last executing test programs: 41m24.330870832s ago: executing program 32 (id=348): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, 0x0, 0x0) openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000300)='./binderfs/binder-control\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="cae77f0556bd7e3ad6255f04374c31863b", 0x11, 0x20000045, &(0x7f00000000c0)={0xa, 0x2, 0xffff, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) shutdown(r0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) socket(0x1a, 0x5, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x1, {0xffffffffffffffff, 0x6, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3ba, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xa}}}, 0xa0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x2, 0x5003) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 41m2.660819171s ago: executing program 33 (id=404): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, 0x0, 0x0) openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000300)='./binderfs/binder-control\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="cae77f0556bd7e3ad6255f04374c31863b", 0x11, 0x20000045, &(0x7f00000000c0)={0xa, 0x2, 0xffff, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) shutdown(r0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) socket(0x1a, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x1, {0xffffffffffffffff, 0x6, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3ba, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xa}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 40m46.590316276s ago: executing program 34 (id=469): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, 0x0, 0x0) openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000300)='./binderfs/binder-control\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="cae77f0556bd7e3ad6255f04374c31863b", 0x11, 0x20000045, &(0x7f00000000c0)={0xa, 0x2, 0xffff, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) shutdown(r0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) socket(0x1a, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x1, {0xffffffffffffffff, 0x6, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3ba, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xa}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 40m45.372521334s ago: executing program 35 (id=471): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, 0x0, 0x0) openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000300)='./binderfs/binder-control\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="cae77f0556bd7e3ad6255f04374c31863b", 0x11, 0x20000045, &(0x7f00000000c0)={0xa, 0x2, 0xffff, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) shutdown(r0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) socket(0x1a, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x1, {0xffffffffffffffff, 0x6, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3ba, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xa}}}, 0xa0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x2, 0x5003) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 39m17.74713356s ago: executing program 7 (id=687): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x118}}], 0x1, 0x4088) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 39m17.477868544s ago: executing program 7 (id=688): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000005c0)={0xfc2, 0x8}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2b423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x13, &(0x7f0000000500)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x11, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0b000000000000006f1d6928988cfc05157a3c06069d2efa87a269e7402d0ecba7ebceacb9dee0ba823eaeab1fb09d6b07c45d23b12d614d49bd7b6cf34663c75bd1339fe8be5259c24d615a9aaaef88446095716ca8179e9e6ac3bf42e50c9baafae4ef69e823dca4e8f9dc07eb274545994ce1140f1c1511ec617e49dc", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x19, 0x10}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB="0d00000018000000", @ANYBLOB="84f2f6772866a8106b934ffd020062deb0f7", @ANYRES32=r8, @ANYBLOB, @ANYRES64], 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./bus\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r11, @ANYRES32, @ANYBLOB="30f600030000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64], 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@netkit={@void, @value=r8}}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r12, @ANYRES32=r2, @ANYBLOB='#\x00\x00\x00\f\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="3b3bd7fb77bad6dd12fc6a4c05e51654d1065a852c67e1c48cc714b59e6ac71a588a244c8d4e8dd0d0128ad7a2ea42acbae6de4e63fc24cd8d268128af502f81af8d63963a96722405dfa81ed6efc2200e2d04724f6475d6bab5f2fd3dfa08e52d7d83037c94c379317ea1efd3616b78749291f11586495a48ab956b2ba05944153f09f39a89637542c0a3c3ed0f89190d6db64090cfa8beda1e8c60314f3f8b8ecd4c042c848e2f9579462118bec8e292e3291e70696668cbca85674fac77da8d", @ANYRES32=r7, @ANYBLOB, @ANYRES64], 0x20) 39m15.754487306s ago: executing program 7 (id=691): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00009b3000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="640f2151b9800000c00f3235010000000f30660f38828123cd0000c01519c5dea8aa0f20c035000001000f22c0b9800000c00f3235000100000f3066bad104ed2e0f30c4c3ed7d5e0005c4e151f41e", 0x4f}], 0x1, 0x1, 0x0, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 39m15.741099965s ago: executing program 7 (id=692): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)) 39m14.257064532s ago: executing program 7 (id=694): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x8000000000000003}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000280)=@raw=[@map_fd={0x18, 0x6}, @generic={0x3, 0x5, 0x8, 0x8, 0x4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x80000001}], &(0x7f0000000300)='syzkaller\x00', 0x869, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xa, 0xffff8518, 0x7f}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)=[{0x4, 0x5, 0x5, 0x5}, {0x5, 0x5, 0x1}, {0x1, 0x4, 0x6, 0x5}, {0x0, 0x5, 0x1, 0x5}], 0x10, 0x8000}, 0x94) pipe2(&(0x7f0000000000), 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={&(0x7f00000001c0), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa4}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 39m11.309912283s ago: executing program 7 (id=701): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, 0x0, 0x0) openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000300)='./binderfs/binder-control\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="cae77f0556bd7e3ad6255f04374c31863b", 0x11, 0x20000045, &(0x7f00000000c0)={0xa, 0x2, 0xffff, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) shutdown(r0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) socket(0x1a, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x1, {0xffffffffffffffff, 0x6, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3ba, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xa}}}, 0xa0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x2, 0x5003) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 38m55.245514983s ago: executing program 36 (id=701): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, 0x0, 0x0) openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000300)='./binderfs/binder-control\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="cae77f0556bd7e3ad6255f04374c31863b", 0x11, 0x20000045, &(0x7f00000000c0)={0xa, 0x2, 0xffff, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) shutdown(r0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) socket(0x1a, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x1, {0xffffffffffffffff, 0x6, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3ba, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xa}}}, 0xa0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x2, 0x5003) sendfile(r2, r2, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 35m23.977651411s ago: executing program 6 (id=1739): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000d40)={0x0}, &(0x7f0000000d80)=0xc) prlimit64(r1, 0x7, &(0x7f0000000dc0)={0x3a8, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x5, &(0x7f0000000b80)=0x37) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4bd3d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_timeval(r5, 0x1, 0x43, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x88e, &(0x7f00000003c0)={0x0, 0x4436b, 0x0, 0x6, 0xbfdfeffd}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x40, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12, 0x1}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) r9 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000800)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r11, &(0x7f0000000d00)={&(0x7f0000000c00)={0x1d, r12}, 0x10, &(0x7f0000000cc0)={&(0x7f0000000c40)=@canfd={{0x1, 0x0, 0x0, 0x1}, 0x3a, 0x3, 0x0, 0x0, "c342d15bb35e3c796c3b324d87e68b67ffe35233d2d6611a25d57a15c65c193be10b9be0519e62b06b2b1715bb825a0dc26e6de9489aaec3a88ca42f7f965999"}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000) openat$cgroup_pressure(r10, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0) read$msr(r10, &(0x7f0000000440)=""/137, 0x89) clock_gettime(0x0, &(0x7f0000000b00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000340)=@hci, 0x80, &(0x7f0000000040)=[{&(0x7f0000000500)=""/75, 0x4b}], 0x1, &(0x7f0000000580)=""/110, 0x6e}, 0x5}, {{&(0x7f0000000600)=@hci, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000680)=""/149, 0x95}, {&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f0000000740)=""/33, 0x21}, {&(0x7f0000000780)=""/51, 0x33}, {&(0x7f0000000900)=""/249, 0xf9}, {&(0x7f0000000a00)=""/181, 0xb5}, {&(0x7f00000007c0)=""/33, 0x21}], 0x7}, 0x6f32}], 0x2, 0x40000000, &(0x7f0000000b40)={r13, r14+60000000}) 35m22.954217883s ago: executing program 6 (id=1748): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x814) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x18) lsm_set_self_attr(0x66, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0x0, 0xee01, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 35m21.928130484s ago: executing program 6 (id=1750): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000005c0)={0xfc2, 0x8}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2b423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x13, &(0x7f0000000500)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x11, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r9, 0x35, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[], 0x20) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./bus\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r12, @ANYRES32, @ANYBLOB="30f600030000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@netkit={@void, @value=r8, @void, @void, r11}}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r13, @ANYRES32=r2, @ANYBLOB='#\x00\x00\x00\f\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="3b3bd7fb77bad6dd12fc6a4c05e51654d1065a852c67e1c48cc714b59e6ac71a588a244c8d4e8dd0d0128ad7a2ea42acbae6de4e63fc24cd8d268128af502f81af8d63963a96722405dfa81ed6efc2200e2d04724f6475d6bab5f2fd3dfa08e52d7d83037c94c379317ea1efd3616b78749291f11586495a48ab956b2ba05944153f09f39a89637542c0a3c3ed0f89190d6db64090cfa8beda1e8c60314f3f8b8ecd4c042c848e2f9579462118bec8e292e3291e70696668cbca85674fac77da8d", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r11], 0x20) 35m21.068342942s ago: executing program 6 (id=1756): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) setreuid(0x0, 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x8) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x101, 0x0, 0x0, [0x0], [0x0, 0x100], [0x0, 0x3], [0x0, 0x0, 0x53]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) pipe2(&(0x7f0000000180), 0x80) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) 35m20.97504247s ago: executing program 6 (id=1757): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f00000005c0)={0xfc2, 0x8}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2b423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x13, &(0x7f0000000500)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x11, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r9, 0x35, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[], 0x20) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[], 0x20) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./bus\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r12, @ANYRES32, @ANYBLOB="30f600030000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=r11], 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@netkit={@void, @value=r8, @void, @void, r11}}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r13, @ANYRES32=r2, @ANYBLOB='#\x00\x00\x00\f\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="3b3bd7fb77bad6dd12fc6a4c05e51654d1065a852c67e1c48cc714b59e6ac71a588a244c8d4e8dd0d0128ad7a2ea42acbae6de4e63fc24cd8d268128af502f81af8d63963a96722405dfa81ed6efc2200e2d04724f6475d6bab5f2fd3dfa08e52d7d83037c94c379317ea1efd3616b78749291f11586495a48ab956b2ba05944153f09f39a89637542c0a3c3ed0f89190d6db64090cfa8beda1e8c60314f3f8b8ecd4c042c848e2f9579462118bec8e292e3291e70696668cbca85674fac77da8d", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r11], 0x20) 35m20.974765606s ago: executing program 6 (id=1758): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x814) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x18) lsm_set_self_attr(0x66, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0x0, 0xee01, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 35m20.841739821s ago: executing program 37 (id=1758): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x814) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x18) lsm_set_self_attr(0x66, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0x0, 0xee01, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 30m35.524145086s ago: executing program 9 (id=2748): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000600)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0xa00, 0x4, 0x800, 0xfffffffe, 0x7}}, 0x118) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000000)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb6012887636086", @ANYRESDEC], 0xffdd) 30m25.874185223s ago: executing program 9 (id=2757): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_usbip_server_init(0x6) socket$inet(0x2, 0x3, 0x2) connect$qrtr(r3, &(0x7f0000000180)={0x2a, 0x1, 0x1}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000640)=""/212, 0xd4}], 0x1, 0x6, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x1020, @remote}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) 30m21.840164481s ago: executing program 9 (id=2774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x1, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 30m21.662455149s ago: executing program 9 (id=2767): mkdir(&(0x7f0000000000)='./file0\x00', 0x83) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x8, 0x0, 0xfffffffe, 0x8, {0x2, 0x3, 0x2, 0x266, 0x0, 0x0, 0xffffffff, 0x4, 0x100, 0x6000, 0x0, r2, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x100, {0x5, 0x1, 0xa53, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffaba9, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xfffffffe, 0x0, r3, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2a41, 0x1c) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) close(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x5, 0x3, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x1, 0x7, 0x6, 0xfff}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffe49, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f000078b000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 30m16.882344607s ago: executing program 9 (id=2771): sendto(0xffffffffffffffff, &(0x7f0000000000)="b555b239a8cfc612553780f9dc36632d63af68844c2f37f210dea6aff4c909f55fa76cc32d3151be7d85dcba2b3800b7ad407bf9b6113e5784c83b", 0x3b, 0x20040014, &(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80) 30m16.709362189s ago: executing program 9 (id=2772): mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3) syz_open_dev$tty20(0xc, 0x4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) unshare(0x22020600) 30m1.630902523s ago: executing program 38 (id=2772): mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3) syz_open_dev$tty20(0xc, 0x4, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) unshare(0x22020600) 29m34.086941111s ago: executing program 8 (id=2886): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = dup(r0) io_setup(0x2017, &(0x7f00000009c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x810) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pselect6(0x40, &(0x7f0000001080)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r5 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000014}) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r9 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) ioctl$VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000300)={0x9}) read$FUSE(r1, &(0x7f0000005380)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 29m32.826966384s ago: executing program 8 (id=2893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) (fail_nth: 2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000005c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsetxattr$security_ima(r1, 0x0, &(0x7f0000000180)=@v2={0x3, 0x3, 0xb, 0xf, 0xa, "c804f5cb3f6061929cf1"}, 0x13, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1e7d, 0x2c24, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x38, {0x9, 0x21, 0x7ff, 0x20, 0x1, {0x22, 0xc39}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x6, 0x8}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0xe, 0x8, 0x0, 0x40, 0xc}, 0x46, &(0x7f0000000300)={0x5, 0xf, 0x46, 0x1, [@generic={0x41, 0x10, 0xb, "7d87a55ba31138b830f582befa1d698c75bcbbaa895b2bb13010303ef19f7a6201d4f84e28d37e87957cf0d3b54e572cdeb79c79cd784809e9a7ea45b867"}]}, 0x6, [{0x5b, &(0x7f0000000380)=@string={0x5b, 0x3, "cedcac785d825630c3d92a4820e6f9d325da45bebed176b11b7098d6beb8be271c93d8125ecc3bede0e1c73f4bbc0f56cd328636a646a5d2d5ce6f25b103d31141bc13f2a68139ad73ef86da8080e952c49f0d84a3e9af7232"}}, {0x34, &(0x7f0000000280)=@string={0x34, 0x3, "d6b320647e8c11380320f1f6ae2855e50a223f881f1c479ecdb06891575999d19d0d9224797b2d91aef71221a8798c178ccf"}}, {0x2, &(0x7f0000000480)=@string={0x2}}, {0x0, 0x0}, {0x21, &(0x7f0000000580)=@string={0x21, 0x3, "164cd41d62d7fd4243a2179dc879fb22d3582c41d64e8ebd75fe3c9efea69d"}}, {0xbd, &(0x7f0000000700)=@string={0xbd, 0x3, "467f7d4868c4ee77ae072d1cb30f9c99bb6dd8aaccdf2d803118e1511dc0b8d01e9dfaed21cfe588d90025b7406e9167d4889465c44858b6d517a6320c36c3450fca60083388b5abce22a9863bb44168fd727740298211ea30a0b48cd0ab4aa01233f2d903b9b04e17eaf67a44603c5fd58eb3cd6740e2c88833852ef2ee7ec66b934788c38284729c44514c89c927711d3749d67c79d234cced8fbdbed0ee497784028f33c3582f4a4cd96c78a4df67e54ea453fa7b11ee61b142"}}]}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="80000000050601080000000000000000070000080900030073797a320010000005000100070000000900030073797a310000000005000100070000000900020073797a320000000005000100070000000900020073797a310000000009000300"], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) ioctl$RTC_PIE_OFF(r5, 0x7006) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) socket(0x18, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') ioctl(r5, 0xffffffff, &(0x7f0000002080)="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") syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xd74d, 0x0, 0x3, 0xfe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 29m29.667002317s ago: executing program 8 (id=2900): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000200)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000300)={0x60, 0x2, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000031b000/0x4000)=nil, 0xa8856d5, &(0x7f0000000240)=[{0xfff, 0xc, 0xfffffffffffff4b5}], 0x1, 0x7, 0xa08d1a477dd2d35b, 0x31, 0x50, 0x5}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00006f0000/0x1000)=nil, 0x1000}, 0x3, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000380)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x4a, {0x2, 0x4e23, @empty}, 'nicvf0\x00'}) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 29m28.795459817s ago: executing program 8 (id=2902): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000100)="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", 0x2000, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 2) 29m28.386991321s ago: executing program 8 (id=2903): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000013c0), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000000c0)={0x400, 0x1, 0x2}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000040)={0x69, 0x25f4, 0x5, 0x5, 0x5, 0x81}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x800, 0x0) 29m27.034047222s ago: executing program 8 (id=2908): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103042, 0x47) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_off}, {@nfs_export_on}]}) chdir(&(0x7f0000000140)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) openat$snapshot(0xffffff9c, &(0x7f00000000c0), 0x80000, 0x0) timer_settime(r3, 0x0, &(0x7f00000001c0), 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 29m10.833965441s ago: executing program 39 (id=2908): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103042, 0x47) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_off}, {@nfs_export_on}]}) chdir(&(0x7f0000000140)='./bus\x00') lsetxattr$system_posix_acl(&(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) openat$snapshot(0xffffff9c, &(0x7f00000000c0), 0x80000, 0x0) timer_settime(r3, 0x0, &(0x7f00000001c0), 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 25m30.016745882s ago: executing program 1 (id=3458): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000001040101000000000000000005820000060006400001000005000100010000001b1e023a6466e565e68217bcf1d1922e880072a44b8131ec6e57468127b8fd455acd4d8a65a33bbd868a27bc6102"], 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x20000888) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATX(r6, &(0x7f0000000180)={0x130, 0xfffffffffffffffe, 0x0, {0x100000000, 0xffffffff, 0x0, '\x00', {0x7ff, 0xb, 0x3, 0x3, r7, r8, 0x1000, '\x00', 0x0, 0xfffffffffffffe01, 0x6, 0x80000001, {0xfffffffffffffffe, 0x7fff}, {0xfffffffffffffffa, 0x800006}, {0x101, 0x66}, {0x9, 0xb754}, 0x7600, 0x9, 0xb0c4, 0x6}}}, 0x130) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[], 0x80}}, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'gretap0\x00'}}, 0x1e) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 25m26.204934708s ago: executing program 1 (id=3463): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0xe98}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth0_vlan\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1004014, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@setlink={0x2c, 0x13, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x800, 0x80}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3404c045}, 0x10) 25m26.038195206s ago: executing program 1 (id=3465): memfd_create(&(0x7f0000000080)='/dev/input/event#\x00', 0x3) openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000100)) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 25m23.845494241s ago: executing program 1 (id=3473): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x1401, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0xf00, 0x1}, 0x4) 25m23.732561163s ago: executing program 1 (id=3474): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x5, 0x7fff0000}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000280)=0xffffffffffffffff) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f00000000c0)=0x9, 0x8) shutdown(0xffffffffffffffff, 0x1) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000040)=""/90, 0x5a}], 0x1, 0x8, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 25m22.160767159s ago: executing program 1 (id=3477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendfile64(r8, r7, 0x0, 0x1) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@local}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe4) socket$alg(0x26, 0x5, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) close(r10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 25m6.018998386s ago: executing program 40 (id=3477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendfile64(r8, r7, 0x0, 0x1) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@local}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe4) socket$alg(0x26, 0x5, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) close(r10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 34.75102827s ago: executing program 0 (id=9181): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) recvfrom$ax25(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000001300)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002300)={r6, r7, "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", "7e7aa3501b2b14850b763e5c3b8e64f7737bafc54ee5134c3e2b7b6a0ecf87bdc3511b656dc2a713822a32ef74ae3979d5828dc7e4faad0d581323b3f5e81f0b18d217728ca76b40575e3692432d0b6a4381699e3a1edcc06e42fda343fdb36c37f9c271c016ab3c8badc9c512c8b8f4c3f6b7a98e44c0fdcaf9eff3c00fbfa0b875839dc3a9364fff031a57b81551b36073d7dee6615aeddc21dae4d56ebba2c28831f479ae413ac44ddefb85507dd68107174d2693feeac7c969e2aa027aadd7f132b82ce06baa45e47183f0281938950c60bd34d7c64e902d2e53dd3cd45bc672dd8ef3150f5cd4017b6aed6712c4065f0b4a7d7b9e0b437ad0198292dfa6455c0e697c5ebb32bf18d6ce9708baf0922d5733a4f9dac81c4bfb78ad1056eec59e8dfdcf37a6aa456f58720e00890c15418a7e64e11aa9344bf1f96bd5ce3ba75746e2be65fb902d2d53d755c0367364afd447974c73d16896efee43771327a85b4db23cbff599252c1eeebbda4160143c513f2a34afecfec7b42bcb5609ec8666f8b400606b8b3a5b12ae0e72bb963ff0e92bfcc2d0aded746ee9af7d24c3031cb4cb56e80b003fa52dc5f41134730d38c8f5a29657974d237854a72640bbaa452e28d77e840a203648e27a3b34c690f22d1e46cfb714d001a38b48afe1db3dc0b79bc39266631f54c661f307425162e2781fb51899dfb69be802563fcd1a835b7451c344101a07617cddefe24fbd10f877698c6abcbdeca96e2480241f0c52a9c5ff07fd1f81eae6c365f2f5f38a20186e4f6ce7c9d3cbe5bacb00017da509bdd2be9c03ac285f496f896ccce850279efeba07e0e72680a034e7401f37b5ee08ffef73abd27e47a6f32a7ca76e86a358209c984f0c33c4a0962cbe429805b130a1be02d148311730b728d905d0df6f132edcafae6dc39f5d0f07972d7ed368576376d26803280c2407b217bbe868446cbaeee932a97a433c4870c3a77d6c6dcfa9880b4ed3e34516e88a1c5f1a03b261eebd6c977c4e030f2a08f239dbed3c1490f0c87d1eb618eb585ca09962414e159e9efc1d804385fa389bcfafa905da94d6f2cdf6525e2c95976d52d4154e229aa89be4c12ed8e3714426e06a9026ae43b0a34af71401a25e2c5f4d9a5db518b367f9d7ce4bafae193aa1a1c750bafcfda762647c449dd54650a73312c5830514074f3a3a0ef0a33063f21b4b722dac35077a19c212a63e566ecbeffb0fc9e2463ba4e84e74eeca431fa03bd29634253155f0d33efa52a31d12a52c484fad463cae06a01d7b7c7d092a23fda8407736b5f6ec41aa3e9bf1f33564c8cea1e3823d9ffac246396bbffb124a2a2ae391c3921ff6aedecccea7612b034b040792a8bf0fd4bdba3bd1abf941b4e0264ca06aaa16ef1dd823b6aa16be387badcf1bde253f8cb2982b0c2b87d408dac55d665e03e0f486081ebfe8b2bf2cac0323b63da38a7989248e9f81a4ea3e93928fc09450c3801969cc4e0f2b54be6115302119dc61f772020be50246ea740e2f769b75d04e2a8b3e316a03747a2da8e419b39d751c5c7afe5bfb39bd49a6e6002d48df7a65cb934b5516521f0e53d46b088326249f94e5d580ff4fad7beff00f076273a74643a108cf5ed58da811952f5cb64c9480c1d79d12c5385de913a7aaee586b18fb4b094d45dbc6ec9296efe6f86716356ffdcd29d0bf3c26da7583ff838feb822c13a695c48111b2268ef298b186e9e42eb746ba12906e3d8eea46e30ab9c34a7e12a605ec530162221bb9b105bbb49987c59d8a9cc213b91d5565fa813873419c12f4b5c137313239ebc4c22da1d319f1c9272f8261fc302382d32a709186e72c95c85c07d4b66a2e069dae964122820d2f1895b7d05d3a3446f73d026d35a9cc297491b824d05ba28a0d7071c5b0146e4b480b82b6643b1049dd52e9f3477368e952cd5c8890d02b9b7afc4f4fe387164a8dc22438879646eebd6592b7c7d7c7e98bf9d7225e7c0cc98a4dc42015dba01e12ecb77e780f2f4ad8e6ea59b4f3f6e53d1b3be70c88041c256c2df36d73683686173de90b29deaee16214a49d1eb088c0e0cf0f16aaf2ca7193c965d6262615611a838fc43153626189ccd7b83fd502f6400cb5ae81e3ba32969150f672501f2f2182695c2c8620c3fa293c70aa86c970dc268eb5491ee52306dd0475133c5e592e218032447d6315a753f034f210a0a8f4fe29c328346f87dbbd185096bbe950042db3cdf81e0f2dea4f01ec39712b083b4c62e61b72b0f4c759e19275367fc29f9ee4aba4647c506bd6cfc89109f55366cb6a692468bd4d00092797d1edf10ee16ddd2c7a0ebf2e0abde4a0a6082fb359113364db54a803ee86ab9328ce3aeb97ded96848f01bf800e83af063052c5d4357bbf3f23cd72ef19987cfd04f71e3991674a4552fea1d53b50d6ed33efc81db2e90081a7cb319eae53bc83cb2955d40e01fbd919ae2d978f53d0d1d6ac71d3179591c6c43e991be3f196b3801ac9f0805441297948a6520effd69f1bd5a6c75fc4856eec27606bb623f71e0a853f2419b62b490bfa1e5a796c887a226e2f41daf333359d36ffcc72e3dd562a9565bba856c6751127b5391948063cea861ef3d572f15f014d8c132a6039a73ff0fb6a4fe601b0471d8aa76ffcd222f882b3583d7d016e58f283f7e0ca9e9ba5b3125d6c8c79b8da63ce8bd918f0ec467b64d16b523475b81ac6dc54bdf66aed620c56b2a6f6d99224ce6065bbc55605243cba4bcae350bd3fe8b6ac5994e5fae4e37dffabcf7043c192a18e5e1fb37baa23e3f21a744cff1a9e76da29994841dcbbfa614b5264f083a18aba2ac1290263e8e34633e9cc95b242f9e990a18ad3b7cb4d4b0f1684bb61bcf7b17f40c621e3fc8dbef12cd17b3baf792145c70d2274372aa5e0872349da4d81b60ff5d22686833c251b20da65a3035af0c6defadb788fd78ac746486bb34f8c99ee67caa659f96677033ee4b0c4411e4e28af2b4eed78372a7b35b9c10d7d2ea6e17ae203c70ebdc32b3a939ea95df877a75e05f8ee15957040a149449a5cf936f419bf95a032523008cefcffc2d17a5d6e226caaeb8ba7bc9831c666bae97bcc63719d7d9df5b11cd118be04916133fe7ee328be015e26a8867529987246962398d2a585502b4024a63e05fc18a1a333f7db2e828c883ab1d4e22538e20b4a45142409db3d125d0d978917bf70c289e5735d5e1ca11d56d0ecc878ce4532418d88a6e1ed999c00b90a3e4a423e50d6902e6c55cd401d8df4f9467fc01d10dad9f8230afcea91ea03a6722eee7b68ebe56293c10b7c6a814e20e43a78833a92aec198a5975d5b977d1c9e1a76f4cf238e3091f7d5705a79cac83cb82d5716500e24b7caf0e5a4d80bbfda21e121793352ae0f756742eb2873ee64469dbd03c764f0118064282ff098a3763e704456cfdd044a4454fb5beaa9068de014a4fbeac2539b1ce2c9df511abdf73303e2ce03dc061aa18e78f835972e915fcb8f38d130c0a1dbab61599b93a9f4de1c2c6a2760c234786897ad97dcae5f1869ba948acc34e411a9e76df39cf65aaa4fffce5ff84b7f017bd793c503f4711b3c7dd13835bac95282596b6921b44d75b8b70bee9b227e91d6c1178bac787a721be4efef34afd1e7fff1341fa87946459a6e83eb04634064e7b8e4f325561b62b280062306a69b9624e46fb0c537ed89ecbb8d2423505c7c6d52aaa6968391598c33fc80a2def6c3dbc20e097af7a9a7e3dcd04795d531ea4f28005ab882d323fc2ea33f434870260bea8f103394b8d9e99107f49e33eafd08e3ffaac7defbe1e1bfd0f0ae44dee09e5e61d2fdd7eb3eb465c34a13618ee9fa5af109dc4077b840811174f546f82e789d26cb50d1b220091987b0789ed69ab9b106d9dc44e349687915911b7a81ca289af9ed909b9b5edb4b34f1e8ee919efd258f2a8bcebcb155296b9ac379d8fcaf6188b0a61ca285bcada1dfb728d38763d07003ff96ede5f7ff5d3f776dc7f3e202014c21ea7e769abd9823e71fce6464883be5e48a9e7f3795a8d8ff287d1ba1fa15e29abe7ddad38519fb966404b847324b40ad8da0bbdf2efd1aacca423a15f95353a0d4dde397dd1a8cbf1f24c403f95ff2f2b16769c504a7aa4fb8d02ed4e11204012ab1c19f551a88a1d7197ba2667bcd3127df316d2433b6b636d9825a548b6cb765e962d6b0e36f21403ca450e8c83cab2a801895dab5c16ecb3c8fcf9f32fcb9a66258d9c9c46412f4cc5f7163b5aab9c5184fed0ce0ecb09a1f3ac2e9b19f7d5273638dcf38f2a555ced6b5848592e42e7bb003d735f755840b8458dc86a9e87301b094233d4790ee2b6765a7972fdf377c6e04f57ed29068f47ee8cd7c13bde4650a026216bdf1bbe6209b9f99edea80f2e8313f385468cb31785bd27bc8ec3f34de7ef5e5a1147e39e8f335cf19d70bd9ba48b4bd5fa66fc68701a2ab6cf4eaf35962db0d983d2b6c28fb3d74ffdc2b56e9c887bc5f2c80f724b53808f87c490701d858efac1d901db7e7b9d4476a1c8d64519578213f3d7d3e60122730f51ea1cbecea48670712b346d4f50b21f048bf65a6d341963e281418765ef2432444d273f566224b96a0b57bb7cff9eb8f9cca6e877cf907bc931ac849f073e94f629f01e0f4f18f10ab97282eb284797e693465235ebfe74774365d252757737adf5d3015c7214968d46df5ef59e652fa502b4241b5a8329e890c93f49c62f801916775879ca5f76166f3be3fff974858a13dcd7327f3223873761ecb857d3a7985efce33662121430a6a2eadeb0d0787a8e09a07ea80b91aed6ad95a8bf6653679918667fa84647879e72a6781b69af3d2d0fb58b01a8506052f5e2b0c79a6ea5a91e1a760ab936efaf56bbce12ded831ab83e978121eed49abbbfa1fd9c7ef5d7f760e96b911e8533f5b470ab52c4cea5da70fae9f4f531594cc9303848abf6de2c5742b16ff0a552ec1801c651f5049bbea7889d0061f466cf8a5cc9c3fb16315e69b392059aeec61ebd2ec5bda5011e93fc3614abb7b5fa2de17cba2f3bdf67dc1b2606bde13774289745fd6402ae0af7e30acb98901495542d95125690096cb8f50c0619bb275ae87df7aa471cbd29e144727879669180a1b697f18f049adc04bb9cac2aa877f74a3b9341286168f535e3a5795d76b54e8ec30b2484e57a996984bd452221974644d070f1abc59ca2e7967be6dd24cd7cf8dfe7d3a5748f68dcd35d6f7e0c30fc35caedc4ea6437dd42d320efc5046e9073413e28ba1a2cb7f927248d22365d1e83aef56117638acf823015a6cb377e5bcaf7671c0847bfb20f3d5c088232209d7247f6b53824d75dc7f4df0f008c81ac87a1500acece3e0bad96f068492e02121"}) r8 = accept4$netrom(r3, &(0x7f0000000180)={{}, [@bcast, @remote, @bcast, @bcast, @remote, @default, @remote, @netrom]}, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r10, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r10, &(0x7f0000003400)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000086b03188d9cf5ec33d8e82ab0f2b3baf310dbad0a52559dbe669c6a441", @ANYRES16=0x0, @ANYBLOB="20002abd7000fbdbdf25820000000c009900050000003a000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008000) setsockopt$inet_tcp_int(r9, 0x6, 0x7, &(0x7f0000000180)=0xa5, 0x4) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f00000000c0)={0x5, 0xb1, 0xc8, 0x3, 0x3, 0x3, 0x6, 0x1, 0x84, 0x2, 0x0, 0x7, 0x9, 0x3}, 0xe) 34.619099007s ago: executing program 0 (id=9183): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) r1 = socket(0xa, 0x5, 0x0) dup(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000001) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = io_uring_setup(0x1148, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_create1(0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f041}) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/hibernate_compression_threads', 0xa0042, 0x11) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400)={0x6, 0x2d, 0x0, 0x3a, 0x0, 0x2c}, 0x48) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 33.708182742s ago: executing program 0 (id=9185): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e00000000004000000000000900000000000035"], 0x48) 33.611010423s ago: executing program 0 (id=9187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/16], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r2, 0x0, 0x3, 0x1}}, 0x20) 33.610123356s ago: executing program 0 (id=9188): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_io_uring_setup(0x4fa1, &(0x7f0000000180)={0x0, 0xaaf4, 0x40, 0x1, 0x324}, &(0x7f0000000080), &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @loopback, 0x1}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 33.330072202s ago: executing program 0 (id=9190): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r2 = socket$inet6(0xa, 0x1, 0x84) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7a0a00ff00000000711070000000000095009c0000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) (async) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) (async) r4 = syz_io_uring_setup(0x496, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x7ffc, 0x40024e}, &(0x7f0000000340), &(0x7f0000000080)) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8, 0x0, r4}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) (async) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) (async) shutdown(r2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) epoll_create1(0x80000) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x74000000) (async) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket$kcm(0x29, 0x5, 0x0) (async) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r8, 0x4, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='\x00', &(0x7f0000000040)='\x00', 0x0) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x2, 0x2fd, 0x100, 0x101, 0x300}}) 18.186167251s ago: executing program 41 (id=9190): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r2 = socket$inet6(0xa, 0x1, 0x84) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7a0a00ff00000000711070000000000095009c0000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) (async) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) (async) r4 = syz_io_uring_setup(0x496, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x7ffc, 0x40024e}, &(0x7f0000000340), &(0x7f0000000080)) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8, 0x0, r4}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) (async) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) (async) shutdown(r2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) epoll_create1(0x80000) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x74000000) (async) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) socket$kcm(0x29, 0x5, 0x0) (async) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r8, 0x4, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='\x00', &(0x7f0000000040)='\x00', 0x0) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x2, 0x2fd, 0x100, 0x101, 0x300}}) 6.176204411s ago: executing program 3 (id=9298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r1, 0x80927000) mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r1, 0xffffe000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x28048014) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) ioperm(0x0, 0x7, 0x5) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbd3df250200000005000400000000000900030073797a30000000001400020067656e657665300000000000000000000900010073"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) mount$9p_virtio(&(0x7f0000000380), &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x2, &(0x7f0000000000)={'trans=virtio,', {[{@cache_none}]}}) 5.729123372s ago: executing program 3 (id=9300): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00002a3000/0x4000)=nil, 0x4000}, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000cfbad1d10e9b00000800000091115200000000009500070000000000a929e3e6154d8a20ca2658ff16e6c0822658743849d6574ed6ca52bc6827d0af0562"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) mbind(&(0x7f0000778000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x7, 0x2) 5.198311571s ago: executing program 3 (id=9303): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x19, 0x0, &(0x7f0000000200)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r3, 0xc048aeca, &(0x7f0000000640)={{0x3, 0x0, 0x80, {0xeeef0000, 0xdddd0000, 0x2}}, "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", "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"}) r4 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f0000001440)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000001840)="a905000000007464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x24}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000"], 0x10}}], 0x2, 0x40000) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) getsockname$llc(r5, 0x0, &(0x7f0000000100)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8001, 0x0, 0x81, 0xffffffff}) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$RNDADDTOENTCNT(r6, 0x40045201, 0x0) r7 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x13) tkill(r7, 0x12) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r5, 0x4, &(0x7f00000002c0)="017be90b67d644cf43f86435e1f7d1fd73f92c4ce7b2724eda75ce77fb689e2cc5d9170bc6b053790d34b877719822b1049e98832222ee129053d0fd4ebf0ae9e8c141098bbb9cfbb8e1c3ceb0b55f3b3825f5f7b98a363f2bff81e73c59e129cecc161f85918067d3214fa5064b5c097a267c06413fe8b6aaee35cc02cf8e88b7c78f0530c25e290458c5bd5cf5914bf9dca01a087e0d9c1a679cb6730a14bd080aca3ce967198a013751edab7d0aed7b3ad67c2b71e26d614aadb6237217f1371f8d") ioctl$sock_bt_hci(r8, 0x400448dd, &(0x7f0000000140)) 4.894164127s ago: executing program 3 (id=9306): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2200000004000000040008000800000000000000", @ANYRES32, @ANYBLOB="0000000006"], 0x50) 4.750032617s ago: executing program 2 (id=9307): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000680)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04gU\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\x17lm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2, @ANYBLOB="c8fd6524d7db696bc508ee46069a11bce1a80743ca86f421352adad007a66689b2f3fc14faaee8aa490d58bea17b47a528d5f4c862d6a72a47d0333b6e38a18a99d59fcac5a4fee5b89ba054f7d5112b38fdd739cc0b59bb65db259fa2c38c0eef82fbbc70a329fcd01d0d44dc2823c8af504e33635f0a596c324ad1e0f234f8b2a564b60e16aaca6f66f04d5bc8bc7ff4305c0b5174a7b9446d6a33e7053562eafcabf38cf3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) 4.490579342s ago: executing program 4 (id=9308): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001840)="a905000000007464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x24}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x40000) 4.398771752s ago: executing program 4 (id=9310): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1e00, &(0x7f00000000c0)={0x0, 0x5a39, 0x1000, 0x0, 0x1d7, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) r6 = syz_open_pts(r5, 0x2000) r7 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x8) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00') close_range(r5, r6, 0x0) close_range(r7, r8, 0x0) io_uring_enter(r2, 0x3ded, 0x4ac1, 0x0, 0x0, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_getoverrun(r11) sendmsg$tipc(r10, &(0x7f0000000340)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) 3.28303932s ago: executing program 4 (id=9314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001e00)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000000000034002d800a00"], 0xb0}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) 3.14888296s ago: executing program 4 (id=9315): socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ptrace$setregs(0xd, r0, 0xf, &(0x7f0000000040)="7cf3c3cc2fec75cd504e97aa6d62a1955704091502e4440bd999ab380dd9e8e4934affc99734886794c76e02ac1012afea9a50955e35392a293167") syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) mkdirat(0xffffffffffffff9c, 0x0, 0x140) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_io_uring_setup(0x17d0, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0xc3}, &(0x7f0000000000), &(0x7f0000000040)) r2 = memfd_create(&(0x7f0000000a80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd8\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\b\x00\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xbc\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fgCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r2, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000000180)={0x0}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/226}, {&(0x7f0000000300)=""/33}, {&(0x7f0000000480)=""/185}, {&(0x7f00000005c0)=""/83}], 0x0, &(0x7f0000000640)=""/79}, 0x7fb7}, {{&(0x7f0000000700)=@l2={0x1f, 0x0, @fixed}, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)=""/87}, {&(0x7f0000000900)=""/194}, {&(0x7f0000000a00)=""/76}, {&(0x7f0000000b00)=""/245}, {&(0x7f0000000c00)=""/67}, {&(0x7f0000000c80)=""/87}], 0x0, &(0x7f0000000d00)=""/152}, 0x3}, {{&(0x7f0000000dc0)=@in={0x2, 0x0, @private}, 0x0, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/135}, {&(0x7f0000000a80)=""/60}, {&(0x7f0000000f80)=""/221}, {&(0x7f0000000f00)=""/34}, {&(0x7f0000001080)=""/236}]}, 0xeaff}, {{&(0x7f00000011c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x0, &(0x7f0000001240)}, 0xfd32}], 0x80000f7, 0x122, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 2.909414589s ago: executing program 2 (id=9317): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000001440)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000001840)="a905000000007464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x24}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x10}}], 0x2, 0x40000) 2.908536641s ago: executing program 2 (id=9318): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00002a3000/0x4000)=nil, 0x4000}, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000cfbad1d10e9b00000800000091115200000000009500070000000000a929e3e6154d8a20ca2658ff16e6c0822658743849d6574ed6ca52bc6827d0af0562"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) mbind(&(0x7f0000778000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x7, 0x2) 2.712123124s ago: executing program 2 (id=9319): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a20014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x1c, 0x3, 0x69, @local, @mcast2, 0x7800, 0x1, 0xfffffffc, 0x4e}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5, 0xffffffe4}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004001180f53945c58a9e71bba8a3216dbd0a490000ab516f4b5705ba49ec9ea64e376e15e75b44c6d7aee083231538e02a60a15dbf583f51ffa49f1bacc43fd3c12706b0048df79cd71ca4fb97fbc81375b8ca85fec219a7940abce4fe68fb48fc8d87436d4a5f751130b70ae096133f39077eb168259b7c75c91525f776011e28195562446e3ac6690d46ce28c082b6a21fb1391f255d0db8b1bdeeac2724093ec14a1f4f2f17cca9836ca4268a97825c3988329dbe9a4c13"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d800010000000000000000000000008"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, &(0x7f0000000000)={'wlan0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000002060102000000000000000000000000040007800500010006000000050005000a00000000686173683a6970740000000009000200"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfffffffe}}, @const={0x1, 0x0, 0x0, 0xa, 0x5}, @union={0x0, 0x6, 0x0, 0x9, 0x0, 0x2, [{0xf, 0x3, 0x81}, {0x0, 0x3, 0x7}, {0x6, 0x4, 0x8}, {0x4, 0x5, 0x5}, {0xa, 0x3, 0x43}, {0xf, 0x3, 0x10}]}]}}, 0x0, 0x92}, 0x28) r9 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r9, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.958317565s ago: executing program 5 (id=9321): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x12c, 0x0, 0x0, 0x0) 1.958118836s ago: executing program 5 (id=9322): socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04c3ff10000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 1.879197276s ago: executing program 5 (id=9323): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000001}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000340)=[{{&(0x7f0000000180)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000480)=""/165, 0xa5}], 0x1, &(0x7f0000000300)=""/14, 0xe}, 0xa}], 0x1, 0x40000102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b37, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1.359699242s ago: executing program 2 (id=9324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r1, 0x80927000) mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r1, 0xffffe000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x28048014) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) ioperm(0x0, 0x7, 0x5) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbd3df250200000005000400000000000900030073797a30000000001400020067656e657665300000000000000000000900010073"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) mount$9p_virtio(&(0x7f0000000380), &(0x7f0000000400)='.\x00', &(0x7f0000000440), 0x2, &(0x7f0000000000)={'trans=virtio,', {[{@cache_none}]}}) sendfile(r5, r9, 0x0, 0xffffffff000) 1.180537616s ago: executing program 3 (id=9309): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$read(0xb, r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x10}}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 1.020138874s ago: executing program 3 (id=9325): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) r1 = socket(0xa, 0x5, 0x0) dup(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000001) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = io_uring_setup(0x1148, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_create1(0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f041}) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/hibernate_compression_threads', 0xa0042, 0x11) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400)={0x6, 0x2d, 0x0, 0x3a, 0x0, 0x2c}, 0x48) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 890.116098ms ago: executing program 5 (id=9326): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000740)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0}) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x100, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xe}, {0xffff, 0xa}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d418c2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000040)=0x1) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="000091001c80200014000800ffff4577003000660000030190787f000001e0000001050190780a01011414bb00000000000000000000000000000000000026b1176bedfa4395491480f090214683aa110aa1b24893c8d8498b7f5a0ead44286bd3b84fe730289d94b667d0"], 0x3e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x7c}}, 0x0) 119.696395ms ago: executing program 4 (id=9328): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x2}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001200)={'wlan1\x00', &(0x7f0000001100)=@ethtool_rxnfc={0x2a, 0x8, 0x7e1ab084, {0x3, @usr_ip4_spec={@multicast1, @multicast1, 0x53, 0x7f, 0x1, 0x9}, {0x0, @random="7729ba522e59", 0xa, 0x0, [0x10000, 0x3]}, @hdata="a86b57371eff451fd353517f755532b803741b5b2aade83e68f35d937d79d8993111b4ca75f0612da64df99e636e9cb7eb62b35f", {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x9, 0x6, [0x6]}, 0x3, 0x6}}}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cdaed167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb1905cfd622f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad71de09d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8f1e267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeba3271dc700b58144028468fe10c3e0eacc3704672eb29c8cc8ae03da17327f39fc7e335cbfb67645fdf3cad928d9c1c2ec92b94560c781ab34c277e4bc554c8f4f8d08ec16c5f00e27b9fbf1426e76156bc5f40751554085e59ede6b31a53481e0eb40780c752c5e4d2f6ffb2dab149f0ac801219bb2acff78fbd008c0232e23d3d176", 0x88}], 0x4}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0xead4, 0x820a, 0x0, 0x7}, &(0x7f00000002c0)=0x10) 119.012703ms ago: executing program 4 (id=9329): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0xffffffffffffffe7, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x1, 0x6, @multicast}, 0x14) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000240), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x97, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@ra={0x94, 0x4}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x7, @private1, 0x10001}]}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r8, 0xffff}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r9) r10 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x0, 0x8c}, 0x20) keyctl$read(0xb, r10, &(0x7f00000007c0)=""/160, 0xa0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r12) sigaltstack(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) 357.257µs ago: executing program 5 (id=9330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) 0s ago: executing program 5 (id=9331): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) preadv(r6, 0x0, 0x0, 0x5b3d2934, 0xfffffff8) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): istering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2537.642641][T16551] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2537.646307][T16551] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2537.668172][ T6562] chnl_net:caif_netlink_parms(): no params data found [ 2537.723954][ T6562] bridge0: port 1(bridge_slave_0) entered blocking state [ 2537.726295][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state [ 2537.728581][ T6562] bridge_slave_0: entered allmulticast mode [ 2537.731295][ T6562] bridge_slave_0: entered promiscuous mode [ 2537.734525][ T6562] bridge0: port 2(bridge_slave_1) entered blocking state [ 2537.736829][ T6562] bridge0: port 2(bridge_slave_1) entered disabled state [ 2537.739115][ T6562] bridge_slave_1: entered allmulticast mode [ 2537.741828][ T6562] bridge_slave_1: entered promiscuous mode [ 2537.756967][ T6562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2537.761920][ T6562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2537.776803][ T6562] team0: Port device team_slave_0 added [ 2537.780021][ T6562] team0: Port device team_slave_1 added [ 2537.793208][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2537.795391][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2537.803354][ T6562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2537.807685][ T6562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2537.809865][ T6562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2537.817956][ T6562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2537.840540][ T6562] hsr_slave_0: entered promiscuous mode [ 2537.842803][ T6562] hsr_slave_1: entered promiscuous mode [ 2537.844960][ T6562] debugfs: 'hsr0' already exists in 'hsr' [ 2537.846758][ T6562] Cannot create hsr debugfs directory [ 2537.897160][ T6577] bridge0: entered promiscuous mode [ 2537.900748][ T6577] bridge0: port 1(vlan4) entered blocking state [ 2537.903120][ T6577] bridge0: port 1(vlan4) entered disabled state [ 2537.905473][ T6577] vlan4: entered allmulticast mode [ 2537.907186][ T6577] bridge0: entered allmulticast mode [ 2537.913085][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2537.967258][ T6580] FAULT_INJECTION: forcing a failure. [ 2537.967258][ T6580] name failslab, interval 1, probability 0, space 0, times 0 [ 2537.972030][ T6580] CPU: 2 UID: 0 PID: 6580 Comm: syz.5.8724 Tainted: G L syzkaller #0 PREEMPT(full) [ 2537.972049][ T6580] Tainted: [L]=SOFTLOCKUP [ 2537.972053][ T6580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2537.972059][ T6580] Call Trace: [ 2537.972064][ T6580] [ 2537.972069][ T6580] dump_stack_lvl+0x16c/0x1f0 [ 2537.972090][ T6580] should_fail_ex+0x512/0x640 [ 2537.972102][ T6580] ? __kmalloc_noprof+0xca/0x910 [ 2537.972116][ T6580] should_failslab+0xc2/0x120 [ 2537.972132][ T6580] __kmalloc_noprof+0xeb/0x910 [ 2537.972144][ T6580] ? drm_atomic_state_init+0xec/0x540 [ 2537.972159][ T6580] ? drm_atomic_state_init+0xec/0x540 [ 2537.972170][ T6580] drm_atomic_state_init+0xec/0x540 [ 2537.972181][ T6580] ? kasan_save_track+0x14/0x30 [ 2537.972196][ T6580] drm_atomic_state_alloc+0xd3/0x120 [ 2537.972208][ T6580] drm_mode_atomic_ioctl+0x393/0x2640 [ 2537.972229][ T6580] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 2537.972242][ T6580] ? __lock_acquire+0x436/0x2890 [ 2537.972262][ T6580] ? drm_is_current_master+0x2c/0x40 [ 2537.972275][ T6580] ? do_raw_spin_unlock+0x172/0x230 [ 2537.972289][ T6580] drm_ioctl_kernel+0x1f4/0x3e0 [ 2537.972300][ T6580] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 2537.972314][ T6580] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 2537.972329][ T6580] drm_ioctl+0x5c9/0xc30 [ 2537.972341][ T6580] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 2537.972354][ T6580] ? __pfx_drm_ioctl+0x10/0x10 [ 2537.972376][ T6580] drm_compat_ioctl+0x327/0x460 [ 2537.972391][ T6580] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 2537.972405][ T6580] __ia32_compat_sys_ioctl+0x242/0x370 [ 2537.972425][ T6580] __do_fast_syscall_32+0xe8/0x680 [ 2537.972437][ T6580] do_fast_syscall_32+0x32/0x80 [ 2537.972447][ T6580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2537.972461][ T6580] RIP: 0023:0xf7f92579 [ 2537.972470][ T6580] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2537.972480][ T6580] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2537.972490][ T6580] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c03864bc [ 2537.972496][ T6580] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2537.972502][ T6580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2537.972508][ T6580] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2537.972513][ T6580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2537.972528][ T6580] [ 2538.083045][ T6577] vlan4: left allmulticast mode [ 2538.084874][ T6577] bridge0: left allmulticast mode [ 2538.088700][ T6577] bridge0: left promiscuous mode [ 2538.689125][ T6598] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 2538.694595][ T6598] 9p: Bad value for 'rfdno' [ 2538.702517][ T6596] ptrace attach of "/syz-executor exec"[2306] was attempted by "/syz-executor exec"[6596] [ 2538.710551][T16551] bond3 (unregistering): (slave geneve3): Releasing active interface [ 2538.710754][ T6600] FAULT_INJECTION: forcing a failure. [ 2538.710754][ T6600] name failslab, interval 1, probability 0, space 0, times 0 [ 2538.717993][ T6600] CPU: 2 UID: 0 PID: 6600 Comm: syz.0.8730 Tainted: G L syzkaller #0 PREEMPT(full) [ 2538.718022][ T6600] Tainted: [L]=SOFTLOCKUP [ 2538.718027][ T6600] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2538.718052][ T6600] Call Trace: [ 2538.718060][ T6600] [ 2538.718070][ T6600] dump_stack_lvl+0x16c/0x1f0 [ 2538.718100][ T6600] should_fail_ex+0x512/0x640 [ 2538.718114][ T6600] ? __kmalloc_cache_noprof+0x5f/0x800 [ 2538.718129][ T6600] should_failslab+0xc2/0x120 [ 2538.718145][ T6600] __kmalloc_cache_noprof+0x80/0x800 [ 2538.718157][ T6600] ? net_generic+0xea/0x2a0 [ 2538.718170][ T6600] ? ip_set_create+0x346/0x1520 [ 2538.718186][ T6600] ? ip_set_create+0x346/0x1520 [ 2538.718199][ T6600] ip_set_create+0x346/0x1520 [ 2538.718216][ T6600] ? __pfx_ip_set_create+0x10/0x10 [ 2538.718242][ T6600] ? find_held_lock+0x2b/0x80 [ 2538.718261][ T6600] nfnetlink_rcv_msg+0x9fc/0x1200 [ 2538.718280][ T6600] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2538.718294][ T6600] ? kfree_skbmem+0x1a4/0x1f0 [ 2538.718304][ T6600] ? kfree_skbmem+0x1a4/0x1f0 [ 2538.718330][ T6600] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2538.718344][ T6600] netlink_rcv_skb+0x158/0x420 [ 2538.718360][ T6600] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2538.718374][ T6600] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2538.718397][ T6600] ? ns_capable+0xd7/0x110 [ 2538.718412][ T6600] nfnetlink_rcv+0x1b3/0x430 [ 2538.718425][ T6600] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2538.718436][ T6600] ? netlink_deliver_tap+0x1ae/0xd30 [ 2538.718454][ T6600] netlink_unicast+0x5aa/0x870 [ 2538.718472][ T6600] ? __pfx_netlink_unicast+0x10/0x10 [ 2538.718494][ T6600] netlink_sendmsg+0x8c8/0xdd0 [ 2538.718513][ T6600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2538.718531][ T6600] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 2538.718551][ T6600] ____sys_sendmsg+0xa5d/0xc30 [ 2538.718564][ T6600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2538.718573][ T6600] ? get_compat_msghdr+0x11a/0x170 [ 2538.718594][ T6600] ___sys_sendmsg+0x134/0x1d0 [ 2538.718610][ T6600] ? __pfx____sys_sendmsg+0x10/0x10 [ 2538.718632][ T6600] ? find_held_lock+0x2b/0x80 [ 2538.718655][ T6600] __sys_sendmsg+0x16d/0x220 [ 2538.718670][ T6600] ? __pfx___sys_sendmsg+0x10/0x10 [ 2538.718690][ T6600] ? do_user_addr_fault+0x843/0x1370 [ 2538.718706][ T6600] __do_fast_syscall_32+0xe8/0x680 [ 2538.718719][ T6600] do_fast_syscall_32+0x32/0x80 [ 2538.718729][ T6600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2538.718743][ T6600] RIP: 0023:0xf708d579 [ 2538.718765][ T6600] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2538.718775][ T6600] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2538.718786][ T6600] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 2538.718793][ T6600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2538.718799][ T6600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2538.718805][ T6600] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2538.718811][ T6600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2538.718826][ T6600] [ 2538.763713][ T6601] netlink: 'syz.5.8728': attribute type 21 has an invalid length. [ 2538.832087][T16551] bond1 (unregistering): (slave geneve2): Releasing active interface [ 2538.832830][ T6601] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8728'. [ 2538.953222][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2539.553373][T19070] Bluetooth: hci1: command tx timeout [ 2539.993406][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2540.292471][T16551] bond0 (unregistering): Released all slaves [ 2540.299254][T16551] bond1 (unregistering): Released all slaves [ 2540.469095][T16551] bond2 (unregistering): (slave veth3): Releasing active interface [ 2540.472954][T16551] bond2 (unregistering): Released all slaves [ 2540.594383][T16551] bond3 (unregistering): Released all slaves [ 2540.860798][T16551] tipc: Left network mode [ 2541.033634][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2541.255907][ T6601] netlink: 'syz.5.8728': attribute type 4 has an invalid length. [ 2541.259160][ T6601] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8728'. [ 2541.310330][T16551] hsr_slave_0: left promiscuous mode [ 2541.313238][T16551] hsr_slave_1: left promiscuous mode [ 2541.359979][T16551] dummy0: left allmulticast mode [ 2541.362625][T16551] veth1_macvtap: left promiscuous mode [ 2541.383938][T16551] veth0_macvtap: left promiscuous mode [ 2541.386483][T16551] veth1_vlan: left promiscuous mode [ 2541.388725][T16551] veth0_vlan: left promiscuous mode [ 2541.596968][T19070] Bluetooth: hci1: command tx timeout [ 2542.073783][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2543.113884][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2543.446946][ T6650] netlink: 107460 bytes leftover after parsing attributes in process `syz.3.8741'. [ 2543.674186][T19070] Bluetooth: hci1: command tx timeout [ 2544.132551][ T6562] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2544.154075][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2544.170581][ T6562] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2544.210863][ T6562] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2544.240404][ T6562] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2544.699287][ T6562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2544.715829][ T6562] 8021q: adding VLAN 0 to HW filter on device team0 [ 2544.726219][ T1198] bridge0: port 1(bridge_slave_0) entered blocking state [ 2544.729283][ T1198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2544.741195][T16369] bridge0: port 2(bridge_slave_1) entered blocking state [ 2544.744329][T16369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2544.854659][T15654] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 2545.006564][T15654] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2545.010098][T15654] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2545.015874][T15654] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2545.018813][T15654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2545.194290][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2545.238677][T15654] usb 5-1: usb_control_msg returned -32 [ 2545.240545][T15654] usbtmc 5-1:16.0: can't read capabilities [ 2545.243992][ T6666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2545.250009][ T6562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2545.253004][ T6666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2545.288993][ T6562] veth0_vlan: entered promiscuous mode [ 2545.296161][ T6562] veth1_vlan: entered promiscuous mode [ 2545.323506][ T6562] veth0_macvtap: entered promiscuous mode [ 2545.329606][ T6562] veth1_macvtap: entered promiscuous mode [ 2545.342663][ T6562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2545.353265][ T6562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2545.361426][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2545.367208][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2545.371594][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2545.375773][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2545.566732][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2545.570280][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2545.609747][T16369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2545.612505][T16369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2545.754585][T19070] Bluetooth: hci1: command tx timeout [ 2545.969281][ T6682] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8720'. [ 2546.203591][ T6682] bond1: entered promiscuous mode [ 2546.234436][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2546.839566][ T6687] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8749'. [ 2546.843498][ T6687] FAULT_INJECTION: forcing a failure. [ 2546.843498][ T6687] name failslab, interval 1, probability 0, space 0, times 0 [ 2546.849156][ T6687] CPU: 0 UID: 0 PID: 6687 Comm: syz.2.8749 Tainted: G L syzkaller #0 PREEMPT(full) [ 2546.849184][ T6687] Tainted: [L]=SOFTLOCKUP [ 2546.849191][ T6687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2546.849201][ T6687] Call Trace: [ 2546.849208][ T6687] [ 2546.849216][ T6687] dump_stack_lvl+0x16c/0x1f0 [ 2546.849344][ T6687] should_fail_ex+0x512/0x640 [ 2546.849389][ T6687] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 2546.849414][ T6687] should_failslab+0xc2/0x120 [ 2546.849440][ T6687] kmem_cache_alloc_node_noprof+0x86/0x800 [ 2546.849461][ T6687] ? __alloc_skb+0x156/0x410 [ 2546.849484][ T6687] ? __alloc_skb+0x156/0x410 [ 2546.849500][ T6687] __alloc_skb+0x156/0x410 [ 2546.849515][ T6687] ? __alloc_skb+0x35d/0x410 [ 2546.849532][ T6687] ? __pfx___alloc_skb+0x10/0x10 [ 2546.849559][ T6687] br_vlan_notify+0x15b/0x8a0 [ 2546.849588][ T6687] __br_vlan_set_default_pvid+0xfa4/0x1170 [ 2546.849612][ T6687] ? br_multicast_enable_port+0x162/0x1f0 [ 2546.849641][ T6687] ? __pfx___br_vlan_set_default_pvid+0x10/0x10 [ 2546.849666][ T6687] ? __local_bh_enable_ip+0xa4/0x120 [ 2546.849690][ T6687] ? lockdep_hardirqs_on+0x7c/0x110 [ 2546.849716][ T6687] ? br_stp_set_enabled+0x2cb/0x7d0 [ 2546.849733][ T6687] ? __local_bh_enable_ip+0xa4/0x120 [ 2546.849760][ T6687] br_changelink+0x4ea/0x1710 [ 2546.849781][ T6687] ? __pfx_br_changelink+0x10/0x10 [ 2546.849808][ T6687] ? ns_capable+0xd7/0x110 [ 2546.849833][ T6687] ? __pfx_br_changelink+0x10/0x10 [ 2546.849854][ T6687] rtnl_newlink+0x11ce/0x1f50 [ 2546.849889][ T6687] ? __pfx_rtnl_newlink+0x10/0x10 [ 2546.849913][ T6687] ? lockdep_hardirqs_on+0x7c/0x110 [ 2546.849944][ T6687] ? kmem_cache_free+0x2d8/0x770 [ 2546.849964][ T6687] ? kfree_skbmem+0x1a4/0x1f0 [ 2546.849999][ T6687] ? find_held_lock+0x2b/0x80 [ 2546.850022][ T6687] ? __dev_queue_xmit+0x782/0x46b0 [ 2546.850049][ T6687] ? find_held_lock+0x2b/0x80 [ 2546.850069][ T6687] ? __pfx_rtnl_newlink+0x10/0x10 [ 2546.850091][ T6687] ? __pfx_rtnl_newlink+0x10/0x10 [ 2546.850113][ T6687] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 2546.850139][ T6687] ? __pfx_rtnl_newlink+0x10/0x10 [ 2546.850163][ T6687] rtnetlink_rcv_msg+0x95e/0xe90 [ 2546.850191][ T6687] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2546.850223][ T6687] ? ref_tracker_free+0x37c/0x830 [ 2546.850248][ T6687] netlink_rcv_skb+0x158/0x420 [ 2546.850273][ T6687] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2546.850300][ T6687] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2546.850336][ T6687] ? netlink_deliver_tap+0x1ae/0xd30 [ 2546.850366][ T6687] netlink_unicast+0x5aa/0x870 [ 2546.850396][ T6687] ? __pfx_netlink_unicast+0x10/0x10 [ 2546.850433][ T6687] netlink_sendmsg+0x8c8/0xdd0 [ 2546.850464][ T6687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2546.850493][ T6687] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 2546.850527][ T6687] ____sys_sendmsg+0xa5d/0xc30 [ 2546.850547][ T6687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2546.850562][ T6687] ? get_compat_msghdr+0x11a/0x170 [ 2546.850598][ T6687] ___sys_sendmsg+0x134/0x1d0 [ 2546.850620][ T6687] ? __pfx____sys_sendmsg+0x10/0x10 [ 2546.850653][ T6687] ? find_held_lock+0x2b/0x80 [ 2546.850691][ T6687] __sys_sendmsg+0x16d/0x220 [ 2546.850712][ T6687] ? __pfx___sys_sendmsg+0x10/0x10 [ 2546.850743][ T6687] ? do_user_addr_fault+0x843/0x1370 [ 2546.850768][ T6687] __do_fast_syscall_32+0xe8/0x680 [ 2546.850785][ T6687] do_fast_syscall_32+0x32/0x80 [ 2546.850800][ T6687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2546.850820][ T6687] RIP: 0023:0xf70ed579 [ 2546.850832][ T6687] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2546.850848][ T6687] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2546.850863][ T6687] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 2546.850873][ T6687] RDX: 0000000000040004 RSI: 0000000000000000 RDI: 0000000000000000 [ 2546.850882][ T6687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2546.850890][ T6687] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2546.850900][ T6687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2546.850924][ T6687] [ 2546.852184][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 2547.032964][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 2547.274702][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2547.571809][ T6706] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 2547.697315][ T6048] usb 5-1: USB disconnect, device number 41 [ 2548.314732][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2548.359237][ T6719] random: crng reseeded on system resumption [ 2549.020786][ T6722] Restarting kernel threads ... [ 2549.024433][ T6722] Done restarting kernel threads. [ 2549.354878][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2550.027145][ T6741] FAULT_INJECTION: forcing a failure. [ 2550.027145][ T6741] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2550.031474][ T6741] CPU: 1 UID: 0 PID: 6741 Comm: syz.5.8763 Tainted: G L syzkaller #0 PREEMPT(full) [ 2550.031495][ T6741] Tainted: [L]=SOFTLOCKUP [ 2550.031499][ T6741] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2550.031506][ T6741] Call Trace: [ 2550.031514][ T6741] [ 2550.031522][ T6741] dump_stack_lvl+0x16c/0x1f0 [ 2550.031547][ T6741] should_fail_ex+0x512/0x640 [ 2550.031576][ T6741] should_fail_alloc_page+0xe7/0x130 [ 2550.031603][ T6741] prepare_alloc_pages+0x401/0x670 [ 2550.031625][ T6741] ? lockdep_unlock+0x64/0xd0 [ 2550.031647][ T6741] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 2550.031669][ T6741] ? mark_held_locks+0x49/0x80 [ 2550.031683][ T6741] ? irqentry_exit+0x1dd/0x8c0 [ 2550.031695][ T6741] ? lockdep_hardirqs_on+0x7c/0x110 [ 2550.031712][ T6741] ? irqentry_exit+0x1dd/0x8c0 [ 2550.031720][ T6741] ? rcu_is_watching+0x12/0xc0 [ 2550.031738][ T6741] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2550.031771][ T6741] ? __lock_acquire+0x436/0x2890 [ 2550.031782][ T6741] ? __lock_acquire+0x436/0x2890 [ 2550.031791][ T6741] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2550.031810][ T6741] ? policy_nodemask+0xea/0x4e0 [ 2550.031829][ T6741] alloc_pages_mpol+0x1fb/0x550 [ 2550.031846][ T6741] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2550.031867][ T6741] alloc_pages_noprof+0x131/0x390 [ 2550.031909][ T6741] pte_alloc_one+0x1e/0x3d0 [ 2550.031927][ T6741] __pte_alloc+0x6d/0x3f0 [ 2550.031945][ T6741] ? __pfx___pte_alloc+0x10/0x10 [ 2550.031959][ T6741] ? __pfx___might_resched+0x10/0x10 [ 2550.031975][ T6741] ? mfill_atomic_zeropage+0x979/0x1480 [ 2550.031995][ T6741] ? mm_alloc_pmd+0x2c2/0x470 [ 2550.032015][ T6741] mfill_atomic_zeropage+0xf60/0x1480 [ 2550.032038][ T6741] ? __pfx_mfill_atomic_zeropage+0x10/0x10 [ 2550.032061][ T6741] userfaultfd_ioctl+0x2f20/0x3930 [ 2550.032081][ T6741] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 2550.032095][ T6741] ? do_vfs_ioctl+0x128/0x14f0 [ 2550.032109][ T6741] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2550.032127][ T6741] ? find_held_lock+0x2b/0x80 [ 2550.032139][ T6741] ? hook_file_ioctl_common+0x144/0x410 [ 2550.032158][ T6741] ? __fget_files+0x20e/0x3c0 [ 2550.032173][ T6741] ? fput+0x70/0xf0 [ 2550.032183][ T6741] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 2550.032199][ T6741] ? compat_ptr_ioctl+0x6e/0xa0 [ 2550.032210][ T6741] compat_ptr_ioctl+0x6e/0xa0 [ 2550.032221][ T6741] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 2550.032233][ T6741] __ia32_compat_sys_ioctl+0x242/0x370 [ 2550.032248][ T6741] __do_fast_syscall_32+0xe8/0x680 [ 2550.032261][ T6741] do_fast_syscall_32+0x32/0x80 [ 2550.032272][ T6741] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2550.032287][ T6741] RIP: 0023:0xf7f92579 [ 2550.032297][ T6741] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2550.032308][ T6741] RSP: 002b:00000000f546555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2550.032319][ T6741] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c020aa04 [ 2550.032326][ T6741] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2550.032332][ T6741] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2550.032338][ T6741] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2550.032344][ T6741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2550.032358][ T6741] [ 2550.395014][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2551.435256][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2551.503126][ T6763] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8767'. [ 2551.661248][ T6768] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2551.663373][ T6768] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2551.685698][ T6768] vhci_hcd vhci_hcd.0: Device attached [ 2552.475367][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2552.608993][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8769'. [ 2552.835509][ T6048] usb 43-1: new high-speed USB device number 35 using vhci_hcd [ 2552.925549][ T6769] vhci_hcd: connection reset by peer [ 2552.928201][ T6777] vhci_hcd vhci_hcd.3: stop threads [ 2552.930566][ T6777] vhci_hcd vhci_hcd.3: release socket [ 2552.936458][ T6777] vhci_hcd vhci_hcd.3: disconnect device [ 2553.438960][ T6787] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2553.515516][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2554.555807][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2555.595937][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2556.556516][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8782'. [ 2556.565529][ T6816] syzkaller1: entered promiscuous mode [ 2556.567863][ T6816] syzkaller1: entered allmulticast mode [ 2556.590213][ T6816] program syz.2.8782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2556.605570][ T6817] vivid-007: disconnect [ 2556.645953][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2556.777997][ T1113] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 2556.780817][ T1113] ata1.00: irq_stat 0x40000000 [ 2556.782727][ T1113] ata1.00: failed command: ZAC MANAGEMENT OUT [ 2556.784946][ T1113] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 4 [ 2556.784946][ T1113] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 2556.792481][ T1113] ata1.00: status: { DRDY ERR } [ 2556.794078][ T1113] ata1.00: error: { ABRT } [ 2556.795473][ T1113] ata1.00: device reported invalid CHS sector 0 [ 2556.930207][ T6804] vivid-007: reconnect [ 2557.032826][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2557.037169][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2557.676360][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2558.009016][ T6048] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2558.716281][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2559.508748][ T6851] vivid-007: disconnect [ 2559.756380][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2560.002687][ T6858] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 2560.005334][ T6858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2560.009259][ T6858] vhci_hcd vhci_hcd.0: Device attached [ 2560.012910][ T6859] vhci_hcd: unknown pdu 1 [ 2560.015095][ T4344] vhci_hcd vhci_hcd.0: stop threads [ 2560.018744][ T4344] vhci_hcd vhci_hcd.0: release socket [ 2560.020952][ T4344] vhci_hcd vhci_hcd.0: disconnect device [ 2560.250453][ T6863] Invalid ELF header magic: != ELF [ 2560.254415][ T6863] input: syz1 as /devices/virtual/input/input146 [ 2560.254432][ T6846] vivid-007: reconnect [ 2560.806544][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2561.600754][ T6889] input: syz1 as /devices/virtual/input/input147 [ 2561.744901][ T6891] lo speed is unknown, defaulting to 1000 [ 2561.747942][ T6891] lo speed is unknown, defaulting to 1000 [ 2561.836704][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2561.997156][ T41] kauditd_printk_skb: 59 callbacks suppressed [ 2561.997167][ T41] audit: type=1326 audit(2816.782:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6886 comm="syz.3.8803" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x0 [ 2562.876836][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2563.916966][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2563.955251][ T6932] vivid-007: disconnect [ 2563.962612][ T6932] netlink: 168 bytes leftover after parsing attributes in process `syz.5.8813'. [ 2563.977816][ T6931] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8816'. [ 2563.981112][ T6931] bond_slave_0: entered promiscuous mode [ 2563.983468][ T6931] bond_slave_1: entered promiscuous mode [ 2564.021804][ T6934] netlink: 140 bytes leftover after parsing attributes in process `syz.0.8817'. [ 2564.647492][ T6923] vivid-007: reconnect [ 2564.742456][T19070] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2564.744792][ T6941] sp0: Synchronizing with TNC [ 2564.925733][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8822'. [ 2564.957109][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2564.968625][ T6950] bridge0: entered promiscuous mode [ 2564.970908][ T6950] bridge0: port 1(vlan4) entered blocking state [ 2564.973168][ T6950] bridge0: port 1(vlan4) entered disabled state [ 2564.975301][ T6950] vlan4: entered allmulticast mode [ 2564.977512][ T6950] bridge0: entered allmulticast mode [ 2564.980735][ T6950] vlan4: left allmulticast mode [ 2564.982540][ T6950] bridge0: left allmulticast mode [ 2564.985358][ T6950] bridge0: left promiscuous mode [ 2565.090936][ T6953] netlink: 'syz.0.8824': attribute type 1 has an invalid length. [ 2565.113194][ T6953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2565.179297][ T6953] bond4: (slave veth5): Enslaving as an active interface with a down link [ 2565.185931][ T6956] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 2565.741550][ T6968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8828'. [ 2565.914064][ T6978] overlayfs: missing 'workdir' [ 2565.956569][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8831'. [ 2565.972805][ T6981] input input148: cannot allocate more than FF_MAX_EFFECTS effects [ 2565.997246][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2566.721994][ T6987] binder: 6986:6987 unknown command 0 [ 2566.726065][ T6987] binder: 6986:6987 ioctl c0306201 80000080 returned -22 [ 2567.047416][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2567.166919][ T7011] input: syz1 as /devices/virtual/input/input149 [ 2567.294614][ T7018] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8839'. [ 2567.299564][ T7016] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2567.393347][ T7026] netlink: 'syz.2.8848': attribute type 1 has an invalid length. [ 2567.395830][ T7026] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8848'. [ 2567.994865][ T7044] comedi comedi0: pcmmio: I/O port conflict (0xfff,32) [ 2568.072040][ T7045] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2568.074113][ T7045] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2568.076560][ T7045] vhci_hcd vhci_hcd.0: Device attached [ 2568.077518][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2568.327574][ T8554] usb 43-1: new low-speed USB device number 36 using vhci_hcd [ 2568.400557][ T7060] random: crng reseeded on system resumption [ 2568.411219][ T7060] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2568.692414][ T7046] vhci_hcd: connection reset by peer [ 2568.694250][ T57] vhci_hcd vhci_hcd.3: stop threads [ 2568.696372][ T57] vhci_hcd vhci_hcd.3: release socket [ 2568.698685][ T57] vhci_hcd vhci_hcd.3: disconnect device [ 2568.861233][ T7074] vivid-007: disconnect [ 2568.865967][ T7074] netlink: 168 bytes leftover after parsing attributes in process `syz.5.8859'. [ 2568.951123][ T7077] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8860'. [ 2569.117638][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2569.396733][ T7085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8863'. [ 2569.582650][ T7069] vivid-007: reconnect [ 2569.596680][ T7094] overlayfs: missing 'lowerdir' [ 2569.650551][ T7098] bridge0: entered promiscuous mode [ 2569.653772][ T7098] bridge0: port 3(vlan0) entered blocking state [ 2569.663847][ T7098] bridge0: port 3(vlan0) entered disabled state [ 2569.665975][ T7098] vlan0: entered allmulticast mode [ 2569.667590][ T7098] bridge0: entered allmulticast mode [ 2569.678941][ T7098] vlan0: left allmulticast mode [ 2569.680591][ T7098] bridge0: left allmulticast mode [ 2569.688108][ T7098] bridge0: left promiscuous mode [ 2569.794895][ T7106] netlink: 'syz.0.8869': attribute type 1 has an invalid length. [ 2569.812367][ T7106] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2569.838949][ T7106] bond5: (slave veth7): Enslaving as an active interface with a down link [ 2569.848513][ T7106] bond4: (slave veth0_to_bond): Releasing active interface [ 2569.853315][ T7106] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 2569.890447][ T7109] tipc: Enabled bearer , priority 0 [ 2569.894896][ T7108] tipc: Resetting bearer [ 2570.140210][ T7114] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 2570.142300][ T7114] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2570.144696][ T7114] vhci_hcd vhci_hcd.0: Device attached [ 2570.157797][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2570.397932][T29568] usb 37-1: new low-speed USB device number 23 using vhci_hcd [ 2570.732608][ T7115] vhci_hcd: connection reset by peer [ 2570.741916][ T13] vhci_hcd vhci_hcd.0: stop threads [ 2570.743725][ T13] vhci_hcd vhci_hcd.0: release socket [ 2570.745461][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 2571.203520][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2571.777460][ T7108] tipc: Disabling bearer [ 2571.819747][ T6378] tipc: Node number set to 174230560 [ 2572.002209][ T7123] overlayfs: missing 'lowerdir' [ 2572.056301][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8875'. [ 2572.148156][ T7131] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0 [ 2572.238041][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2572.587005][ T7145] tipc: Enabled bearer , priority 0 [ 2572.598379][ T7145] syzkaller0: entered promiscuous mode [ 2572.608099][ T7145] syzkaller0: entered allmulticast mode [ 2572.620048][ T7147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2572.635100][ T7147] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8879'. [ 2572.638985][ T7145] tipc: Resetting bearer [ 2572.644782][ T7144] tipc: Resetting bearer [ 2572.657433][ T7144] tipc: Disabling bearer [ 2573.288159][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2573.458340][ T8554] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2574.318789][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2574.563429][ T7164] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8886'. [ 2574.569954][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8887'. [ 2574.572876][ T7163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2574.768881][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8889'. [ 2574.829643][ T7178] tipc: Enabled bearer , priority 0 [ 2574.834456][ T7170] tipc: Resetting bearer [ 2575.358478][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2575.518678][T29568] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 2576.398544][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2577.439116][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2577.557251][ T7208] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2577.560817][ T7208] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2577.833828][ T7170] tipc: Disabling bearer [ 2577.879214][ T6048] tipc: Node number set to 4246037035 [ 2577.917893][ T7212] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 2577.920212][ T7212] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2577.924432][ T7212] vhci_hcd vhci_hcd.0: Device attached [ 2578.204499][ T41] audit: type=1326 audit(2832.980:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.3.8901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2578.318916][ T41] audit: type=1326 audit(2832.980:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.3.8901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2578.325614][ T41] audit: type=1326 audit(2832.980:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.3.8901" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2578.332366][ T41] audit: type=1326 audit(2832.980:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.3.8901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2578.339577][ T41] audit: type=1326 audit(2832.980:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.3.8901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2578.346179][ T41] audit: type=1326 audit(2832.990:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.3.8901" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2578.352934][ T41] audit: type=1326 audit(2832.990:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.3.8901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2578.359570][ T41] audit: type=1326 audit(2832.990:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.3.8901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2578.366037][ T41] audit: type=1326 audit(2832.990:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.3.8901" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2578.372783][ T41] audit: type=1326 audit(2832.990:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.3.8901" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 2578.406613][ T2724] usb 41-1: new low-speed USB device number 21 using vhci_hcd [ 2578.478800][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2579.010529][ T7213] vhci_hcd: connection reset by peer [ 2579.013220][T18132] vhci_hcd vhci_hcd.2: stop threads [ 2579.015251][T18132] vhci_hcd vhci_hcd.2: release socket [ 2579.017526][T18132] vhci_hcd vhci_hcd.2: disconnect device [ 2579.518974][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2579.612852][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8905'. [ 2579.957883][ T7243] netlink: 'syz.2.8907': attribute type 13 has an invalid length. [ 2580.559046][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2581.440930][ T7261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2581.459510][ T7262] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 2581.461739][ T7262] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2581.471424][ T7262] vhci_hcd vhci_hcd.0: Device attached [ 2581.478119][ T7261] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8912'. [ 2581.599202][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2581.719313][T29568] usb 37-1: new low-speed USB device number 24 using vhci_hcd [ 2581.892932][ T7263] vhci_hcd: connection reset by peer [ 2581.895505][ T4344] vhci_hcd vhci_hcd.0: stop threads [ 2581.897467][ T4344] vhci_hcd vhci_hcd.0: release socket [ 2581.899711][ T4344] vhci_hcd vhci_hcd.0: disconnect device [ 2582.371142][ T7269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2582.389587][ T7269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8913'. [ 2582.649294][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2583.509448][ T2724] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 2583.679378][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2584.406606][ T7288] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 2584.408693][ T7288] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2584.411452][ T7288] vhci_hcd vhci_hcd.0: Device attached [ 2584.679689][ T6526] usb 44-1: SetAddress Request (46) to port 0 [ 2584.681813][ T6526] usb 44-1: new SuperSpeed USB device number 46 using vhci_hcd [ 2584.721157][ T7294] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.8920'. [ 2584.729512][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2585.327156][ T7289] vhci_hcd: connection reset by peer [ 2585.329715][ T4085] vhci_hcd vhci_hcd.3: stop threads [ 2585.331421][ T4085] vhci_hcd vhci_hcd.3: release socket [ 2585.333207][ T4085] vhci_hcd vhci_hcd.3: disconnect device [ 2585.759621][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2585.894247][ T6048] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2586.101586][ T6048] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2586.106287][ T6048] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 2586.110208][ T6048] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 2586.113691][ T6048] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 2586.115007][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8927'. [ 2586.117367][ T6048] usb 5-1: config 129 has no interface number 0 [ 2586.136789][ T6048] usb 5-1: config 129 has no interface number 1 [ 2586.145957][ T6048] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2586.153548][ T6048] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 2586.160083][ T6048] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 2586.165066][ T6048] usb 5-1: config 129 interface 135 has no altsetting 0 [ 2586.170210][ T6048] usb 5-1: config 129 interface 5 has no altsetting 0 [ 2586.178955][ T6048] usb 5-1: string descriptor 0 read error: -22 [ 2586.190587][ T6048] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 2586.202716][ T6048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2586.376623][ T6048] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2586.378997][ T6048] usb 5-1: MIDIStreaming interface descriptor not found [ 2586.603734][ T7331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2586.618980][ T7331] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8928'. [ 2586.630210][ T7332] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2586.632490][ T7332] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2586.635605][ T7332] vhci_hcd vhci_hcd.0: Device attached [ 2586.809754][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2586.867744][ T7333] vhci_hcd: connection closed [ 2586.867975][T16336] vhci_hcd vhci_hcd.5: stop threads [ 2586.871403][T16336] vhci_hcd vhci_hcd.5: release socket [ 2586.873367][T16336] vhci_hcd vhci_hcd.5: disconnect device [ 2586.879878][T29568] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 2586.882715][ T1625] usb 47-1: new low-speed USB device number 30 using vhci_hcd [ 2586.885884][ T1625] usb 47-1: enqueue for inactive port 0 [ 2586.950057][ T1625] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2587.839886][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2588.160398][T19070] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2588.614824][ T7342] vivid-007: disconnect [ 2588.636538][ T7342] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8929'. [ 2588.876174][ T7338] vivid-007: reconnect [ 2588.879935][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2588.969948][ T1436] usb 5-1: USB disconnect, device number 42 [ 2589.100785][ T7352] bridge0: entered promiscuous mode [ 2589.103974][ T7352] bridge0: port 4(vlan3) entered blocking state [ 2589.106842][ T7352] bridge0: port 4(vlan3) entered disabled state [ 2589.109870][ T7352] vlan3: entered allmulticast mode [ 2589.112226][ T7352] bridge0: entered allmulticast mode [ 2589.191193][ T7352] vlan3: left allmulticast mode [ 2589.195303][ T7352] bridge0: left allmulticast mode [ 2589.204389][ T7352] bridge0: left promiscuous mode [ 2589.596921][ T7366] vivid-007: disconnect [ 2589.760363][ T6526] usb 44-1: device descriptor read/8, error -110 [ 2589.920082][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2589.999879][ T7372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2590.012650][ T7372] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8932'. [ 2590.281053][ T6526] usb usb44-port1: attempt power cycle [ 2590.579681][ T7366] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8937'. [ 2590.872760][ T7361] vivid-007: reconnect [ 2590.921240][ T6526] usb usb44-port1: unable to enumerate USB device [ 2590.960145][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2591.056440][ T7375] FAULT_INJECTION: forcing a failure. [ 2591.056440][ T7375] name failslab, interval 1, probability 0, space 0, times 0 [ 2591.070166][ T7375] CPU: 1 UID: 0 PID: 7375 Comm: syz.2.8938 Tainted: G L syzkaller #0 PREEMPT(full) [ 2591.070188][ T7375] Tainted: [L]=SOFTLOCKUP [ 2591.070192][ T7375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2591.070198][ T7375] Call Trace: [ 2591.070203][ T7375] [ 2591.070208][ T7375] dump_stack_lvl+0x16c/0x1f0 [ 2591.070230][ T7375] should_fail_ex+0x512/0x640 [ 2591.070244][ T7375] ? __kmalloc_noprof+0xca/0x910 [ 2591.070258][ T7375] should_failslab+0xc2/0x120 [ 2591.070275][ T7375] __kmalloc_noprof+0xeb/0x910 [ 2591.070286][ T7375] ? __alloc_workqueue+0x112/0x1810 [ 2591.070306][ T7375] ? __alloc_workqueue+0x112/0x1810 [ 2591.070320][ T7375] ? is_dynamic_key+0xaa/0x160 [ 2591.070331][ T7375] __alloc_workqueue+0x112/0x1810 [ 2591.070348][ T7375] ? is_dynamic_key+0xb4/0x160 [ 2591.070360][ T7375] alloc_workqueue_noprof+0xd2/0x200 [ 2591.070376][ T7375] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 2591.070400][ T7375] hci_register_dev+0x240/0xce0 [ 2591.070417][ T7375] hci_uart_tty_ioctl+0x89e/0xc80 [ 2591.070432][ T7375] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 2591.070442][ T7375] tty_compat_ioctl+0x384/0x4d0 [ 2591.070457][ T7375] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 2591.070473][ T7375] __ia32_compat_sys_ioctl+0x242/0x370 [ 2591.070490][ T7375] __do_fast_syscall_32+0xe8/0x680 [ 2591.070502][ T7375] do_fast_syscall_32+0x32/0x80 [ 2591.070513][ T7375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2591.070527][ T7375] RIP: 0023:0xf70ed579 [ 2591.070536][ T7375] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2591.070547][ T7375] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2591.070557][ T7375] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400455c8 [ 2591.070563][ T7375] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 2591.070569][ T7375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2591.070575][ T7375] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2591.070581][ T7375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2591.070598][ T7375] [ 2591.073205][ T7375] Bluetooth: Can't register HCI device [ 2591.308410][ T7385] netlink: 'syz.3.8940': attribute type 10 has an invalid length. [ 2591.394028][ T7385] syz_tun: entered promiscuous mode [ 2591.422122][ T7385] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2591.768174][ T7395] bridge0: entered promiscuous mode [ 2591.772055][ T7395] bridge0: port 1(vlan4) entered blocking state [ 2591.774843][ T7395] bridge0: port 1(vlan4) entered disabled state [ 2591.777675][ T7395] vlan4: entered allmulticast mode [ 2591.779892][ T7395] bridge0: entered allmulticast mode [ 2591.784214][ T7395] vlan4: left allmulticast mode [ 2591.791101][ T7395] bridge0: left allmulticast mode [ 2591.801935][ T7395] bridge0: left promiscuous mode [ 2591.830291][ T7398] lo speed is unknown, defaulting to 1000 [ 2591.833789][ T7398] lo speed is unknown, defaulting to 1000 [ 2592.000288][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2592.287558][ T7406] vivid-007: disconnect [ 2592.858517][ T7402] vivid-007: reconnect [ 2593.040411][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2594.090503][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2594.528627][ T7446] kvm: kvm [7445]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000024) [ 2595.130618][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2595.138025][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8961'. [ 2595.148351][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8961'. [ 2595.152526][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8961'. [ 2595.158888][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8961'. [ 2595.162941][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8961'. [ 2595.753710][ T7461] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8962'. [ 2595.904746][ T7467] bridge0: entered promiscuous mode [ 2595.908034][ T7467] bridge0: port 4(vlan3) entered blocking state [ 2595.913951][ T7467] bridge0: port 4(vlan3) entered disabled state [ 2595.916862][ T7467] vlan3: entered allmulticast mode [ 2595.919214][ T7467] bridge0: entered allmulticast mode [ 2595.923793][ T7467] vlan3: left allmulticast mode [ 2595.925939][ T7467] bridge0: left allmulticast mode [ 2595.929630][ T7467] bridge0: left promiscuous mode [ 2596.160728][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2596.980470][ T7478] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8968'. [ 2596.984076][ T7478] block nbd0: not configured, cannot reconfigure [ 2597.044733][ T7482] ip6_vti0: Caught tx_queue_len zero misconfig [ 2597.200803][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2597.235231][ T7486] random: crng reseeded on system resumption [ 2597.472410][ T7490] lo speed is unknown, defaulting to 1000 [ 2597.475978][ T7490] lo speed is unknown, defaulting to 1000 [ 2597.802467][ T7501] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2597.804600][ T7501] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2597.807958][ T7501] vhci_hcd vhci_hcd.0: Device attached [ 2598.041008][ T2724] usb 43-1: new low-speed USB device number 37 using vhci_hcd [ 2598.152561][ T7509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2598.166749][ T7509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8975'. [ 2598.240911][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2598.360482][ T7502] vhci_hcd: connection reset by peer [ 2598.377098][ T1183] vhci_hcd vhci_hcd.3: stop threads [ 2598.388583][ T1183] vhci_hcd vhci_hcd.3: release socket [ 2598.391257][ T1183] vhci_hcd vhci_hcd.3: disconnect device [ 2599.291026][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2599.554910][ T7523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8981'. [ 2599.569611][T23011] IPVS: starting estimator thread 0... [ 2599.632013][ T1436] usb 10-1: new low-speed USB device number 105 using dummy_hcd [ 2599.661800][ T7525] IPVS: using max 45 ests per chain, 108000 per kthread [ 2599.786712][ T1436] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 2599.789979][ T1436] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2600.321106][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2600.743686][ T1436] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2600.747526][ T1436] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2600.753087][ T1436] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2600.758593][ T1436] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 2600.760989][ T1436] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2600.764631][ T1436] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2600.768252][ T1436] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2600.772042][ T1436] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2600.777230][ T1436] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 2600.779659][ T1436] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2600.783566][ T1436] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2600.787448][ T1436] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2600.791356][ T1436] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2600.797960][ T1436] usb 10-1: string descriptor 0 read error: -22 [ 2600.800003][ T1436] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2601.291012][ T1436] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2601.296711][ T1436] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2601.371175][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2601.501695][ T1436] usb 10-1: USB disconnect, device number 105 [ 2601.587502][ T7548] 9pnet_virtio: no channels available for device syz [ 2602.401371][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2602.514359][ T7565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2602.520116][ T7565] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8988'. [ 2602.608152][ T7570] FAULT_INJECTION: forcing a failure. [ 2602.608152][ T7570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2602.612559][ T7570] CPU: 0 UID: 0 PID: 7570 Comm: syz.2.8995 Tainted: G L syzkaller #0 PREEMPT(full) [ 2602.612578][ T7570] Tainted: [L]=SOFTLOCKUP [ 2602.612582][ T7570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2602.612590][ T7570] Call Trace: [ 2602.612595][ T7570] [ 2602.612600][ T7570] dump_stack_lvl+0x16c/0x1f0 [ 2602.612620][ T7570] should_fail_ex+0x512/0x640 [ 2602.612635][ T7570] _copy_from_user+0x2e/0xd0 [ 2602.612649][ T7570] bpf_test_init.isra.0+0xaf/0x100 [ 2602.612665][ T7570] bpf_prog_test_run_xdp+0x606/0x1660 [ 2602.612683][ T7570] ? __fget_files+0x204/0x3c0 [ 2602.612700][ T7570] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2602.612716][ T7570] ? __pfx___might_fault+0x10/0x10 [ 2602.612731][ T7570] ? fput+0x70/0xf0 [ 2602.612742][ T7570] ? __bpf_prog_get+0x97/0x2a0 [ 2602.612756][ T7570] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 2602.612771][ T7570] __sys_bpf+0x1035/0x4980 [ 2602.612783][ T7570] ? __pfx___sys_bpf+0x10/0x10 [ 2602.612792][ T7570] ? find_held_lock+0x2b/0x80 [ 2602.612809][ T7570] ? find_held_lock+0x2b/0x80 [ 2602.612826][ T7570] ? __mutex_unlock_slowpath+0x161/0x790 [ 2602.612846][ T7570] ? fput+0x70/0xf0 [ 2602.612855][ T7570] ? ksys_write+0x1ac/0x250 [ 2602.612870][ T7570] ? __pfx_ksys_write+0x10/0x10 [ 2602.612887][ T7570] __ia32_sys_bpf+0x76/0xe0 [ 2602.612897][ T7570] ? lockdep_hardirqs_on+0x7c/0x110 [ 2602.612913][ T7570] __do_fast_syscall_32+0xe8/0x680 [ 2602.612925][ T7570] do_fast_syscall_32+0x32/0x80 [ 2602.612935][ T7570] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2602.612949][ T7570] RIP: 0023:0xf70ed579 [ 2602.612958][ T7570] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2602.612969][ T7570] RSP: 002b:00000000f54dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 2602.612979][ T7570] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 2602.612986][ T7570] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 2602.612991][ T7570] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2602.612997][ T7570] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2602.613003][ T7570] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2602.613018][ T7570] [ 2602.909774][ T7583] Invalid argument reading file caps for ./file0 [ 2603.201579][ T2724] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2603.441390][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2604.021436][ T1436] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 2604.176381][ T1436] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 2604.180531][ T1436] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 2604.184097][ T1436] usb 10-1: Product: syz [ 2604.186071][ T1436] usb 10-1: Manufacturer: syz [ 2604.188074][ T1436] usb 10-1: SerialNumber: syz [ 2604.192339][ T1436] usb 10-1: config 0 descriptor?? [ 2604.197030][ T1436] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 2604.200118][ T1436] dvb-usb: bulk message failed: -22 (2/0) [ 2604.204293][ T1436] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2604.208722][ T1436] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 2604.212250][ T1436] usb 10-1: media controller created [ 2604.224107][ T1436] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2604.417050][ T7596] dvb-usb: bulk message failed: -22 (4/0) [ 2604.419691][ T7596] cxusb: i2c read failed [ 2604.427914][ T1436] cxusb: set interface failed [ 2604.430581][ T1436] dvb-usb: bulk message failed: -22 (1/0) [ 2604.466692][ T1436] DVB: Unable to find symbol mt352_attach() [ 2604.468738][ T1436] dvb-usb: bulk message failed: -22 (5/0) [ 2604.481471][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2604.482322][ T1436] zl10353_read_register: readreg error (reg=127, ret==-121) [ 2604.486662][ T1436] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 2604.541483][ T1436] rc_core: IR keymap rc-dvico-mce not found [ 2604.543433][ T1436] Registered IR keymap rc-empty [ 2604.545779][ T1436] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 2604.549539][ T1436] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input151 [ 2604.554722][ T1436] dvb-usb: schedule remote query interval to 100 msecs. [ 2604.556859][ T1436] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 2604.565424][ T1436] usb 10-1: USB disconnect, device number 106 [ 2604.583236][ T1436] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 2604.827196][ T7610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2604.831914][ T7610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9007'. [ 2604.930840][ T7612] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2604.933394][ T7612] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2604.938661][ T7612] vhci_hcd vhci_hcd.0: Device attached [ 2605.181556][ T1625] usb 43-1: new low-speed USB device number 38 using vhci_hcd [ 2605.276461][ T7622] vivid-007: disconnect [ 2605.284674][ T7622] netlink: 168 bytes leftover after parsing attributes in process `syz.5.9010'. [ 2605.408857][ T7613] vhci_hcd: connection reset by peer [ 2605.411099][ T77] vhci_hcd vhci_hcd.3: stop threads [ 2605.412886][ T77] vhci_hcd vhci_hcd.3: release socket [ 2605.414660][ T77] vhci_hcd vhci_hcd.3: disconnect device [ 2605.521538][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2605.853896][ T7619] vivid-007: reconnect [ 2606.037472][ T7636] vivid-007: disconnect [ 2606.057974][ T7636] netlink: 168 bytes leftover after parsing attributes in process `syz.5.9012'. [ 2606.289335][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9015'. [ 2606.293431][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9015'. [ 2606.310877][ T7643] bond0: (slave syz_tun): Releasing backup interface [ 2606.318242][ T7643] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2606.329559][ T7643] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.0) [ 2606.561628][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2607.133491][ T7631] vivid-007: reconnect [ 2607.401754][ T7654] netlink: 'syz.2.9017': attribute type 13 has an invalid length. [ 2607.426962][ T7654] gretap0: refused to change device tx_queue_len [ 2607.430094][ T7654] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2607.601839][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2608.019898][ T7669] 9p: Bad value for 'wfdno' [ 2608.081637][ T7673] vivid-007: disconnect [ 2608.454216][ T6378] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 2608.606368][ T6378] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 2608.609817][ T6378] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 2608.613023][ T6378] usb 10-1: Product: syz [ 2608.614793][ T6378] usb 10-1: Manufacturer: syz [ 2608.616426][ T6378] usb 10-1: SerialNumber: syz [ 2608.619458][ T6378] usb 10-1: config 0 descriptor?? [ 2608.625202][ T6378] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 2608.627706][ T6378] dvb-usb: bulk message failed: -22 (2/0) [ 2608.630784][ T6378] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2608.636521][ T6378] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 2608.639330][ T6378] usb 10-1: media controller created [ 2608.641778][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2608.649382][ T6378] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2608.918734][ T7683] dvb-usb: bulk message failed: -22 (4/0) [ 2608.921231][ T7683] cxusb: i2c read failed [ 2608.934421][ T6378] cxusb: set interface failed [ 2608.936016][ T6378] dvb-usb: bulk message failed: -22 (1/0) [ 2609.006357][ T7666] vivid-007: reconnect [ 2609.049486][ T6378] DVB: Unable to find symbol mt352_attach() [ 2609.051572][ T6378] dvb-usb: bulk message failed: -22 (5/0) [ 2609.053527][ T6378] zl10353_read_register: readreg error (reg=127, ret==-121) [ 2609.056008][ T6378] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 2609.102014][ T6378] rc_core: IR keymap rc-dvico-mce not found [ 2609.104637][ T6378] Registered IR keymap rc-empty [ 2609.106689][ T6378] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 2609.110647][ T6378] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input152 [ 2609.120676][ T6378] dvb-usb: schedule remote query interval to 100 msecs. [ 2609.123567][ T6378] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 2609.681883][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2610.063172][T29568] dvb-usb: bulk message failed: -22 (1/0) [ 2610.070440][ T6378] usb 10-1: USB disconnect, device number 107 [ 2610.102101][ T6378] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 2610.312356][ T1625] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2610.722004][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2610.982947][ T7715] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2610.985633][ T7715] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2611.159311][ T7715] vhci_hcd vhci_hcd.0: Device attached [ 2611.199220][ T41] kauditd_printk_skb: 13 callbacks suppressed [ 2611.199233][ T41] audit: type=1800 audit(2865.977:2347): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9036" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 2611.422105][ T2724] usb 44-1: SetAddress Request (50) to port 0 [ 2611.424511][ T2724] usb 44-1: new SuperSpeed USB device number 50 using vhci_hcd [ 2611.580931][ T7732] overlay: ./file0 is not a directory [ 2611.587352][ T7732] overlay: ./file0 is not a directory [ 2611.595038][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9040'. [ 2611.745099][ T7716] vhci_hcd: connection reset by peer [ 2611.747723][T18132] vhci_hcd vhci_hcd.3: stop threads [ 2611.749934][T18132] vhci_hcd vhci_hcd.3: release socket [ 2611.752433][T18132] vhci_hcd vhci_hcd.3: disconnect device [ 2611.762068][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2612.644104][ T7739] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9042'. [ 2612.802143][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2613.275198][ T7748] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9043'. [ 2613.549524][ T7758] vivid-007: disconnect [ 2613.578219][ T7758] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9045'. [ 2613.842239][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2614.253924][ T7765] overlayfs: missing 'lowerdir' [ 2614.404731][ T7751] vivid-007: reconnect [ 2614.882377][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2615.022366][ T1625] usb 10-1: new full-speed USB device number 108 using dummy_hcd [ 2615.176119][ T1625] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 2615.189259][ T1625] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 2615.195090][ T1625] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2615.208137][ T1625] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2615.217658][ T7781] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2615.221176][ T7781] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2615.231915][ T7789] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9054'. [ 2615.237459][ T1625] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 2615.684245][ T7796] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 2615.686683][ T7796] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2615.689706][ T7796] vhci_hcd vhci_hcd.0: Device attached [ 2615.691192][ T41] audit: type=1326 audit(2870.466:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7793 comm="syz.2.9055" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2615.712798][ T41] audit: type=1326 audit(2870.466:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7793 comm="syz.2.9055" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2615.730626][ T7797] vhci_hcd: connection closed [ 2615.732770][ T1183] vhci_hcd vhci_hcd.0: stop threads [ 2615.736781][ T1183] vhci_hcd vhci_hcd.0: release socket [ 2615.738989][ T1183] vhci_hcd vhci_hcd.0: disconnect device [ 2615.754510][ T41] audit: type=1800 audit(2870.476:2350): pid=7796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9056" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 2615.770446][ T41] audit: type=1326 audit(2870.476:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7793 comm="syz.2.9055" exe="/syz-executor" sig=0 arch=40000003 syscall=123 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2615.780915][ T41] audit: type=1326 audit(2870.486:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7793 comm="syz.2.9055" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2615.789228][ T7799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9055'. [ 2615.791328][ T41] audit: type=1326 audit(2870.486:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7793 comm="syz.2.9055" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2615.801757][ T41] audit: type=1326 audit(2870.486:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7793 comm="syz.2.9055" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2615.810166][ T41] audit: type=1326 audit(2870.486:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7793 comm="syz.2.9055" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2615.819588][ T41] audit: type=1326 audit(2870.496:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7793 comm="syz.2.9055" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2615.922613][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2616.962505][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2616.982535][ T1625] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 2617.081421][ T2724] usb 44-1: device descriptor read/8, error -110 [ 2617.135051][ T1625] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 2617.138346][ T1625] usb 5-1: config 0 has no interface number 0 [ 2617.141556][ T1625] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 2617.146324][ T1625] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2617.150470][ T1625] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2617.156026][ T1625] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2617.159503][ T1625] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2617.162758][ T1625] usb 5-1: Product: syz [ 2617.164483][ T1625] usb 5-1: SerialNumber: syz [ 2617.168059][ T1625] usb 5-1: config 0 descriptor?? [ 2617.172132][ T1625] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 2617.172951][ T6048] usb 10-1: USB disconnect, device number 108 [ 2617.176337][ T1625] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input153 [ 2617.441973][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 2617.473229][ T2724] usb usb44-port1: attempt power cycle [ 2618.002507][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2618.033170][ T2724] usb usb44-port1: unable to enumerate USB device [ 2618.578077][ T7834] vivid-007: disconnect [ 2618.585792][ T7834] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9065'. [ 2619.052635][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2619.342402][ T7831] vivid-007: reconnect [ 2619.539647][ T7850] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 2619.542277][ T7850] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2619.546269][ T7850] vhci_hcd vhci_hcd.0: Device attached [ 2619.550935][ T7851] vhci_hcd: connection closed [ 2619.551488][ T13] vhci_hcd vhci_hcd.3: stop threads [ 2619.557150][ T13] vhci_hcd vhci_hcd.3: release socket [ 2619.559138][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 2619.786476][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2619.788839][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2619.791169][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2619.793817][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2619.796262][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2619.798770][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2619.801350][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2619.803753][ T2724] usb 5-1: USB disconnect, device number 43 [ 2619.803814][ C3] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2619.808107][ C3] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2619.812775][ T2724] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2619.854835][ T7855] netlink: 'syz.0.9070': attribute type 1 has an invalid length. [ 2619.858160][ T7855] netlink: 'syz.0.9070': attribute type 4 has an invalid length. [ 2619.861524][ T7855] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.9070'. [ 2620.082664][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2620.190371][ T7861] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2620.192967][ T7861] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2620.212425][ T7861] vhci_hcd vhci_hcd.0: Device attached [ 2620.562928][T31608] usb 47-1: new low-speed USB device number 31 using vhci_hcd [ 2620.690785][ T7885] vivid-007: disconnect [ 2620.699271][ T7884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2620.719468][ T7884] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9074'. [ 2620.739045][ T7863] vhci_hcd: connection reset by peer [ 2620.751971][ T13] vhci_hcd vhci_hcd.5: stop threads [ 2620.753739][ T13] vhci_hcd vhci_hcd.5: release socket [ 2620.755569][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 2621.132711][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2621.366024][ T7888] lo speed is unknown, defaulting to 1000 [ 2621.369177][ T7888] lo speed is unknown, defaulting to 1000 [ 2621.422967][ T7881] vivid-007: reconnect [ 2621.825042][ T7915] input: syz1 as /devices/virtual/input/input154 [ 2621.953079][ T7919] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 2621.953097][ T7919] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2621.962808][ T7919] vhci_hcd vhci_hcd.0: Device attached [ 2622.149571][ T7923] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 2622.149597][ T7923] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2622.149892][ T7923] vhci_hcd vhci_hcd.0: Device attached [ 2622.162849][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2622.243625][ T2724] usb 42-1: SetAddress Request (8) to port 0 [ 2622.243680][ T2724] usb 42-1: new SuperSpeed USB device number 8 using vhci_hcd [ 2622.392856][ T1625] usb 37-1: new low-speed USB device number 25 using vhci_hcd [ 2622.725096][ T7924] vhci_hcd: connection reset by peer [ 2622.728958][T30194] vhci_hcd vhci_hcd.0: stop threads [ 2622.730718][T30194] vhci_hcd vhci_hcd.0: release socket [ 2622.738743][T30194] vhci_hcd vhci_hcd.0: disconnect device [ 2622.745666][ T7920] vhci_hcd: connection reset by peer [ 2622.748413][T30194] vhci_hcd vhci_hcd.2: stop threads [ 2622.750119][T30194] vhci_hcd vhci_hcd.2: release socket [ 2622.752997][T30194] vhci_hcd vhci_hcd.2: disconnect device [ 2623.069207][ T7934] vivid-007: disconnect [ 2623.202860][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2623.502710][ T7944] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9093'. [ 2623.547323][ T7942] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9092'. [ 2623.570631][ T7951] FAULT_INJECTION: forcing a failure. [ 2623.570631][ T7951] name failslab, interval 1, probability 0, space 0, times 0 [ 2623.575711][ T7951] CPU: 0 UID: 0 PID: 7951 Comm: syz.0.9094 Tainted: G L syzkaller #0 PREEMPT(full) [ 2623.575730][ T7951] Tainted: [L]=SOFTLOCKUP [ 2623.575734][ T7951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2623.575741][ T7951] Call Trace: [ 2623.575745][ T7951] [ 2623.575750][ T7951] dump_stack_lvl+0x16c/0x1f0 [ 2623.575772][ T7951] should_fail_ex+0x512/0x640 [ 2623.575785][ T7951] ? fs_reclaim_acquire+0xae/0x150 [ 2623.575804][ T7951] should_failslab+0xc2/0x120 [ 2623.575822][ T7951] __kmalloc_noprof+0xeb/0x910 [ 2623.575835][ T7951] ? tomoyo_encode2+0x100/0x3e0 [ 2623.575854][ T7951] ? tomoyo_encode2+0x100/0x3e0 [ 2623.575868][ T7951] tomoyo_encode2+0x100/0x3e0 [ 2623.575885][ T7951] tomoyo_encode+0x29/0x50 [ 2623.575899][ T7951] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2623.575928][ T7951] tomoyo_path_number_perm+0x245/0x580 [ 2623.575945][ T7951] ? tomoyo_path_number_perm+0x237/0x580 [ 2623.575969][ T7951] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2623.576020][ T7951] ? find_held_lock+0x2b/0x80 [ 2623.576045][ T7951] ? hook_file_ioctl_common+0x144/0x410 [ 2623.576070][ T7951] ? __fget_files+0x20e/0x3c0 [ 2623.576086][ T7951] ? fput+0x70/0xf0 [ 2623.576099][ T7951] security_file_ioctl_compat+0x9b/0x240 [ 2623.576114][ T7951] __ia32_compat_sys_ioctl+0xc3/0x370 [ 2623.576131][ T7951] __do_fast_syscall_32+0xe8/0x680 [ 2623.576144][ T7951] do_fast_syscall_32+0x32/0x80 [ 2623.576155][ T7951] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2623.576170][ T7951] RIP: 0023:0xf708d579 [ 2623.576179][ T7951] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2623.576190][ T7951] RSP: 002b:00000000f547d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2623.576201][ T7951] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000004008af03 [ 2623.576214][ T7951] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 2623.576220][ T7951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2623.576226][ T7951] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2623.576233][ T7951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2623.576294][ T7951] [ 2623.576313][ T7951] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2623.627332][ T7929] vivid-007: reconnect [ 2624.252924][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2624.432196][ T7972] bridge0: entered promiscuous mode [ 2624.435575][ T7972] bridge0: port 4(vlan3) entered blocking state [ 2624.437648][ T7972] bridge0: port 4(vlan3) entered disabled state [ 2624.439723][ T7972] vlan3: entered allmulticast mode [ 2624.441340][ T7972] bridge0: entered allmulticast mode [ 2624.444225][ T7972] vlan3: left allmulticast mode [ 2624.445852][ T7972] bridge0: left allmulticast mode [ 2624.448369][ T7972] bridge0: left promiscuous mode [ 2624.571624][ T7966] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2624.573746][ T7966] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2624.576458][ T7966] vhci_hcd vhci_hcd.0: Device attached [ 2625.283000][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2626.323100][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2626.445540][ T7991] vivid-007: disconnect [ 2626.475091][ T7991] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9105'. [ 2627.147894][ T7988] vivid-007: reconnect [ 2627.254929][ T7974] vhci_hcd: connection reset by peer [ 2627.260719][T16369] vhci_hcd vhci_hcd.5: stop threads [ 2627.264381][T16369] vhci_hcd vhci_hcd.5: release socket [ 2627.270159][T16369] vhci_hcd vhci_hcd.5: disconnect device [ 2627.293455][ T2724] usb 42-1: device descriptor read/8, error -110 [ 2627.363252][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2627.392573][T31608] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2627.409127][ T8002] vivid-007: disconnect [ 2627.417561][ T8002] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9107'. [ 2627.524339][ T1625] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 2627.703659][ T2724] usb usb42-port1: attempt power cycle [ 2628.128035][ T7997] vivid-007: reconnect [ 2628.264488][ T8005] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 2628.267304][ T8005] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2628.270559][ T8005] vhci_hcd vhci_hcd.0: Device attached [ 2628.283773][ T2724] usb usb42-port1: unable to enumerate USB device [ 2628.403306][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2628.523295][ T2724] usb 43-1: new low-speed USB device number 39 using vhci_hcd [ 2629.443425][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2630.387971][ T8007] vhci_hcd: connection reset by peer [ 2630.390040][ T1183] vhci_hcd vhci_hcd.3: stop threads [ 2630.391823][ T1183] vhci_hcd vhci_hcd.3: release socket [ 2630.394457][ T1183] vhci_hcd vhci_hcd.3: disconnect device [ 2630.423817][ T8014] lo speed is unknown, defaulting to 1000 [ 2630.426446][ T8014] lo speed is unknown, defaulting to 1000 [ 2630.480412][ T41] kauditd_printk_skb: 46 callbacks suppressed [ 2630.480435][ T41] audit: type=1326 audit(2885.255:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.0.9112" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x0 [ 2630.493338][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2630.788673][ T8024] vivid-007: disconnect [ 2630.810131][ T8024] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9114'. [ 2631.459987][ T8037] netlink: 168 bytes leftover after parsing attributes in process `syz.5.9117'. [ 2631.523425][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2631.796291][ T8021] vivid-007: reconnect [ 2632.312707][ T8044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2632.322948][ T8044] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9119'. [ 2632.563650][ C3] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2632.895812][ T8058] Invalid ELF header type: 3 != 1 [ 2632.909477][ T8058] binder: 8057:8058 ioctl 80045500 80000000 returned -22 [ 2632.999026][ T8061] ip6gre1: entered promiscuous mode [ 2633.001287][ T8061] ip6gre1: entered allmulticast mode [ 2633.017509][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9127'. [ 2633.268726][ T8067] Cannot find set identified by id 0 to match [ 2633.603496][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2633.608905][ T8082] vivid-007: disconnect [ 2633.617656][ T8082] netlink: 168 bytes leftover after parsing attributes in process `syz.5.9130'. [ 2633.673504][ T2724] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2634.239529][ T41] audit: type=1326 audit(2889.015:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.0.9135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2634.262223][ T41] audit: type=1326 audit(2889.025:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.0.9135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2634.269622][ T41] audit: type=1326 audit(2889.025:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.0.9135" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2634.277401][ T41] audit: type=1326 audit(2889.025:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.0.9135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2634.285035][ T41] audit: type=1326 audit(2889.025:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.0.9135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2634.291784][ T41] audit: type=1326 audit(2889.025:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.0.9135" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2634.293071][ T8069] vivid-007: reconnect [ 2634.300410][ T8090] rtc_cmos 00:05: Alarms can be up to one day in the future [ 2634.300989][ T41] audit: type=1326 audit(2889.025:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.0.9135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2634.314242][ T41] audit: type=1326 audit(2889.025:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.0.9135" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2634.320985][ T41] audit: type=1326 audit(2889.025:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.0.9135" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d579 code=0x7ffc0000 [ 2634.643551][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2635.683690][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2636.723691][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2637.130511][ T8141] vivid-007: disconnect [ 2637.147988][ T8141] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9148'. [ 2637.773691][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2637.849898][ T8143] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 2637.874532][ T8131] vivid-007: reconnect [ 2638.144070][ T8154] 9pnet_virtio: no channels available for device syz [ 2638.813732][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2639.853794][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2640.667532][ T8161] FAULT_INJECTION: forcing a failure. [ 2640.667532][ T8161] name failslab, interval 1, probability 0, space 0, times 0 [ 2640.675558][ T8161] CPU: 3 UID: 0 PID: 8161 Comm: syz.3.9156 Tainted: G L syzkaller #0 PREEMPT(full) [ 2640.675588][ T8161] Tainted: [L]=SOFTLOCKUP [ 2640.675595][ T8161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2640.675606][ T8161] Call Trace: [ 2640.675613][ T8161] [ 2640.675620][ T8161] dump_stack_lvl+0x16c/0x1f0 [ 2640.675649][ T8161] should_fail_ex+0x512/0x640 [ 2640.675670][ T8161] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 2640.675697][ T8161] should_failslab+0xc2/0x120 [ 2640.675721][ T8161] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 2640.675746][ T8161] ? ethnl_default_set_doit+0x2bb/0x9b0 [ 2640.675776][ T8161] ? kmemdup_noprof+0x29/0x60 [ 2640.675793][ T8161] kmemdup_noprof+0x29/0x60 [ 2640.675813][ T8161] ethnl_default_set_doit+0x2bb/0x9b0 [ 2640.675839][ T8161] genl_family_rcv_msg_doit+0x209/0x2f0 [ 2640.675860][ T8161] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2640.675876][ T8161] ? genl_get_cmd+0x194/0x580 [ 2640.675898][ T8161] ? bpf_lsm_capable+0x9/0x10 [ 2640.675921][ T8161] ? security_capable+0x7e/0x260 [ 2640.675947][ T8161] ? ns_capable+0xd7/0x110 [ 2640.675970][ T8161] genl_rcv_msg+0x55c/0x800 [ 2640.675992][ T8161] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2640.676012][ T8161] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 2640.676044][ T8161] netlink_rcv_skb+0x158/0x420 [ 2640.676069][ T8161] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2640.676087][ T8161] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2640.676123][ T8161] ? netlink_deliver_tap+0x1ae/0xd30 [ 2640.676150][ T8161] genl_rcv+0x28/0x40 [ 2640.676165][ T8161] netlink_unicast+0x5aa/0x870 [ 2640.676195][ T8161] ? __pfx_netlink_unicast+0x10/0x10 [ 2640.676243][ T8161] netlink_sendmsg+0x8c8/0xdd0 [ 2640.676274][ T8161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2640.676300][ T8161] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 2640.676341][ T8161] ____sys_sendmsg+0xa5d/0xc30 [ 2640.676361][ T8161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2640.676375][ T8161] ? get_compat_msghdr+0x11a/0x170 [ 2640.676410][ T8161] ___sys_sendmsg+0x134/0x1d0 [ 2640.676436][ T8161] ? __pfx____sys_sendmsg+0x10/0x10 [ 2640.676470][ T8161] ? find_held_lock+0x2b/0x80 [ 2640.676512][ T8161] __sys_sendmsg+0x16d/0x220 [ 2640.676534][ T8161] ? __pfx___sys_sendmsg+0x10/0x10 [ 2640.676573][ T8161] __do_fast_syscall_32+0xe8/0x680 [ 2640.676595][ T8161] do_fast_syscall_32+0x32/0x80 [ 2640.676611][ T8161] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2640.676631][ T8161] RIP: 0023:0xf7f91579 [ 2640.676646][ T8161] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2640.676662][ T8161] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2640.676680][ T8161] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 2640.676690][ T8161] RDX: 0000000020005880 RSI: 0000000000000000 RDI: 0000000000000000 [ 2640.676700][ T8161] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2640.676708][ T8161] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2640.676718][ T8161] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2640.676745][ T8161] [ 2640.883950][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2640.905092][ T8165] FAULT_INJECTION: forcing a failure. [ 2640.905092][ T8165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2640.909091][ T8165] CPU: 0 UID: 0 PID: 8165 Comm: syz.2.9158 Tainted: G L syzkaller #0 PREEMPT(full) [ 2640.909108][ T8165] Tainted: [L]=SOFTLOCKUP [ 2640.909112][ T8165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2640.909118][ T8165] Call Trace: [ 2640.909122][ T8165] [ 2640.909127][ T8165] dump_stack_lvl+0x16c/0x1f0 [ 2640.909148][ T8165] should_fail_ex+0x512/0x640 [ 2640.909163][ T8165] _copy_to_user+0x32/0xd0 [ 2640.909177][ T8165] simple_read_from_buffer+0xcb/0x170 [ 2640.909194][ T8165] proc_fail_nth_read+0x197/0x240 [ 2640.909212][ T8165] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2640.909231][ T8165] ? rw_verify_area+0xcf/0x6c0 [ 2640.909244][ T8165] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2640.909261][ T8165] vfs_read+0x1e4/0xcf0 [ 2640.909277][ T8165] ? __pfx___mutex_lock+0x10/0x10 [ 2640.909289][ T8165] ? __pfx_vfs_read+0x10/0x10 [ 2640.909302][ T8165] ? find_held_lock+0x2b/0x80 [ 2640.909320][ T8165] ? __fget_files+0x20e/0x3c0 [ 2640.909340][ T8165] ksys_read+0x12a/0x250 [ 2640.909354][ T8165] ? __pfx_ksys_read+0x10/0x10 [ 2640.909369][ T8165] ? fput+0x70/0xf0 [ 2640.909386][ T8165] __do_fast_syscall_32+0xe8/0x680 [ 2640.909398][ T8165] do_fast_syscall_32+0x32/0x80 [ 2640.909408][ T8165] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2640.909421][ T8165] RIP: 0023:0xf70ed579 [ 2640.909430][ T8165] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2640.909440][ T8165] RSP: 002b:00000000f54dd590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2640.909450][ T8165] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54dd620 [ 2640.909456][ T8165] RDX: 000000000000000f RSI: 00000000f7486ff4 RDI: 0000000000000000 [ 2640.909463][ T8165] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2640.909468][ T8165] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2640.909474][ T8165] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2640.909489][ T8165] [ 2641.923921][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2642.730833][ T8188] vivid-007: disconnect [ 2642.779967][ T8188] netlink: 168 bytes leftover after parsing attributes in process `syz.5.9163'. [ 2642.964032][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2642.973523][ T8200] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2643.123772][ T8177] vivid-007: reconnect [ 2643.665727][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9171'. [ 2644.003978][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2644.543406][ T8231] syzkaller0: entered promiscuous mode [ 2644.546017][ T8231] syzkaller0: entered allmulticast mode [ 2644.567814][ T8231] tipc: Enabled bearer , priority 0 [ 2644.572027][ T8230] tipc: Resetting bearer [ 2644.585598][ T8230] tipc: Disabling bearer [ 2644.644119][T19070] Bluetooth: hci1: command 0x0405 tx timeout [ 2645.044060][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2646.084101][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2646.803152][ T8252] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2646.841010][ T8256] vivid-007: disconnect [ 2646.850562][ T8256] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9183'. [ 2647.124176][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2647.205182][ T8248] vivid-007: reconnect [ 2648.164533][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2648.453456][ T8285] bond2: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 2648.467813][ T8285] bond2 (unregistering): Released all slaves [ 2648.497568][ T8287] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 2648.500255][ T8287] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2648.503757][ T8287] vhci_hcd vhci_hcd.0: Device attached [ 2648.766105][ T1625] usb 42-1: SetAddress Request (12) to port 0 [ 2648.768784][ T1625] usb 42-1: new SuperSpeed USB device number 12 using vhci_hcd [ 2648.900610][ T8294] vivid-007: disconnect [ 2648.908314][ T8294] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9194'. [ 2649.044698][ T8289] vhci_hcd: connection reset by peer [ 2649.046793][ T6777] vhci_hcd vhci_hcd.2: stop threads [ 2649.049339][ T6777] vhci_hcd vhci_hcd.2: release socket [ 2649.056144][ T6777] vhci_hcd vhci_hcd.2: disconnect device [ 2649.204267][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2649.627118][ T8291] vivid-007: reconnect [ 2649.646236][ T8297] fuse: Unknown parameter '' [ 2650.244295][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2651.284315][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2652.325138][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2652.557369][ T8341] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2653.276299][ T8346] FAULT_INJECTION: forcing a failure. [ 2653.276299][ T8346] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2653.281872][ T8346] CPU: 1 UID: 0 PID: 8346 Comm: syz.3.9209 Tainted: G L syzkaller #0 PREEMPT(full) [ 2653.281902][ T8346] Tainted: [L]=SOFTLOCKUP [ 2653.281908][ T8346] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2653.281919][ T8346] Call Trace: [ 2653.281927][ T8346] [ 2653.281936][ T8346] dump_stack_lvl+0x16c/0x1f0 [ 2653.281968][ T8346] should_fail_ex+0x512/0x640 [ 2653.281992][ T8346] should_fail_alloc_page+0xe7/0x130 [ 2653.282019][ T8346] prepare_alloc_pages+0x401/0x670 [ 2653.282046][ T8346] ? rcu_is_watching+0x12/0xc0 [ 2653.282072][ T8346] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 2653.282095][ T8346] ? __lock_acquire+0x436/0x2890 [ 2653.282111][ T8346] ? css_rstat_updated+0x1d1/0x590 [ 2653.282148][ T8346] ? __lock_acquire+0x436/0x2890 [ 2653.282168][ T8346] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2653.282199][ T8346] ? __lock_acquire+0x436/0x2890 [ 2653.282221][ T8346] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2653.282253][ T8346] ? policy_nodemask+0xea/0x4e0 [ 2653.282281][ T8346] alloc_pages_mpol+0x1fb/0x550 [ 2653.282307][ T8346] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2653.282340][ T8346] folio_alloc_mpol_noprof+0x36/0x2f0 [ 2653.282359][ T8346] vma_alloc_folio_noprof+0xed/0x1e0 [ 2653.282377][ T8346] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 2653.282403][ T8346] do_anonymous_page+0xc81/0x2190 [ 2653.282432][ T8346] __handle_mm_fault+0x1ecf/0x2bb0 [ 2653.282457][ T8346] ? __pfx___handle_mm_fault+0x10/0x10 [ 2653.282477][ T8346] ? __pte_offset_map_lock+0x174/0x310 [ 2653.282500][ T8346] ? find_held_lock+0x2b/0x80 [ 2653.282538][ T8346] ? follow_page_pte+0x5cf/0x1390 [ 2653.282569][ T8346] handle_mm_fault+0x3fe/0xad0 [ 2653.282592][ T8346] __get_user_pages+0x54e/0x3590 [ 2653.282627][ T8346] ? __pfx___get_user_pages+0x10/0x10 [ 2653.282659][ T8346] __gup_longterm_locked+0xa92/0x17e0 [ 2653.282682][ T8346] ? __lock_acquire+0x436/0x2890 [ 2653.282703][ T8346] ? __pfx___gup_longterm_locked+0x10/0x10 [ 2653.282739][ T8346] pin_user_pages_remote+0xed/0x140 [ 2653.282764][ T8346] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 2653.282787][ T8346] ? mm_access+0x22d/0x2e0 [ 2653.282820][ T8346] process_vm_rw_core.constprop.0+0x41b/0x970 [ 2653.282856][ T8346] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 2653.282879][ T8346] ? import_ubuf+0x1b6/0x220 [ 2653.282909][ T8346] ? iovec_from_user+0xbb/0x140 [ 2653.282931][ T8346] process_vm_rw+0x216/0x2c0 [ 2653.282987][ T8346] ? __pfx_process_vm_rw+0x10/0x10 [ 2653.283015][ T8346] ? ksys_write+0x190/0x250 [ 2653.283048][ T8346] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2653.283077][ T8346] ? fput+0x70/0xf0 [ 2653.283093][ T8346] ? ksys_write+0x1ac/0x250 [ 2653.283120][ T8346] __ia32_sys_process_vm_writev+0xdf/0x1b0 [ 2653.283142][ T8346] ? __do_fast_syscall_32+0x9a/0x680 [ 2653.283158][ T8346] ? lockdep_hardirqs_on+0x7c/0x110 [ 2653.283183][ T8346] __do_fast_syscall_32+0xe8/0x680 [ 2653.283203][ T8346] do_fast_syscall_32+0x32/0x80 [ 2653.283218][ T8346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2653.283244][ T8346] RIP: 0023:0xf7f91579 [ 2653.283259][ T8346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2653.283275][ T8346] RSP: 002b:00000000f548655c EFLAGS: 00000296 ORIG_RAX: 000000000000015c [ 2653.283291][ T8346] RAX: ffffffffffffffda RBX: 00000000000007cd RCX: 0000000080001c80 [ 2653.283301][ T8346] RDX: 0000000000000001 RSI: 0000000080001d80 RDI: 0000000000000001 [ 2653.283311][ T8346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2653.283320][ T8346] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2653.283330][ T8346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2653.283357][ T8346] [ 2653.364437][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2653.844442][ T1625] usb 42-1: device descriptor read/8, error -110 [ 2654.020936][ T8357] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 2654.024101][ T8357] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2654.029944][ T8357] vhci_hcd vhci_hcd.0: Device attached [ 2654.245549][ T1625] usb usb42-port1: attempt power cycle [ 2654.414431][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2654.418005][ T2170] usb 41-1: new low-speed USB device number 22 using vhci_hcd [ 2654.599208][ T8358] vhci_hcd: connection reset by peer [ 2654.604029][T16336] vhci_hcd vhci_hcd.2: stop threads [ 2654.606599][T16336] vhci_hcd vhci_hcd.2: release socket [ 2654.611829][T16336] vhci_hcd vhci_hcd.2: disconnect device [ 2654.887855][ T8379] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2654.890642][ T8379] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2654.893824][ T8379] vhci_hcd vhci_hcd.0: Device attached [ 2654.955098][ T8382] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2654.957423][ T8382] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2654.996060][ T8382] vhci_hcd vhci_hcd.0: Device attached [ 2655.134523][ T6048] usb 47-1: new low-speed USB device number 32 using vhci_hcd [ 2655.244639][ T2724] usb 43-1: new low-speed USB device number 40 using vhci_hcd [ 2655.444455][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2655.484950][ T8380] vhci_hcd: connection reset by peer [ 2655.487214][ T6777] vhci_hcd vhci_hcd.5: stop threads [ 2655.488976][ T6777] vhci_hcd vhci_hcd.5: release socket [ 2655.490842][ T6777] vhci_hcd vhci_hcd.5: disconnect device [ 2655.614084][ T8383] vhci_hcd: connection reset by peer [ 2655.616697][ T6777] vhci_hcd vhci_hcd.3: stop threads [ 2655.618837][ T6777] vhci_hcd vhci_hcd.3: release socket [ 2655.621246][ T6777] vhci_hcd vhci_hcd.3: disconnect device [ 2656.257243][ T8399] input: syz0 as /devices/virtual/input/input155 [ 2656.317609][ T8399] dvmrp1: entered allmulticast mode [ 2656.484484][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2656.764813][ T8417] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9230'. [ 2657.534687][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2658.574540][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2658.819934][ T8456] lo speed is unknown, defaulting to 1000 [ 2658.828810][ T8456] lo speed is unknown, defaulting to 1000 [ 2659.420432][ T8463] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9240'. [ 2659.424311][ T8463] ip6gre0: Caught tx_queue_len zero misconfig [ 2659.514679][ T2170] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 2659.604591][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2659.853574][ T8464] vhci_hcd vhci_hcd.0: port 0 already used [ 2659.918986][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9242'. [ 2659.923883][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9242'. [ 2659.931948][ T8468] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 2659.937859][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9242'. [ 2660.244665][ T6048] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2660.654709][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2660.824720][ T2724] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2660.966794][ T1625] usb usb42-port1: unable to enumerate USB device [ 2661.684655][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2662.724651][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2662.986515][T19070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2662.995760][T19070] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2662.999876][T19070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2663.002987][T19070] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2663.006238][T19070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2663.042721][ T8498] lo speed is unknown, defaulting to 1000 [ 2663.055346][ T8498] lo speed is unknown, defaulting to 1000 [ 2663.215572][ T8498] chnl_net:caif_netlink_parms(): no params data found [ 2663.296694][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state [ 2663.299832][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state [ 2663.302554][ T8498] bridge_slave_0: entered allmulticast mode [ 2663.306687][ T8498] bridge_slave_0: entered promiscuous mode [ 2663.311272][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state [ 2663.314458][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state [ 2663.317631][ T8498] bridge_slave_1: entered allmulticast mode [ 2663.321036][ T8498] bridge_slave_1: entered promiscuous mode [ 2663.342916][ T8498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2663.349479][ T8498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2663.372362][ T8498] team0: Port device team_slave_0 added [ 2663.377192][ T8498] team0: Port device team_slave_1 added [ 2663.397155][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2663.400099][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2663.410524][ T8498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2663.417072][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2663.420041][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2663.429774][ T8498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2663.500404][ T8498] hsr_slave_0: entered promiscuous mode [ 2663.503347][ T8498] hsr_slave_1: entered promiscuous mode [ 2663.505639][ T8498] debugfs: 'hsr0' already exists in 'hsr' [ 2663.507569][ T8498] Cannot create hsr debugfs directory [ 2663.565447][ T8511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2663.570761][ T8511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9252'. [ 2663.775719][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2664.119975][ T8498] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2664.126278][ T8498] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2664.132582][ T8498] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2664.138225][ T8522] netlink: 'syz.5.9256': attribute type 7 has an invalid length. [ 2664.138327][ T8498] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2664.141964][ T8522] netlink: 'syz.5.9256': attribute type 8 has an invalid length. [ 2664.167251][ T8520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2664.185594][ T8520] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9253'. [ 2664.218596][ T8498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2664.228289][ T8498] 8021q: adding VLAN 0 to HW filter on device team0 [ 2664.238533][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 2664.240990][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2664.259206][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 2664.261451][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2664.488432][ T8498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2664.750617][ T8498] veth0_vlan: entered promiscuous mode [ 2664.764915][ T8498] veth1_vlan: entered promiscuous mode [ 2664.795086][ T8498] veth0_macvtap: entered promiscuous mode [ 2664.802953][ T8559] Bluetooth: hci3: Frame reassembly failed (-90) [ 2664.804541][ T8498] veth1_macvtap: entered promiscuous mode [ 2664.811707][ T77] Bluetooth: hci3: Frame reassembly failed (-84) [ 2664.814222][ T8559] FAULT_INJECTION: forcing a failure. [ 2664.814222][ T8559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2664.814658][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2664.819700][ T8559] CPU: 0 UID: 0 PID: 8559 Comm: syz.3.9261 Tainted: G L syzkaller #0 PREEMPT(full) [ 2664.819725][ T8559] Tainted: [L]=SOFTLOCKUP [ 2664.819729][ T8559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2664.819738][ T8559] Call Trace: [ 2664.819743][ T8559] [ 2664.819749][ T8559] dump_stack_lvl+0x16c/0x1f0 [ 2664.819775][ T8559] should_fail_ex+0x512/0x640 [ 2664.819791][ T8559] _copy_to_user+0x32/0xd0 [ 2664.819805][ T8559] simple_read_from_buffer+0xcb/0x170 [ 2664.819821][ T8559] proc_fail_nth_read+0x197/0x240 [ 2664.819840][ T8559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2664.819858][ T8559] ? rw_verify_area+0xcf/0x6c0 [ 2664.819872][ T8559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2664.819889][ T8559] vfs_read+0x1e4/0xcf0 [ 2664.819911][ T8559] ? __pfx___mutex_lock+0x10/0x10 [ 2664.819924][ T8559] ? __pfx_vfs_read+0x10/0x10 [ 2664.819937][ T8559] ? find_held_lock+0x2b/0x80 [ 2664.819955][ T8559] ? __fget_files+0x20e/0x3c0 [ 2664.819974][ T8559] ksys_read+0x12a/0x250 [ 2664.819989][ T8559] ? __pfx_ksys_read+0x10/0x10 [ 2664.820003][ T8559] ? fput+0x70/0xf0 [ 2664.820016][ T8559] __do_fast_syscall_32+0xe8/0x680 [ 2664.820028][ T8559] do_fast_syscall_32+0x32/0x80 [ 2664.820039][ T8559] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2664.820052][ T8559] RIP: 0023:0xf7f91579 [ 2664.820061][ T8559] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2664.820071][ T8559] RSP: 002b:00000000f5486590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2664.820082][ T8559] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5486620 [ 2664.820088][ T8559] RDX: 000000000000000f RSI: 00000000f7426ff4 RDI: 0000000000000000 [ 2664.820094][ T8559] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2664.820100][ T8559] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2664.820106][ T8559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2664.820127][ T8559] [ 2664.828768][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2664.908558][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2664.916806][T18132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2664.921073][T18132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2664.925256][T18132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2664.929824][T18132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2664.979558][T18132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2664.982219][T18132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2664.996815][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2664.999366][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2665.054797][ T5968] Bluetooth: hci4: command tx timeout [ 2665.373571][ T8566] serio: Serial port ptm1 [ 2665.420682][ T8571] serio: Serial port ptm2 [ 2665.844690][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2666.547990][ T8586] netlink: 'syz.5.9268': attribute type 2 has an invalid length. [ 2666.815568][ T8589] FAULT_INJECTION: forcing a failure. [ 2666.815568][ T8589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2666.819868][ T8589] CPU: 0 UID: 0 PID: 8589 Comm: syz.5.9269 Tainted: G L syzkaller #0 PREEMPT(full) [ 2666.819896][ T8589] Tainted: [L]=SOFTLOCKUP [ 2666.819901][ T8589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2666.819912][ T8589] Call Trace: [ 2666.819920][ T8589] [ 2666.819929][ T8589] dump_stack_lvl+0x16c/0x1f0 [ 2666.819960][ T8589] should_fail_ex+0x512/0x640 [ 2666.819985][ T8589] _copy_to_user+0x32/0xd0 [ 2666.820007][ T8589] simple_read_from_buffer+0xcb/0x170 [ 2666.820032][ T8589] proc_fail_nth_read+0x197/0x240 [ 2666.820061][ T8589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2666.820088][ T8589] ? rw_verify_area+0xcf/0x6c0 [ 2666.820107][ T8589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2666.820131][ T8589] vfs_read+0x1e4/0xcf0 [ 2666.820154][ T8589] ? __pfx___mutex_lock+0x10/0x10 [ 2666.820174][ T8589] ? __pfx_vfs_read+0x10/0x10 [ 2666.820193][ T8589] ? find_held_lock+0x2b/0x80 [ 2666.820224][ T8589] ? __fget_files+0x20e/0x3c0 [ 2666.820256][ T8589] ksys_read+0x12a/0x250 [ 2666.820279][ T8589] ? __pfx_ksys_read+0x10/0x10 [ 2666.820302][ T8589] ? fput+0x70/0xf0 [ 2666.820324][ T8589] __do_fast_syscall_32+0xe8/0x680 [ 2666.820344][ T8589] do_fast_syscall_32+0x32/0x80 [ 2666.820361][ T8589] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2666.820383][ T8589] RIP: 0023:0xf7f92579 [ 2666.820397][ T8589] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2666.820413][ T8589] RSP: 002b:00000000f5486590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2666.820430][ T8589] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5486620 [ 2666.820441][ T8589] RDX: 000000000000000f RSI: 00000000f7426ff4 RDI: 0000000000000000 [ 2666.820451][ T8589] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2666.820460][ T8589] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2666.820469][ T8589] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2666.820494][ T8589] [ 2666.884784][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2666.885348][ T5968] Bluetooth: hci3: command 0x1003 tx timeout [ 2666.888688][T19070] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2667.124858][T19070] Bluetooth: hci4: command tx timeout [ 2667.362131][ T8598] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2667.364238][ T8598] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2667.369347][ T8598] vhci_hcd vhci_hcd.0: Device attached [ 2667.855915][ T8599] vhci_hcd: connection closed [ 2667.856575][ T57] vhci_hcd vhci_hcd.5: stop threads [ 2667.859939][ T57] vhci_hcd vhci_hcd.5: release socket [ 2667.868843][ T57] vhci_hcd vhci_hcd.5: disconnect device [ 2667.924743][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2668.353366][ T6378] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2668.406320][ T8607] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2668.408530][ T8607] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2668.411400][ T8607] vhci_hcd vhci_hcd.0: Device attached [ 2668.684966][ T6526] usb 43-1: new low-speed USB device number 41 using vhci_hcd [ 2668.757677][ T8603] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 2668.927379][ T8603] /dev/sr0: Can't open blockdev [ 2668.964735][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2669.087830][ T8608] vhci_hcd: connection reset by peer [ 2669.090110][ T6777] vhci_hcd vhci_hcd.3: stop threads [ 2669.092414][ T6777] vhci_hcd vhci_hcd.3: release socket [ 2669.095011][ T6777] vhci_hcd vhci_hcd.3: disconnect device [ 2669.204973][T19070] Bluetooth: hci4: command tx timeout [ 2670.014776][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2670.109887][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9278'. [ 2670.113528][ T8631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9278'. [ 2670.135959][ T8631] ata1.00: invalid cdb length 6 [ 2670.349821][ T8633] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2670.351912][ T8633] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2670.354478][ T8633] vhci_hcd vhci_hcd.0: Device attached [ 2670.393187][ T8633] random: crng reseeded on system resumption [ 2670.399518][ T8633] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2670.491382][ T8643] sch_fq: defrate 0 ignored. [ 2670.598842][ T8636] vhci_hcd: connection closed [ 2670.605970][T16336] vhci_hcd vhci_hcd.4: stop threads [ 2670.611752][T16336] vhci_hcd vhci_hcd.4: release socket [ 2670.614580][T16336] vhci_hcd vhci_hcd.4: disconnect device [ 2670.737228][ T8645] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 2670.740060][ T8645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2670.750601][ T8645] vhci_hcd vhci_hcd.0: Device attached [ 2671.035580][ T8646] vhci_hcd: connection closed [ 2671.035856][T16336] vhci_hcd vhci_hcd.3: stop threads [ 2671.039502][T16336] vhci_hcd vhci_hcd.3: release socket [ 2671.041310][T16336] vhci_hcd vhci_hcd.3: disconnect device [ 2671.054781][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2671.284818][T19070] Bluetooth: hci4: command tx timeout [ 2672.084795][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2672.711730][ T8658] vhci_hcd vhci_hcd.0: port 0 already used [ 2672.727804][ T8658] random: crng reseeded on system resumption [ 2672.737132][T18132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2672.741014][T18132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2672.829586][ T8676] netlink: 'syz.4.9289': attribute type 10 has an invalid length. [ 2672.896308][ T8676] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2673.124845][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2673.394950][ T8681] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 2673.397722][ T8681] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2673.401022][ T8681] vhci_hcd vhci_hcd.0: Device attached [ 2673.592948][ T8682] vhci_hcd: connection closed [ 2673.593354][T18132] vhci_hcd vhci_hcd.2: stop threads [ 2673.597334][T18132] vhci_hcd vhci_hcd.2: release socket [ 2673.599505][T18132] vhci_hcd vhci_hcd.2: disconnect device [ 2673.634877][ T2724] usb 41-1: new low-speed USB device number 23 using vhci_hcd [ 2673.638097][ T2724] usb 41-1: enqueue for inactive port 0 [ 2673.835073][ T6526] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2673.930033][ T8698] vivid-007: disconnect [ 2673.982230][ T8698] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9293'. [ 2674.164818][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2674.808431][ T8692] vivid-007: reconnect [ 2674.862430][ T8711] vivid-007: disconnect [ 2674.874369][ T8711] netlink: 168 bytes leftover after parsing attributes in process `syz.5.9297'. [ 2675.204882][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2675.480184][ T2724] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 2675.712963][ T41] kauditd_printk_skb: 28 callbacks suppressed [ 2675.713125][ T41] audit: type=1326 audit(2930.484:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.2.9299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2675.723895][ T8707] vivid-007: reconnect [ 2675.729387][ T8724] ªªªªª»: renamed from hsr0 (while UP) [ 2675.734102][ T41] audit: type=1326 audit(2930.484:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8715 comm="syz.2.9299" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 2675.828637][ T8724] tipc: Can't bind to reserved service type 1 [ 2675.845373][ T8729] bridge0: port 3(vlan0) entered blocking state [ 2675.847467][ T8729] bridge0: port 3(vlan0) entered disabled state [ 2675.849534][ T8729] vlan0: entered allmulticast mode [ 2675.851227][ T8729] bridge0: entered allmulticast mode [ 2675.854019][ T8729] vlan0: left allmulticast mode [ 2675.856103][ T8729] bridge0: left allmulticast mode [ 2676.111769][ T8736] vivid-007: disconnect [ 2676.215035][ T8736] netlink: 168 bytes leftover after parsing attributes in process `syz.5.9305'. [ 2676.254832][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2676.689727][ T5968] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2676.698186][ T5968] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2676.702455][ T5968] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2676.707471][ T5968] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2676.711692][ T5968] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2676.753139][ T8749] lo speed is unknown, defaulting to 1000 [ 2676.756867][ T8749] lo speed is unknown, defaulting to 1000 [ 2676.879488][ T8730] vivid-007: reconnect [ 2676.899806][ T8749] chnl_net:caif_netlink_parms(): no params data found [ 2677.033008][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2677.069484][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2677.206707][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state [ 2677.209603][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 2677.212593][ T8749] bridge_slave_0: entered allmulticast mode [ 2677.216371][ T8749] bridge_slave_0: entered promiscuous mode [ 2677.220570][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state [ 2677.223366][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 2677.226376][ T8749] bridge_slave_1: entered allmulticast mode [ 2677.229871][ T8749] bridge_slave_1: entered promiscuous mode [ 2677.257349][ T8749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2677.263963][ T8749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2677.284919][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2677.306536][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2677.311072][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2677.349436][ T8749] team0: Port device team_slave_0 added [ 2677.354458][ T8749] team0: Port device team_slave_1 added [ 2677.380102][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2677.382915][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2677.394871][ T8749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2677.417398][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2677.421830][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2677.457688][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2677.460735][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2677.472044][ T8749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2677.512348][ T8749] hsr_slave_0: entered promiscuous mode [ 2677.521451][ T8749] hsr_slave_1: entered promiscuous mode [ 2677.524476][ T8749] debugfs: 'hsr0' already exists in 'hsr' [ 2677.526811][ T8749] Cannot create hsr debugfs directory [ 2677.534661][ T57] bridge0: port 3(netdevsim0) entered disabled state [ 2677.553319][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 2677.561822][ T57] bridge0: port 3(netdevsim0) entered disabled state [ 2677.625959][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2677.629143][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2677.769857][ T8771] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9314'. [ 2677.869900][ T57] bridge_slave_1: left allmulticast mode [ 2677.872315][ T57] bridge_slave_1: left promiscuous mode [ 2677.877691][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 2677.885916][ T57] bridge_slave_0: left allmulticast mode [ 2677.888432][ T57] bridge_slave_0: left promiscuous mode [ 2677.894197][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 2678.334897][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2678.359267][ T57] bond1 (unregistering): (slave geneve2): Releasing active interface [ 2678.496969][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2678.501712][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2678.506301][ T57] bond0 (unregistering): Released all slaves [ 2678.511046][ T57] bond1 (unregistering): Released all slaves [ 2678.662942][ T57] bond2 (unregistering): Released all slaves [ 2678.725004][T19070] Bluetooth: hci3: command tx timeout [ 2678.835150][ T57] tipc: Left network mode [ 2678.851731][ T8787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2678.857515][ T8787] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9319'. [ 2679.073045][ T8749] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2679.099538][ T8749] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2679.106106][ T8749] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2679.112611][ T8749] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2679.299662][ T8749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2679.332719][ T8749] 8021q: adding VLAN 0 to HW filter on device team0 [ 2679.351028][ T8749] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2679.354283][ T8749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2679.360583][T16130] bridge0: port 1(bridge_slave_0) entered blocking state [ 2679.362953][T16130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2679.366550][T16130] bridge0: port 2(bridge_slave_1) entered blocking state [ 2679.368949][T16130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2679.374888][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2679.483756][ T8749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2679.529757][ T8749] veth0_vlan: entered promiscuous mode [ 2679.544715][ T8749] veth1_vlan: entered promiscuous mode [ 2679.560920][ T8749] veth0_macvtap: entered promiscuous mode [ 2679.565353][ T8749] veth1_macvtap: entered promiscuous mode [ 2679.577732][ T8749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2679.588031][ T8749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2679.618314][T18132] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2679.621986][T18132] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2679.647477][T18132] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2679.651153][T18132] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2679.745851][T16130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2679.748919][T16130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2679.775447][T16130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2679.779480][T16130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2679.888516][ T8817] bridge0: entered promiscuous mode [ 2680.102206][ T41] audit: type=1326 audit(2934.874:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.5.9326" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f92579 code=0x0 [ 2680.124884][ T57] dummy0: left promiscuous mode [ 2680.135656][ T57] team0: left promiscuous mode [ 2680.137388][ T57] team_slave_0: left promiscuous mode [ 2680.139641][ T57] team_slave_1: left promiscuous mode [ 2680.145268][ T57] hsr_slave_0: left promiscuous mode [ 2680.147563][ T57] hsr_slave_1: left promiscuous mode [ 2680.149871][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2680.152732][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2680.156761][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2680.159624][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2680.166091][ T57] veth1_macvtap: left promiscuous mode [ 2680.168132][ T57] veth0_macvtap: left promiscuous mode [ 2680.170904][ T57] veth1_vlan: left promiscuous mode [ 2680.173356][ T57] veth0_vlan: left promiscuous mode [ 2680.208094][ T8819] vivid-007: disconnect [ 2680.255860][ T8819] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9325'. [ 2680.407441][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2680.788716][ T57] team0 (unregistering): Port device team_slave_1 removed [ 2680.809433][T19070] Bluetooth: hci3: command tx timeout [ 2680.832104][ T8818] vivid-007: reconnect [ 2680.837318][ T57] team0 (unregistering): Port device team_slave_0 removed [ 2681.454668][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2681.637949][T16130] ------------[ cut here ]------------ [ 2681.640884][T16130] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 2681.646493][T16130] WARNING: net/mac80211/tx.c:751 at ieee80211_tx_h_rate_ctrl+0x139c/0x1ad0, CPU#2: kworker/u32:6/16130 [ 2681.650981][T16130] Modules linked in: [ 2681.653226][T16130] CPU: 2 UID: 0 PID: 16130 Comm: kworker/u32:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 2681.657634][T16130] Tainted: [L]=SOFTLOCKUP [ 2681.659363][T16130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2681.663406][T16130] Workqueue: events_unbound cfg80211_wiphy_work [ 2681.665978][T16130] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x13ac/0x1ad0 [ 2681.668623][T16130] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 60 06 00 00 48 8d 3d 44 d2 a6 05 49 8b 77 68 89 d9 48 89 ea 48 81 c6 48 0a 00 00 <67> 48 0f b9 3a bb 01 00 00 00 e9 94 f8 ff ff e8 90 45 cc f6 e8 4b [ 2681.676382][T16130] RSP: 0018:ffffc90006be7588 EFLAGS: 00010282 [ 2681.678864][T16130] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: 0000000000000005 [ 2681.682035][T16130] RDX: ffff88804ba5edc4 RSI: ffff88806e2897c8 RDI: ffffffff9098ea90 [ 2681.685305][T16130] RBP: ffff88804ba5edc4 R08: 0000000000000005 R09: 0000000000000000 [ 2681.688495][T16130] R10: 0000000000000000 R11: ffff888027faaff0 R12: ffff88806c6fc000 [ 2681.691680][T16130] R13: 0000000000000000 R14: ffff8880252f0cbd R15: ffffc90006be77e8 [ 2681.694962][T16130] FS: 0000000000000000(0000) GS:ffff8880978f9000(0000) knlGS:0000000000000000 [ 2681.698527][T16130] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2681.700886][T16130] CR2: 00007f4a318e5e9c CR3: 0000000078e5d000 CR4: 0000000000352ef0 [ 2681.703474][T16130] Call Trace: [ 2681.704604][T16130] [ 2681.705725][T16130] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 2681.708012][T16130] ? find_held_lock+0x2b/0x80 [ 2681.709564][T16130] invoke_tx_handlers_late+0x1172/0x27d0 [ 2681.711395][T16130] ? invoke_tx_handlers_early+0x669/0x28a0 [ 2681.713378][T16130] ieee80211_tx+0x304/0x460 [ 2681.715024][T16130] ? __pfx_ieee80211_tx+0x10/0x10 [ 2681.716674][T16130] ? __lock_acquire+0x436/0x2890 [ 2681.718360][T16130] ? ieee80211_skb_resize+0x22a/0x630 [ 2681.720153][T16130] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 2681.721872][T16130] ieee80211_xmit+0x30f/0x3e0 [ 2681.723368][T16130] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 2681.725443][T16130] ieee80211_scan_state_send_probe+0x34c/0xad0 [ 2681.727593][T16130] ieee80211_scan_work+0x772/0x2080 [ 2681.729322][T16130] ? __queue_work+0x43b/0x10e0 [ 2681.730932][T16130] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 2681.732765][T16130] cfg80211_wiphy_work+0x3fb/0x560 [ 2681.734439][T16130] process_one_work+0x9ba/0x1b20 [ 2681.736367][T16130] ? __pfx_process_one_work+0x10/0x10 [ 2681.738310][T16130] ? assign_work+0x1a0/0x250 [ 2681.740029][T16130] worker_thread+0x6c8/0xf10 [ 2681.741547][T16130] ? __pfx_worker_thread+0x10/0x10 [ 2681.743203][T16130] kthread+0x3c5/0x780 [ 2681.744537][T16130] ? __pfx_kthread+0x10/0x10 [ 2681.746302][T16130] ? rcu_is_watching+0x12/0xc0 [ 2681.747918][T16130] ? __pfx_kthread+0x10/0x10 [ 2681.749471][T16130] ret_from_fork+0x983/0xb10 [ 2681.750924][T16130] ? __pfx_ret_from_fork+0x10/0x10 [ 2681.752510][T16130] ? __switch_to+0x7af/0x10d0 [ 2681.754024][T16130] ? __pfx_kthread+0x10/0x10 [ 2681.755754][T16130] ret_from_fork_asm+0x1a/0x30 [ 2681.757441][T16130] [ 2681.758455][T16130] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2681.760806][T16130] CPU: 2 UID: 0 PID: 16130 Comm: kworker/u32:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 2681.764266][T16130] Tainted: [L]=SOFTLOCKUP [ 2681.765695][T16130] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2681.769473][T16130] Workqueue: events_unbound cfg80211_wiphy_work [ 2681.771535][T16130] Call Trace: [ 2681.772730][T16130] [ 2681.773713][T16130] dump_stack_lvl+0x3d/0x1f0 [ 2681.775295][T16130] vpanic+0x640/0x6f0 [ 2681.776602][T16130] ? ieee80211_tx_h_rate_ctrl+0x139c/0x1ad0 [ 2681.778596][T16130] panic+0xca/0xd0 [ 2681.780146][T16130] ? __pfx_panic+0x10/0x10 [ 2681.781945][T16130] ? check_panic_on_warn+0x1f/0xb0 [ 2681.784184][T16130] check_panic_on_warn+0xab/0xb0 [ 2681.786174][T16130] __warn+0x108/0x3c0 [ 2681.787821][T16130] __report_bug+0x2a0/0x520 [ 2681.789643][T16130] ? ieee80211_tx_h_rate_ctrl+0x139c/0x1ad0 [ 2681.792024][T16130] ? __pfx___report_bug+0x10/0x10 [ 2681.794017][T16130] ? ieee80211_probereq_get+0x6a/0x290 [ 2681.796158][T16130] ? ieee80211_build_probe_req+0x1eb/0x430 [ 2681.798436][T16130] ? ieee80211_scan_state_send_probe+0x49e/0xad0 [ 2681.800969][T16130] report_bug_entry+0xe1/0x290 [ 2681.802884][T16130] ? ieee80211_tx_h_rate_ctrl+0x13ac/0x1ad0 [ 2681.805215][T16130] handle_bug+0x18a/0x260 [ 2681.806945][T16130] exc_invalid_op+0x17/0x50 [ 2681.808482][T16130] asm_exc_invalid_op+0x1a/0x20 [ 2681.810168][T16130] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x13ac/0x1ad0 [ 2681.812718][T16130] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 60 06 00 00 48 8d 3d 44 d2 a6 05 49 8b 77 68 89 d9 48 89 ea 48 81 c6 48 0a 00 00 <67> 48 0f b9 3a bb 01 00 00 00 e9 94 f8 ff ff e8 90 45 cc f6 e8 4b [ 2681.819432][T16130] RSP: 0018:ffffc90006be7588 EFLAGS: 00010282 [ 2681.821578][T16130] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: 0000000000000005 [ 2681.824456][T16130] RDX: ffff88804ba5edc4 RSI: ffff88806e2897c8 RDI: ffffffff9098ea90 [ 2681.827312][T16130] RBP: ffff88804ba5edc4 R08: 0000000000000005 R09: 0000000000000000 [ 2681.830137][T16130] R10: 0000000000000000 R11: ffff888027faaff0 R12: ffff88806c6fc000 [ 2681.832987][T16130] R13: 0000000000000000 R14: ffff8880252f0cbd R15: ffffc90006be77e8 [ 2681.835871][T16130] ? ieee80211_tx_h_rate_ctrl+0x1378/0x1ad0 [ 2681.838025][T16130] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 2681.840239][T16130] ? find_held_lock+0x2b/0x80 [ 2681.841957][T16130] invoke_tx_handlers_late+0x1172/0x27d0 [ 2681.844010][T16130] ? invoke_tx_handlers_early+0x669/0x28a0 [ 2681.846129][T16130] ieee80211_tx+0x304/0x460 [ 2681.847804][T16130] ? __pfx_ieee80211_tx+0x10/0x10 [ 2681.849641][T16130] ? __lock_acquire+0x436/0x2890 [ 2681.851295][T16130] ? ieee80211_skb_resize+0x22a/0x630 [ 2681.853214][T16130] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 2681.855175][T16130] ieee80211_xmit+0x30f/0x3e0 [ 2681.856826][T16130] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 2681.858953][T16130] ieee80211_scan_state_send_probe+0x34c/0xad0 [ 2681.861188][T16130] ieee80211_scan_work+0x772/0x2080 [ 2681.863086][T16130] ? __queue_work+0x43b/0x10e0 [ 2681.864829][T16130] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 2681.866876][T16130] cfg80211_wiphy_work+0x3fb/0x560 [ 2681.868773][T16130] process_one_work+0x9ba/0x1b20 [ 2681.870580][T16130] ? __pfx_process_one_work+0x10/0x10 [ 2681.872539][T16130] ? assign_work+0x1a0/0x250 [ 2681.874226][T16130] worker_thread+0x6c8/0xf10 [ 2681.875949][T16130] ? __pfx_worker_thread+0x10/0x10 [ 2681.877800][T16130] kthread+0x3c5/0x780 [ 2681.879294][T16130] ? __pfx_kthread+0x10/0x10 [ 2681.880968][T16130] ? rcu_is_watching+0x12/0xc0 [ 2681.882715][T16130] ? __pfx_kthread+0x10/0x10 [ 2681.884391][T16130] ret_from_fork+0x983/0xb10 [ 2681.886116][T16130] ? __pfx_ret_from_fork+0x10/0x10 [ 2681.888020][T16130] ? __switch_to+0x7af/0x10d0 [ 2681.889735][T16130] ? __pfx_kthread+0x10/0x10 [ 2681.891403][T16130] ret_from_fork_asm+0x1a/0x30 [ 2681.893113][T16130] [ 2681.894976][T16130] Kernel Offset: disabled [ 2681.896438][T16130] Rebooting in 86400 seconds..