vhci_hcd.0: Device attached [ 753.384811][T20156] netlink: 'syz.9.3522': attribute type 1 has an invalid length. [ 753.434417][T20156] 8021q: adding VLAN 0 to HW filter on device bond9 [ 753.440261][T20159] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3522'. [ 753.530734][T17712] usb 55-1: new low-speed USB device number 8 using vhci_hcd [ 753.618913][T20167] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 753.746344][T20173] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3528'. [ 753.867354][T20157] vhci_hcd: connection reset by peer [ 753.872385][ T8771] vhci_hcd vhci_hcd.9: stop threads [ 753.874882][ T8771] vhci_hcd vhci_hcd.9: release socket [ 753.877428][ T8771] vhci_hcd vhci_hcd.9: disconnect device [ 755.064650][T20200] ip6_vti0 speed is unknown, defaulting to 1000 [ 755.157569][T10706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.169392][T10706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.894429][T20218] netlink: 'syz.2.3539': attribute type 1 has an invalid length. [ 755.897471][T20218] netlink: 'syz.2.3539': attribute type 1 has an invalid length. [ 757.569379][T20242] overlay: ./bus is not a directory [ 757.578713][T20242] program syz.4.3546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 757.723070][T16073] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 759.132590][T17712] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 759.990678][T20263] netlink: 'syz.4.3553': attribute type 12 has an invalid length. [ 759.994508][T20263] netlink: 'syz.4.3553': attribute type 12 has an invalid length. [ 759.998065][T20263] netlink: 'syz.4.3553': attribute type 12 has an invalid length. [ 760.002256][T20263] netlink: 'syz.4.3553': attribute type 12 has an invalid length. [ 760.006761][T20263] netlink: 'syz.4.3553': attribute type 12 has an invalid length. [ 760.010083][T20263] netlink: 'syz.4.3553': attribute type 12 has an invalid length. [ 760.013605][T20263] netlink: 'syz.4.3553': attribute type 12 has an invalid length. [ 760.017181][T20263] netlink: 'syz.4.3553': attribute type 12 has an invalid length. [ 760.021599][T20263] netlink: 'syz.4.3553': attribute type 12 has an invalid length. [ 760.025531][T20263] netlink: 'syz.4.3553': attribute type 12 has an invalid length. [ 760.036405][T20263] input: syz1 as /devices/virtual/input/input35 [ 760.254149][T20271] FAULT_INJECTION: forcing a failure. [ 760.254149][T20271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.258765][T20271] CPU: 2 UID: 0 PID: 20271 Comm: syz.9.3556 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.258789][T20271] Tainted: [L]=SOFTLOCKUP [ 760.258793][T20271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 760.258801][T20271] Call Trace: [ 760.258806][T20271] [ 760.258813][T20271] dump_stack_lvl+0x16c/0x1f0 [ 760.258863][T20271] should_fail_ex+0x512/0x640 [ 760.258887][T20271] _copy_to_user+0x32/0xd0 [ 760.258902][T20271] simple_read_from_buffer+0xcb/0x170 [ 760.258921][T20271] proc_fail_nth_read+0x197/0x240 [ 760.258941][T20271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 760.258960][T20271] ? rw_verify_area+0xcf/0x6c0 [ 760.258976][T20271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 760.258994][T20271] vfs_read+0x1e4/0xcf0 [ 760.259010][T20271] ? __pfx___mutex_lock+0x10/0x10 [ 760.259030][T20271] ? __pfx_vfs_read+0x10/0x10 [ 760.259045][T20271] ? find_held_lock+0x2b/0x80 [ 760.259064][T20271] ? __fget_files+0x20e/0x3c0 [ 760.259085][T20271] ksys_read+0x12a/0x250 [ 760.259100][T20271] ? __pfx_ksys_read+0x10/0x10 [ 760.259120][T20271] __do_fast_syscall_32+0xe8/0x680 [ 760.259140][T20271] do_fast_syscall_32+0x32/0x80 [ 760.259157][T20271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 760.259173][T20271] RIP: 0023:0xf704d579 [ 760.259183][T20271] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 760.259194][T20271] RSP: 002b:00000000f543d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 760.259211][T20271] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f543d620 [ 760.259219][T20271] RDX: 000000000000000f RSI: 00000000f73e6ff4 RDI: 0000000000000000 [ 760.259225][T20271] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 760.259232][T20271] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 760.259238][T20271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 760.259276][T20271] [ 761.965726][T20310] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3566'. [ 762.181504][T20325] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 762.689752][T20336] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3573'. [ 763.394936][T20361] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 763.466026][T20367] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 763.476391][T20367] team0: Port device batadv1 added [ 764.294061][T20388] ip6_vti0 speed is unknown, defaulting to 1000 [ 764.329832][T20389] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 764.997878][T20403] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 765.003919][T20403] Error validating options; rc = [-22] [ 765.194076][T20406] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3596'. [ 765.828048][T20422] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 767.677827][T20435] tipc: Started in network mode [ 767.680095][T20435] tipc: Node identity ac14140f, cluster identity 4711 [ 767.683715][T20435] tipc: New replicast peer: 255.255.255.255 [ 767.687432][T20435] tipc: Enabled bearer , priority 10 [ 767.694809][T20435] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3605'. [ 768.208044][T20457] validate_nla: 24 callbacks suppressed [ 768.208059][T20457] netlink: 'syz.9.3612': attribute type 4 has an invalid length. [ 768.277015][T20462] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3613'. [ 768.430280][T20468] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3616'. [ 768.484911][T20468] syz.9.3616(20468): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 768.705994][ T6290] tipc: Node number set to 2886997007 [ 771.155967][T20505] XFS (nullb0): Invalid superblock magic number [ 771.207603][ T40] audit: type=1326 audit(1767335200.347:10269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20516 comm="syz.3.3630" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x0 [ 771.309485][T20528] ubi: mtd0 is already attached to ubi31 [ 772.319848][T20546] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 772.322548][T20546] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 772.344446][T20546] vhci_hcd vhci_hcd.0: Device attached [ 772.651203][T20549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3633'. [ 772.717488][T15839] usb 46-1: SetAddress Request (25) to port 0 [ 772.719992][T15839] usb 46-1: new SuperSpeed USB device number 25 using vhci_hcd [ 773.184258][T20557] hub 1-0:1.0: USB hub found [ 773.185652][T20559] netlink: 'syz.2.3639': attribute type 1 has an invalid length. [ 773.187362][T20557] hub 1-0:1.0: 2 ports detected [ 773.208173][T20557] binder: 20556:20557 ioctl c0306201 800001c0 returned -14 [ 773.629970][T20570] FAULT_INJECTION: forcing a failure. [ 773.629970][T20570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.636911][T20570] CPU: 2 UID: 0 PID: 20570 Comm: syz.9.3644 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.636948][T20570] Tainted: [L]=SOFTLOCKUP [ 773.636955][T20570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 773.636967][T20570] Call Trace: [ 773.636975][T20570] [ 773.636984][T20570] dump_stack_lvl+0x16c/0x1f0 [ 773.637021][T20570] should_fail_ex+0x512/0x640 [ 773.637049][T20570] _copy_to_user+0x32/0xd0 [ 773.637073][T20570] copy_to_sockptr_offset.constprop.0+0x129/0x150 [ 773.637095][T20570] ? __pfx_copy_to_sockptr_offset.constprop.0+0x10/0x10 [ 773.637118][T20570] ? bpf_vlog_finalize+0x1ba/0x360 [ 773.637144][T20570] btf_new_fd+0x4272/0x54c0 [ 773.637189][T20570] ? __pfx_btf_new_fd+0x10/0x10 [ 773.637221][T20570] ? apparmor_capable+0x1d7/0x4e0 [ 773.637246][T20570] ? bpf_lsm_capable+0x9/0x10 [ 773.637271][T20570] ? security_capable+0x7e/0x260 [ 773.637301][T20570] ? ns_capable+0xd7/0x110 [ 773.637338][T20570] __sys_bpf+0x39f/0x4980 [ 773.637361][T20570] ? __pfx___sys_bpf+0x10/0x10 [ 773.637378][T20570] ? find_held_lock+0x2b/0x80 [ 773.637409][T20570] ? find_held_lock+0x2b/0x80 [ 773.637439][T20570] ? __mutex_unlock_slowpath+0x161/0x790 [ 773.637484][T20570] ? fput+0x70/0xf0 [ 773.637504][T20570] ? ksys_write+0x1ac/0x250 [ 773.637531][T20570] ? __pfx_ksys_write+0x10/0x10 [ 773.637561][T20570] __ia32_sys_bpf+0x76/0xe0 [ 773.637579][T20570] ? lockdep_hardirqs_on+0x7c/0x110 [ 773.637607][T20570] __do_fast_syscall_32+0xe8/0x680 [ 773.637654][T20570] do_fast_syscall_32+0x32/0x80 [ 773.637681][T20570] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 773.637704][T20570] RIP: 0023:0xf704d579 [ 773.637735][T20570] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 773.637754][T20570] RSP: 002b:00000000f543d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 773.637773][T20570] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000280 [ 773.637784][T20570] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 773.637794][T20570] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 773.637803][T20570] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 773.637812][T20570] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 773.637834][T20570] [ 773.884348][T20547] vhci_hcd: connection reset by peer [ 773.886879][ T8771] vhci_hcd vhci_hcd.4: stop threads [ 773.888965][ T8771] vhci_hcd vhci_hcd.4: release socket [ 773.890869][ T8771] vhci_hcd vhci_hcd.4: disconnect device [ 775.154240][T20594] netlink: 'syz.3.3652': attribute type 1 has an invalid length. [ 775.156948][T20594] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.3652'. [ 775.213662][T20599] nftables ruleset with unbound chain [ 775.393854][T20607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3656'. [ 775.651671][T20611] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 775.653877][T20611] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 775.656857][T20611] vhci_hcd vhci_hcd.0: Device attached [ 775.694853][T20611] netlink: 'syz.4.3657': attribute type 1 has an invalid length. [ 775.944932][T20621] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3657'. [ 778.623326][T15839] usb 46-1: device descriptor read/8, error -110 [ 778.684536][T20611] 8021q: adding VLAN 0 to HW filter on device bond4 [ 778.820732][T20612] vhci_hcd: connection closed [ 778.824853][ T6410] vhci_hcd vhci_hcd.4: stop threads [ 778.839701][ T6410] vhci_hcd vhci_hcd.4: release socket [ 778.842155][ T6410] vhci_hcd vhci_hcd.4: disconnect device [ 778.873380][T20633] loop4: detected capacity change from 0 to 8 [ 778.875946][T16676] usb 45-1: new low-speed USB device number 16 using vhci_hcd [ 778.884745][T16676] usb 45-1: enqueue for inactive port 0 [ 778.951136][T20636] trusted_key: encrypted_key: insufficient parameters specified [ 779.020330][T20638] tmpfs: Bad value for 'mpol' [ 779.102128][T20633] Dev loop4: unable to read RDB block 8 [ 779.104006][T20633] loop4: unable to read partition table [ 779.106179][T20633] loop4: partition table beyond EOD, truncated [ 779.110291][T20633] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 779.120546][T16676] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 779.297044][T20635] Invalid logical block size (2) [ 779.445017][T20651] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3666'. [ 779.515275][T20655] tipc: Started in network mode [ 779.517225][T20655] tipc: Node identity 7f000001, cluster identity 4711 [ 779.520115][T20655] tipc: Enabling of bearer rejected, failed to enable media [ 780.224112][T15839] usb usb46-port1: attempt power cycle [ 780.391800][T20660] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 780.491780][T20664] sp0: Synchronizing with TNC [ 780.494630][T20663] [U] [ 780.881424][T15839] usb usb46-port1: unable to enumerate USB device [ 781.543995][T20699] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 781.546707][T20699] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 781.554693][T20699] vhci_hcd vhci_hcd.0: Device attached [ 781.830604][T15839] usb 55-1: new low-speed USB device number 9 using vhci_hcd [ 782.021347][T20700] vhci_hcd: connection reset by peer [ 782.023835][T10697] vhci_hcd vhci_hcd.9: stop threads [ 782.025819][T10697] vhci_hcd vhci_hcd.9: release socket [ 782.027878][T10697] vhci_hcd vhci_hcd.9: disconnect device [ 782.086882][T20708] sp0: Synchronizing with TNC [ 782.096422][T20707] [U] [ 782.414287][T20715] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 782.473588][T18033] Bluetooth: hci6: unexpected event for opcode 0xd52d [ 782.491866][T20717] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 782.494357][T20717] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 782.501098][T20717] vhci_hcd vhci_hcd.0: Device attached [ 782.781024][T15840] usb 46-1: SetAddress Request (29) to port 0 [ 782.783160][T15840] usb 46-1: new SuperSpeed USB device number 29 using vhci_hcd [ 782.965561][T20738] sp0: Synchronizing with TNC [ 782.968583][T20736] [U] [ 783.084525][T20723] vhci_hcd: connection reset by peer [ 783.087232][ T1139] vhci_hcd vhci_hcd.4: stop threads [ 783.089270][ T1139] vhci_hcd vhci_hcd.4: release socket [ 783.092211][ T1139] vhci_hcd vhci_hcd.4: disconnect device [ 783.301781][T20751] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 783.589913][T20757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3697'. [ 783.593882][T20757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 783.599909][T20757] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3697'. [ 784.058811][T20770] sp0: Synchronizing with TNC [ 784.076158][T20769] [U] [ 784.149814][T20773] sp0: Synchronizing with TNC [ 784.152671][T20773] FAULT_INJECTION: forcing a failure. [ 784.152671][T20773] name failslab, interval 1, probability 0, space 0, times 0 [ 784.165223][T20773] CPU: 3 UID: 0 PID: 20773 Comm: syz.9.3703 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.165246][T20773] Tainted: [L]=SOFTLOCKUP [ 784.165250][T20773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 784.165258][T20773] Call Trace: [ 784.165262][T20773] [ 784.165267][T20773] dump_stack_lvl+0x16c/0x1f0 [ 784.165290][T20773] should_fail_ex+0x512/0x640 [ 784.165304][T20773] ? fs_reclaim_acquire+0xae/0x150 [ 784.165325][T20773] should_failslab+0xc2/0x120 [ 784.165343][T20773] __kmalloc_noprof+0xeb/0x910 [ 784.165357][T20773] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 784.165385][T20773] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 784.165401][T20773] tomoyo_realpath_from_path+0xc2/0x6e0 [ 784.165418][T20773] ? tomoyo_profile+0x47/0x60 [ 784.165437][T20773] tomoyo_path_number_perm+0x245/0x580 [ 784.165450][T20773] ? tomoyo_path_number_perm+0x237/0x580 [ 784.165465][T20773] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 784.165493][T20773] ? find_held_lock+0x2b/0x80 [ 784.165509][T20773] ? hook_file_ioctl_common+0x144/0x410 [ 784.165526][T20773] ? __fget_files+0x20e/0x3c0 [ 784.165543][T20773] ? fput+0x70/0xf0 [ 784.165556][T20773] security_file_ioctl_compat+0x9b/0x240 [ 784.165573][T20773] __ia32_compat_sys_ioctl+0xc3/0x370 [ 784.165590][T20773] __do_fast_syscall_32+0xe8/0x680 [ 784.165611][T20773] do_fast_syscall_32+0x32/0x80 [ 784.165629][T20773] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 784.165644][T20773] RIP: 0023:0xf704d579 [ 784.165654][T20773] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 784.165665][T20773] RSP: 002b:00000000f543d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 784.165678][T20773] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008924 [ 784.165685][T20773] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 784.165692][T20773] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 784.165698][T20773] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 784.165706][T20773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 784.165720][T20773] [ 784.165725][T20773] ERROR: Out of memory at tomoyo_realpath_from_path. [ 784.246038][T20771] [U] [ 785.218005][T20813] ntfs3(nullb0): Primary boot signature is not NTFS. [ 785.220477][T20813] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 785.279651][T20815] sp0: Synchronizing with TNC [ 785.296270][T20814] [U] [ 786.438308][T20834] sp0: Synchronizing with TNC [ 786.454406][T20834] FAULT_INJECTION: forcing a failure. [ 786.454406][T20834] name failslab, interval 1, probability 0, space 0, times 0 [ 786.458492][T20834] CPU: 3 UID: 0 PID: 20834 Comm: syz.2.3721 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.458511][T20834] Tainted: [L]=SOFTLOCKUP [ 786.458515][T20834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 786.458522][T20834] Call Trace: [ 786.458527][T20834] [ 786.458532][T20834] dump_stack_lvl+0x16c/0x1f0 [ 786.458553][T20834] should_fail_ex+0x512/0x640 [ 786.458566][T20834] ? fs_reclaim_acquire+0xae/0x150 [ 786.458585][T20834] should_failslab+0xc2/0x120 [ 786.458602][T20834] __kmalloc_noprof+0xeb/0x910 [ 786.458615][T20834] ? tomoyo_encode2+0x100/0x3e0 [ 786.458632][T20834] ? tomoyo_encode2+0x100/0x3e0 [ 786.458646][T20834] tomoyo_encode2+0x100/0x3e0 [ 786.458663][T20834] tomoyo_encode+0x29/0x50 [ 786.458676][T20834] tomoyo_realpath_from_path+0x18f/0x6e0 [ 786.458695][T20834] tomoyo_path_number_perm+0x245/0x580 [ 786.458707][T20834] ? tomoyo_path_number_perm+0x237/0x580 [ 786.458721][T20834] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 786.458747][T20834] ? find_held_lock+0x2b/0x80 [ 786.458762][T20834] ? hook_file_ioctl_common+0x144/0x410 [ 786.458778][T20834] ? __fget_files+0x20e/0x3c0 [ 786.458793][T20834] ? fput+0x70/0xf0 [ 786.458806][T20834] security_file_ioctl_compat+0x9b/0x240 [ 786.458821][T20834] __ia32_compat_sys_ioctl+0xc3/0x370 [ 786.458838][T20834] __do_fast_syscall_32+0xe8/0x680 [ 786.458857][T20834] do_fast_syscall_32+0x32/0x80 [ 786.458874][T20834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 786.458888][T20834] RIP: 0023:0xf7f54579 [ 786.458897][T20834] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 786.458908][T20834] RSP: 002b:00000000f544655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 786.458919][T20834] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008924 [ 786.458926][T20834] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 786.458932][T20834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 786.458938][T20834] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 786.458944][T20834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 786.458958][T20834] [ 786.458970][T20834] ERROR: Out of memory at tomoyo_realpath_from_path. [ 786.535329][T20833] [U] [ 787.612569][T15839] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 787.630366][T20824] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 787.632761][T20824] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 787.635374][T20824] vhci_hcd vhci_hcd.0: Device attached [ 787.641778][T20824] netlink: 'syz.9.3719': attribute type 1 has an invalid length. [ 787.663099][T20824] 8021q: adding VLAN 0 to HW filter on device bond10 [ 787.745201][T20824] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3719'. [ 787.882826][T15840] usb 46-1: device descriptor read/8, error -110 [ 788.335726][T15839] usb 55-1: device descriptor read/64, error -110 [ 788.543632][T15840] usb usb46-port1: attempt power cycle [ 788.572936][T15839] usb 55-1: new low-speed USB device number 10 using vhci_hcd [ 788.768235][T20850] vhci_hcd: connection reset by peer [ 788.780045][T10730] vhci_hcd vhci_hcd.9: stop threads [ 788.784428][T20857] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 788.785979][T10730] vhci_hcd vhci_hcd.9: release socket [ 788.786840][T20857] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 788.794054][T20857] vhci_hcd vhci_hcd.0: Device attached [ 788.797170][T10730] vhci_hcd vhci_hcd.9: disconnect device [ 789.192534][T16676] usb 42-1: SetAddress Request (10) to port 0 [ 789.200017][T16676] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 789.293682][T20863] vhci_hcd: connection reset by peer [ 789.311882][T10723] vhci_hcd vhci_hcd.2: stop threads [ 789.317295][T10723] vhci_hcd vhci_hcd.2: release socket [ 789.323255][T10723] vhci_hcd vhci_hcd.2: disconnect device [ 789.404332][T15840] usb usb46-port1: unable to enumerate USB device [ 789.797627][T20868] sp0: Synchronizing with TNC [ 789.801023][T20868] FAULT_INJECTION: forcing a failure. [ 789.801023][T20868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.808604][T20868] CPU: 2 UID: 0 PID: 20868 Comm: syz.4.3731 Tainted: G L syzkaller #0 PREEMPT(full) [ 789.808635][T20868] Tainted: [L]=SOFTLOCKUP [ 789.808641][T20868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 789.808651][T20868] Call Trace: [ 789.808658][T20868] [ 789.808666][T20868] dump_stack_lvl+0x16c/0x1f0 [ 789.808698][T20868] should_fail_ex+0x512/0x640 [ 789.808720][T20868] _copy_from_user+0x2e/0xd0 [ 789.808740][T20868] sixpack_ioctl+0x121/0x460 [ 789.808759][T20868] ? __pfx_sixpack_ioctl+0x10/0x10 [ 789.808782][T20868] ? __pfx_sixpack_ioctl+0x10/0x10 [ 789.808798][T20868] tty_compat_ioctl+0x42a/0x4d0 [ 789.808819][T20868] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 789.808841][T20868] __ia32_compat_sys_ioctl+0x242/0x370 [ 789.808865][T20868] __do_fast_syscall_32+0xe8/0x680 [ 789.808890][T20868] do_fast_syscall_32+0x32/0x80 [ 789.808914][T20868] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 789.808933][T20868] RIP: 0023:0xf700d579 [ 789.808946][T20868] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 789.808961][T20868] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 789.808986][T20868] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008924 [ 789.808995][T20868] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 789.809005][T20868] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 789.809014][T20868] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 789.809023][T20868] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 789.809043][T20868] [ 790.111302][T20875] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3733'. [ 790.227072][T20872] overlay: Unknown parameter 'uid' [ 790.248397][T20872] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 790.316780][T20876] ip6_vti0 speed is unknown, defaulting to 1000 [ 790.384290][ T40] audit: type=1326 audit(1767335219.510:10270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20874 comm="syz.9.3733" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x0 [ 790.661508][T20873] snd_dummy snd_dummy.0: control 2:8:3:syz1:4 is already present [ 790.850543][T20865] [U] [ 791.310612][T20895] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 791.669797][T20907] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 791.902316][T20922] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 791.904796][T20922] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 791.931406][T20922] vhci_hcd vhci_hcd.0: Device attached [ 791.943663][T20927] netlink: 1304 bytes leftover after parsing attributes in process `syz.4.3747'. [ 791.955095][T20922] netlink: 'syz.2.3743': attribute type 1 has an invalid length. [ 792.043420][T20916] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=407865202 (3262921616 ns) > initial count (2352015480 ns). Using initial count to start timer. [ 792.053555][T20933] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3743'. [ 792.085742][T20922] 8021q: adding VLAN 0 to HW filter on device bond6 [ 792.464454][T20923] vhci_hcd: connection closed [ 792.464883][T10706] vhci_hcd vhci_hcd.2: stop threads [ 792.468711][T10706] vhci_hcd vhci_hcd.2: release socket [ 792.471059][T10706] vhci_hcd vhci_hcd.2: disconnect device [ 793.426428][T20958] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 793.888749][T15839] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 794.305446][T16676] usb 42-1: device descriptor read/8, error -110 [ 794.309286][T20985] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 794.311184][T20985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 794.313802][T20985] vhci_hcd vhci_hcd.0: Device attached [ 794.370763][T20985] netlink: 'syz.3.3764': attribute type 1 has an invalid length. [ 794.495025][T17424] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 794.559022][T20989] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3764'. [ 794.565752][ T6050] usb 43-1: new low-speed USB device number 5 using vhci_hcd [ 794.617677][T20985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 794.807194][T20994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3766'. [ 794.815207][T20994] random: crng reseeded on system resumption [ 794.879066][T20986] vhci_hcd: connection reset by peer [ 794.882098][ T60] vhci_hcd vhci_hcd.3: stop threads [ 794.884551][ T60] vhci_hcd vhci_hcd.3: release socket [ 794.887628][ T60] vhci_hcd vhci_hcd.3: disconnect device [ 795.135419][T20998] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 795.556263][T16676] usb usb42-port1: attempt power cycle [ 795.957257][T21027] input: syz1 as /devices/virtual/input/input36 [ 796.406612][T16676] usb usb42-port1: unable to enumerate USB device [ 796.830983][T21038] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 797.352519][T16676] kernel read not supported for file /dsp1 (pid: 16676 comm: kworker/0:9) [ 797.383888][T21058] : renamed from hsr0 [ 797.408735][T21058] sp0: Synchronizing with TNC [ 797.412032][T21057] [U] [ 797.427843][T21060] veth1_macvtap: left promiscuous mode [ 797.485088][T21062] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 797.487269][T21062] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 797.491201][T21062] vhci_hcd vhci_hcd.0: Device attached [ 797.516930][T21066] FAULT_INJECTION: forcing a failure. [ 797.516930][T21066] name failslab, interval 1, probability 0, space 0, times 0 [ 797.522881][T21062] netlink: 'syz.4.3783': attribute type 1 has an invalid length. [ 797.532358][T21066] CPU: 2 UID: 0 PID: 21066 Comm: syz.9.3787 Tainted: G L syzkaller #0 PREEMPT(full) [ 797.532381][T21066] Tainted: [L]=SOFTLOCKUP [ 797.532385][T21066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 797.532393][T21066] Call Trace: [ 797.532397][T21066] [ 797.532402][T21066] dump_stack_lvl+0x16c/0x1f0 [ 797.532444][T21066] should_fail_ex+0x512/0x640 [ 797.532463][T21066] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 797.532480][T21066] should_failslab+0xc2/0x120 [ 797.532499][T21066] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 797.532514][T21066] ? __d_alloc+0x35/0xa80 [ 797.532528][T21066] ? __d_alloc+0x35/0xa80 [ 797.532537][T21066] __d_alloc+0x35/0xa80 [ 797.532549][T21066] d_alloc_pseudo+0x1c/0xc0 [ 797.532564][T21066] alloc_file_pseudo+0xcf/0x230 [ 797.532579][T21066] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 797.532592][T21066] ? _raw_spin_unlock+0x28/0x50 [ 797.532608][T21066] ? alloc_fd+0x471/0x7d0 [ 797.532626][T21066] __anon_inode_getfile+0xe8/0x280 [ 797.532639][T21066] ? find_held_lock+0x2b/0x80 [ 797.532656][T21066] __anon_inode_getfd+0x5c/0x160 [ 797.532669][T21066] btf_new_fd+0x541/0x54c0 [ 797.532702][T21066] ? __pfx_btf_new_fd+0x10/0x10 [ 797.532732][T21066] ? apparmor_capable+0x1d7/0x4e0 [ 797.532752][T21066] ? bpf_lsm_capable+0x9/0x10 [ 797.532773][T21066] ? security_capable+0x7e/0x260 [ 797.532802][T21066] ? ns_capable+0xd7/0x110 [ 797.532827][T21066] __sys_bpf+0x39f/0x4980 [ 797.532847][T21066] ? __pfx___sys_bpf+0x10/0x10 [ 797.532863][T21066] ? find_held_lock+0x2b/0x80 [ 797.532893][T21066] ? find_held_lock+0x2b/0x80 [ 797.532924][T21066] ? __mutex_unlock_slowpath+0x161/0x790 [ 797.532951][T21066] ? fput+0x70/0xf0 [ 797.532962][T21066] ? ksys_write+0x1ac/0x250 [ 797.532978][T21066] ? __pfx_ksys_write+0x10/0x10 [ 797.532997][T21066] __ia32_sys_bpf+0x76/0xe0 [ 797.533009][T21066] ? lockdep_hardirqs_on+0x7c/0x110 [ 797.533026][T21066] __do_fast_syscall_32+0xe8/0x680 [ 797.533047][T21066] do_fast_syscall_32+0x32/0x80 [ 797.533065][T21066] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 797.533081][T21066] RIP: 0023:0xf704d579 [ 797.533091][T21066] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 797.533103][T21066] RSP: 002b:00000000f543d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 797.533115][T21066] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000280 [ 797.533122][T21066] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 797.533129][T21066] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 797.533136][T21066] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 797.533142][T21066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 797.533158][T21066] [ 797.650505][T21062] 8021q: adding VLAN 0 to HW filter on device bond5 [ 797.653460][T21068] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3783'. [ 797.916495][ T59] usb 45-1: new low-speed USB device number 17 using vhci_hcd [ 797.925044][T21073] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 798.199484][T21063] vhci_hcd: connection reset by peer [ 798.201637][T10717] vhci_hcd vhci_hcd.4: stop threads [ 798.203314][T10717] vhci_hcd vhci_hcd.4: release socket [ 798.205056][T10717] vhci_hcd vhci_hcd.4: disconnect device [ 798.331586][T21089] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3793'. [ 798.334358][T21089] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3793'. [ 799.736908][ T6050] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 800.089695][T21112] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3800'. [ 800.265485][T21117] 9p: Could not find request transport: virt"ϫgsAʕio [ 800.280991][T21117] sp0: Synchronizing with TNC [ 800.290149][T21116] [U] [ 800.352275][T21121] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 800.700629][T21140] FAULT_INJECTION: forcing a failure. [ 800.700629][T21140] name failslab, interval 1, probability 0, space 0, times 0 [ 800.705294][T21140] CPU: 0 UID: 0 PID: 21140 Comm: syz.4.3810 Tainted: G L syzkaller #0 PREEMPT(full) [ 800.705316][T21140] Tainted: [L]=SOFTLOCKUP [ 800.705320][T21140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 800.705327][T21140] Call Trace: [ 800.705333][T21140] [ 800.705339][T21140] dump_stack_lvl+0x16c/0x1f0 [ 800.705361][T21140] should_fail_ex+0x512/0x640 [ 800.705374][T21140] ? kmem_cache_alloc_noprof+0x62/0x770 [ 800.705389][T21140] should_failslab+0xc2/0x120 [ 800.705407][T21140] kmem_cache_alloc_noprof+0x83/0x770 [ 800.705421][T21140] ? security_file_alloc+0x34/0x2b0 [ 800.705441][T21140] ? security_file_alloc+0x34/0x2b0 [ 800.705454][T21140] security_file_alloc+0x34/0x2b0 [ 800.705468][T21140] init_file+0x93/0x4c0 [ 800.705480][T21140] alloc_empty_file+0x73/0x1e0 [ 800.705492][T21140] alloc_file_pseudo+0x13a/0x230 [ 800.705505][T21140] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 800.705518][T21140] ? _raw_spin_unlock+0x28/0x50 [ 800.705546][T21140] ? alloc_fd+0x471/0x7d0 [ 800.705571][T21140] __anon_inode_getfile+0xe8/0x280 [ 800.705588][T21140] ? find_held_lock+0x2b/0x80 [ 800.705614][T21140] __anon_inode_getfd+0x5c/0x160 [ 800.705633][T21140] btf_new_fd+0x541/0x54c0 [ 800.705672][T21140] ? __pfx_btf_new_fd+0x10/0x10 [ 800.705700][T21140] ? apparmor_capable+0x1d7/0x4e0 [ 800.705713][T21140] ? bpf_lsm_capable+0x9/0x10 [ 800.705728][T21140] ? security_capable+0x7e/0x260 [ 800.705746][T21140] ? ns_capable+0xd7/0x110 [ 800.705762][T21140] __sys_bpf+0x39f/0x4980 [ 800.705772][T21140] ? __pfx___irq_work_queue_local+0x10/0x10 [ 800.705791][T21140] ? __pfx___sys_bpf+0x10/0x10 [ 800.705803][T21140] ? irq_work_queue+0xce/0x100 [ 800.705820][T21140] ? bpf_send_signal_common+0x3a9/0x540 [ 800.705841][T21140] ? find_held_lock+0x2b/0x80 [ 800.705876][T21140] ? __might_fault+0xe3/0x190 [ 800.705891][T21140] ? __might_fault+0x13b/0x190 [ 800.705904][T21140] ? find_held_lock+0x2b/0x80 [ 800.705918][T21140] ? syscall_trace_enter+0x1cb/0x220 [ 800.705935][T21140] __ia32_sys_bpf+0x76/0xe0 [ 800.705946][T21140] __do_fast_syscall_32+0xe8/0x680 [ 800.705966][T21140] do_fast_syscall_32+0x32/0x80 [ 800.705987][T21140] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 800.706002][T21140] RIP: 0023:0xf700d579 [ 800.706011][T21140] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 800.706022][T21140] RSP: 002b:00000000f53fd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 800.706034][T21140] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 0000000080000280 [ 800.706041][T21140] RDX: 0000000000000028 RSI: 0000000000000000 RDI: 0000000000000000 [ 800.706048][T21140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 800.706054][T21140] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 800.706061][T21140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 800.706074][T21140] [ 801.143150][T21146] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 801.145255][T21146] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 801.148007][T21146] vhci_hcd vhci_hcd.0: Device attached [ 801.165797][T21144] netlink: 'syz.4.3811': attribute type 1 has an invalid length. [ 801.182450][T21144] 8021q: adding VLAN 0 to HW filter on device bond6 [ 801.195942][T21144] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3811'. [ 801.594423][T21147] vhci_hcd: connection closed [ 801.597554][T10719] vhci_hcd vhci_hcd.4: stop threads [ 801.601606][T10719] vhci_hcd vhci_hcd.4: release socket [ 801.614381][T10719] vhci_hcd vhci_hcd.4: disconnect device [ 802.253431][T21158] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 802.298860][T21162] sp0: Synchronizing with TNC [ 802.302406][T21161] [U] [ 802.403605][T21166] netlink: 'syz.2.3817': attribute type 1 has an invalid length. [ 803.658490][ T59] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 803.946762][T21206] CIFS mount error: No usable UNC path provided in device string! [ 803.946762][T21206] [ 803.950626][T21206] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 804.638423][T10697] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.642563][T10697] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.646502][T10697] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.651122][T10697] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.789864][T21222] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 805.044468][T21232] could not allocate digest TFM handle rmd256-generic [ 805.680838][T21246] ntfs3(sr0): Primary boot signature is not NTFS. [ 805.729564][T21246] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 806.380200][T21263] vlan2: left allmulticast mode [ 806.381837][T21263] veth0_to_bond: left allmulticast mode [ 806.384350][T21263] vlan3: left allmulticast mode [ 806.386024][T21263] hsr0: left allmulticast mode [ 806.387646][T21263] hsr_slave_0: left allmulticast mode [ 806.390532][T21263] hsr_slave_1: left allmulticast mode [ 806.713988][T21271] sp0: Synchronizing with TNC [ 806.718421][T21270] [U] [ 807.883950][T21287] 9p: Unknown Cache mode or invalid value fscach [ 807.886633][T21287] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3852'. [ 808.426452][ T40] audit: type=1326 audit(1767335237.554:10271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.2.3855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 808.433754][T21298] syz.2.3855 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 808.449648][ T40] audit: type=1326 audit(1767335237.564:10272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.2.3855" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 808.457411][ T40] audit: type=1326 audit(1767335237.564:10273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.2.3855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 808.481483][ T40] audit: type=1326 audit(1767335237.564:10274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.2.3855" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 808.489306][ T40] audit: type=1326 audit(1767335237.564:10275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.2.3855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 808.504675][T21303] sp0: Synchronizing with TNC [ 808.507037][ T40] audit: type=1326 audit(1767335237.564:10276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.2.3855" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 808.514250][ T40] audit: type=1326 audit(1767335237.564:10277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.2.3855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 808.524491][T21302] [U] [ 808.529562][ T40] audit: type=1326 audit(1767335237.564:10278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.2.3855" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 808.547548][ T40] audit: type=1326 audit(1767335237.564:10279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21297 comm="syz.2.3855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 808.767994][T21313] team0: Port device vlan0 removed [ 809.206136][T21332] sp0: Synchronizing with TNC [ 809.210257][T21331] [U] [ 809.383845][T21346] cifs: Unknown parameter 'mac' [ 809.385610][T21346] CIFS mount error: No usable UNC path provided in device string! [ 809.385610][T21346] [ 809.389421][T21346] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 809.560279][T21362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3874'. [ 809.563377][T21362] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3874'. [ 809.566544][T21362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3874'. [ 809.850076][T21383] sp0: Synchronizing with TNC [ 809.854492][T21381] [U] [ 810.418999][T21398] tipc: Can't bind to reserved service type 1 syzkaller syzkaller login: [ 811.454550][T21433] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 812.945360][T21454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3900'. [ 813.662180][T21473] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 813.922594][T21482] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 813.924740][T21482] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 813.933220][T21482] vhci_hcd vhci_hcd.0: Device attached [ 813.993858][T21482] netlink: 'syz.3.3908': attribute type 1 has an invalid length. [ 814.181493][T16676] usb 43-1: new low-speed USB device number 6 using vhci_hcd [ 814.352817][T21497] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3908'. [ 814.388172][T21482] 8021q: adding VLAN 0 to HW filter on device bond3 [ 814.564924][T21483] vhci_hcd: connection reset by peer [ 814.581768][T10721] vhci_hcd vhci_hcd.3: stop threads [ 814.583520][T10721] vhci_hcd vhci_hcd.3: release socket [ 814.585497][T10721] vhci_hcd vhci_hcd.3: disconnect device [ 815.637037][T21528] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 815.833871][T21527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3920'. [ 816.480530][T21547] sp0: Synchronizing with TNC [ 816.485126][T21546] [U] [ 818.011043][T21555] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 818.013173][T21555] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 818.016124][T21555] vhci_hcd vhci_hcd.0: Device attached [ 818.100873][T21555] netlink: 'syz.2.3929': attribute type 1 has an invalid length. [ 818.157657][T21558] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3929'. [ 818.169520][T21555] 8021q: adding VLAN 0 to HW filter on device bond7 [ 818.172290][T21571] bridge0: port 3(syz_tun) entered blocking state [ 818.175506][T21571] bridge0: port 3(syz_tun) entered disabled state [ 818.182909][T21571] syz_tun: entered allmulticast mode [ 818.189869][T21571] syz_tun: entered promiscuous mode [ 818.252820][T17238] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 818.408499][T21565] vhci_hcd: connection reset by peer [ 818.418798][ T60] vhci_hcd vhci_hcd.2: stop threads [ 818.421155][ T60] vhci_hcd vhci_hcd.2: release socket [ 818.423487][ T60] vhci_hcd vhci_hcd.2: disconnect device [ 818.448819][T21570] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 818.694628][T21583] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 818.927807][T21587] sp0: Synchronizing with TNC [ 818.930381][T21586] [U] [ 819.333367][T21602] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 819.536976][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3943'. [ 819.734676][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3943'. [ 819.738005][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3943'. [ 819.741272][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3943'. [ 819.745448][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3943'. [ 819.750440][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3943'. [ 819.754781][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3943'. [ 819.758630][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3943'. [ 819.762068][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3943'. [ 820.202072][T21625] ntfs3(nullb0): Primary boot signature is not NTFS. [ 820.204557][T21625] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 820.485964][T21635] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 820.692823][T16676] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 820.762037][T21639] binder: BINDER_SET_CONTEXT_MGR already set [ 820.778275][T21639] binder: 21638:21639 ioctl 4018620d 80000040 returned -16 [ 820.789220][T21639] binder: 21638:21639 ioctl c0306201 80000c80 returned -14 [ 820.799636][T21639] CIFS mount error: No usable UNC path provided in device string! [ 820.799636][T21639] [ 820.802890][T21639] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 820.850883][T21646] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 821.028335][T21652] fuse: Bad value for 'group_id' [ 821.030513][T21652] fuse: Bad value for 'group_id' [ 822.526848][T21691] [ 822.527998][T21691] ====================================================== [ 822.530772][T21691] WARNING: possible circular locking dependency detected [ 822.533705][T21691] syzkaller #0 Tainted: G L [ 822.536235][T21691] ------------------------------------------------------ [ 822.539183][T21691] syz.3.3966/21691 is trying to acquire lock: [ 822.541528][T21691] ffff888079442948 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 822.545368][T21691] [ 822.545368][T21691] but task is already holding lock: [ 822.548319][T21691] ffff88802841a488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 822.552036][T21691] [ 822.552036][T21691] which lock already depends on the new lock. [ 822.552036][T21691] [ 822.556178][T21691] [ 822.556178][T21691] the existing dependency chain (in reverse order) is: [ 822.559740][T21691] [ 822.559740][T21691] -> #3 (&of->mutex){+.+.}-{4:4}: [ 822.562605][T21691] __mutex_lock+0x1aa/0x1ca0 [ 822.564580][T21691] kernfs_seq_start+0x4f/0x2a0 [ 822.566268][T21691] traverse.part.0.constprop.0+0xaf/0x650 [ 822.568267][T21691] seq_read_iter+0x93c/0x12d0 [ 822.570212][T21691] kernfs_fop_read_iter+0x46c/0x610 [ 822.572633][T21691] lo_rw_aio.isra.0+0x758/0xd80 [ 822.575170][T21691] loop_process_work+0x8fc/0x1140 [ 822.577499][T21691] process_one_work+0x9ba/0x1b20 [ 822.579806][T21691] worker_thread+0x6c8/0xf10 [ 822.581897][T21691] kthread+0x3c5/0x780 [ 822.583783][T21691] ret_from_fork+0x983/0xb10 [ 822.585809][T21691] ret_from_fork_asm+0x1a/0x30 [ 822.588050][T21691] [ 822.588050][T21691] -> #2 (&p->lock){+.+.}-{4:4}: [ 822.590926][T21691] __mutex_lock+0x1aa/0x1ca0 [ 822.593043][T21691] seq_read_iter+0xe1/0x12d0 [ 822.595315][T21691] kernfs_fop_read_iter+0x46c/0x610 [ 822.598507][T21691] copy_splice_read+0x618/0xc20 [ 822.600685][T21691] do_splice_read+0x285/0x370 [ 822.602815][T21691] splice_file_to_pipe+0x109/0x120 [ 822.605155][T21691] do_sendfile+0x400/0xe50 [ 822.607267][T21691] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 822.609861][T21691] __do_fast_syscall_32+0xe8/0x680 [ 822.612261][T21691] do_fast_syscall_32+0x32/0x80 [ 822.614084][T21691] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 822.616507][T21691] [ 822.616507][T21691] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 822.619089][T21691] __mutex_lock+0x1aa/0x1ca0 [ 822.621099][T21691] anon_pipe_write+0x15d/0x1bd0 [ 822.623333][T21691] __kernel_write_iter+0x720/0xb10 [ 822.625719][T21691] __kernel_write+0xf5/0x140 [ 822.627775][T21691] autofs_notify_daemon+0x4db/0xd60 [ 822.629602][T21691] autofs_wait+0x10f3/0x1ac0 [ 822.631356][T21691] autofs_mount_wait+0x132/0x3c0 [ 822.633135][T21691] autofs_d_automount+0x4b2/0x960 [ 822.634925][T21691] __traverse_mounts+0x1b9/0x830 [ 822.636659][T21691] step_into_slowpath+0x772/0xf50 [ 822.638442][T21691] path_openat+0x10db/0x3140 [ 822.640110][T21691] do_filp_open+0x20b/0x470 [ 822.641765][T21691] do_sys_openat2+0x121/0x290 [ 822.643444][T21691] __ia32_compat_sys_openat+0x16d/0x210 [ 822.645497][T21691] __do_fast_syscall_32+0xe8/0x680 [ 822.647328][T21691] do_fast_syscall_32+0x32/0x80 [ 822.649058][T21691] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 822.651309][T21691] [ 822.651309][T21691] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 822.653964][T21691] __lock_acquire+0x1669/0x2890 [ 822.655740][T21691] lock_acquire+0x179/0x330 [ 822.657347][T21691] __mutex_lock+0x1aa/0x1ca0 [ 822.659006][T21691] autofs_notify_daemon+0x4a6/0xd60 [ 822.660807][T21691] autofs_wait+0x10f3/0x1ac0 [ 822.662648][T21691] autofs_mount_wait+0x132/0x3c0 [ 822.664441][T21691] autofs_d_automount+0x4b2/0x960 [ 822.666204][T21691] __traverse_mounts+0x1b9/0x830 [ 822.667957][T21691] step_into_slowpath+0x772/0xf50 [ 822.669715][T21691] path_lookupat+0x627/0xc40 [ 822.671373][T21691] filename_lookup+0x224/0x5f0 [ 822.673249][T21691] kern_path+0x35/0x50 [ 822.674758][T21691] lookup_bdev+0xd8/0x280 [ 822.676308][T21691] resume_store+0x1d6/0x490 [ 822.677939][T21691] kobj_attr_store+0x58/0x80 [ 822.679594][T21691] sysfs_kf_write+0xf2/0x150 [ 822.681229][T21691] kernfs_fop_write_iter+0x3af/0x570 [ 822.683074][T21691] vfs_write+0x7d3/0x11d0 [ 822.684564][T21691] ksys_write+0x12a/0x250 [ 822.686121][T21691] __do_fast_syscall_32+0xe8/0x680 [ 822.687920][T21691] do_fast_syscall_32+0x32/0x80 [ 822.689620][T21691] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 822.691915][T21691] [ 822.691915][T21691] other info that might help us debug this: [ 822.691915][T21691] [ 822.695561][T21691] Chain exists of: [ 822.695561][T21691] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 822.695561][T21691] [ 822.699449][T21691] Possible unsafe locking scenario: [ 822.699449][T21691] [ 822.701833][T21691] CPU0 CPU1 [ 822.703556][T21691] ---- ---- [ 822.705313][T21691] lock(&of->mutex); [ 822.706625][T21691] lock(&p->lock); [ 822.708583][T21691] lock(&of->mutex); [ 822.710661][T21691] lock(&sbi->pipe_mutex); [ 822.712158][T21691] [ 822.712158][T21691] *** DEADLOCK *** [ 822.712158][T21691] [ 822.714770][T21691] 4 locks held by syz.3.3966/21691: [ 822.716426][T21691] #0: ffff888024fe70b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 822.719403][T21691] #1: ffff88804535c420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 822.722270][T21691] #2: ffff88802841a488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 822.725394][T21691] #3: ffff888040eb80f8 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 822.728575][T21691] [ 822.728575][T21691] stack backtrace: [ 822.730572][T21691] CPU: 3 UID: 0 PID: 21691 Comm: syz.3.3966 Tainted: G L syzkaller #0 PREEMPT(full) [ 822.730593][T21691] Tainted: [L]=SOFTLOCKUP [ 822.730598][T21691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 822.730606][T21691] Call Trace: [ 822.730611][T21691] [ 822.730617][T21691] dump_stack_lvl+0x116/0x1f0 [ 822.730637][T21691] print_circular_bug+0x275/0x340 [ 822.730657][T21691] check_noncircular+0x146/0x160 [ 822.730677][T21691] __lock_acquire+0x1669/0x2890 [ 822.730712][T21691] lock_acquire+0x179/0x330 [ 822.730727][T21691] ? autofs_notify_daemon+0x4a6/0xd60 [ 822.730741][T21691] ? __pfx___might_resched+0x10/0x10 [ 822.730764][T21691] ? __lock_acquire+0x12c2/0x2890 [ 822.730774][T21691] __mutex_lock+0x1aa/0x1ca0 [ 822.730792][T21691] ? autofs_notify_daemon+0x4a6/0xd60 [ 822.730804][T21691] ? __kernel_text_address+0xd/0x40 [ 822.730817][T21691] ? find_held_lock+0x2b/0x80 [ 822.730831][T21691] ? autofs_notify_daemon+0x4a6/0xd60 [ 822.730844][T21691] ? autofs_notify_daemon+0x45a/0xd60 [ 822.730857][T21691] ? __pfx___mutex_lock+0x10/0x10 [ 822.730874][T21691] ? __mutex_unlock_slowpath+0x161/0x790 [ 822.730893][T21691] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 822.730911][T21691] ? from_kgid_munged+0xab/0x130 [ 822.730930][T21691] ? autofs_notify_daemon+0x4a6/0xd60 [ 822.730942][T21691] autofs_notify_daemon+0x4a6/0xd60 [ 822.730954][T21691] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 822.730966][T21691] ? kernfs_fop_write_iter+0x3af/0x570 [ 822.730982][T21691] ? vfs_write+0x7d3/0x11d0 [ 822.730997][T21691] ? ksys_write+0x12a/0x250 [ 822.731017][T21691] ? lockdep_init_map_type+0x5c/0x270 [ 822.731028][T21691] ? lockdep_init_map_type+0x5c/0x270 [ 822.731039][T21691] autofs_wait+0x10f3/0x1ac0 [ 822.731052][T21691] ? __pfx_autofs_wait+0x10/0x10 [ 822.731064][T21691] ? __pfx___schedule+0x10/0x10 [ 822.731078][T21691] ? find_held_lock+0x2b/0x80 [ 822.731092][T21691] ? path_has_submounts+0xcf/0x120 [ 822.731105][T21691] ? preempt_schedule_thunk+0x16/0x30 [ 822.731117][T21691] ? preempt_schedule_common+0x44/0xc0 [ 822.731133][T21691] autofs_mount_wait+0x132/0x3c0 [ 822.731145][T21691] autofs_d_automount+0x4b2/0x960 [ 822.731157][T21691] __traverse_mounts+0x1b9/0x830 [ 822.731169][T21691] step_into_slowpath+0x772/0xf50 [ 822.731184][T21691] ? __up_read+0x2d1/0x700 [ 822.731196][T21691] ? __pfx_step_into_slowpath+0x10/0x10 [ 822.731210][T21691] ? lookup_slow+0x30/0x70 [ 822.731223][T21691] path_lookupat+0x627/0xc40 [ 822.731237][T21691] filename_lookup+0x224/0x5f0 [ 822.731252][T21691] ? __pfx_filename_lookup+0x10/0x10 [ 822.731271][T21691] ? getname_kernel+0x52/0x370 [ 822.731281][T21691] ? __asan_memcpy+0x3c/0x60 [ 822.731296][T21691] kern_path+0x35/0x50 [ 822.731309][T21691] lookup_bdev+0xd8/0x280 [ 822.731320][T21691] ? __pfx_lookup_bdev+0x10/0x10 [ 822.731331][T21691] ? __asan_memcpy+0x3c/0x60 [ 822.731344][T21691] resume_store+0x1d6/0x490 [ 822.731357][T21691] ? __pfx_resume_store+0x10/0x10 [ 822.731372][T21691] ? find_held_lock+0x2b/0x80 [ 822.731386][T21691] ? __pfx_resume_store+0x10/0x10 [ 822.731398][T21691] kobj_attr_store+0x58/0x80 [ 822.731415][T21691] ? __pfx_kobj_attr_store+0x10/0x10 [ 822.731431][T21691] sysfs_kf_write+0xf2/0x150 [ 822.731443][T21691] kernfs_fop_write_iter+0x3af/0x570 [ 822.731459][T21691] ? __pfx_sysfs_kf_write+0x10/0x10 [ 822.731470][T21691] vfs_write+0x7d3/0x11d0 [ 822.731485][T21691] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 822.731502][T21691] ? __pfx_vfs_write+0x10/0x10 [ 822.731516][T21691] ? find_held_lock+0x2b/0x80 [ 822.731534][T21691] ksys_write+0x12a/0x250 [ 822.731549][T21691] ? __pfx_ksys_write+0x10/0x10 [ 822.731566][T21691] __do_fast_syscall_32+0xe8/0x680 [ 822.731585][T21691] do_fast_syscall_32+0x32/0x80 [ 822.731602][T21691] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 822.731617][T21691] RIP: 0023:0xf703d579 [ 822.731627][T21691] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 822.731639][T21691] RSP: 002b:00000000f540c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 822.731650][T21691] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 822.731657][T21691] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 822.731664][T21691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 822.731671][T21691] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 822.731677][T21691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 822.731687][T21691] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 822.995398][T21691] PM: Image not found (code -22) [ 823.172595][T17342] syz_tun (unregistering): left allmulticast mode [ 823.320448][ T6339] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.384975][ T6339] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.405402][T17238] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 823.539064][ T6339] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.619780][ T6339] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.939905][ T6339] bond0 (unregistering): Released all slaves [ 823.944773][ T6339] bond1 (unregistering): Released all slaves [ 824.081639][ T6339] bond2 (unregistering): Released all slaves [ 824.199983][ T6339] bond3 (unregistering): Released all slaves [ 824.321865][ T6339] bond4 (unregistering): Released all slaves [ 824.456854][ T6339] bond5 (unregistering): Released all slaves [ 824.556985][ T6339] bond6 (unregistering): Released all slaves [ 824.656751][ T6339] bond7 (unregistering): Released all slaves [ 824.671388][T21687] syz_tun (unregistering): left allmulticast mode [ 824.674136][T21687] syz_tun (unregistering): left promiscuous mode [ 824.677389][T21687] bridge0: port 3(syz_tun) entered disabled state [ 824.738786][ T6339] tipc: Left network mode [ 825.127480][ T6339] hsr_slave_0: left promiscuous mode [ 825.129713][ T6339] hsr_slave_1: left promiscuous mode [ 825.133936][ T6339] veth0_macvtap: left promiscuous mode [ 825.135865][ T6339] veth1_vlan: left promiscuous mode [ 826.658406][ T6339] bridge_slave_1: left allmulticast mode [ 826.660214][ T6339] bridge_slave_1: left promiscuous mode [ 826.662068][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.666190][ T6339] bridge_slave_0: left allmulticast mode [ 826.668363][ T6339] bridge_slave_0: left promiscuous mode [ 826.670444][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.673997][ T6339] bridge_slave_1: left allmulticast mode [ 826.676292][ T6339] bridge_slave_1: left promiscuous mode [ 826.678109][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.681290][ T6339] bridge_slave_0: left allmulticast mode [ 826.683536][ T6339] bridge_slave_0: left promiscuous mode [ 826.685631][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.690188][ T6339] team0: left allmulticast mode [ 826.691982][ T6339] bridge0: port 1(team0) entered disabled state [ 826.756541][T10730] smc: removing ib device syz2 [ 826.970461][ T6339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.977380][ T6339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.981761][ T6339] bond0 (unregistering): Released all slaves [ 827.109961][ T6339] bond1 (unregistering): Released all slaves [ 827.233761][ T6339] bond2 (unregistering): Released all slaves [ 827.379137][ T6339] bond3 (unregistering): Released all slaves [ 827.708801][ T6339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.713613][ T6339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.718584][ T6339] bond0 (unregistering): Released all slaves [ 827.834613][ T6339] bond1 (unregistering): Released all slaves [ 827.930535][ T6339] bond2 (unregistering): Released all slaves [ 828.032014][ T6339] bond3 (unregistering): Released all slaves [ 828.133328][ T6339] bond4 (unregistering): Released all slaves [ 828.237850][ T6339] bond5 (unregistering): Released all slaves [ 828.361094][ T6339] bond6 (unregistering): Released all slaves [ 828.484698][ T6339] bond7 (unregistering): Released all slaves [ 828.607586][ T6339] bond8 (unregistering): Released all slaves [ 828.740233][ T6339] bond9 (unregistering): Released all slaves [ 828.850248][ T6339] bond10 (unregistering): Released all slaves [ 829.159455][ T6339] bond0 (unregistering): Released all slaves [ 829.327985][ T6339] bond1 (unregistering): Released all slaves [ 829.442136][ T6339] bond2 (unregistering): Released all slaves [ 829.556469][ T6339] bond3 (unregistering): Released all slaves [ 829.675199][ T6339] bond4 (unregistering): Released all slaves [ 829.819161][ T6339] bond5 (unregistering): Released all slaves [ 829.935380][ T6339] bond6 (unregistering): Released all slaves [ 830.052260][ T6339] tipc: Disabling bearer [ 830.054321][ T6339] tipc: Left network mode [ 830.077130][ T6339] tipc: Left network mode [ 830.688819][ T6339] hsr_slave_0: left promiscuous mode [ 830.690831][ T6339] hsr_slave_1: left promiscuous mode [ 830.692575][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.695168][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.698678][ T6339] hsr_slave_0: left promiscuous mode [ 830.700762][ T6339] hsr_slave_1: left promiscuous mode [ 830.702813][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.705844][ T6339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.711561][ T6339] hsr_slave_0: left promiscuous mode [ 830.714292][ T6339] hsr_slave_1: left promiscuous mode [ 831.074596][ T6339] team0 (unregistering): Port device team_slave_1 removed [ 831.113097][ T6339] team0 (unregistering): Port device team_slave_0 removed [ 831.431199][ T6339] team0 (unregistering): Port device batadv1 removed [ 831.732350][ T6339] team0 (unregistering): Port device team_slave_1 removed [ 831.760836][ T6339] team0 (unregistering): Port device team_slave_0 removed