last executing test programs: 16.603771941s ago: executing program 2 (id=215): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='veth0_to_bond\x00') 16.428522768s ago: executing program 2 (id=217): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xd}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x0, 0x4}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xfffffffffffffed3}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2004001, &(0x7f0000000300)={0xa, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100000000000010000000000000002000000000000000"], 0x24, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) 12.116072125s ago: executing program 2 (id=233): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x6, 0x20000000, {0x5, 0x2, 0x1000b, 0x100000a, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x8000, 0x2000002, 0x0, 0x0, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004f00)={&(0x7f0000000540)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)=[{&(0x7f00000006c0)={0xc8, 0x42, 0x200, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x13b, 0x0, 0x0, @u32=0x1000}, @typed={0x8, 0x113, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x9a}, @generic="17f4ba62cf83ba6209b62f31f785c331cfb56f3866cf98bc61d490677a65accde48aca653b3aa71d3dab53a1bacfe0bda0ce0b6a40217b7540102268fd6cad341397b48f0d619fb9686994ef488a7991afcabd", @nested={0x4d, 0x61, 0x0, 0x1, [@generic="dd89ce5fa194c3fe596536e465c9f5f7bb740b1e87af2793ee1963b4dbfbbb9a36493799f6aeb7af25d074a0a56835c69ded61cb1845b0c9a8ae15a8f3", @typed={0x8, 0xbf, 0x0, 0x0, @uid}, @nested={0x4, 0xc3}]}]}, 0xc8}, {&(0x7f0000000940)={0x268, 0x3d, 0x300, 0x70bd28, 0x25dfdbff, "", [@nested={0x12e, 0x13f, 0x0, 0x1, [@typed={0x8, 0xa6, 0x0, 0x0, @uid}, @generic="3a31243aaa61be6eb0d0849635cad3c1e36d651e82d90ea1e392d6d31047f3e42ed556b979a05529d5888be4d2b7d81ffa0a92ff0941259fa34a80f43c377db87b3b948fd622269a92a71ca94dd57b14a190b3a8cdc51c0a17edd429689e725ec515d670509e4db47cdf2ba47962e76a042ae8f51a1e2fa807539c04071ffa7a2252d657944debf1e5a05242d88d382820d937b0dd5f7fb1d8edae4712d9c8098f21f2", @generic="d0e259cb51ff0260a8ef0e738049b126a388b1b0d64b34e03e64cf756284341aefbf03bb943850e0615ba419b1e59d01c405372922ad786913e5f3a027db31f6ac76833aa8e23f39b3154a4013bff29a2db54c79a1a250335660d18d5ea3d7327e2664a55560762d33a4808787fe3d72461aa5", @typed={0xc, 0x2f, 0x0, 0x0, @u64=0x7fff}]}, @generic="7dea362a49e01abbd6a36d16ae37f213c618483d52abfcf57f61ea4effa7779e33f17ca5b13f1f9248c6bab35ddce3ddb45af91c3dbc0ea683a99d9ee6efa14b17220464104a60264e459b6981021b99a740df7310eb54130dd14994bf7b2a1902d27a6a45aeb0a0cde05ced7921c3d11fce91e7d6aed31f57402274e5ff3b9322d5d2bc62a68879d5fbede6bf7f8dd5bab2827ab76218d2649b658320c249e56ced24f6d5f69e4adce6003af5e608b4969d32ba3ea30049dd5f02d37ead95964730", @typed={0x61, 0x8, 0x0, 0x0, @binary="3b2f62c9d9756a277276b853d71913895d73baf68271fa93ba4c34ba9dd454ef604cb5493e743bf5b87ad9a87bf288c772226411b1e069acccb3bb26bc9178abbb2c8ac5a3b10e47c56f017bac4057991d3815bcaa83770108e9921911"}]}, 0x268}], 0x2, &(0x7f0000004e80)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [r0, r0, r0]}}], 0x48, 0xc001}, 0x4) r1 = openat$ttyS3(0xffffff9c, 0x0, 0x131040, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000300)=""/120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r5}, 0x38) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SG_IO(r4, 0x2285, &(0x7f0000002040)={0x0, 0xfffffffffffffffb, 0x4a, 0x5, @scatter={0x8, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)=""/175, 0xaf}, {&(0x7f0000000040)=""/39, 0x27}, {&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/104, 0x68}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/141, 0x8d}, {&(0x7f0000001cc0)=""/216, 0xd8}, {&(0x7f0000001dc0)=""/203, 0xcb}]}, &(0x7f0000001ec0)="b5db4bc918cd6496fe467e404baa0ae43ec0af6341e4212224a5003e1a6a10af6260d10da0a8467b9261736b238ef4daf08ff013d27e33ce89b86a604a9772d6f88f2894173b9dbb5d2e", &(0x7f0000001f40)=""/174, 0x8001, 0x1002f, 0x2, &(0x7f0000002000)}) r7 = dup(r6) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) mount(&(0x7f00000001c0)=@sr0, &(0x7f00000007c0)='./cgroup\x00', &(0x7f0000000780)='gfs2\x00', 0x221000d, 0x0) 10.543643163s ago: executing program 2 (id=241): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000003ec0)=ANY=[@ANYBLOB="424bdf10537b7ff30722570ae65d01c415e4765b6bf75edf68630a00000053edf17d43dd49f810d7adc7e704eb83cfeb5b000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000004180)=[{{&(0x7f0000000500)=@nl=@proc, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000580)=""/78, 0x4e}, {&(0x7f0000000600)=""/146, 0x92}, {&(0x7f0000000340)=""/1, 0x1}, {&(0x7f00000006c0)=""/71, 0x47}, {&(0x7f0000000740)=""/247, 0xf7}, {0x0}, {&(0x7f0000000900)=""/123, 0x7b}, {&(0x7f0000000980)=""/215, 0xd7}, {&(0x7f0000000a80)=""/176, 0xb0}], 0x9, &(0x7f0000000bc0)=""/29, 0x1d}, 0x2}, {{&(0x7f0000000c00)=@hci, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000c80)=""/157, 0x9d}, {&(0x7f0000000d40)=""/161, 0xa1}, {&(0x7f0000000e00)=""/235, 0xeb}, {&(0x7f0000000f00)=""/94, 0x5e}, {&(0x7f0000000f80)=""/125, 0x7d}, {&(0x7f0000001000)=""/113, 0x71}, {&(0x7f0000001080)=""/171, 0xab}, {&(0x7f0000001140)=""/105, 0x69}, {&(0x7f00000011c0)=""/237, 0xed}], 0x9}, 0x4}, {{&(0x7f0000001340)=@caif=@rfm, 0x80, &(0x7f0000001400)=[{&(0x7f00000013c0)=""/59, 0x3b}], 0x1}, 0x8}, {{&(0x7f0000001440)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002600)=[{&(0x7f00000014c0)=""/92, 0x5c}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/158, 0x9e}], 0x3, &(0x7f0000002640)=""/253, 0xfd}, 0x5}, {{&(0x7f0000002740)=@x25, 0x80, &(0x7f0000002940)=[{&(0x7f00000027c0)=""/237, 0xed}, {&(0x7f00000028c0)=""/75, 0x4b}], 0x2, &(0x7f0000002980)=""/108, 0x6c}, 0x204}, {{&(0x7f0000002a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002a80)=""/60, 0x3c}, {&(0x7f0000002ac0)=""/231, 0xe7}], 0x2, &(0x7f0000002c00)=""/155, 0x9b}, 0xd}, {{&(0x7f0000002cc0)=@generic, 0x80, &(0x7f0000003d40), 0x0, &(0x7f0000003d80)=""/182, 0xb6}}, {{&(0x7f0000003e40)=@rc, 0x80, &(0x7f0000004040)=[{&(0x7f0000003ec0)}, {&(0x7f0000003f00)=""/28, 0x1c}, {&(0x7f0000003f40)=""/202, 0xca}], 0x3, &(0x7f0000004080)=""/226, 0xe2}, 0x7}], 0x8, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) socketpair(0x10, 0x0, 0xf3af, &(0x7f0000000300)) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x4, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {}, 0x1}, 0x18) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000040)=""/185) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)=ANY=[@ANYBLOB="24000000010201010062b2a396ee3ab35784a3c32abe90e133000000000000000a00"], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 10.38223729s ago: executing program 1 (id=243): socket(0x2, 0x80805, 0x0) unshare(0x20000400) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) quotactl$Q_SETQUOTA(0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50f10, 0x51a23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0x9, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x40}}, 0x20040040) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0xd) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x2004c084) 10.15525087s ago: executing program 3 (id=244): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0}) r1 = syz_open_dev$swradio(&(0x7f0000000a00), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000a40)={0x0, 0x5, 0x3, 0x40}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capget(0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r5, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 8.088997149s ago: executing program 3 (id=247): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c82010000c000100240f08fd"], 0x15) 8.004665973s ago: executing program 3 (id=248): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff2600"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket(0x1a, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x6, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x1, {0xffffffffffffffff, 0x6, 0x8, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fa, 0x7, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xa}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f04) 6.984564887s ago: executing program 2 (id=254): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) 6.91916179s ago: executing program 2 (id=256): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) 6.780886596s ago: executing program 0 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) io_setup(0x13, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000000)) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000880)}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x24}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{}, {0x10}, {0x2}, {0x40, 0x101}, {0x0, 0xffffffff}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioprio_get$pid(0x3, 0x0) r4 = getpgid(0xffffffffffffffff) socket$kcm(0x21, 0x2, 0x2) gettid() syz_clone3(&(0x7f00000011c0)={0x14201000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f0000000100), {0x38}, &(0x7f0000000140)=""/46, 0x2e, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=[r4, r4, r4], 0x3}, 0x58) syz_pidfd_open(r5, 0x0) 5.860554925s ago: executing program 4 (id=260): socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r7, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000300), r4) sendmsg$SMC_PNETID_DEL(r8, 0x0, 0x20004080) 4.200467647s ago: executing program 0 (id=261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2], 0x44}}, 0x28000) 4.199934227s ago: executing program 4 (id=262): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = inotify_init() syz_open_pts(0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x5, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f00000008c0), 0x0) r6 = inotify_init1(0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0x4) io_setup(0x7, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r7 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r8, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r7, 0x0) 4.162746769s ago: executing program 3 (id=263): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4.052627444s ago: executing program 1 (id=264): socket$inet6(0xa, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) read$FUSE(r0, &(0x7f0000008280)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000003c0)=0x7, 0x4) write$eventfd(r0, &(0x7f0000000040)=0x9, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x0, 0xca79, 'syz1\x00'}, 0x0, [0x400, 0xffffffffffffffff, 0x7ffc, 0x5, 0xd, 0x100000000, 0x0, 0xde, 0x7, 0x7, 0x200000000c7, 0x8007f, 0x1, 0x0, 0x8000000, 0x0, 0x8, 0x1, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x3, 0x100000001, 0x40, 0x2, 0x10000004, 0x4, 0x4, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x3, 0x20, 0xe8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x9, 0x8, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x4, 0x800000, 0x7, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x5, 0x404, 0xb4e, 0xffffffff, 0x9, 0xfffffffc, 0x1, 0x0, 0x0, 0xd87, 0x0, 0x40, 0x0, 0x0, 0x200000000000000, 0x0, 0x4, 0x5, 0x0, 0x1, 0x200000, 0x4b7, 0xe9, 0x6, 0x5, 0x0, 0x0, 0x6, 0xbb, 0x200000, 0x0, 0x0, 0xfffffffb, 0x7, 0x7ffffffd, 0x3, 0x0, 0xffffffffffff2328, 0x1, 0x400003, 0x3, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0xb, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$afs(0x0, 0x0, 0x0, 0x1f, &(0x7f0000000400)={[{@dyn}]}) mount$9p_xen(0x0, 0x0, 0x0, 0x345065, 0x0) getpid() 4.034202935s ago: executing program 3 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0xd99) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004a00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_open_procfs(r4, &(0x7f0000000100)='syscall\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x20}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x98, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_AF_SPEC={0x70, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1f, 0x0, 0x0, 0xfffffff8}]}}, @AF_INET6={0x3c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xff}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xc}]}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}]}, @AF_BRIDGE={0x4}]}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x98}}, 0x0) 4.012937996s ago: executing program 0 (id=266): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x10, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f00000000c0)={0x2}) 3.90467578s ago: executing program 1 (id=267): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0xaa, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, 0x0) 3.780213816s ago: executing program 1 (id=268): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) write(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) 3.752703477s ago: executing program 0 (id=269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffc, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x40091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) 2.036700281s ago: executing program 4 (id=270): prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x3f2e}, 0x8, 0x0) 1.935170386s ago: executing program 4 (id=271): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xce) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @loopback}, &(0x7f0000000080)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000740)={0x11, @empty, 0x4e23, 0x3, 'fo\x00', 0x22, 0x7fffffff, 0x42}, 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4018004) sendmsg$IPSET_CMD_DESTROY(r1, 0x0, 0x20000010) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = gettid() timer_create(0x3, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8d\x01\x04\x00\x00C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0D\xe4\xcb\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setlease(r4, 0x400, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() getpgrp(r3) 1.214522087s ago: executing program 0 (id=272): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.108643262s ago: executing program 4 (id=273): syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2000000}, 0x64) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 162.234123ms ago: executing program 1 (id=274): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000030527bd70000000020000000000", @ANYRES32=0x0, @ANYBLOB="61d9010000000000340012800b00010067726574617000002400028006000f0080000000080007007f0000010500130001"], 0x54}}, 0x4080) 134.538964ms ago: executing program 3 (id=275): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000040)=0x7, 0x4) 68.444096ms ago: executing program 0 (id=276): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 68.221366ms ago: executing program 1 (id=277): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x7) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[], 0x2a, 0xfffffffffffffffd) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x100009}, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b HID v0.00 Device [syz1] on syz0 [ 67.163823][ T4457] fido_id[4457]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 68.440858][ C1] sched: RT throttling activated [ 69.066276][ T4475] device bridge1 entered promiscuous mode [ 69.179660][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.221369][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.758953][ T4498] binder: 4497:4498 ioctl c00c6211 200000000a40 returned -22 [ 69.890600][ T4480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.091142][ T4517] netlink: 36 bytes leftover after parsing attributes in process `syz.4.49'. [ 71.301660][ T4517] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 71.351826][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.358455][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.461128][ T4224] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 73.061173][ T4224] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.102142][ T4224] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 73.127827][ T4224] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 73.146919][ T4224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.220987][ T4288] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.232607][ T4224] usb 1-1: config 0 descriptor?? [ 73.266823][ T4224] usb 1-1: can't set config #0, error -71 [ 73.329370][ T4224] usb 1-1: USB disconnect, device number 3 [ 73.521300][ T4288] usb 2-1: Using ep0 maxpacket: 32 [ 73.641491][ T4288] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 73.660148][ T4288] usb 2-1: config 0 has no interface number 0 [ 73.844280][ T4288] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 73.865835][ T4288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.894053][ T4288] usb 2-1: Product: syz [ 73.908716][ T4288] usb 2-1: Manufacturer: syz [ 73.918985][ T4288] usb 2-1: SerialNumber: syz [ 73.927925][ T4288] usb 2-1: config 0 descriptor?? [ 73.983133][ T4288] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 74.023369][ T4288] usb 2-1: selecting invalid altsetting 1 [ 74.039593][ T4288] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 74.068437][ T4288] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 74.099087][ T4288] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 74.112614][ T4288] usb 2-1: media controller created [ 74.138754][ T4288] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 74.203033][ T4561] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 74.239980][ T4564] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 74.273424][ T4563] device macvlan2 entered promiscuous mode [ 74.293327][ T4561] overlayfs: failed to set xattr on upper [ 74.332309][ T4287] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.365816][ T4561] overlayfs: ...falling back to index=off,metacopy=off. [ 74.406626][ T4561] overlayfs: failed to resolve './file0': -2 [ 74.580925][ T4287] usb 4-1: Using ep0 maxpacket: 16 [ 74.701803][ T4287] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.730582][ T4287] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 74.931114][ T4287] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 74.950101][ T4287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.983433][ T4287] usb 4-1: Product: syz [ 74.996402][ T4287] usb 4-1: Manufacturer: syz [ 75.008503][ T4287] usb 4-1: SerialNumber: syz [ 75.025531][ T4287] usb 4-1: config 0 descriptor?? [ 75.059352][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 75.178040][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.251812][ T4288] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 75.272980][ T4288] zl10353_read_register: readreg error (reg=127, ret==-110) [ 75.288043][ T4224] usb 4-1: USB disconnect, device number 2 [ 75.374168][ T4572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.595957][ T4580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'. [ 75.627604][ T4578] device syzkaller0 entered promiscuous mode [ 75.997231][ T23] usb 2-1: USB disconnect, device number 2 [ 76.454350][ T1111] cfg80211: failed to load regulatory.db [ 77.148218][ T4605] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 77.280984][ T23] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 77.671177][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.716550][ T23] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 77.981195][ T23] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 78.010422][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.050964][ T23] usb 2-1: Product: syz [ 78.056344][ T23] usb 2-1: Manufacturer: syz [ 78.090948][ T23] usb 2-1: SerialNumber: syz [ 78.138428][ T23] usb 2-1: config 0 descriptor?? [ 78.202087][ T4599] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.328342][ T4618] syz.4.82 (4618): /proc/4612/oom_adj is deprecated, please use /proc/4612/oom_score_adj instead. [ 79.070952][ T3520] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.441665][ T3520] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 79.471179][ T3520] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 79.520962][ T3520] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.751163][ T3520] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 79.769264][ T3520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 79.805064][ T3520] usb 1-1: Product: syz [ 79.815289][ T3520] usb 1-1: Manufacturer: syz [ 79.827346][ T3520] usb 1-1: SerialNumber: syz [ 80.619018][ T3520] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 80.972714][ T23] usb 2-1: USB disconnect, device number 3 [ 82.102842][ T4673] device vlan1 entered promiscuous mode [ 82.402449][ T3520] usb 1-1: USB disconnect, device number 4 [ 82.469428][ T3520] usblp0: removed [ 82.589586][ T4673] syz.2.96 (4673) used greatest stack depth: 16736 bytes left [ 82.752259][ T4677] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.862155][ T3520] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.882135][ T3520] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.108559][ T4693] fido_id[4693]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.842474][ T4706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.107'. [ 84.867970][ T4707] netlink: 56 bytes leftover after parsing attributes in process `syz.1.106'. [ 85.035318][ T4710] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 85.134737][ T3520] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.168828][ T3520] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 85.358365][ T4723] fido_id[4723]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.241306][ T4751] 9pnet_virtio: no channels available for device syz [ 87.519855][ T4767] TCP: MD5 Hash failed for (0.0.0.0, 0)->(224.0.0.1, 20002) L3 index 0 [ 88.766905][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.865053][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.897195][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.223468][ T4780] lo speed is unknown, defaulting to 1000 [ 91.711157][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.574764][ T4830] netlink: 'syz.1.141': attribute type 4 has an invalid length. [ 93.035214][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.042682][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.052179][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.059560][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.067169][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.074592][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.160096][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.191259][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.210984][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.391374][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 93.438450][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 93.476578][ T7] usb 4-1: Product: syz [ 93.497620][ T7] usb 4-1: Manufacturer: syz [ 93.521040][ T7] usb 4-1: SerialNumber: syz [ 93.827921][ T7] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 93.910511][ T4174] usb 4-1: USB disconnect, device number 3 [ 93.942253][ T4174] usblp0: removed [ 94.399460][ T4856] ======================================================= [ 94.399460][ T4856] WARNING: The mand mount option has been deprecated and [ 94.399460][ T4856] and is ignored by this kernel. Remove the mand [ 94.399460][ T4856] option from the mount to silence this warning. [ 94.399460][ T4856] ======================================================= [ 95.542326][ T4888] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 95.840257][ T4888] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.943686][ T4888] bond0: (slave team0): Enslaving as an active interface with an up link [ 95.970087][ T4897] netlink: 56 bytes leftover after parsing attributes in process `syz.4.161'. [ 96.042541][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.096300][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.161880][ T4890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.426182][ T4901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.163'. [ 96.506316][ T4896] Zero length message leads to an empty skb [ 96.924257][ T4910] netlink: 56 bytes leftover after parsing attributes in process `syz.2.165'. [ 97.479339][ T4917] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 98.586174][ T4926] fuse: Bad value for 'fd' [ 98.872098][ T1108] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.035518][ T4930] lo speed is unknown, defaulting to 1000 [ 99.121073][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 99.241242][ T1108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.270961][ T1108] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 99.290350][ T1108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 99.331001][ T1108] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 99.384617][ T1108] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 99.430552][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.492604][ T1108] hub 3-1:1.0: bad descriptor, ignoring hub [ 99.498548][ T1108] hub: probe of 3-1:1.0 failed with error -5 [ 99.901811][ T4926] overlayfs: overlapping lowerdir path [ 100.756814][ T1108] cdc_wdm 3-1:1.0: skipping garbage [ 100.792980][ T1108] cdc_wdm 3-1:1.0: skipping garbage [ 100.858488][ T1108] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 102.481949][ T1108] cdc_wdm 3-1:1.0: Unknown control protocol [ 102.660001][ T1108] usb 3-1: USB disconnect, device number 2 [ 102.807171][ T4957] netlink: 116 bytes leftover after parsing attributes in process `syz.1.177'. [ 105.529355][ T4982] netlink: 56 bytes leftover after parsing attributes in process `syz.4.184'. [ 106.290384][ T4996] netlink: 76 bytes leftover after parsing attributes in process `syz.0.189'. [ 107.651305][ T5011] fuse: Bad value for 'fd' [ 107.766667][ T5014] process 'syz.2.194' launched './file0' with NULL argv: empty string added [ 108.362644][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.392296][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.399958][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.464114][ T5020] device bridge_slave_0 left promiscuous mode [ 108.483195][ T5020] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.542251][ T5020] device bridge_slave_1 left promiscuous mode [ 108.567530][ T5020] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.688798][ T5020] bond0: (slave bond_slave_0): Releasing backup interface [ 108.789957][ T5020] bond0: (slave bond_slave_1): Releasing backup interface [ 109.129073][ T5020] team0: Port device team_slave_0 removed [ 109.212404][ T5020] team0: Port device team_slave_1 removed [ 109.234262][ T5020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.284011][ T5020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.338206][ T5020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.384791][ T5020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.495993][ T5028] device ip6tnl1 entered promiscuous mode [ 109.595224][ T5027] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.713399][ T5027] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.769328][ T5027] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.956596][ T5027] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.062608][ T5037] capability: warning: `syz.2.203' uses deprecated v2 capabilities in a way that may be insecure [ 110.173610][ T5027] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.186484][ T5027] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.198828][ T5027] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.210435][ T5027] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.449984][ T5045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.457785][ T5045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.733926][ T5044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.206'. [ 110.958193][ T5045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.984290][ T5054] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 111.031114][ T5045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.325342][ T5054] wg2 speed is unknown, defaulting to 1000 [ 111.403610][ T5054] wg2 speed is unknown, defaulting to 1000 [ 111.425230][ T5054] wg2 speed is unknown, defaulting to 1000 [ 111.881337][ T21] wg2 speed is unknown, defaulting to 1000 [ 111.898092][ T5054] infiniband syz2: set active [ 111.903349][ T5054] infiniband syz2: added wg2 [ 111.938198][ T21] libceph: connect (1)[c::]:6789 error -101 [ 112.006624][ T21] libceph: mon0 (1)[c::]:6789 connect error [ 112.067045][ T5054] infiniband syz2: Couldn't open port 1 [ 112.311359][ T5054] RDS/IB: syz2: added [ 112.316663][ T5054] smc: adding ib device syz2 with port count 1 [ 112.329128][ T5054] smc: ib device syz2 port 1 has pnetid [ 112.339011][ T23] wg2 speed is unknown, defaulting to 1000 [ 112.364835][ T5054] wg2 speed is unknown, defaulting to 1000 [ 112.392790][ T23] libceph: connect (1)[c::]:6789 error -101 [ 112.403839][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 112.411874][ T5077] netlink: 'syz.0.213': attribute type 4 has an invalid length. [ 112.554001][ T5054] wg2 speed is unknown, defaulting to 1000 [ 112.564589][ T5067] ceph: No mds server is up or the cluster is laggy [ 112.739714][ T5054] wg2 speed is unknown, defaulting to 1000 [ 112.871683][ T5054] wg2 speed is unknown, defaulting to 1000 [ 113.114165][ T5083] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.139663][ T5054] wg2 speed is unknown, defaulting to 1000 [ 116.442426][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 117.101764][ T5130] netlink: 68 bytes leftover after parsing attributes in process `syz.1.231'. [ 119.307330][ T5166] netlink: 'syz.1.243': attribute type 27 has an invalid length. [ 119.977987][ T5161] 9pnet_virtio: no channels available for device syz [ 120.041254][ T5166] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.048561][ T5166] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.286568][ T4174] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.902765][ T4174] usb 3-1: Using ep0 maxpacket: 16 [ 121.016758][ T5179] ODEBUG: Out of memory. ODEBUG disabled [ 121.346132][ T5185] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 121.352934][ T5185] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.360802][ T4174] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 121.464415][ T4174] usb 3-1: config 0 has no interface number 0 [ 121.470738][ T4174] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.504683][ T5185] vhci_hcd vhci_hcd.0: Device attached [ 121.538071][ T4174] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 121.792896][ T5179] Set syz1 is full, maxelem 65536 reached [ 121.891720][ T4174] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 121.911623][ T5193] 9pnet_virtio: no channels available for device syz [ 121.935862][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 121.988109][ T4174] usb 3-1: Product: syz [ 122.006499][ T4174] usb 3-1: SerialNumber: syz [ 122.017441][ T5166] rdma_rxe: ignoring netdev event = 10 for wg2 [ 122.064636][ T4174] usb 3-1: config 0 descriptor?? [ 122.080490][ T5166] infiniband syz2: set down [ 122.118052][ T4174] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 122.197494][ T4174] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input6 [ 122.241568][ T21] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 122.301617][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 122.330900][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 122.344774][ T4174] usb 3-1: USB disconnect, device number 3 [ 122.361247][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 122.368332][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 122.415782][ T4174] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 122.554596][ T5186] vhci_hcd: connection reset by peer [ 122.571594][ T144] vhci_hcd: stop threads [ 122.575883][ T144] vhci_hcd: release socket [ 122.633757][ T5166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.651079][ T144] vhci_hcd: disconnect device [ 122.734679][ T5166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.910310][ T5214] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 122.968276][ T5214] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 123.945639][ T5166] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.954989][ T5166] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.968910][ T5166] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.978127][ T5166] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.289972][ T5166] device bridge1 left promiscuous mode [ 125.313514][ T5170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 125.340760][ T5226] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 125.350066][ T5226] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 125.359543][ T5226] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 125.428471][ T4245] wg2 speed is unknown, defaulting to 1000 [ 125.452786][ T4245] wg2 speed is unknown, defaulting to 1000 [ 125.542475][ T5232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.261'. [ 126.047448][ T5251] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.163790][ T5251] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.328032][ T5251] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.486354][ T5251] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.733678][ T5251] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.855208][ T5251] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.966821][ T5251] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.049971][ T5251] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.401003][ T21] vhci_hcd: vhci_device speed not set [ 128.478664][ T5263] input: syz0 as /devices/virtual/input/input7 [ 129.598012][ T5273] team0: Port device vlan2 added [ 129.622086][ T21] [ 129.622799][ T5280] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 129.624522][ T21] ====================================================== [ 129.624529][ T21] WARNING: possible circular locking dependency detected [ 129.624545][ T21] syzkaller #0 Not tainted [ 129.650648][ T21] ------------------------------------------------------ [ 129.657749][ T21] kworker/1:0/21 is trying to acquire lock: [ 129.663653][ T21] ffff888074ef8c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 129.674697][ T21] [ 129.674697][ T21] but task is already holding lock: [ 129.682048][ T21] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 129.691086][ T21] [ 129.691086][ T21] which lock already depends on the new lock. [ 129.691086][ T21] [ 129.701466][ T21] [ 129.701466][ T21] the existing dependency chain (in reverse order) is: [ 129.710551][ T21] [ 129.710551][ T21] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 129.718517][ T21] __mutex_lock_common+0x1eb/0x2390 [ 129.724225][ T21] mutex_lock_nested+0x17/0x20 [ 129.729521][ T21] rfkill_register+0x33/0x8a0 [ 129.734803][ T21] hci_register_dev+0x452/0x970 [ 129.740185][ T21] vhci_create_device+0x32c/0x5c0 [ 129.745768][ T21] vhci_write+0x391/0x450 [ 129.750610][ T21] vfs_write+0x712/0xd00 [ 129.755367][ T21] ksys_write+0x14d/0x250 [ 129.760202][ T21] do_syscall_64+0x4c/0xa0 [ 129.765115][ T21] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.771512][ T21] [ 129.771512][ T21] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 129.779306][ T21] __mutex_lock_common+0x1eb/0x2390 [ 129.785005][ T21] mutex_lock_nested+0x17/0x20 [ 129.790267][ T21] vhci_send_frame+0x88/0x100 [ 129.795439][ T21] hci_send_frame+0x1a9/0x2e0 [ 129.800639][ T21] hci_tx_work+0x9f9/0x1710 [ 129.805729][ T21] process_one_work+0x863/0x1000 [ 129.811166][ T21] worker_thread+0xaa8/0x12a0 [ 129.816338][ T21] kthread+0x436/0x520 [ 129.820903][ T21] ret_from_fork+0x1f/0x30 [ 129.825839][ T21] [ 129.825839][ T21] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 129.835016][ T21] __flush_work+0xdd/0x1b0 [ 129.839935][ T21] hci_dev_do_close+0x1e7/0x1030 [ 129.845424][ T21] hci_dev_close+0xd7/0x180 [ 129.850423][ T21] sock_do_ioctl+0xd3/0x2f0 [ 129.855434][ T21] sock_ioctl+0x4ed/0x6e0 [ 129.860363][ T21] __se_sys_ioctl+0xfa/0x170 [ 129.865456][ T21] do_syscall_64+0x4c/0xa0 [ 129.870370][ T21] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.876769][ T21] [ 129.876769][ T21] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 129.884505][ T21] __mutex_lock_common+0x1eb/0x2390 [ 129.890260][ T21] mutex_lock_nested+0x17/0x20 [ 129.895538][ T21] bg_scan_update+0x44/0x3b0 [ 129.900639][ T21] process_one_work+0x863/0x1000 [ 129.906161][ T21] worker_thread+0xaa8/0x12a0 [ 129.911339][ T21] kthread+0x436/0x520 [ 129.915911][ T21] ret_from_fork+0x1f/0x30 [ 129.920833][ T21] [ 129.920833][ T21] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 129.930634][ T21] __lock_acquire+0x2c33/0x7c60 [ 129.936088][ T21] lock_acquire+0x197/0x3f0 [ 129.941092][ T21] __flush_work+0xdd/0x1b0 [ 129.946003][ T21] __cancel_work_timer+0x3ac/0x520 [ 129.951633][ T21] hci_request_cancel_all+0xcc/0x300 [ 129.957428][ T21] hci_dev_do_close+0x4e/0x1030 [ 129.962774][ T21] hci_rfkill_set_block+0x10a/0x190 [ 129.968484][ T21] rfkill_set_block+0x1c6/0x420 [ 129.973835][ T21] rfkill_epo+0x75/0x170 [ 129.978580][ T21] rfkill_op_handler+0x76/0x220 [ 129.983932][ T21] process_one_work+0x863/0x1000 [ 129.989368][ T21] worker_thread+0xaa8/0x12a0 [ 129.994542][ T21] kthread+0x436/0x520 [ 129.999108][ T21] ret_from_fork+0x1f/0x30 [ 130.004047][ T21] [ 130.004047][ T21] other info that might help us debug this: [ 130.004047][ T21] [ 130.014270][ T21] Chain exists of: [ 130.014270][ T21] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 130.014270][ T21] [ 130.029964][ T21] Possible unsafe locking scenario: [ 130.029964][ T21] [ 130.037404][ T21] CPU0 CPU1 [ 130.042759][ T21] ---- ---- [ 130.048112][ T21] lock(rfkill_global_mutex); [ 130.052856][ T21] lock(&data->open_mutex); [ 130.059937][ T21] lock(rfkill_global_mutex); [ 130.067190][ T21] lock((work_completion)(&hdev->bg_scan_update)); [ 130.073748][ T21] [ 130.073748][ T21] *** DEADLOCK *** [ 130.073748][ T21] [ 130.081893][ T21] 3 locks held by kworker/1:0/21: [ 130.086894][ T21] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 130.097211][ T21] #1: ffffc90000db7d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 130.107523][ T21] #2: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 130.116970][ T21] [ 130.116970][ T21] stack backtrace: [ 130.122837][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted syzkaller #0 [ 130.130098][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 130.140143][ T21] Workqueue: events rfkill_op_handler [ 130.145558][ T21] Call Trace: [ 130.148825][ T21] [ 130.151740][ T21] dump_stack_lvl+0x168/0x230 [ 130.156431][ T21] ? load_image+0x3b0/0x3b0 [ 130.161084][ T21] ? show_regs_print_info+0x20/0x20 [ 130.166289][ T21] ? print_circular_bug+0x12b/0x1a0 [ 130.171468][ T21] check_noncircular+0x274/0x310 [ 130.176385][ T21] ? add_chain_block+0x940/0x940 [ 130.181403][ T21] ? lockdep_lock+0xdc/0x1e0 [ 130.186243][ T21] ? __lock_acquire+0x12d9/0x7c60 [ 130.191260][ T21] ? lockdep_lock+0x1e0/0x1e0 [ 130.195928][ T21] ? mark_lock+0x94/0x320 [ 130.200235][ T21] __lock_acquire+0x2c33/0x7c60 [ 130.205081][ T21] ? unwind_next_frame+0x1296/0x1d90 [ 130.210368][ T21] ? verify_lock_unused+0x140/0x140 [ 130.215571][ T21] ? mark_lock+0x94/0x320 [ 130.219980][ T21] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 130.225937][ T21] lock_acquire+0x197/0x3f0 [ 130.230421][ T21] ? __flush_work+0xc1/0x1b0 [ 130.234985][ T21] ? __lock_acquire+0x7c60/0x7c60 [ 130.239985][ T21] ? start_flush_work+0x248/0x820 [ 130.245005][ T21] ? read_lock_is_recursive+0x10/0x10 [ 130.250441][ T21] ? __rcu_read_unlock+0x2/0xd0 [ 130.255483][ T21] ? start_flush_work+0x776/0x820 [ 130.260500][ T21] ? kasan_set_track+0x62/0x70 [ 130.265339][ T21] __flush_work+0xdd/0x1b0 [ 130.269760][ T21] ? __flush_work+0xc1/0x1b0 [ 130.274327][ T21] ? flush_work+0x20/0x20 [ 130.278636][ T21] ? try_to_grab_pending+0xf3/0x7e0 [ 130.283810][ T21] ? lockdep_hardirqs_off+0x70/0x100 [ 130.289078][ T21] ? mark_lock+0x94/0x320 [ 130.293478][ T21] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 130.299632][ T21] ? lock_chain_count+0x20/0x20 [ 130.304460][ T21] ? lockdep_hardirqs_off+0x70/0x100 [ 130.309722][ T21] ? mark_lock+0x94/0x320 [ 130.314030][ T21] ? __cancel_work_timer+0x331/0x520 [ 130.319292][ T21] __cancel_work_timer+0x3ac/0x520 [ 130.324468][ T21] ? cancel_work_sync+0x20/0x20 [ 130.329297][ T21] ? __cancel_work+0x1f4/0x2d0 [ 130.334040][ T21] ? lockdep_hardirqs_on+0x94/0x140 [ 130.339215][ T21] ? __cancel_work+0x26f/0x2d0 [ 130.343957][ T21] ? cancel_work+0x20/0x20 [ 130.348356][ T21] hci_request_cancel_all+0xcc/0x300 [ 130.353621][ T21] hci_dev_do_close+0x4e/0x1030 [ 130.358463][ T21] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 130.364350][ T21] ? _raw_spin_unlock+0x40/0x40 [ 130.369286][ T21] ? kobject_uevent_env+0x371/0x890 [ 130.374481][ T21] hci_rfkill_set_block+0x10a/0x190 [ 130.380105][ T21] ? rcu_lock_release+0x20/0x20 [ 130.385179][ T21] rfkill_set_block+0x1c6/0x420 [ 130.390119][ T21] rfkill_epo+0x75/0x170 [ 130.394378][ T21] rfkill_op_handler+0x76/0x220 [ 130.399210][ T21] process_one_work+0x863/0x1000 [ 130.404131][ T21] ? worker_detach_from_pool+0x240/0x240 [ 130.409861][ T21] ? lockdep_hardirqs_off+0x70/0x100 [ 130.415125][ T21] ? _raw_spin_lock_irq+0xab/0xe0 [ 130.420124][ T21] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 130.425492][ T21] ? wq_worker_running+0x97/0x170 [ 130.430518][ T21] worker_thread+0xaa8/0x12a0 [ 130.435187][ T21] kthread+0x436/0x520 [ 130.439233][ T21] ? rcu_lock_release+0x20/0x20 [ 130.444146][ T21] ? kthread_blkcg+0xd0/0xd0 [ 130.448901][ T21] ret_from_fork+0x1f/0x30 [ 130.453402][ T21] [ 130.541275][ T5280] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 132.772508][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.778825][ T1422] ieee802154 phy1 wpan1: encryption failed: -22