last executing test programs: 1m47.35220591s ago: executing program 4 (id=321): openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000fc0), r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000002, 0x6031, 0xffffffffffffffff, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0xffffffffffffffd4, 0x3, 0x200a}}}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000370000000700384dd123533e92acf05a0be467fa21d5d31958de3d45400f97aef481ba6a5d0"], 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x4, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m40.165934247s ago: executing program 4 (id=339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="70000000ffffffffffffaaa4aaaaaabb08004507001c0065e01cd874"], 0x2e) 1m39.142438315s ago: executing program 4 (id=345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa6}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180), 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x11e, 0x61, &(0x7f0000000440)={'filter\x00', 0x4}, 0x68) 1m37.666976093s ago: executing program 4 (id=348): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000100)=@l={0x92, 0x6, 0xc0, 0x15, 0x4, 0x3, 0x8}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_procfs(0x0, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xe130597015ec7cbe}, 0x0) 1m36.070946127s ago: executing program 4 (id=355): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x0, 0x4000}) syz_open_dev$sndpcmp(0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x6, 0x80000000, 0x32344d59, 0x1, 0x9, [{0x5, 0x3}, {0x7, 0x3}, {0x7ff, 0x5}, {0x7f, 0x4}, {0x4, 0x9}, {0x1, 0x7}, {0x7, 0x8001}, {0x2, 0x10}], 0x0, 0x78, 0x1, 0x2, 0x2}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000100)=0x3ff, 0x80b, 0x6) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, &(0x7f0000000040)=0x5, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000300)={r6, 0x8001, 0x8, 0xf801, 0x247, 0x0, 0x78f0, 0x3, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0xfffffffe, 0x81, 0x6, 0x8, 0xa2f3}}, &(0x7f00000003c0)=0xb0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000640)={0x7, @win={{0xc, 0x1004100, 0x0, 0x400006}, 0x3, 0x8, &(0x7f00000004c0)={{0x2, 0x2000005, 0x8, 0xfbfffffe}, &(0x7f0000000540)={{0x80000002, 0x7, 0x1, 0x1ff}}}, 0xb5d, &(0x7f0000000500)="103c3a7b60168681d5f7d01c0bf7fec7f2e69bcd68", 0x2}}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000940)=@o_path={&(0x7f00000002c0)='./file0\x00', r8, 0x4000, r1}, 0x18) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSNLIST(r9, 0x8010640b, &(0x7f0000000000)={0x2, &(0x7f0000104d40)=[{0x8000000, 0x0, 0x0, 0xffffffff, 0x1}, {0xc000003, 0x0, 0x0, 0xb, 0xffff}]}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchown(r10, 0xffffffffffffffff, 0x0) 1m34.091263015s ago: executing program 4 (id=361): syz_usb_connect(0x7, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x95, 0x23, 0xc0, 0x8, 0x12d1, 0x36e8, 0x717c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xfc}}]}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_io_uring_setup(0xa27, &(0x7f0000000280)={0x0, 0x755e, 0x13080, 0x0, 0x114, 0x0, r3}, &(0x7f00000000c0), &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r1, 0x2285, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2024) openat$ppp(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r9 = socket$igmp6(0xa, 0x3, 0x2) write$FUSE_LK(r5, &(0x7f0000002200)={0x28, 0xffffffffffffffda, r6, {{0x3, 0x7fffffffffffffff, 0x0, r7}}}, 0x6f) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x65, 0xffffffff, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x0, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3, 0x0, 0xa49281cb282a322a}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) prlimit64(r7, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 1m32.683479303s ago: executing program 32 (id=361): syz_usb_connect(0x7, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x95, 0x23, 0xc0, 0x8, 0x12d1, 0x36e8, 0x717c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xfc}}]}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_io_uring_setup(0xa27, &(0x7f0000000280)={0x0, 0x755e, 0x13080, 0x0, 0x114, 0x0, r3}, &(0x7f00000000c0), &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r1, 0x2285, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2024) openat$ppp(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r9 = socket$igmp6(0xa, 0x3, 0x2) write$FUSE_LK(r5, &(0x7f0000002200)={0x28, 0xffffffffffffffda, r6, {{0x3, 0x7fffffffffffffff, 0x0, r7}}}, 0x6f) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x65, 0xffffffff, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x0, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3, 0x0, 0xa49281cb282a322a}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) prlimit64(r7, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 42.420422364s ago: executing program 5 (id=514): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYRES64=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000000)={0x210a, r3}, 0x0) landlock_restrict_self(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x0, 0x1}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file4/file7\x00', 0x0, 0x50) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000000c0), 0xffffd6c0, r2}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f00000011c0)='./file1\x00', 0x40) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000012c0)={@map=r2, 0x12, 0x1, 0x7bffffff, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001200)=[0x0, 0x0, 0x0], &(0x7f0000001240), &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001300)={@cgroup=r2, r8, 0x34, 0x3, 0xffffffffffffffff, @void, @value, @void, @void, r9}, 0x20) symlinkat(&(0x7f0000000200)='./file1/file4/file6\x00', r7, &(0x7f0000000380)='./bus\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') 41.422483955s ago: executing program 5 (id=517): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffbf}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0xac, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x4001) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="d9620bb35df5a66a86e792bb95c26b1d77ca91a98aee8188776186a5e1b4ea4c95bfa044c6d0a0b0825516bbb9d3927a42b09c8a27765673f4f074"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='spmi_cmd\x00', r10, 0x0, 0xfffffffffffffffe}, 0x18) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x1, 0x81, 0xd, 0x0, 0x2}) syslog(0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x93fa4469ef0df1fb) syz_emit_vhci(0x0, 0x16) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c084}, 0x8c080) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) 39.784669496s ago: executing program 1 (id=521): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1, 0x100004, 0x81) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80840}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000240300001900000008000300", @ANYRES32=0x0, @ANYBLOB="05008000"/16], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x24004810) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000080)={0x1, r7, 0x6, 0x2, 0x2, 0x2, 0x56afe045}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000400)={r8, 0x1, 0x800000, 0x0, 0x2, [0x0], [0x8, 0x0, 0xf, 0xfffffffd], [0x4001004, 0x5], [0x0, 0x0, 0x0, 0x6]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000300)={0x200, 0x0, 0x10001}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0x6, 0x9, 0xffff, 0x1, [0x0, r2, r9, r11], [0x7fffffff, 0x5, 0x10, 0x80], [0x2, 0x0, 0x10000, 0x1], [0xf46, 0x214, 0x97b, 0x100000]}) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r12, &(0x7f00000001c0)={0x1d, r13}, 0x10) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0xfffffffffffffe9f, &(0x7f0000000800), 0x2}, 0x104}], 0x1, 0x42, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r12, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x90, 0x30, 0xb, 0x1000005, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x78, 0x1, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x40}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8890}, 0x40) open$dir(&(0x7f0000000000)='./file0\x00', 0x80941, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYRES8, @ANYRES16=r10, @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4044805}, 0x805) 39.69026149s ago: executing program 5 (id=522): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 39.480803919s ago: executing program 5 (id=525): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000100)=@l={0x92, 0x6, 0xc0, 0x15, 0x4, 0x3, 0x8}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_procfs(0x0, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xe130597015ec7cbe}, 0x0) 39.463926843s ago: executing program 1 (id=526): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x12, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000003}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002300)=""/102400, 0x19000) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0'}, 0x7c) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) getpid() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0xa00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000022c0)={'wlan1\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f0000002280)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x40001043, r4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r5, 0x0, 0x6, 0x0) write$binfmt_misc(r8, &(0x7f00000000c0), 0xfdef) close_range(r3, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x21, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000040)={0x60, 0xfffffffffffffffe, 0x0, {{0x5, 0x7cf7, 0x7, 0x6, 0x0, 0x5, 0x8, 0x8}}}, 0x60) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 38.700591243s ago: executing program 1 (id=528): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="1731b7257fce0ded1a1f16fc5a1cc7ada6207715f4c4c1af6c9508f1a9f530709765c268e9997c45dccd76a5e4321b5881a578eaf3dc37b189d096681f0f39e844eb2509f6719283493f90da4f13a9a0260596951da157762ece836679a0632966f6db08131fd9ed6d9c64e2b8fbaac4a402d43bc27a32cf60736acac4458cef238a0a23dc1567964b4940dce7291c180f56e435db744bf32c48a8771d3852b359294447e3c1b669fb170dde9f7d753c33adc12d233af460", 0xb8}, {&(0x7f00000002c0)="7e0c8cc4e101178574e17626753ef7289b45677fe167f6004e4e258cb91f2cb349de0916c17b3b3811bad7296ada533d3e9da1dd09442b3888edd63b2cf15e195721e67fee2c2e9631dc48a8adccfbb8585d43c9a996441d3a4db77cacf34873ea115900e6d3c450c044fe5f", 0x6c}, {&(0x7f0000000400)="f1a2407a89a0548528935387ea685f0957b6bbb20e89ec81b3efd49630f400d2fafa12680303a847ae21c336f404779e0a71464c3863f7ea98e362cecad5c521c2fafe291a98240aea3f0a9f2d6a1cea8c2ddc65fbafff26aeced21332858c547cd34301d62e99578012fbde239edf17f372bb4082", 0x75}, {&(0x7f0000000480)="df6ce2f1a3662ebd38d7b41ef79699b90279a4db62f78fe42138c5f0a3ee097508dc7653355d63398142f8093824c8809fc17046f75fd52d40d4f2b6ff5dfaef6ee0935c13b3e8c1aeb3cda354f315f24d688b746089c782adfa12326e7d95e1cdb3b8d10d696472c89316de97f8fd81f6019b3139da819147b5533a23049a1b8d62a64475471d7d775c143deb73cc231365", 0x92}, {&(0x7f00000000c0)="8861f79987b46e6f1dce358083c6a488", 0x10}], 0x5}}, {{&(0x7f00000006c0)=@generic={0x27, "e611e768c0ec6421b144481f201a35606c2defd0240e238d9a658d0efadf836e008ca7247e366bce126bf02f99b1fee772d3d986e50938928f705ff8be7d557811a2ab0ac5bb5523bc9be37dea1a1abe6077848d626cdd6ff1428564e0a8715d28fc0d3a68d134b124b17817475d8d74c116997ec8d093f4c6da346fb447"}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000740)="a82296d1cd03468784f85caed3a37bd6d7dd43a9150928fe0fce0eb4df244955df4f40fb9038cbec1f57ae1d5939302941de5ca0d4614d78876ea22b570ff1edac3153b7d0f0d520dbbf981082f5d777c2a777d2aa2d8d", 0x57}], 0x1, &(0x7f00000008c0)=[{0x68, 0x0, 0x809, "652afe67ae0435cd3dccccebdb9f3636299178b34806be6e5901d07ac2ddaca0a81711e035a131c25a8f158de81c7a0f8811c8b75f539bbae56c7d17569678acbe8df5cda4d42f448b073c63ac5c7052e679d0ee3726"}, {0x60, 0x11, 0x7, "236d82aafe0867e538dbffc58d501ecf04e6809262c8e024ad7891d90ae8e0388fbec8d7930a408acad7102df3f6ab22db92af6c6777b4ccb6c6e8e5bb2021a3402f1fb46e9fac84de892e"}], 0xc8}}, {{&(0x7f00000009c0)=@nfc={0x27, r5, 0x1, 0x7}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000a40)="b6f0671fd3de0c8c386e40c20d263d1b75781833348544220a958c3913e8de59ff8719af44661e6f227da5127f1f431c301679687bfd389be5e655228494f9b91e1359fb6cc1429d56936d899a4868980f0e9516ba7640676b35ec8b71c37e3f100f612ba2cdf4936a971f2fd2cd49ab1663d3ecb541fe5ab39b95cef28ce9aa01c1f1b73ad3a69c8f9e5b45e424c155969e23b7a9416ae327b39a9250e06ed7748daae5194f4df8c863e63e9466ee2501b6f2cff6d0f4d186b467a54d6e468a9e4b469497e7af480e7bfc05629c527444ad53da4b8d539bd020784b90809cfead742c", 0xe3}, {&(0x7f0000000b40)="8ea34484d2a7e984c33278ce5114a5692bbc66532b4bdf0e29492aecf3c98f5841a4ca7a2e21e5e1043241446529366c5cd55ccc62079d4196f2636656c9fe8c2e67b9db6390809b6dd7b5ae5abc2a1a3efbb2cb92ae3a", 0x57}, {&(0x7f0000000bc0)="2be4f59db2d1dc87dbe1768eee71b450673b", 0x12}, {&(0x7f0000000c00)="950221faf768ced612d0d73a3b65a407a72371bb2306dc61929e3dd8209257031a909b0a3c424cbceea16536", 0x2c}, {&(0x7f0000001640)="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", 0x1000}], 0x5, &(0x7f0000000cc0)=[{0x48, 0x101, 0x7, "d71017fd99c33ac39242d5f94a0198f06a97058040d147f45ae7062920e36b0d5daf968f3a9146ffe7351bbb330ed7677b0465"}, {0xd0, 0x10e, 0x1, "bed288705a83e3bb417562e70ab16e6fecf6a9aed1cb7bbd4562f7ddc8e72452db2467fa55fb040cfadf21ce28d251bf566e4c9d75ac81d7210296a79f981ee5af89d052911d0281e5b787eebe7b890701142611ca49441f1913966f15a07318a718ed76dfd13965acafb4e03fd57129496721b6eafa713e352112844300437d4bf08dc13a8664733d8cc2c26cea29a675531f350bf316ad324bd7bde0c8f6d7086d0d9aeb1c4b2814a53189ed92752d36cc507253f903ebcd6baf"}, {0xb8, 0x11, 0x46, "68e6c10bf19d8ebc09529be00633e6bb4e643b96419dc0fe83b98cef2ccf3d3e78d847e150935539efed5fc43b2cc86a1c61800334c39aeb6cda8fabddcf541db3c0576bcf01ad3603c00fd43c2067cb234b0bfac6e0df48de29e49941a0f0f6069db4a90dd61124afb657ca6bc9d9ae34698bfef684f42b0e622e4da0392c8047f107eff428f9fbfd628c017a43de0c8602947eb4d5ec4c01e87abe05393e0a2ace8b2560"}, {0x90, 0x1, 0x206, "dd520c49f67925d85211a224dc4f8039b23450d71cc3285f03c17c5e24be3734a534e0df2e6dad56a65ea2db782d2ca94ffb46f54758ba9393be60e5b5ef980e74f766c35ba4c99ba250cac3f547acf355ddccaaef84c58da5ef27d7f1ee23564bbe9b5c799252cf266593afa36219ccf095134558d7add6e80253f7"}, {0x90, 0x115, 0x13e, "4e4d6df27df74dbfbe5e412c5ed115893fee9157715900f9b8e1812df415f3f4e6e5541d018f5e0f9d3c9bd9294a761a4f31472031c84e920f9013ff31081bc3b47a0159143f7b69723411402739e6caaa5205bd98adb88cf582c4ebb4b9d0eafd5bfe279a4efc657c8866445c39f792288fd0b5fc4f8cc568ed48b96265"}], 0x2f0}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000fc0)="f2ecab9eab7adf9ab6d09325f0874ea5b37083cf59d4e8f50273b13055539a61a6a3efbc94f25b68356ec27db828eb1f97473f40bf10e7695fffd3800a9d311e1a9c48c254363c3584ed31bc583ac435337cce06da20cdee6dcfb51b672aad3b652bb0180e2b85861f07a6ee5c7187c5519464a3ae76db3c2fdf1ae382ed7043216a13d6cc3c9a2a7a8707aff1a14770dd", 0x91}], 0x1}}, {{&(0x7f00000010c0)=@pppoe={0x18, 0x0, {0x1, @random="0cea556f3d37", 'ip6gretap0\x00'}}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001140)="0f6c66caf5503afc9a5de3d665471e6f85980a102fe2a2e64dee1f67dffee0436c7575c07e9d36cefcac01c891a879a623715804235cf72ffaee74c8a5261dc3c94ae559f62c5c68ae22861d91d4c980c7bc9a0435d23ffe6d6918bd7ecc60c73bc65c77aa94306e0aa919ffe1c529b4cfeca57872c481cde3f364ffb2aa9932a6e7a9386e7169dfa76a1ee98082f267f54966d264a0552171f9599c6b12978324ea97799ace9d2db55a5d40435f7c1713b56d2e0356b23d9016cdd37797c64f6b7399d1e4f8ed59f23476", 0xcb}, {&(0x7f0000001240)="37e9b4f2fbe45feaa3bd33f7c273d84367a360db2fde0a3c90973ff41529587ab4978e1dd1a041c9479b9ba592bc42ca89c8585b15a3daa747cf018f066d1666aabd2d2838565f089593d44734cbd9b93e17c5f33d4d5e3898ee37884d9eb52d6cd3c063c3347fdcde632ccec18a088039d0187c7252bd05dd242310e269af8a7a3bc558a8f4f632c73692f898a06cc21b", 0x91}, {&(0x7f0000001300)="0a2c14c5e63e307585dc71f9ceb9db7b41c5eadea67096438fe3a933cbe74c7ca4316df4886d819cc44efd0ea8c0ccf5e40eb4f7d7ad3ce062b1120f53a76345d52b3a52e90e83d7adba3359a029751095362514ae38e386ee8230caad22cb84393c87d73ea74003c8fd29ca3127f50f635565d754558f61f6f3672d7c5781fb313ba470d20d1c33ca437d757586befc", 0x90}, {&(0x7f00000013c0)="4178c51c2c25d282923feaca0aebd77b629635086a5bad236d77c52d830b2eb1052ccdee0836f4c988ee700fc28ddc04d6e3", 0x32}, {&(0x7f0000001400)="61174dc72981383006131a9bd2c268bf8ffd8f5775dcb10bc7bfd12bf4be674321643ddfea719070987e3c13741a5b6ac1b564c9568aa72b229d45312f629475cffee78b31a083bba03a0fb7ac332d4fdd64db523c3b2e503bbf6220ada31d980c218b23daee58a480c88e6424825cf66569751bd2720bb24eda3b115f85d0c2fef385db8f1b63fe4a0afe795156789b942b879321dbefd18840cb5583b8e1fd85cf48597e7d0e70fcab0009a4219ba4037ba7c2", 0xb4}, {&(0x7f00000014c0)="9e47d1c6cfb7fcc0ae4a7776599472", 0xf}, {&(0x7f0000001500)="96dcf991440675d0365615f899705576bdc0d06e2e207a6d6931ffaa529f3739ef2e2d9f274cd63ed244e9bce339c755f0279f5f1f0265b73a850171a2620ba6ecc6a89317c986283a5bb56a895d680e1150aa3211b77ee8e77844ee03f983ac088818c68f64f9ff632ec7a742cca514722584e276aa62d8d81c0f8784b3e08282a6dbc503a9c941a9b726a3f794c109ff72a7a5e3bc7bed92924726fd9ef185ba9c4183d971de2315a2c5f3f26bcbf73ecd6b8948923e5f14f4f05698cab3a7450d0248f27e68626ab6a0c641ab", 0xce}, {&(0x7f0000002640)="d0e5b882ccfd780625564dfc563097721e71c619fc71e02f021340cbf9b3a26aa0897726be5ff3018a5082c8cdf3adfcc89d7df3dc225f5d87ca00f8b8771308e9c508141bb3300390f63f6ea9068b9bd26e0952b40efd9e33de2175d7d8", 0x5e}, {&(0x7f00000026c0)="6dd5df2b14d3679c7611b1f29c1dbac87bf4ee81f9581e670259f29e94464b5c99b6b04a93caa6afd03b288680594152c8704f3edd506b7ab72eb90ee55b286a1f4ecffabfa723d0a68cd5c6d8d4c6775252d17fe057a2600a7f964640bd875889ad88b80be08f70e1a8dc279ad4239a456a0ea24b797dea0724d70966b156e59000ea1d934360f48c378462034933514186e5b254f4c3dd4a7afec3ec51ec773c65dd674e674af5e84149fc4ba839167d19e6d1a962535961917c4d92f0fa92cb15e3b109926c", 0xc7}], 0x9, &(0x7f0000002880)=[{0x30, 0x116, 0x2, "23c9691c5dc28d7a1bcee80d28234db6da15e43917e564f603821282"}, {0x58, 0x109, 0xa4a2, "56f05526ea4f3add45f8b25c2fe6d48475ca6c8e71842f907a29994e20503a6ee3897f77b59dcc70cf77fc75fad96c2b2344edddbc251bc920bba86aac7efc3e1a11c1f791c9"}, {0xe8, 0x3a, 0x5, "89560a479ba53891ec0d8c8ac59c1bc8fb65d6725436361bdda3d1ade2a1ed2d832feca1760ee0453b44da6b054436ac25cecd57218c8b33f1c1d90b1d5bb56e3a6fac2064e41df672279ccf042977756fb833b731478b2c10d264ce2edf456ff7c73c400ea6a8f71f7099dfd50a064a1be1bb60d561bf3cf59a7f5e306ed24c8d3b16a587c2d41e353246cf6d6566b8499c570c9e127b37be5973f58c412261dbeb551aa1b61945cc85ff5890d2216252f73abde87f28b7040ee4ae295fd7a465c8b76f235c3069e059387d55e3893e25fe4192"}, {0x48, 0x101, 0xffffffff, "3781077354d7fc29f79978f42e71ed7515e94c02f970561e5917fa1614b3099811881b13ab9fc64a79608b9ae1a765089cf62bea72af"}, {0xe8, 0x10a, 0x5, "90775ac5f34d8f5483dffcc34c77e8388a1de69cec09d886f40c8002f2869e77feee3f1c95feddf6aea8ef931a03b6ded95abe7b1b238b40c719b47196dcfe3dedc10a0537119e2d8c1b52fb156f9cccc78174c4f8198637670118750770df29e4604cca0321db3d27fcbf5767961f29311e3c01c21a063512c16aca3270ae9a0a8b233cbff2063f1409d471b879930ed817503282f01d633bb4c64955db7b5a78d010208f92e17c1066a060fbbb4fd13731dd9b202cef9dbbbd5bd2edd05eba0ce90a15ae709ae14d788e3adc37e2e5435fa554292f"}, {0x18, 0xff, 0xd21, "cdb3a94f0e"}, {0x78, 0x1, 0x0, "af0663e67d0b422bbcbb80b52cdad308859d6fa140f3c9c7b13e8eb7d19d6010ee0f62bfbd5fcb7f55f79db8a30b7c78faa2c207d2f9429d762d81efc5b889c0e5d0e542455f61d3b2be8462d83f34e4a1592154b5774e54a37a0eb2a5f9a3c4335e3c6d2d7b"}, {0xc8, 0x88, 0x5, "22ead3d95ec27c426c1eba3d1c05f8b1b86d578f54ccfe0008dcb21d055a98dd3ea0e5e011785cae916ef4a9e61e533d4254834a1f171279d80251fde98bd515585ed82be73cd4d4949c535b26973c3431e6824fced71790c4d0cece07dd0d4dd6655df54a24cf018cc8375488a85664f6a82829a8593bc16d1b7cff99bdd1997a470a4274b96661670faf0c9446f7310dee4cdb60541d9ab812882eea5f2940d6d262934f5d647ba9129e09f351d9159ad26ee7"}], 0x3f8}}], 0x5, 0x8014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(r0, r1, 0x0) 38.616450776s ago: executing program 5 (id=531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000200000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021bc000000"], 0x140}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 38.311544297s ago: executing program 5 (id=533): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa6}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180), 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x11e, 0x61, &(0x7f0000000440)={'filter\x00', 0x4}, 0x68) 37.687134343s ago: executing program 33 (id=533): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa6}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180), 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x11e, 0x61, &(0x7f0000000440)={'filter\x00', 0x4}, 0x68) 36.527565788s ago: executing program 1 (id=542): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000100)=@l={0x92, 0x6, 0xc0, 0x15, 0x4, 0x3, 0x8}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_procfs(0x0, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xe130597015ec7cbe}, 0x0) 36.003372465s ago: executing program 1 (id=547): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 31.272583898s ago: executing program 1 (id=558): syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r0 = memfd_create(&(0x7f00000003c0)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86\xf4a\x9c\xf4\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb04\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\x12\xff\xf2\xbf(\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x009\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x04\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x04\x00\x00\x00\x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8M\xd2\x9e_4\v\xf8\x16>\xe7\xcfK\xd1\xec\xaa^\x90\xebKx\x02\x00\xa5\x1e\x81b ==\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99\x88{\xac\xb2\x04\xde\xc7\x16|(\x06\xaf\xf3\xc4FTvQ\xac\xf9*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xddq\xe1E\xd3\r\xf9f=\x1c\xd1T\x97\x8f\x17\xd0\xb8\xb7)\x8a\x04\xcb%\xeb,\x8a\xa7/W\xe4\xe3\x1d\xf2', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x47b4d000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000180), 0xc06620, 0x4) 30.671689285s ago: executing program 34 (id=558): syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r0 = memfd_create(&(0x7f00000003c0)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86\xf4a\x9c\xf4\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb04\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\x12\xff\xf2\xbf(\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x009\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x04\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x04\x00\x00\x00\x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8M\xd2\x9e_4\v\xf8\x16>\xe7\xcfK\xd1\xec\xaa^\x90\xebKx\x02\x00\xa5\x1e\x81b ==\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99\x88{\xac\xb2\x04\xde\xc7\x16|(\x06\xaf\xf3\xc4FTvQ\xac\xf9*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xddq\xe1E\xd3\r\xf9f=\x1c\xd1T\x97\x8f\x17\xd0\xb8\xb7)\x8a\x04\xcb%\xeb,\x8a\xa7/W\xe4\xe3\x1d\xf2', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x47b4d000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000180), 0xc06620, 0x4) 13.251268792s ago: executing program 3 (id=614): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a00", 0x2a}], 0x1}, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x19) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) r2 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x2}, &(0x7f0000000440)="15ecc6fd0e30c5041fef7d99ee21daeb5197225a4a16003a31931a9f19fbab6c6939422695abc18d783df36829816cdbe4efc48cf1ec87dcb4465439363cbf33c94bbd801fab9bf0d5d6db9f8e60bbb836ed81922e78a34483e90c08817ea2982da70ea81a2b272daf42c94185ee86d0a8f60ac3a271e4530105cc8320920b1314ab67ab9870f1c3b996269b711adcbfc3449e2ffa05c46b028d0aaf83ffc8dca7e36619b1cc20c2b4c5cd5dee61499bd8e8", 0xb2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r2, r3, r2}, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={'xxhash64\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000180)={0x0, r3}, &(0x7f00000001c0)=""/127, 0x7f, &(0x7f0000000280)={&(0x7f0000000240)={'blake2s-224-x86\x00'}}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x422100, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x3214ad689229ee68, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000840)={{r5}, "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"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000090c33f40f70a01622d0001020000000904000000cb35520000"], 0x0) 13.067876122s ago: executing program 6 (id=534): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x2, 0x5002) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x4]}, 0x0, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000400000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) clock_adjtime(0xa, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 10.345392779s ago: executing program 7 (id=623): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)}) r0 = syz_clone(0x40000000, &(0x7f0000000100)="ba", 0x1, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000a00)="558984474c6b0839e080303c3a1d9158bc3b262b125996287e7ab37b603cb2627f8178ea5063fe6a72b9b3fb85c043955fe3ce82679d2695e3ecc56c9ce5e9188184acb8e464c3b7228b5b18d01b7a4dd4fd9dc19b101820ceddc25c853c77dcd9356ce0c02f676934753694deeecda80d3cf0b1c8edea9802246b69bcf17bbbe47dcbf99d6cff0bcde8b0434c8dfc43e0021220b3dfafed7cb78bc1fbc599a4b69fb5e5e07c9e4d0f1c0b0f1b3cacb22d2469b3981c764389c038c1e1d5831c20db41ef3e7d543246c48d7b2e3c4cef43c4bcc4a0d7b252da29b73857b7dab98541c7f618321ae089e7621c80810defa2c6c6b6ed793d40dc8f556d7f3b70046b13425a49774674c5c994650aeeef866a108fb5b454b549ca0858c4bdbd5254ab16b64a75e305b861a736a4814774771914316f38ba5665b0de619d47cf3cc8747dc19bc266956be4e8090521587af2d62072e093282ec794889c28828363c3017b1768fb10bba9de322d9dda01ed206cd6e05db6560f87ec89fbe7e1cad1eba42a376c10a1638ee705fb4d334110cf94235b2caac8a223bad6d76c79572446673613faafda72b34d64b632de66ac227aa717ff4293f6529e829c55560dc7e06369369fa99a710247c31b2b7ddc69f92ca85a04bc6476cb13ad1330fac30ce79c508057ea4cad8687d3229678c27455eeff9dd8623a1c0babc6d93ac5b9048c0d9fccafa17c8c84a7a2d693ca533356516238cd35160e4d008e5be16d7398f5d33a799386679c49c65a52b7c758a67e185218c3216150757af0d15ad579164d49b6c2c3a40bcdbd5651af06b1af915b6854e8bce5ae48447a92220bbfb65fcf7b5b68bf4b9b620e48c5c4d74614db20fe28a72ac192383a2491ad8ed98c636da1e4c031c0b4c08240a08481a7245f31cf72ac9f093637467aac7298331d5a925340db3f916d80c4af15efa888f4a5f94404f8ae0ac7fb419010c13b6f56428657e787d82ea9fd2bc8d5167a4424b5d41c531aff8c93337427b32dd71cf8974e76f7a2f871bb7043b3c3f05fbef606ede9af7133369a39293e13941d5b11662af5a3e57d5501882c27b7d5f477716b31b0775265cc17c01544e064b8694d6f53329252764b894854128d0a891db963dbba90fe196a38ba76737e92a96fa2122cc0e04931f63c42d95ddd0d51dce269b814106db03ce24ba94dabbf2e4122b3fc6fabaf31332c230e0d0ff82df9af3cc9e00b101c1301e52c17a08a829598698637b5731c0dc74a9ae15a362fd64d047d82d354f9ec17197060a23dcc51e4edd4ae900d6f059fa21b2f83b294f0ae1030b3c5216f68bf35154c4b3e722bebb7a7745b6cf3bfc671d973bead9c3d5d76ae5c38443d2e3d30eab4c4bcf74416105aff54bf2ba1ef221a79220060182dc72c71d1244dc013de2a1a8b2f6ab7e23d6d23fda9210ea94d878ef44573830833e1d20ca327104b5326aec30d2c023f51ce9be716fbff3d1a07d95f0be194d3479bfc8d970edbc1545c0125be044c2aa0ff2c3ae7e96518bf414a95140b6ce3f7012c5db8ab6b1247ee9f3617d20be06f7757e0bf0f2dc866f34c243f89817579045fa878e4484179239d68f065a091a50f04599f9684af4bab87695851da3b1781d84f78947d5d3cc58ab3b50ca8ed9b4e334596f904b9d570c210a8ef7be23f5529974cf31e4ee31dad528f724a4f7d8b8b1b846d0bcace7dda11228486070cb6d01b852d85f801966a214d8728a1cb18931d6a04f1eebf718a3845641ca448dfccacf3c862d8359cc7ecba347e72c01b6d4d11b5ba40d88d400933b75e5cdb81711bacb4e909eade974f30b4cac68e8bc859e4d1d00e761cfbc43d5151b8146e21b5e6a28f32b141bb063728da2c21bd939f8508c94b05081ff2857cfb52178aaf9e6e1e839f41fd54dfb3701dd20eeca411da0dacf43e6fa5752b8f4476111feeaa468b26eddeabd3b0dca8d7f0c9ab97b11ec36e90958cb1a7f20e1e036d609f027309cf3e25be291a13c8f3ec67d76121816ed1bf3699a2980591ef12a6af5ea1f5d3db5063221b813eea112fdfaf00d9c8801f415df12ca67f882186195e979c38976ef0f7e51e6494b71cef8e436b433893f5d092e3f1a15023d52d1e4debe817571b0b5f2013c70596480a78f76fda1cf96804f465207980aae28ea373e08ebc7975f05625d97e7c5fa3160350dcdd0f6b7b5be25e9c44eb6e114175ebc40c97120f01f82be0b8bc8168611213c2e1e18891b14d2b63bc674f56a259928fb7ec461ba8761f934f5c3c5f38c03b8759bf7cc7d126d0f29953377951b4e0f94838eb58001bec32b2a22dce9645ad0604a645c941f5b80bdf92707c1e8cc6382fbffa85c2ec97b170ac3e38bf039a9a87ecd9218e7f70543e257facebed94341acded8019add6cfba6b10725e89fe901db0229c4243af465b0ac05f8b343e5778bd10c19964fa5a1d0b2019c7961db73632bc47b99c7e4f76b66ef333716693e4d8b6f032951d96a6adf911707b529382e11c11f17b2130bbb78079885fa28ebccd3a474c22a2b7afebcbfa60192f8f64fbc743436e3037fb030266b0cdd36b620b95647cf14d7feacb140fdd5909092f118801ce728263261cd925b040dfc0b5aa4360c74e15181df0e5c216bdc6dfa06da787f336b629c607bb983ab93156330ea886b1afbd20234e1dfd08dd7c3add1909facf1d17b17004f3e5e2056662eda636787a82b0bf42086d9d9ddc1f66be3789468aca0c8936eca8915049b33808a57079638cd34f08af4252bad892a50f277ae1bf88534cfa49b087847d77a8d6a9d70f7aee17602303e1b02836ccef763c2ba1572516a24c2c2a24872736202b4002fb6d78c698623fa95b5b0bd2881453a97627cc38b59c389c0bb820d9f38855bc6c741396a26fa5c9b05837607b573ced7ba53d4e4836370d5114beb1cbc7fc6ab73a298c95cbb320f2f4f33916a4f50065f660e2eed00ea0422d2a45f120862d9460ef854a69bd64e39ea7afbadcae1247552c6f8f98c8d37366899d549c1ae298dd190f35a526aad19b8a960f669f8903680f4c020c91605e73f4a289d1f0280af2fafecf6df26c54f8f5c747437538e7c6a6e66c26925e0ff6306bd752045331bcaa5d5ce6734ce1528bd10df7856d419f347e6da23f2893069bd1dadefb807bfcabba05ef281747cc31837b4f1c73180533f9f6f29480003def6ffbaf70c1ee8eefd7864e8b65e92821c2bd0c0561907addcd04bde1eb9449ef3fec5602d4c223fd9bf221acaafa95b6b0f7a3abf1ffb0235af1ad2f0554e5978ed83967fe86e09f976c535751d5e83176e7fe84442454b978034b39a754645b871def5ae532fb14f7889bca1f11bd7fbdc8d33c981e0f81204102e936ed4241366c8716f65e69f7e41e7b63c3338d96190250635d26060d500b38a88d5b9f6ff6f91afc0306f5b68f36ce21a03db77cfdd19a5af1f77d755e24eb47171d95d8b67cf286d60036dbbe045c0c5574cdbc100c44fa8b466773d42463a10b869a83e2041ba00c1ff15d54a2bcbf3d307083d6aef4e7f55099135d2b0ae20ef94c329370228595ee9bb5f23cfe5f311ddc5d552d3238b74bb99b790e73f71db532db59cb637c7ec51d4e2cd5b30033a66ddc944e14d1e3934a7749963cd1332e770c5f87a17abb6cedc7837ef58fe02e8ab1870415650955abf642e3987e7bd9fd1f51a227007fb19d1a51da42f595025f37e49b7198d00dfe33ca93c138d5d7319673461d8fa90c32a5238fe7cb9a8f24a2bc8da874929b9cb8401a5689b5d7f23e62e0ffba1b984f92a31bbf589b824ed8869bee1b61fa67d7a460456e63ce68fd6e1e58c7ee51e603c0c7e2502ab6c54492922b04ce2b2da56b57cc3080bcfe6b11ac262692686077a8794b0e73a711319248a4a5a3742f3e5f60331c1eb024120ca79f1df2e74a97e3cb1d763706ef137ad7e65b6d5b94812118cf5c6f284e4834a831856973f617f75f81bfd86f4004e95151d1be1ef99cbcce15dc943a423eb7724a954de03f057c39bf5318ff5ffb88aea31493c09fe6bd7612758f1d1dfaac3675d7549744827c916ffd67a3fabfdd5ea78991fa8e6a1f0fbc2e8adff19e243b9e455bf40a9a25eb3f6b326b8ee18d16f10f8e59308c97d0beec1f7f26b37bf6f4a6fb733b33249472a85e9e096826606543de6f51c795ef5566ac00ddd5f675f5d44d5d0e5e60402a6480204e25c5415bf0e6fdd20645c2b1183e6df7fbb119a92163382311c4e6ba90630d52176d6110844c9876b082e022d8691216082aad44a7ac992bbe752e81d459d52d22e4a70290146f5ca9bccf123594ccdea6906c5ebc5ca33752867e2525d13ce55e5479a3bdccd1e7ca3c5a008c4673f3230804f15df0b07c4e3e788e520c05bd18edac5a3fe5e6f49c31871bcd4d6432f36cab3438022e759223bcd644936c7b7327df6e2c220d32bd90ef888cb2997f548b40db264fae49bb40d310f0d4f7bc86ed380c81d8a66b543161bc739aaa77ed682e91ac7c7b20b40b8d609e1baa31adb8915cfdfca6697d17bc12ed815cbd5b0b4d61e5f47b8aa3a2d8e5eb680b37c271670dc5e14c90d8f12178003cb1b6c16ce3d104fc18a3f6962c8d4ca8620fb488598e3bbdfff1632c1a6f7067554cb4f86c1c2c1c9c2b19cb4139be5ab8eb9da319c8a6a11370d01fba9de5a2c2d39b403d6ff0e1fb731c709e203ceb59117138bb712de88948a2a953aea5e1cfa7f60b7b9f36252c488f448769733458a4856badaa95d21feedcaf7195ac033118cabf8cc94c262f7dd7674efd53d43d77adcb5207a19496b097aaf319456ce2b4af1b5965d8a01925291d12af60fbf39d68a6dc129a45484b058a55afa42b173674f937cd5a6217ace88df1b5d472f9a5009c0c43246c1c62de2a1d03efbc39a5dde42e68b0954129e60e86b979907c1c9ab9b2d6f2df83e6a9b25f066fca5aaa5bfd0fac69baece7b6c3318cab6bcb9344d85df2605e2da53bc75419adcbce168bab7d0089aff83315f79ec2ce0f70be72145daffb9c6e64c10920a8e5be388de11299ed1603b071d010491f1d05f1e798dd9b2d55eeb401b8de22b75ea9e354c38ae1ddd4650b9b0c8964e312b333e615581c00ecce9bddcb706760d2864b60cf33b054562efdde630a3145ef823053fc72c21cddbc83d93aa779839220b3e3081a2a0e6344cbe93616d018ea8151410928be1631a987e361841d9ef5d3ee16a66d9739024ac197897e19a7bca9e92f23205476b24057b4dd6fa9be0339a5ed11acd0444553e2ae869a0161965b38acccbd535a8bbec8ffbad697136c1310d1a7db95d925a1293e267cc350db6787e197940a91850f2540181880a42655e3b8fb736a0a6fdb7fe1b0c827f33458fc7ccf1c077bfd3019764bd20a8c442bcccbc9c07642a4772611069aee0c10f1f6fbff48205fcf63948863f189495bcebcb2537baea02a6e92aa97e46c6e5fc1b998dd1d191d9bd4576fc827f9d54a68ffe8de8175481c89fab5a80caa25ba8a71e804e8fc57f66a9ecdfd1da716e8b155cc9439e2b2fed830a04ad8c7b66feb32241cc38b57f6ed8d6e9389c475fab929484c84c8f43b5ef21727e9ee91d34d78748254182d0b21389d46fb13c5abeec2b3efb0e9a19de2be2f1b2b6dfd9341b152b964b371d9dc03795979b446ce7810e7c726222bfba4e3f21ccc85f70f5fb1797784ed2f1e6eec2ec97b2c677bf29dfbdacf6265f49dbc0ece0acd551720fae35508") prlimit64(r0, 0x7, &(0x7f0000000140)={0xb, 0x10008}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000009c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r5, &(0x7f00000004c0)=""/57, 0x39) fsopen(&(0x7f0000000000)='msdos\x00', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', 0x0, 0x888000, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r6}}) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r4, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 10.078654728s ago: executing program 3 (id=626): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xd98, 0x40000) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000040)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r1, 0x2, &(0x7f00000001c0)) keyctl$join(0x1, &(0x7f0000000200)={'syz', 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) sched_setattr(r2, &(0x7f00000002c0)={0x38, 0x0, 0x28, 0x2, 0x2, 0x1000, 0xffffffffffffff5b, 0x7fff, 0x6, 0x2}, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0xa24c5000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000500)={0x2440000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xf8, "ce629be7d34030"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001500)={r3, r4, "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", "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"}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000002500)) syz_open_procfs$pagemap(r1, &(0x7f0000002540)) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000002580), 0x40000, 0x0) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f00000025c0)=0x2) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000002600)={0xa, 0x4e20, 0x8, @loopback, 0x3}, 0x1c) pipe2$watch_queue(&(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000002680)={{0xa, 0x4e20, 0xe5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, {0xa, 0x4e22, 0x2, @mcast2, 0x1800}, 0x0, {[0x3, 0x80000001, 0x34, 0x67, 0x9, 0xcc, 0x2, 0x5]}}, 0x5c) ioctl$TIOCSERGETLSR(r7, 0x5459, &(0x7f0000002700)) syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002740), 0x101000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000002780)={0x1, 0x93, "18446f7769ef310b9b19b1f7d4d1575f9796808957928ad450b51bae41c2909c81d20e99ba4399018e8ca2d656143231053bfe6635ab4304fc3476dcc1740a80a4fe0035a452c84d517c12ea1653e36266a50d6fb4e8df1d62bde9259fc1129cd605c9eeaae539894d0844e81fa09c71c508a6345dc9b4b302788307c846a9c9bf053d63e5af06bd26851e8dc457b8e726422a"}) sendmsg$nl_route_sched(r7, &(0x7f0000002a00)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002880)=@deltaction={0x104, 0x31, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x61f7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000001}, 0x5) pipe2$9p(&(0x7f0000002a40), 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002a80)) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000002b80)={'syztnl2\x00', &(0x7f0000002b00)={'ip6tnl0\x00', 0x0, 0x4, 0xa4, 0x7, 0x25, 0x2, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x81, 0x8}}) connect$packet(0xffffffffffffffff, &(0x7f0000002bc0)={0x11, 0xf6, r10, 0x1, 0x9, 0x6, @multicast}, 0x14) 9.366112505s ago: executing program 3 (id=629): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$nl_route(0x10, 0x3, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r2, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000e0000009500000000000000266f3dc1e9f25b8a7c053768a1e27a81bd8eccd4f08f03bfc9881fb6eb53b63a6f1f1399b8fee2ce2828c74deaa72ac0ff7c150984cf936afbdbd637d9e6744730230c0967f1f88d0d6e29c729aef73705f7fe01b4391aa9e6dead426a24622ed82a79745f0ca217f1a9ac577997a5e72831e2965086ba59666d0908e08a03d18fc20188510600744fe918b59edb096b56730f76c4fd75c6b4e814fd53dde62645a2457a3c25c397ba2ed8bfba36"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=0x2, 0x4) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) (async, rerun: 32) r6 = getpid() (rerun: 32) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async, rerun: 64) gettid() (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) readv(0xffffffffffffffff, &(0x7f0000000080), 0x0) (rerun: 64) 9.232014201s ago: executing program 7 (id=631): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000033666a"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) bind$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) close(r6) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sync_file_range(r0, 0xffffffffffffa525, 0x7, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close_range(r1, 0xffffffffffffffff, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007a1ffff", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 8.949182584s ago: executing program 3 (id=632): syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000013000500020000000000000007000000", @ANYRES32=r4, @ANYBLOB="004002000000000014001a80100005800c000380080001"], 0x34}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r6, &(0x7f0000000000), 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {0x4, 0xfff4}, {0xffe0, 0xa}, {0x1, 0x10}}}, 0x24}}, 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 8.199867216s ago: executing program 6 (id=634): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}, @vti_common_policy]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x58840}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @p_u8=&(0x7f0000000180)}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "fde9e2", 0x18, 0x0, 0xff, @private1, @ipv4={'\x00', '\xff\xff', @local}, {[@routing={0x75, 0x2, 0x1, 0x3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}]}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c97b166978ff61fcfd2409b2b73e0f936ed774de107de8a9041b5113"}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000540)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x7}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) r9 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x3, &(0x7f0000000000)=0x6a3, 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) 5.655654597s ago: executing program 0 (id=642): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='\b', 0x1}], 0x1, 0x1) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000080)="1700000a020001000003d68c5ee17688a2003c08020300ecff3f0200000300000a00000c89f1608558134fcf9f98c1811900009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68", 0xb8) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r5, 0x0, 0x40) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r6, &(0x7f0000001440)=""/126, 0x7e, 0x41) lseek(r6, 0x9, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x10, &(0x7f0000000940)=ANY=[@ANYBLOB="850000006a0000001838000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000852100000100000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000852000000500000085100000fcffffff9560200001000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x9, &(0x7f0000000500)=""/9, 0x41000, 0x3, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x10000000, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000600), &(0x7f0000000780)=[{0x5, 0x1, 0xb, 0x3}, {0x1, 0x1, 0x6, 0x4}, {0x3, 0x3, 0x10, 0x4}, {0x4, 0x1, 0x7, 0x4}, {0x3, 0x4, 0x7, 0x3}], 0x10, 0x1}, 0x94) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x438, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x368, 0xffffffff, 0xffffffff, 0x368, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x298, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x8, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x24, "74da157150445affea123f5ef01537fc77b067aafc038415821fe07d79cc"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x498) 5.031790283s ago: executing program 3 (id=643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021bc000000"], 0x140}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) 4.857103835s ago: executing program 3 (id=644): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x2, 0x5002) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x4]}, 0x0, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000400000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a"], 0x64}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) clock_adjtime(0xa, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 4.779622708s ago: executing program 7 (id=645): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x8000000) 4.778292953s ago: executing program 0 (id=646): sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4800) (async) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x40000007}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0x4}], 0x1}}, {}], 0x3, 0x1c000) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, &(0x7f0000000140), 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xa, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x7, 0x2, 0xf, 0x5}, {0x1, 0x2, 0xb, 0xa}], 0x10, 0x6a}, 0x94) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x48) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000080)='./file1\x00') (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async, rerun: 32) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (rerun: 32) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x1) 4.703423396s ago: executing program 6 (id=647): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8271, 0x40, 0x3, 0x117}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r2, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r1, r1, 0x2f, 0x4, 0x4, @void, @value=r1}, 0x20) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) 4.623491386s ago: executing program 2 (id=648): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200003500000000000000b8858395850000005600000095000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4020744f, &(0x7f0000000000)=0x10000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xfce1) 4.556096722s ago: executing program 0 (id=649): r0 = socket(0x840000000002, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000600)=0x1, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0xc01, 0x3, 0x250, 0x128, 0x5002004a, 0x0, 0x128, 0x0, 0x1b8, 0x3c8, 0x3c8, 0x1b8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0x0, 'veth0_virt_wifi\x00', 'ip6tnl0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x6}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xe0000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) 3.724380855s ago: executing program 6 (id=650): r0 = fsopen(&(0x7f0000000400)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x143942, 0x80) ftruncate(r2, 0x2007ffb) socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket(0x2000000000000021, 0x2, 0x1) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) sendfile(r2, r2, 0x0, 0x1000000201005) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x2a2828, &(0x7f0000000440)=ANY=[]) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {r0}}, './bus\x00'}) sendmsg$NFNL_MSG_ACCT_GET(r10, &(0x7f00000003c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4088005}, 0x20000041) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 3.64512944s ago: executing program 2 (id=651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200003500000000000000b8858395850000005600000095000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4020744f, &(0x7f0000000000)=0x10000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xfce1) 3.572082848s ago: executing program 7 (id=652): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x8, 0x2, 0x34e}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x1, 0x2}) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x1, 0x2}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 3.515669396s ago: executing program 0 (id=653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40400) read(r5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x89) mount(0x0, 0x0, &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000000c0)={0x60, 0x7, &(0x7f000057e000/0x2000)=nil, &(0x7f000022f000/0x4000)=nil, 0x7, &(0x7f0000000340)=[{0xfffffffffffffffc, 0x1, 0x4}, {0x5, 0xb59, 0xe3f2}, {0x6, 0xfffffffffffffffa, 0x2}, {0x9, 0x1, 0x80000001}, {0x5, 0xfffffffffffffbff, 0x5}, {0x400, 0x900000000, 0x200}, {0x800, 0x99a, 0x29}], 0x7, 0x5, 0x12, 0x22, 0x39}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)={0x28, r8, 0x1, 0x70bd27, 0x25dddbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8041}, 0x24040890) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8794}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000680)}, 0x80000000}], 0x3, 0x0, 0x0) 3.502779406s ago: executing program 2 (id=654): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fcntl$dupfd(r0, 0x0, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = semget$private(0x0, 0x4, 0x29b) semtimedop(r5, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, 0x0, 0x6010) semop(r5, &(0x7f0000000180)=[{}, {}], 0x2) semctl$GETZCNT(r5, 0x0, 0xf, 0x0) r7 = syz_io_uring_setup(0x126b, 0x0, &(0x7f0000000140), 0x0) r8 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x101000) ioctl$IOC_PR_PREEMPT(r8, 0x401870cb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r5], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000760001040000000000000000000000000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x881}, 0x24048000) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 2.135951001s ago: executing program 0 (id=655): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x800005, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0xfffffffffffffffd, 0x9, 0x4000000000000004, 0x400000767], 0xeeef0000, 0x80082}) r3 = fanotify_init(0x200, 0x0) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x4) r5 = dup(r4) fanotify_mark(r3, 0x221, 0x4800105a, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r7, r7, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="2f00000018"], 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="dd7f", 0x2}], 0x1) 2.135176132s ago: executing program 2 (id=656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000001000000000a48000000160a01080000000000000000020000000900020073797a30000000110900010073797a30000000001c000380180003800d0001006261746164765f736c"], 0x70}}, 0x24040880) 1.975943094s ago: executing program 7 (id=657): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) readv(r0, &(0x7f0000001100)=[{&(0x7f0000000300)=""/11}, {0x0, 0x2}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000300000000240000002400000002000000000000000000000202000000000000000000000a03000000000000000000000a"], 0x0, 0x3e}, 0x28) 1.966843315s ago: executing program 2 (id=658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, r1, 0x201, &(0x7f0000000680)={&(0x7f0000000580)=""/222, 0xde}) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f00000003c0)=0x1c) sendto$inet6(r2, &(0x7f0000000400)="3a45978279cf8add10aa5324ec24e71aaf7e61455f4eb6957ed67b7b4e37234389bc47f0421af9f662f22c12f059259eea6bb916522171a88a51e2f37ce2b5b66644649978a613985e6af85db34da190064390c2daa33329d944d0e2111446805229eb567c49e7ec0a190ed14e24e29e7fb31847da8bf0421352549e7e471fa59720a6e7dae4d0d0f2e1629755e8071110d25958de4275135acb104cbdcc30308e9f92f05db9312aedac231c4716932c8d352e4ee61f9beb09b22509edea1c1f4e82c132b2bc5831f81bc9ec867679a4cd42d4f22f", 0xd5, 0x800c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x200, 0x8) write$smackfs_cipsonum(r5, &(0x7f0000000100)=0x100000001, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x10) close(r6) r7 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000001680)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="02e21b2e7d66d823e22d0d14628c7379dad3ce7c6dce1c66f8b1caeacf29845fa17156b9a58af16997fcf298b57fd0ffad189eecd8d646456fab9fb0ec6a285924741c9f492e84cf6bcd5a79c98b59de4f349c5208103ad1534ae0202b836e5490a72eb534da9dcd2295bc98781295653699ae0d0afe595cb981ff52137800cd28000e0f7e4788d0aa1a3437faf15f027c46aa1583ab72bcd677a5f6b3d3debd198eced9a640b31e56e07d2d38c1a97d0c9ce04119375e9358a95ea9"]) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000180)) setsockopt$inet_int(r8, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) 1.890727654s ago: executing program 0 (id=659): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x110}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd4}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r9, 0x800, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}]}}}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x800}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 889.557819ms ago: executing program 2 (id=660): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x408880, 0x40) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mount(0x0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x10, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) process_mrelease(r0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@loopback, 0x4e21, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x11, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001002bbd7000fffffffffc0200000000000000000000000000006401010200000000000000000000000000000000000000020a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 0s ago: executing program 7 (id=661): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200003500000000000000b8858395850000005600000095000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4020744f, &(0x7f0000000000)=0x10000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xfce1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. [ 81.715948][ T5823] cgroup: Unknown subsys name 'net' [ 81.845140][ T5823] cgroup: Unknown subsys name 'cpuset' [ 81.854754][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.418011][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.148688][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.155395][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.157188][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.164194][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.170841][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.178362][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.185239][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.192314][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.202035][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.206064][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.272247][ T5156] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.280335][ T5156] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.288045][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.296229][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.310958][ T5156] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.338423][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.346672][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.354271][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.378008][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.392286][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.399866][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.408488][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.417065][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.424563][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.434800][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.737077][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 87.204930][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.214102][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.224188][ T5834] bridge_slave_0: entered allmulticast mode [ 87.231742][ T5834] bridge_slave_0: entered promiscuous mode [ 87.246885][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.254574][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.262859][ T5834] bridge_slave_1: entered allmulticast mode [ 87.270695][ T5834] bridge_slave_1: entered promiscuous mode [ 87.348182][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.363273][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 87.385043][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 87.400639][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.418010][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 87.509932][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 87.558150][ T5834] team0: Port device team_slave_0 added [ 87.599754][ T5834] team0: Port device team_slave_1 added [ 87.739165][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.746618][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.773108][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.786719][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.793879][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.820329][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.866126][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.873429][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.880610][ T5833] bridge_slave_0: entered allmulticast mode [ 87.888561][ T5833] bridge_slave_0: entered promiscuous mode [ 87.904128][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.911944][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.919115][ T5843] bridge_slave_0: entered allmulticast mode [ 87.926422][ T5843] bridge_slave_0: entered promiscuous mode [ 87.946858][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.954241][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.961872][ T5847] bridge_slave_0: entered allmulticast mode [ 87.969569][ T5847] bridge_slave_0: entered promiscuous mode [ 87.978178][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.986419][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.993718][ T5847] bridge_slave_1: entered allmulticast mode [ 88.000977][ T5847] bridge_slave_1: entered promiscuous mode [ 88.008063][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.015362][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.022734][ T5833] bridge_slave_1: entered allmulticast mode [ 88.030016][ T5833] bridge_slave_1: entered promiscuous mode [ 88.050824][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.058172][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.065438][ T5843] bridge_slave_1: entered allmulticast mode [ 88.073025][ T5843] bridge_slave_1: entered promiscuous mode [ 88.094150][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.101527][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.108679][ T5839] bridge_slave_0: entered allmulticast mode [ 88.116072][ T5839] bridge_slave_0: entered promiscuous mode [ 88.175404][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.182720][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.190102][ T5839] bridge_slave_1: entered allmulticast mode [ 88.198135][ T5839] bridge_slave_1: entered promiscuous mode [ 88.219487][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.232780][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.257539][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.294339][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.303548][ T5844] Bluetooth: hci0: command tx timeout [ 88.303754][ T5844] Bluetooth: hci1: command tx timeout [ 88.342685][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.371618][ T5844] Bluetooth: hci2: command tx timeout [ 88.375809][ T5834] hsr_slave_0: entered promiscuous mode [ 88.383615][ T5834] hsr_slave_1: entered promiscuous mode [ 88.404905][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.416553][ T5833] team0: Port device team_slave_0 added [ 88.425800][ T5833] team0: Port device team_slave_1 added [ 88.448289][ T5843] team0: Port device team_slave_0 added [ 88.454502][ T5844] Bluetooth: hci4: command tx timeout [ 88.457804][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.497801][ T5843] team0: Port device team_slave_1 added [ 88.506258][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.531634][ T5844] Bluetooth: hci3: command tx timeout [ 88.598186][ T5847] team0: Port device team_slave_0 added [ 88.606604][ T5847] team0: Port device team_slave_1 added [ 88.614916][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.622235][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.648352][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.680915][ T5839] team0: Port device team_slave_0 added [ 88.690041][ T5839] team0: Port device team_slave_1 added [ 88.725002][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.732016][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.758162][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.781642][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.788628][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.814689][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.851574][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.858572][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.885122][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.897998][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.905074][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.935153][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.971903][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.978897][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.004853][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.036724][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.043768][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.070728][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.117621][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.125066][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.151666][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.167841][ T5833] hsr_slave_0: entered promiscuous mode [ 89.174426][ T5833] hsr_slave_1: entered promiscuous mode [ 89.180602][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.188459][ T5833] Cannot create hsr debugfs directory [ 89.281525][ T5843] hsr_slave_0: entered promiscuous mode [ 89.288278][ T5843] hsr_slave_1: entered promiscuous mode [ 89.294872][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.303116][ T5843] Cannot create hsr debugfs directory [ 89.346957][ T5847] hsr_slave_0: entered promiscuous mode [ 89.353882][ T5847] hsr_slave_1: entered promiscuous mode [ 89.360038][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.367841][ T5847] Cannot create hsr debugfs directory [ 89.392419][ T5839] hsr_slave_0: entered promiscuous mode [ 89.399023][ T5839] hsr_slave_1: entered promiscuous mode [ 89.405897][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.413656][ T5839] Cannot create hsr debugfs directory [ 89.946422][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.965434][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.980721][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.002074][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.056127][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.069347][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.087921][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.109488][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.199249][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.229423][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.240777][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.253975][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.344529][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.376018][ T5844] Bluetooth: hci0: command tx timeout [ 90.380002][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.381893][ T5840] Bluetooth: hci1: command tx timeout [ 90.409491][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.420819][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.452154][ T5844] Bluetooth: hci2: command tx timeout [ 90.531450][ T5844] Bluetooth: hci4: command tx timeout [ 90.539854][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.570947][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.578013][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.601068][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.610180][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.617166][ T5844] Bluetooth: hci3: command tx timeout [ 90.626596][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.676097][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.713690][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.720969][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.734505][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.757272][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.764417][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.773722][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.780827][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.803536][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.810689][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.828678][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.924665][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.937663][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.969867][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.977058][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.028510][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.035748][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.099977][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.187848][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.195072][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.235717][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.242915][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.325697][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.436845][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.477664][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.515131][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.522789][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.535843][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.558627][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.565799][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.610089][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.712930][ T5834] veth0_vlan: entered promiscuous mode [ 91.775205][ T5834] veth1_vlan: entered promiscuous mode [ 91.857679][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.920764][ T5834] veth0_macvtap: entered promiscuous mode [ 91.976922][ T5834] veth1_macvtap: entered promiscuous mode [ 91.981073][ T43] cfg80211: failed to load regulatory.db [ 92.107254][ T5847] veth0_vlan: entered promiscuous mode [ 92.124738][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.166144][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.195892][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.207987][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.218557][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.228430][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.243625][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.276552][ T5847] veth1_vlan: entered promiscuous mode [ 92.352498][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.423089][ T5833] veth0_vlan: entered promiscuous mode [ 92.462892][ T5844] Bluetooth: hci0: command tx timeout [ 92.468387][ T5844] Bluetooth: hci1: command tx timeout [ 92.479188][ T5833] veth1_vlan: entered promiscuous mode [ 92.497153][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.511527][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.525962][ T5847] veth0_macvtap: entered promiscuous mode [ 92.532370][ T5844] Bluetooth: hci2: command tx timeout [ 92.539013][ T5847] veth1_macvtap: entered promiscuous mode [ 92.555711][ T5839] veth0_vlan: entered promiscuous mode [ 92.595864][ T5839] veth1_vlan: entered promiscuous mode [ 92.612665][ T5844] Bluetooth: hci4: command tx timeout [ 92.634058][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.638547][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.649513][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.671948][ T5843] veth0_vlan: entered promiscuous mode [ 92.682781][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.700934][ T5844] Bluetooth: hci3: command tx timeout [ 92.723575][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.732798][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.741948][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.750690][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.764713][ T5839] veth0_macvtap: entered promiscuous mode [ 92.786535][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.809184][ T5843] veth1_vlan: entered promiscuous mode [ 92.849897][ T5833] veth0_macvtap: entered promiscuous mode [ 92.886022][ T5839] veth1_macvtap: entered promiscuous mode [ 92.930208][ T5833] veth1_macvtap: entered promiscuous mode [ 92.996043][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.012282][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.020142][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.038365][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.075673][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.076409][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.095034][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.110988][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.122618][ T5843] veth0_macvtap: entered promiscuous mode [ 93.131591][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.139188][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.148340][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.159198][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.168530][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.185847][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.194754][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.203791][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.212529][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.230237][ T5843] veth1_macvtap: entered promiscuous mode [ 93.291937][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 93.300505][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.311447][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 93.336331][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 93.348705][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.366762][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.380727][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.388019][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.404618][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.520722][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.531000][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.545524][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.554372][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.603760][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.613387][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.649505][ T43] usb 3-1: GET_CAPABILITIES returned 0 [ 93.666201][ T43] usbtmc 3-1:16.0: can't read capabilities [ 93.708969][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.726174][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.785888][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.799773][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.807828][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.826427][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.870406][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.914903][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.922917][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.953183][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.984000][ T10] usb 3-1: USB disconnect, device number 2 [ 94.025669][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.048797][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.222239][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 94.232905][ T5961] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.458621][ T5967] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.523570][ T5973] capability: warning: `syz.0.8' uses deprecated v2 capabilities in a way that may be insecure [ 94.535748][ T5844] Bluetooth: hci1: command tx timeout [ 94.541605][ T5840] Bluetooth: hci0: command tx timeout [ 94.611710][ T5844] Bluetooth: hci2: command tx timeout [ 94.691813][ T5844] Bluetooth: hci4: command tx timeout [ 94.772390][ T5844] Bluetooth: hci3: command tx timeout [ 94.815268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.911858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.021874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 95.061096][ T5982] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 95.090112][ T5982] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 95.429687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.625216][ T5980] mmap: syz.3.6 (5980) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.661776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.670571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.308778][ T6006] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 96.317914][ T6006] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 97.016585][ T981] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.035692][ T6008] Zero length message leads to an empty skb [ 97.085333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.147707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.156716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.252334][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 97.279361][ T981] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 97.320348][ T981] usb 4-1: config 0 has no interface number 0 [ 97.337092][ T981] usb 4-1: config 0 interface 200 has no altsetting 0 [ 97.387002][ T981] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 97.412377][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.458642][ T981] usb 4-1: Product: syz [ 97.481574][ T981] usb 4-1: Manufacturer: syz [ 97.502238][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.527807][ T981] usb 4-1: SerialNumber: syz [ 97.564687][ T981] usb 4-1: config 0 descriptor?? [ 97.606946][ T6018] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.18'. [ 97.735710][ T6018] netlink: zone id is out of range [ 97.740909][ T6018] netlink: zone id is out of range [ 97.798088][ T981] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input5 [ 97.840001][ T6022] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 97.847693][ T6022] netlink: 224 bytes leftover after parsing attributes in process `syz.0.17'. [ 97.858523][ T6022] No such timeout policy "syz0" [ 97.864820][ T6018] netlink: zone id is out of range [ 97.882602][ T981] usb 4-1: USB disconnect, device number 2 [ 97.897041][ T6018] netlink: get zone limit has 8 unknown bytes [ 97.906359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.906853][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.991165][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.043374][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.096480][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.154640][ T6013] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 98.225122][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.968864][ T6030] netlink: 84 bytes leftover after parsing attributes in process `syz.3.20'. [ 100.320941][ T9] usb 5-1: USB disconnect, device number 2 [ 102.993963][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 104.307602][ T6085] netlink: 84 bytes leftover after parsing attributes in process `syz.1.34'. [ 108.677563][ T6114] tmpfs: Bad value for 'mpol' [ 109.351514][ T5894] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.584114][ T6118] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 109.613531][ T6118] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 109.821411][ T5894] usb 3-1: device descriptor read/64, error -71 [ 109.892904][ T6120] GUP no longer grows the stack in syz.1.44 (6120): 200000003000-20000000a000 (200000001000) [ 109.911872][ T6120] CPU: 1 UID: 0 PID: 6120 Comm: syz.1.44 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 109.911902][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.911921][ T6120] Call Trace: [ 109.911933][ T6120] [ 109.911942][ T6120] dump_stack_lvl+0x189/0x250 [ 109.911982][ T6120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.912005][ T6120] ? __pfx__printk+0x10/0x10 [ 109.912029][ T6120] ? find_vma+0xe7/0x160 [ 109.912072][ T6120] __get_user_pages+0x2a60/0x30b0 [ 109.912139][ T6120] ? __pfx___get_user_pages+0x10/0x10 [ 109.912179][ T6120] __gup_longterm_locked+0xd66/0x15b0 [ 109.912217][ T6120] ? try_grab_folio_fast+0x35b/0x4f0 [ 109.912241][ T6120] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 109.912278][ T6120] gup_fast_fallback+0x1cd4/0x2260 [ 109.912343][ T6120] ? __pfx_gup_fast_fallback+0x10/0x10 [ 109.912375][ T6120] ? stack_depot_save_flags+0x429/0x900 [ 109.912407][ T6120] ? pin_user_pages_fast+0x4d/0xb0 [ 109.912439][ T6120] iov_iter_extract_pages+0x35a/0x5e0 [ 109.912477][ T6120] extract_iter_to_sg+0xe46/0x24e0 [ 109.912518][ T6120] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 109.912562][ T6120] ? __asan_memset+0x22/0x50 [ 109.912594][ T6120] af_alg_get_rsgl+0x436/0x810 [ 109.912635][ T6120] aead_recvmsg+0x4cc/0x13f0 [ 109.912685][ T6120] ? __pfx_aead_recvmsg+0x10/0x10 [ 109.912707][ T6120] ? trace_sched_exit_tp+0x38/0x120 [ 109.912737][ T6120] ? __schedule+0x16c8/0x4c90 [ 109.912756][ T6120] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 109.912778][ T6120] ? __pfx_aead_recvmsg+0x10/0x10 [ 109.912803][ T6120] sock_recvmsg_nosec+0x183/0x1c0 [ 109.912832][ T6120] ____sys_recvmsg+0x3aa/0x460 [ 109.912860][ T6120] ? __pfx_____sys_recvmsg+0x10/0x10 [ 109.912895][ T6120] ? import_iovec+0x74/0xa0 [ 109.912927][ T6120] ___sys_recvmsg+0x1b5/0x510 [ 109.912951][ T6120] ? __pfx____sys_recvmsg+0x10/0x10 [ 109.913001][ T6120] ? __might_fault+0xb0/0x130 [ 109.913021][ T6120] do_recvmmsg+0x307/0x770 [ 109.913055][ T6120] ? __pfx_do_recvmmsg+0x10/0x10 [ 109.913086][ T6120] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 109.913124][ T6120] ? __pfx_do_futex+0x10/0x10 [ 109.913161][ T6120] __x64_sys_recvmmsg+0x190/0x240 [ 109.913180][ T6120] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 109.913195][ T6120] ? rcu_is_watching+0x15/0xb0 [ 109.913219][ T6120] ? do_syscall_64+0xbe/0x3b0 [ 109.913242][ T6120] do_syscall_64+0xfa/0x3b0 [ 109.913259][ T6120] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.913276][ T6120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.913294][ T6120] ? clear_bhb_loop+0x60/0xb0 [ 109.913315][ T6120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.913331][ T6120] RIP: 0033:0x7f87a1d8eb69 [ 109.913353][ T6120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.913368][ T6120] RSP: 002b:00007f87a2cde038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 109.913386][ T6120] RAX: ffffffffffffffda RBX: 00007f87a1fb5fa0 RCX: 00007f87a1d8eb69 [ 109.913400][ T6120] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008 [ 109.913410][ T6120] RBP: 00007f87a1e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 109.913420][ T6120] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 109.913430][ T6120] R13: 0000000000000000 R14: 00007f87a1fb5fa0 R15: 00007fffffda1b18 [ 109.913456][ T6120] [ 110.841867][ T981] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.132243][ T5894] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.271344][ T5894] usb 3-1: device descriptor read/64, error -71 [ 111.292377][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 111.299697][ T981] usb 4-1: config 0 has no interfaces? [ 111.321787][ T981] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01c1, bcdDevice=3c.41 [ 111.352324][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.394433][ T5894] usb usb3-port1: attempt power cycle [ 111.436338][ T981] usb 4-1: Product: syz [ 111.568787][ T981] usb 4-1: Manufacturer: syz [ 111.692108][ T981] usb 4-1: SerialNumber: syz [ 111.861384][ T5894] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.872596][ T981] usb 4-1: config 0 descriptor?? [ 111.911672][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 111.919071][ T5894] usb 3-1: device descriptor read/8, error -32 [ 112.541751][ T6143] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 112.753651][ T6151] netlink: 84 bytes leftover after parsing attributes in process `syz.1.52'. [ 112.774491][ T6149] /dev/nullb0: Can't open blockdev [ 113.261749][ T5894] usb 4-1: USB disconnect, device number 3 [ 115.723749][ T6172] process 'syz.2.58' launched './file1' with NULL argv: empty string added [ 116.083139][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 116.772591][ T5844] Bluetooth: Unexpected continuation frame (len 4) [ 117.083662][ T6184] autofs: Bad value for 'fd' [ 117.121357][ T5910] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.281321][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 117.299126][ T5910] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.456015][ T5910] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 118.574458][ T5910] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 118.888173][ T5910] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.921373][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.970270][ T5910] usb 3-1: Product: syz [ 118.990529][ T5910] usb 3-1: Manufacturer: syz [ 119.005342][ T5910] usb 3-1: SerialNumber: syz [ 119.147669][ T6208] netlink: 84 bytes leftover after parsing attributes in process `syz.4.67'. [ 119.453141][ T6212] ======================================================= [ 119.453141][ T6212] WARNING: The mand mount option has been deprecated and [ 119.453141][ T6212] and is ignored by this kernel. Remove the mand [ 119.453141][ T6212] option from the mount to silence this warning. [ 119.453141][ T6212] ======================================================= [ 120.256462][ T5910] cdc_ncm 3-1:1.0: bind() failure [ 120.283698][ T5910] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 120.306155][ T5910] cdc_ncm 3-1:1.1: bind() failure [ 120.358664][ T5910] usb 3-1: USB disconnect, device number 7 [ 120.557377][ T6224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.644423][ T6228] Bluetooth: MGMT ver 1.23 [ 121.589824][ T6242] netlink: 84 bytes leftover after parsing attributes in process `syz.3.80'. [ 122.661365][ T5910] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.881378][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 122.896931][ T5910] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 122.925396][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.982241][ T5910] usb 2-1: config 0 has no interface number 0 [ 123.004915][ T5910] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 123.052209][ T5910] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 123.121593][ T5910] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 123.181253][ T5910] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 2053, setting to 1024 [ 123.203462][ T5910] usb 2-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 123.213916][ T5910] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 123.232075][ T5910] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 123.244464][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.268085][ T5910] usb 2-1: config 0 descriptor?? [ 123.288744][ T6259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.307840][ T6259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.347839][ T5910] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 123.977902][ T6279] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 123.997879][ T5894] usb 2-1: USB disconnect, device number 2 [ 124.263305][ T6283] netlink: 84 bytes leftover after parsing attributes in process `syz.4.92'. [ 125.682507][ T6304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.99'. [ 126.755657][ T6317] syz.1.101: attempt to access beyond end of device [ 126.755657][ T6317] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 126.781401][ T6317] gfs2: error -5 reading superblock [ 127.167628][ T30] audit: type=1800 audit(1754162427.575:2): pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.104" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 127.450109][ T5206] udevd[5206]: worker [6281] terminated by signal 33 (Unknown signal 33) [ 128.239934][ T6331] fuse: Bad value for 'fd' [ 129.006848][ T30] audit: type=1326 audit(1754162429.415:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6333 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c98eb69 code=0x7ffc0000 [ 129.071878][ T30] audit: type=1326 audit(1754162429.415:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6333 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f791c98eb69 code=0x7ffc0000 [ 130.093325][ T30] audit: type=1326 audit(1754162429.415:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6333 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c98eb69 code=0x7ffc0000 [ 130.229535][ T30] audit: type=1326 audit(1754162429.415:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6333 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f791c98eb69 code=0x7ffc0000 [ 130.252485][ T30] audit: type=1326 audit(1754162429.415:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6333 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c98eb69 code=0x7ffc0000 [ 130.276274][ T30] audit: type=1326 audit(1754162429.445:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6333 comm="syz.3.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c98eb69 code=0x7ffc0000 [ 132.941854][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.948545][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.388996][ T6373] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.798664][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 136.451560][ T5902] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.468321][ T6401] bridge0: entered allmulticast mode [ 136.482831][ T6403] bridge_slave_1: left allmulticast mode [ 136.490251][ T6403] bridge_slave_1: left promiscuous mode [ 136.498239][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.555767][ T6403] bridge_slave_0: left allmulticast mode [ 136.562031][ T6403] bridge_slave_0: left promiscuous mode [ 136.568234][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.629110][ T6403] bridge0 (unregistering): left allmulticast mode [ 136.681287][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 136.699070][ T5902] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 136.726610][ T5902] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 136.741144][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.768474][ T5902] usb 4-1: Product: syz [ 136.775943][ T5902] usb 4-1: Manufacturer: syz [ 136.788533][ T5902] usb 4-1: SerialNumber: syz [ 136.827008][ T5902] usb 4-1: config 0 descriptor?? [ 136.853341][ T6404] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.907466][ T5902] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 137.246783][ T6417] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 137.454390][ T6419] tipc: Started in network mode [ 137.459424][ T6419] tipc: Node identity ac1414aa, cluster identity 4711 [ 137.492647][ T6419] tipc: Enabling of bearer rejected, failed to enable media [ 137.739996][ T6426] program syz.2.134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.543978][ T6432] trusted_key: syz.4.136 sent an empty control message without MSG_MORE. [ 138.574432][ T5924] usb 4-1: USB disconnect, device number 4 [ 140.352436][ T6440] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 140.947429][ T6457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.142'. [ 141.131578][ T5910] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 141.335452][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.370902][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.411523][ T5910] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 141.431480][ T5953] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 141.793363][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.819372][ T5910] usb 3-1: config 0 descriptor?? [ 141.823900][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.994423][ T5953] usb 4-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 142.016931][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.089083][ T5953] usb 4-1: config 0 descriptor?? [ 142.674418][ T6452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.707821][ T5953] kye 0003:0458:500F.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 142.759656][ T6452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.072041][ T5953] kye 0003:0458:500F.0001: unknown main item tag 0x3 [ 143.134034][ T6489] syz.3.147: attempt to access beyond end of device [ 143.134034][ T6489] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 143.151049][ T6489] gfs2: error -5 reading superblock [ 143.162734][ T5953] kye 0003:0458:500F.0001: hidraw0: USB HID v0.01 Device [HID 0458:500f] on usb-dummy_hcd.3-1/input0 [ 143.549140][ T5953] kye 0003:0458:500F.0001: tablet-enabling feature report not found [ 143.610151][ T5910] usbhid 3-1:0.0: can't add hid device: -71 [ 143.621040][ T5910] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 143.626466][ T5953] kye 0003:0458:500F.0001: tablet enabling failed [ 143.661857][ T5910] usb 3-1: USB disconnect, device number 8 [ 143.721311][ T5953] usb 4-1: USB disconnect, device number 5 [ 145.349769][ T6522] pimreg: entered allmulticast mode [ 145.396805][ T6522] pimreg: left allmulticast mode [ 146.810587][ T6528] sctp: failed to load transform for md5: -2 [ 149.068847][ T6548] netlink: 148 bytes leftover after parsing attributes in process `syz.0.167'. [ 149.201894][ T6548] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 149.504260][ T6556] hpfs: Bad magic ... probably not HPFS [ 154.495321][ T6601] warning: `syz.2.184' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 155.278945][ T6613] syz.2.189 uses obsolete (PF_INET,SOCK_PACKET) [ 155.576595][ T5910] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 155.763173][ T5910] usb 4-1: config 0 has an invalid interface number: 198 but max is 0 [ 155.776362][ T5910] usb 4-1: config 0 has no interface number 0 [ 155.782547][ T5910] usb 4-1: config 0 interface 198 has no altsetting 0 [ 155.792025][ T5910] usb 4-1: New USB device found, idVendor=1fb9, idProduct=0601, bcdDevice=b4.0f [ 155.810781][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.819336][ T5910] usb 4-1: Product: syz [ 155.823769][ T5910] usb 4-1: Manufacturer: syz [ 155.828405][ T5910] usb 4-1: SerialNumber: syz [ 155.836943][ T5910] usb 4-1: config 0 descriptor?? [ 156.377222][ T6631] overlay: Unknown parameter '/' [ 156.999357][ T5910] cp210x 4-1:0.198: cp210x converter detected [ 157.014332][ T5910] cp210x 4-1:0.198: failed to get vendor val 0x370b size 1: -71 [ 157.028639][ T5910] cp210x 4-1:0.198: querying part number failed [ 157.064891][ T5910] usb 4-1: cp210x converter now attached to ttyUSB0 [ 157.182934][ T5910] usb 4-1: USB disconnect, device number 6 [ 157.208794][ T5910] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 157.227436][ T5910] cp210x 4-1:0.198: device disconnected [ 159.038934][ T6647] syz_tun: entered allmulticast mode [ 159.058625][ T6646] syz_tun: left allmulticast mode [ 159.128925][ T6637] netlink: 212424 bytes leftover after parsing attributes in process `syz.2.194'. [ 160.383942][ T6675] delete_channel: no stack [ 162.487553][ T6706] netlink: zone id is out of range [ 162.548322][ T6706] netlink: zone id is out of range [ 162.555973][ T6706] netlink: zone id is out of range [ 162.562810][ T6706] netlink: zone id is out of range [ 162.570093][ T6706] netlink: zone id is out of range [ 162.575475][ T6706] netlink: zone id is out of range [ 162.580788][ T6706] netlink: zone id is out of range [ 162.639856][ T6706] netlink: zone id is out of range [ 162.683679][ T6706] netlink: zone id is out of range [ 162.763950][ T6706] netlink: zone id is out of range [ 164.689346][ T6747] bridge_slave_0: left allmulticast mode [ 164.709286][ T6747] bridge_slave_0: left promiscuous mode [ 164.719947][ T6747] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.750440][ T6747] bridge_slave_1: left allmulticast mode [ 164.764383][ T6747] bridge_slave_1: left promiscuous mode [ 164.775853][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.801798][ T6747] bond0: (slave bond_slave_0): Releasing backup interface [ 164.833977][ T6747] bond0: (slave bond_slave_1): Releasing backup interface [ 164.870173][ T6747] team0: Port device team_slave_0 removed [ 164.898153][ T6747] team0: Port device team_slave_1 removed [ 164.912697][ T6747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.920511][ T6747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.940462][ T6747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.002217][ T6747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.300309][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 167.463571][ T6822] FAULT_INJECTION: forcing a failure. [ 167.463571][ T6822] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 167.481719][ T6822] CPU: 1 UID: 0 PID: 6822 Comm: syz.3.254 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 167.481745][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.481756][ T6822] Call Trace: [ 167.481764][ T6822] [ 167.481773][ T6822] dump_stack_lvl+0x189/0x250 [ 167.481801][ T6822] ? __pfx____ratelimit+0x10/0x10 [ 167.481823][ T6822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.481845][ T6822] ? __pfx__printk+0x10/0x10 [ 167.481870][ T6822] ? __might_fault+0xb0/0x130 [ 167.481901][ T6822] should_fail_ex+0x414/0x560 [ 167.481927][ T6822] _copy_from_user+0x2d/0xb0 [ 167.481957][ T6822] ___sys_recvmsg+0x12e/0x510 [ 167.481983][ T6822] ? __pfx____sys_recvmsg+0x10/0x10 [ 167.482033][ T6822] ? __might_fault+0xb0/0x130 [ 167.482057][ T6822] do_recvmmsg+0x307/0x770 [ 167.482085][ T6822] ? __pfx_do_recvmmsg+0x10/0x10 [ 167.482117][ T6822] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 167.482160][ T6822] __x64_sys_recvmmsg+0x190/0x240 [ 167.482183][ T6822] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 167.482200][ T6822] ? rcu_is_watching+0x15/0xb0 [ 167.482228][ T6822] ? do_syscall_64+0xbe/0x3b0 [ 167.482254][ T6822] do_syscall_64+0xfa/0x3b0 [ 167.482274][ T6822] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.482294][ T6822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.482313][ T6822] ? clear_bhb_loop+0x60/0xb0 [ 167.482355][ T6822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.482375][ T6822] RIP: 0033:0x7f791c98eb69 [ 167.482393][ T6822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.482410][ T6822] RSP: 002b:00007f791d83f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 167.482432][ T6822] RAX: ffffffffffffffda RBX: 00007f791cbb5fa0 RCX: 00007f791c98eb69 [ 167.482447][ T6822] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 167.482460][ T6822] RBP: 00007f791d83f090 R08: 0000000000000000 R09: 0000000000000000 [ 167.482484][ T6822] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 167.482495][ T6822] R13: 0000000000000000 R14: 00007f791cbb5fa0 R15: 00007fffd0678578 [ 167.482525][ T6822] [ 167.492637][ T6826] net_ratelimit: 5 callbacks suppressed [ 167.492655][ T6826] openvswitch: netlink: EtherType 50a is less than min 600 [ 167.785634][ T6828] input: syz1 as /devices/virtual/input/input6 [ 167.858311][ T6828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.255'. [ 170.270017][ T6861] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 172.866699][ T6893] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 172.919025][ T6893] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 172.946622][ T6893] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 172.976849][ T6893] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 173.189094][ T6893] geneve2: entered promiscuous mode [ 173.204338][ T6893] geneve2: entered allmulticast mode [ 173.611649][ T5924] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 173.620343][ T6893] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 173.670607][ T6893] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 173.731761][ T6893] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 173.766804][ T6893] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 174.179646][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 174.210031][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.236706][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.267679][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 174.430204][ T5924] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 174.439622][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.456457][ T5924] usb 4-1: config 0 descriptor?? [ 174.591663][ T6905] xt_nat: multiple ranges no longer supported [ 174.868062][ T5910] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 175.021667][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 175.040351][ T5910] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.066344][ T5910] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.110024][ T5910] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.135346][ T5924] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 175.151719][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.171867][ T5910] usb 3-1: Product: syz [ 175.186833][ T5910] usb 3-1: Manufacturer: syz [ 175.206901][ T5910] usb 3-1: SerialNumber: syz [ 175.305703][ T5924] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 175.339998][ T5924] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 175.398086][ T5910] usb 3-1: can't set config #1, error -71 [ 175.439912][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 175.488075][ T5924] usb 4-1: USB disconnect, device number 7 [ 175.518102][ T5910] usb 3-1: USB disconnect, device number 9 [ 175.532355][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 175.579484][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 175.609175][ T9] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 176.696535][ T6921] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 177.041350][ T5924] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 177.155829][ T5902] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 177.190321][ T5924] usb 3-1: device descriptor read/64, error -71 [ 177.423863][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.461129][ T5902] usb 2-1: config 0 has no interfaces? [ 177.461497][ T5924] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 177.472402][ T5902] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 177.581378][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.635374][ T5902] usb 2-1: config 0 descriptor?? [ 177.752661][ T5924] usb 3-1: device descriptor read/64, error -71 [ 177.892846][ T5924] usb usb3-port1: attempt power cycle [ 179.002906][ T5924] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 179.022609][ T5924] usb 3-1: device descriptor read/8, error -71 [ 179.043885][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.296'. [ 179.053367][ T6962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.305400][ T6966] xt_hashlimit: max too large, truncated to 1048576 [ 179.371679][ T5924] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 179.451950][ T5924] usb 3-1: device descriptor read/8, error -71 [ 179.632665][ T5924] usb usb3-port1: unable to enumerate USB device [ 179.812288][ T6968] netlink: 40 bytes leftover after parsing attributes in process `syz.1.288'. [ 180.403014][ T6978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.079055][ T6983] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.087511][ T6983] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.147839][ T6983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.301'. [ 182.207395][ T5924] usb 2-1: USB disconnect, device number 3 [ 182.293090][ T6986] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 184.335533][ T7020] program syz.1.311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.434086][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.313'. [ 188.761825][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 189.289704][ T6945] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 189.782331][ T7080] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.326'. [ 191.650680][ T7097] netlink: 36 bytes leftover after parsing attributes in process `syz.3.333'. [ 192.221414][ T981] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 192.392050][ T981] usb 2-1: config index 0 descriptor too short (expected 897, got 27) [ 192.427384][ T981] usb 2-1: config 2 has an invalid interface number: 1 but max is -1 [ 192.491239][ T981] usb 2-1: config 2 has an invalid interface number: 1 but max is -1 [ 192.509495][ T981] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 0 [ 192.563868][ T981] usb 2-1: config 2 has no interface number 0 [ 192.641396][ T981] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da [ 192.666414][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.706472][ T981] usb 2-1: Product: syz [ 192.723805][ T981] usb 2-1: Manufacturer: syz [ 192.744241][ T981] usb 2-1: SerialNumber: syz [ 193.173290][ T7092] netlink: 32 bytes leftover after parsing attributes in process `syz.1.331'. [ 193.442719][ T981] cdc_ncm 2-1:2.1: CDC Union missing and no IAD found [ 193.449588][ T981] cdc_ncm 2-1:2.1: bind() failure [ 193.470595][ T981] usb 2-1: no audio or video endpoints found [ 193.506332][ T981] usb 2-1: USB disconnect, device number 4 [ 193.512832][ T7126] bridge0: entered allmulticast mode [ 193.539671][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 193.611380][ T7126] bridge_slave_1: left allmulticast mode [ 193.625297][ T7126] bridge_slave_1: left promiscuous mode [ 193.662189][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.765526][ T7126] bridge_slave_0: left allmulticast mode [ 194.513842][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.520221][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.626411][ T7126] bridge_slave_0: left promiscuous mode [ 194.632691][ T7126] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.183570][ T7126] bridge0 (unregistering): left allmulticast mode [ 195.452266][ T7145] batman_adv: batadv0: Adding interface: dummy0 [ 195.458548][ T7145] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.163161][ T7145] batman_adv: batadv0: Interface activated: dummy0 [ 196.743169][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 196.779974][ T7165] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 196.797576][ T7165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.471647][ T7181] syz.1.357: attempt to access beyond end of device [ 198.471647][ T7181] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 198.485131][ T7181] gfs2: error -5 reading superblock [ 198.851658][ T7191] ip6erspan0: entered promiscuous mode [ 198.903349][ T7191] tipc: Started in network mode [ 198.908477][ T7191] tipc: Node identity 03000000000000004879ffffffffffff, cluster identity 4711 [ 199.841271][ T1218] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 199.866001][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.008844][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.053429][ T1218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 200.071269][ T1218] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 200.090635][ T1218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.128856][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.139196][ T1218] usb 2-1: config 0 descriptor?? [ 200.140948][ T7178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 200.478336][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 200.490987][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.674948][ T1218] aquacomputer_d5next 0003:0C70:F011.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.1-1/input0 [ 202.246437][ T7219] netlink: 108 bytes leftover after parsing attributes in process `syz.0.369'. [ 202.255738][ T7219] netlink: 108 bytes leftover after parsing attributes in process `syz.0.369'. [ 202.264729][ T7219] netlink: 108 bytes leftover after parsing attributes in process `syz.0.369'. [ 202.485335][ T5902] usb 2-1: USB disconnect, device number 5 [ 202.726214][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.735449][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.746364][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.966620][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.989589][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.874709][ T34] bond0 (unregistering): Released all slaves [ 205.122225][ T5840] Bluetooth: hci0: command tx timeout [ 205.662391][ T34] bond1 (unregistering): Released all slaves [ 205.701491][ T7226] netlink: 2 bytes leftover after parsing attributes in process `syz.2.371'. [ 207.190704][ T5840] Bluetooth: hci0: command tx timeout [ 208.367830][ T7276] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 209.261305][ T5840] Bluetooth: hci0: command tx timeout [ 209.993234][ T7288] Cannot find add_set index 0 as target [ 211.651726][ T51] Bluetooth: hci0: command tx timeout [ 211.717401][ T34] hsr_slave_0: left promiscuous mode [ 211.739931][ T34] hsr_slave_1: left promiscuous mode [ 211.748532][ T34] batman_adv: batadv0: Interface deactivated: dummy0 [ 211.758452][ T34] batman_adv: batadv0: Removing interface: dummy0 [ 211.818907][ T34] veth1_macvtap: left promiscuous mode [ 211.827787][ T34] veth0_macvtap: left promiscuous mode [ 211.836121][ T34] veth1_vlan: left promiscuous mode [ 211.844433][ T34] veth0_vlan: left promiscuous mode [ 212.541300][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 212.543243][ T5156] Bluetooth: hci4: command 0x0406 tx timeout [ 212.548082][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 212.553359][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 214.466456][ T7230] chnl_net:caif_netlink_parms(): no params data found [ 214.709513][ T7322] overlayfs: failed to resolve './file0': -2 [ 214.754383][ T7230] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.758311][ T7322] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 214.758311][ T7322] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ×ðÚ<“™+`# ÷Ž¢k²–' [ 214.776991][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.784349][ T7230] bridge_slave_0: entered allmulticast mode [ 214.793403][ T7230] bridge_slave_0: entered promiscuous mode [ 214.818479][ T7230] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.833560][ T7230] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.841540][ T7230] bridge_slave_1: entered allmulticast mode [ 214.894778][ T7230] bridge_slave_1: entered promiscuous mode [ 214.927830][ T7325] overlayfs: missing 'lowerdir' [ 215.192790][ T7230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.967731][ T7230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.153146][ T7230] team0: Port device team_slave_0 added [ 216.189504][ T7230] team0: Port device team_slave_1 added [ 216.262405][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.269568][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.300462][ T7230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.323258][ T7335] netlink: 72 bytes leftover after parsing attributes in process `syz.0.400'. [ 216.333189][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.351333][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.381728][ T7230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.452094][ T981] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 216.524338][ T7230] hsr_slave_0: entered promiscuous mode [ 216.536592][ T7230] hsr_slave_1: entered promiscuous mode [ 216.542980][ T7230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.553102][ T7230] Cannot create hsr debugfs directory [ 216.612984][ T981] usb 2-1: Using ep0 maxpacket: 32 [ 216.667038][ T981] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 216.701347][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.730095][ T981] usb 2-1: Product: syz [ 216.747972][ T981] usb 2-1: Manufacturer: syz [ 216.765414][ T981] usb 2-1: SerialNumber: syz [ 216.796969][ T981] usb 2-1: config 0 descriptor?? [ 216.828961][ T981] cdc_ether 2-1:0.0: More than one union descriptor, skipping ... [ 216.858996][ T981] usb 2-1: bad CDC descriptors [ 216.888416][ T981] usb 2-1: unsupported MDLM descriptors [ 217.031045][ T981] usb 2-1: USB disconnect, device number 6 [ 217.612350][ T7230] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.633761][ T7230] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 217.655834][ T7230] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.679185][ T7230] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.906329][ T7230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.917073][ T7360] tipc: Started in network mode [ 217.924641][ T7360] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 217.933434][ T7360] tipc: Enabled bearer , priority 0 [ 217.969118][ T7230] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.987178][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.994418][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.030030][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.037236][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.119454][ T7363] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 218.457051][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 219.128449][ T6945] tipc: Node number set to 11578026 [ 219.266839][ T6945] IPVS: starting estimator thread 0... [ 219.768003][ T7373] IPVS: using max 40 ests per chain, 96000 per kthread [ 219.889291][ T7230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.890798][ T7390] autofs: Bad value for 'fd' [ 221.321074][ T7230] veth0_vlan: entered promiscuous mode [ 221.444063][ T7230] veth1_vlan: entered promiscuous mode [ 221.588048][ T7230] veth0_macvtap: entered promiscuous mode [ 221.629076][ T7230] veth1_macvtap: entered promiscuous mode [ 221.727720][ T7230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.768313][ T7230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.806959][ T7230] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.957565][ T7230] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.965848][ T7407] binder: 7406:7407 ioctl c0306201 0 returned -14 [ 221.991556][ T7230] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.011429][ T7230] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.210240][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.234536][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.274203][ T7410] binder: BINDER_SET_CONTEXT_MGR already set [ 222.280945][ T7410] binder: 7406:7410 ioctl 4018620d 200000000040 returned -16 [ 222.328168][ T6657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.353370][ T6657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.206478][ T7422] sctp: failed to load transform for md5: -2 [ 224.449249][ T7421] sctp: failed to load transform for md5: -2 [ 225.329187][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 225.455384][ T5902] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 226.409936][ T5902] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 226.419493][ T5902] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 226.432609][ T5902] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 226.441999][ T5902] usb 4-1: config 0 has no interface number 0 [ 227.242944][ T5902] usb 4-1: config 0 has no interface number 1 [ 227.263658][ T7458] sctp: [Deprecated]: syz.5.429 (pid 7458) Use of int in max_burst socket option deprecated. [ 227.263658][ T7458] Use struct sctp_assoc_value instead [ 227.279228][ T5902] usb 4-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 227.322104][ T5902] usb 4-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 227.322167][ T5902] usb 4-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 227.542153][ T5902] usb 4-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 227.556038][ T5902] usb 4-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 227.567859][ T5902] usb 4-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 227.639960][ T5902] usb 4-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 28213, setting to 1024 [ 227.742417][ T5902] usb 4-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 227.775631][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 227.790692][ T5902] usb 4-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 227.873764][ T5902] usb 4-1: config 0 interface 66 has no altsetting 0 [ 227.914951][ T5902] usb 4-1: string descriptor 0 read error: -71 [ 227.951256][ T5902] usb 4-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 227.985177][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.016122][ T5902] usb 4-1: config 0 descriptor?? [ 228.023884][ T5902] usb 4-1: can't set config #0, error -71 [ 228.033191][ T5902] usb 4-1: USB disconnect, device number 8 [ 228.121369][ T981] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 228.333013][ T981] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 228.391745][ T981] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.405927][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 228.438170][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 228.461377][ T5902] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 228.483257][ T981] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.496245][ T981] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.505459][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.545321][ T981] usb 3-1: config 0 descriptor?? [ 229.611053][ T30] audit: type=1804 audit(1754162529.185:9): pid=7487 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.439" name="/newroot/74/file0" dev="tmpfs" ino=407 res=1 errno=0 [ 229.635073][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.651040][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.666372][ T5902] usb 4-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 229.676638][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.686438][ T7471] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 229.725124][ T5902] usb 4-1: config 0 descriptor?? [ 229.899936][ T981] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 229.907557][ T981] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 229.915034][ T981] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 229.989465][ T981] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 230.078913][ T7496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.088523][ T7496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.253298][ T5902] usbhid 4-1:0.0: can't add hid device: -71 [ 230.259692][ T5902] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 230.345310][ T5902] usb 4-1: USB disconnect, device number 9 [ 232.019043][ T5902] usb 3-1: USB disconnect, device number 14 [ 233.391998][ T7535] tipc: Enabling of bearer rejected, already enabled [ 233.514343][ T7543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.458'. [ 233.654564][ T7548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.459'. [ 233.671592][ T5902] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 233.841583][ T5902] usb 4-1: device descriptor read/64, error -71 [ 234.152700][ T5902] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 234.311402][ T5902] usb 4-1: device descriptor read/64, error -71 [ 234.924931][ T5902] usb usb4-port1: attempt power cycle [ 234.947543][ T7561] sp0: Synchronizing with TNC [ 235.169535][ T7568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.468'. [ 235.282712][ T5902] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 235.322005][ T5902] usb 4-1: device descriptor read/8, error -71 [ 236.611534][ T5902] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 236.912255][ T5902] usb 4-1: device descriptor read/8, error -71 [ 237.024182][ T5902] usb usb4-port1: unable to enumerate USB device [ 237.069823][ T7583] netlink: zone id is out of range [ 237.078484][ T7583] netlink: zone id is out of range [ 237.084847][ T7583] netlink: zone id is out of range [ 237.090149][ T7583] netlink: zone id is out of range [ 237.098452][ T7583] netlink: zone id is out of range [ 237.104691][ T7583] netlink: zone id is out of range [ 237.109907][ T7583] netlink: zone id is out of range [ 237.118806][ T7583] netlink: zone id is out of range [ 237.245793][ T7583] netlink: zone id is out of range [ 237.266991][ T7583] netlink: zone id is out of range [ 237.421430][ T5902] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 237.581621][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 238.232727][ T5902] usb 4-1: config index 0 descriptor too short (expected 1821, got 853) [ 238.463441][ T5902] usb 4-1: config 0 has an invalid interface number: 103 but max is 2 [ 238.477892][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.510352][ T5902] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 238.733760][ T5902] usb 4-1: config 0 has no interface number 1 [ 238.740601][ T5902] usb 4-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 238.758753][ T5902] usb 4-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 238.770031][ T5902] usb 4-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 238.781055][ T5902] usb 4-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 239.561894][ T5902] usb 4-1: config 0 interface 103 has no altsetting 0 [ 239.583538][ T5902] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 239.594662][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.611479][ T5902] usb 4-1: Product: syz [ 239.621778][ T5902] usb 4-1: Manufacturer: syz [ 239.626521][ T5902] usb 4-1: SerialNumber: syz [ 239.643150][ T5902] usb 4-1: config 0 descriptor?? [ 241.563307][ T7621] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 241.572921][ T7621] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 242.973287][ T5902] videodev: could not get a free minor [ 242.978869][ T5902] dsbr100 4-1:0.0: couldn't register video device [ 243.039129][ T5902] dsbr100 4-1:0.0: probe with driver dsbr100 failed with error -23 [ 243.220460][ T5902] usb 4-1: USB disconnect, device number 14 [ 244.662961][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 245.741254][ T5924] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 245.918534][ T5924] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 245.927449][ T5924] usb 2-1: config 0 has no interface number 0 [ 245.943888][ T5924] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 246.090962][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.099537][ T5924] usb 2-1: Product: syz [ 246.103824][ T5924] usb 2-1: Manufacturer: syz [ 246.108444][ T5924] usb 2-1: SerialNumber: syz [ 246.116939][ T5924] usb 2-1: config 0 descriptor?? [ 247.108581][ T5924] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 247.119267][ T5924] usb 2-1: No valid video chain found. [ 247.128584][ T5924] usb 2-1: USB disconnect, device number 7 [ 248.232105][ T7679] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 249.851417][ T5894] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 249.900748][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.503'. [ 250.013348][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.030114][ T5894] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 250.050855][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.086352][ T5894] usb 2-1: config 0 descriptor?? [ 250.173563][ T7720] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 250.408674][ T7723] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 251.651447][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.517'. [ 251.660817][ T7742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.669085][ T7742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.134504][ T7742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.154554][ T7742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.952949][ T5894] usbhid 2-1:0.0: can't add hid device: -71 [ 253.034860][ T5894] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 253.141326][ T5894] usb 2-1: USB disconnect, device number 8 [ 254.481306][ T981] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 254.484251][ T5953] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 254.635137][ T6027] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.671222][ T981] usb 4-1: Using ep0 maxpacket: 32 [ 254.699687][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.746242][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.782459][ T981] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 254.831061][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.885853][ T981] usb 4-1: config 0 descriptor?? [ 254.894215][ T5953] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 254.964947][ T6027] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.976458][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.022136][ T5953] usb 2-1: config 0 descriptor?? [ 255.090968][ T6027] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.182443][ T6027] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.328429][ T981] usbhid 4-1:0.0: can't add hid device: -32 [ 255.339655][ T981] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 255.356493][ T6027] bridge_slave_1: left allmulticast mode [ 255.365724][ T6027] bridge_slave_1: left promiscuous mode [ 255.372830][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.523383][ T6027] bridge_slave_0: left allmulticast mode [ 255.529131][ T6027] bridge_slave_0: left promiscuous mode [ 255.551418][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.573151][ T5894] usb 4-1: USB disconnect, device number 15 [ 255.597709][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.607164][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.615092][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.633261][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.643427][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.728433][ T5953] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 255.761934][ T5953] asix 2-1:0.0: probe with driver asix failed with error -71 [ 255.769757][ T30] audit: type=1326 audit(1754162556.175:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7799 comm="syz.3.537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f791c98eb69 code=0x0 [ 255.800491][ T5953] usb 2-1: USB disconnect, device number 9 [ 255.817017][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.834250][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.898051][ T7804] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.537' sets config #-3 [ 256.014855][ T7808] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 256.177116][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.189515][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.203668][ T6027] bond0 (unregistering): Released all slaves [ 256.230057][ T7812] gtp0: entered promiscuous mode [ 256.407472][ T7815] batman_adv: batadv0: Adding interface: dummy0 [ 256.415745][ T7815] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.441333][ T7815] batman_adv: batadv0: Interface activated: dummy0 [ 256.496572][ T7818] net_ratelimit: 12 callbacks suppressed [ 256.496587][ T7818] batadv0: mtu less than device minimum [ 256.510926][ T7818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.522460][ T7818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.534228][ T7818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.546120][ T7818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.557926][ T7818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.569478][ T7818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.581113][ T7818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.593034][ T7818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.604916][ T7818] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 257.011240][ T6027] hsr_slave_0: left promiscuous mode [ 257.042346][ T6027] hsr_slave_1: left promiscuous mode [ 257.086718][ T6027] veth1_macvtap: left promiscuous mode [ 257.104487][ T6027] veth0_macvtap: left promiscuous mode [ 257.110313][ T6027] veth1_vlan: left promiscuous mode [ 257.131918][ T6027] veth0_vlan: left promiscuous mode [ 257.731281][ T5844] Bluetooth: hci0: command tx timeout [ 258.224727][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 258.280135][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 258.518067][ T5924] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 258.917019][ T5924] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 258.938893][ T5924] usb 3-1: config 0 has no interface number 0 [ 259.169804][ T5924] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 259.257701][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.398574][ T5924] usb 3-1: Product: syz [ 259.429719][ T5924] usb 3-1: Manufacturer: syz [ 259.436716][ T5924] usb 3-1: SerialNumber: syz [ 259.526144][ T5924] usb 3-1: config 0 descriptor?? [ 259.597031][ T7851] netlink: 40 bytes leftover after parsing attributes in process `syz.3.554'. [ 259.812231][ T5844] Bluetooth: hci0: command tx timeout [ 260.099071][ T5924] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 260.328857][ T5924] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 260.494579][ T5924] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 260.589192][ T5924] usb 3-1: media controller created [ 260.653442][ T7856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.552'. [ 260.697138][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 261.496577][ T7796] chnl_net:caif_netlink_parms(): no params data found [ 261.704563][ T5924] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 261.846373][ T5924] usb 3-1: USB disconnect, device number 15 [ 261.877585][ T7796] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.896505][ T5844] Bluetooth: hci0: command tx timeout [ 261.916171][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.947442][ T7796] bridge_slave_0: entered allmulticast mode [ 261.955528][ T7796] bridge_slave_0: entered promiscuous mode [ 261.964448][ T7796] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.973085][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.980424][ T7796] bridge_slave_1: entered allmulticast mode [ 261.988346][ T7796] bridge_slave_1: entered promiscuous mode [ 262.059574][ T7796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.073005][ T7796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.122123][ T7796] team0: Port device team_slave_0 added [ 262.148752][ T7796] team0: Port device team_slave_1 added [ 262.239249][ T7796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.261231][ T7796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.309675][ T7796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.339253][ T7796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.357647][ T7796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.414496][ T7796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.516582][ T6027] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.709111][ T6027] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.965704][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.975499][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.983627][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.992899][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.002114][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.120374][ T7796] hsr_slave_0: entered promiscuous mode [ 263.136668][ T7796] hsr_slave_1: entered promiscuous mode [ 263.143118][ T7796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.150913][ T7796] Cannot create hsr debugfs directory [ 263.216099][ T6027] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.906265][ T6027] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.194048][ T7893] vivid-000: disconnect [ 264.581314][ T5844] Bluetooth: hci0: command tx timeout [ 264.602680][ T7888] vivid-000: reconnect [ 264.938817][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 265.155416][ T5844] Bluetooth: hci2: command tx timeout [ 266.391421][ T6027] bridge_slave_1: left allmulticast mode [ 266.397500][ T6027] bridge_slave_1: left promiscuous mode [ 266.408393][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.419737][ T6027] bridge_slave_0: left allmulticast mode [ 266.429492][ T6027] bridge_slave_0: left promiscuous mode [ 266.438935][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.591398][ T5917] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 267.171569][ T5844] Bluetooth: hci2: command tx timeout [ 267.257575][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.268411][ T5917] usb 4-1: config 0 interface 0 has no altsetting 0 [ 267.275380][ T5917] usb 4-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 267.284681][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.295943][ T5917] usb 4-1: config 0 descriptor?? [ 267.559477][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.652584][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.677626][ T6027] bond0 (unregistering): Released all slaves [ 267.771297][ T5910] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 267.850582][ T6027] tipc: Disabling bearer [ 267.858113][ T6027] tipc: Left network mode [ 267.931643][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 267.938733][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 267.961726][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 267.978418][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 267.980796][ T7932] net_ratelimit: 10 callbacks suppressed [ 267.980815][ T7932] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 267.989551][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 268.013674][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 268.033695][ T7932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.038301][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 268.055242][ T7879] chnl_net:caif_netlink_parms(): no params data found [ 268.067321][ T5910] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 268.077510][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.085621][ T5910] usb 3-1: Product: syz [ 268.089971][ T5910] usb 3-1: Manufacturer: syz [ 268.094788][ T5910] usb 3-1: SerialNumber: syz [ 268.129949][ T5910] usb 3-1: config 0 descriptor?? [ 268.152702][ T7796] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 268.164615][ T7796] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 268.223012][ T7796] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 268.258907][ T7796] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 268.318510][ T6027] hsr_slave_0: left promiscuous mode [ 268.328622][ T6027] hsr_slave_1: left promiscuous mode [ 268.336786][ T6027] batman_adv: batadv0: Interface deactivated: dummy0 [ 268.347746][ T6027] batman_adv: batadv0: Removing interface: dummy0 [ 268.360006][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.372590][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.385061][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.392855][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.413179][ T6027] veth1_macvtap: left promiscuous mode [ 268.418745][ T6027] veth0_macvtap: left promiscuous mode [ 268.424539][ T6027] veth1_vlan: left promiscuous mode [ 268.429875][ T6027] veth0_vlan: left promiscuous mode [ 268.808822][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.821956][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.831113][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.839242][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.847010][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.857101][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.865033][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.872749][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.880346][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.887956][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.899586][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.907535][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.926939][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.935059][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.943020][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.950011][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.956900][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.966173][ T5910] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 268.972644][ T5910] input input9: Timeout waiting for response from device. [ 268.985030][ T5910] usb 3-1: USB disconnect, device number 16 [ 269.256473][ T5844] Bluetooth: hci2: command tx timeout [ 269.311035][ T43] usb 4-1: USB disconnect, device number 16 [ 269.799961][ T7954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.583'. [ 270.835004][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 270.872664][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 271.235344][ T7953] netlink: 'syz.3.583': attribute type 1 has an invalid length. [ 271.313737][ T7879] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.331303][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.338562][ T7879] bridge_slave_0: entered allmulticast mode [ 271.344490][ T5844] Bluetooth: hci2: command tx timeout [ 271.360532][ T7879] bridge_slave_0: entered promiscuous mode [ 271.389053][ T7954] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.398387][ T7954] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.408377][ T7954] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.417531][ T7954] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.531667][ T7879] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.539124][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.557303][ T7879] bridge_slave_1: entered allmulticast mode [ 271.642782][ T7879] bridge_slave_1: entered promiscuous mode [ 273.733982][ T7879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.776120][ T7879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.951261][ T7879] team0: Port device team_slave_0 added [ 273.975481][ T7879] team0: Port device team_slave_1 added [ 273.986950][ T7987] fuse: Bad value for 'fd' [ 274.026556][ T7990] Bluetooth: MGMT ver 1.23 [ 274.115372][ T7879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.148938][ T7879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.176048][ T7879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.188993][ T7879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.196229][ T7879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.223517][ T7879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.278735][ T6027] IPVS: stop unused estimator thread 0... [ 275.257365][ T7879] hsr_slave_0: entered promiscuous mode [ 275.263758][ T7879] hsr_slave_1: entered promiscuous mode [ 275.277180][ T7879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.288105][ T7879] Cannot create hsr debugfs directory [ 275.497218][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.600'. [ 275.698241][ T7796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.871450][ T5917] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 276.048260][ T5917] usb 4-1: device descriptor read/64, error -71 [ 276.076108][ T7796] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.099422][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.106661][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.143156][ T4410] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.150353][ T4410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.163868][ T7879] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 276.178974][ T7879] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 276.189214][ T7879] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 276.202309][ T7879] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 276.311535][ T5917] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 276.379208][ T7879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.404725][ T7879] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.418752][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.425977][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.449612][ T4410] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.456831][ T4410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.461611][ T5917] usb 4-1: device descriptor read/64, error -71 [ 276.576145][ T5917] usb usb4-port1: attempt power cycle [ 276.579240][ T7796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.091386][ T5917] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 277.123607][ T5917] usb 4-1: device descriptor read/8, error -71 [ 277.371259][ T5917] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 277.401965][ T5917] usb 4-1: device descriptor read/8, error -71 [ 277.540886][ T5917] usb usb4-port1: unable to enumerate USB device [ 278.607994][ T7879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.728889][ T7796] veth0_vlan: entered promiscuous mode [ 278.767263][ T7796] veth1_vlan: entered promiscuous mode [ 278.857497][ T7796] veth0_macvtap: entered promiscuous mode [ 278.886115][ T7796] veth1_macvtap: entered promiscuous mode [ 278.901702][ T43] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 278.935600][ T7796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.975486][ T7796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.020008][ T8061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.048219][ T7796] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.061936][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 279.065009][ T7796] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.077629][ T7796] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.086422][ T43] usb 3-1: config 3 has an invalid interface number: 227 but max is 0 [ 279.086447][ T43] usb 3-1: config 3 has no interface number 0 [ 279.109826][ T7796] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.111424][ T43] usb 3-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=8a.99 [ 279.152902][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.185819][ T43] usb 3-1: Product: syz [ 279.190051][ T43] usb 3-1: Manufacturer: syz [ 279.196003][ T43] usb 3-1: SerialNumber: syz [ 279.244211][ T43] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 279.272745][ T43] cxusb: set interface failed [ 279.282912][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 279.323660][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 279.354559][ T6027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.355335][ T43] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 279.381231][ T6027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.403731][ T43] usb 3-1: media controller created [ 279.456807][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.505345][ T4410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.535073][ T4410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.609064][ T7879] veth0_vlan: entered promiscuous mode [ 279.634528][ T43] DVB: Unable to find symbol lgdt330x_attach() [ 279.656855][ T43] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 279.676191][ T7879] veth1_vlan: entered promiscuous mode [ 279.694863][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 279.700749][ T43] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 279.743576][ T43] usb 3-1: USB disconnect, device number 17 [ 279.798623][ T7879] veth0_macvtap: entered promiscuous mode [ 279.830772][ T7879] veth1_macvtap: entered promiscuous mode [ 279.868693][ T43] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 279.913363][ T7879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.964992][ T7879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.994728][ T8080] could not allocate digest TFM handle blake2s-224-x86 [ 280.041349][ T5910] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 280.061884][ T7879] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.094491][ T7879] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.110386][ T7879] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.134338][ T7879] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.253853][ T5910] usb 4-1: no configurations [ 280.270800][ T5910] usb 4-1: can't read configurations, error -22 [ 280.396475][ T6657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.406335][ T6657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.431812][ T5910] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 280.504014][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.523239][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.604525][ T5910] usb 4-1: no configurations [ 280.623486][ T5910] usb 4-1: can't read configurations, error -22 [ 280.642988][ T5910] usb usb4-port1: attempt power cycle [ 280.993466][ T8109] xt_TCPMSS: Only works on TCP SYN packets [ 281.635860][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.6.534'. [ 281.931568][ T8110] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 282.280580][ T5910] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 282.366016][ T5910] usb 4-1: no configurations [ 282.381495][ T5910] usb 4-1: can't read configurations, error -22 [ 282.533390][ T5910] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 282.543369][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 282.562570][ T5910] usb 4-1: no configurations [ 282.567224][ T5910] usb 4-1: can't read configurations, error -22 [ 282.572869][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.621'. [ 282.581778][ T5910] usb usb4-port1: unable to enumerate USB device [ 282.670705][ T8116] netlink: 'syz.2.621': attribute type 6 has an invalid length. [ 284.790852][ T8161] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 285.411312][ T5910] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 285.561435][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 285.630093][ T5910] usb 3-1: unable to get BOS descriptor or descriptor too short [ 285.642231][ T5910] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 285.699605][ T5910] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 285.747633][ T5910] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.774828][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.807333][ T5910] usb 3-1: Product: syz [ 285.827715][ T5910] usb 3-1: Manufacturer: syz [ 285.843231][ T5910] usb 3-1: SerialNumber: syz [ 286.612720][ T5910] cdc_ncm 3-1:1.0: bind() failure [ 286.663026][ T5910] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 286.683391][ T5910] cdc_ncm 3-1:1.1: bind() failure [ 286.702970][ T5910] usb 3-1: USB disconnect, device number 18 [ 287.698671][ T8174] vti0: entered promiscuous mode [ 287.709168][ T8174] vti0: entered allmulticast mode [ 288.070622][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bdd2400: rx timeout, send abort [ 288.081899][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805bdd2400: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 288.097075][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033656000: rx timeout, send abort [ 288.110379][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888033656000: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 290.018475][ T8231] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 290.018475][ T8231] The task syz.2.654 (8231) triggered the difference, watch for misbehavior. [ 291.614967][ T8249] 9pnet_fd: Insufficient options for proto=fd [ 291.643992][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 292.067477][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'. [ 292.079332][ T8254] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 292.087511][ T8254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.825227][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 397.832243][ C1] rcu: 0-...!: (1 GPs behind) idle=59cc/1/0x4000000000000002 softirq=30571/30572 fqs=0 [ 397.842795][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7879/1:b..l P59/1:b..l [ 397.851737][ C1] rcu: (detected by 1, t=10505 jiffies, g=26513, q=178 ncpus=2) [ 397.859490][ C1] Sending NMI from CPU 1 to CPUs 0: [ 397.859535][ C0] NMI backtrace for cpu 0 [ 397.859556][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 397.859574][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.859585][ C0] RIP: 0010:__asan_memset+0x0/0x50 [ 397.859632][ C0] Code: 48 8b 0c 24 ba 01 00 00 00 e9 bc e4 ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 56 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 [ 397.859664][ C0] RSP: 0018:ffffc90000007ce8 EFLAGS: 00000046 [ 397.859679][ C0] RAX: ffffffff8b6297f7 RBX: 1ffff110170c4f82 RCX: ffffffff8de95280 [ 397.859693][ C0] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffff88802730b340 [ 397.859704][ C0] RBP: 0000000000000000 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 397.859716][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffff88802730b340 [ 397.859729][ C0] R13: dffffc0000000000 R14: ffff8880b8627c10 R15: ffff88802730b340 [ 397.859743][ C0] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 397.859757][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.859769][ C0] CR2: 00007f0b2c983ad8 CR3: 000000007a648000 CR4: 00000000003526f0 [ 397.859784][ C0] Call Trace: [ 397.859792][ C0] [ 397.859799][ C0] timerqueue_add+0x186/0x200 [ 397.859830][ C0] __hrtimer_run_queues+0x656/0xc60 [ 397.859860][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 397.859877][ C0] ? read_tsc+0x9/0x20 [ 397.859913][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 397.859947][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 397.859968][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 397.859986][ C0] [ 397.859991][ C0] [ 397.859998][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 397.860016][ C0] RIP: 0010:sched_core_balance+0x156/0xf00 [ 397.860043][ C0] Code: 6f 8a 8b e8 cc 46 0b 00 4c 89 74 24 68 4c 89 7c 24 48 e9 3b 0d 00 00 4c 89 f7 e8 35 f7 d5 09 e8 10 94 34 00 fb 48 8b 5c 24 70 <83> fb 08 0f 83 06 0d 00 00 4c 8d 34 dd 70 8c ba 8d 4c 89 f0 48 c1 [ 397.860057][ C0] RSP: 0018:ffffffff8de07980 EFLAGS: 00000282 [ 397.860070][ C0] RAX: 769b670b72590800 RBX: 0000000000000000 RCX: 769b670b72590800 [ 397.860082][ C0] RDX: 0000000000000000 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 397.860094][ C0] RBP: ffffffff8de07ae8 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 397.860107][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffff8880b8639e00 [ 397.860120][ C0] R13: dffffc0000000000 R14: ffff8880b8639e00 R15: 0000000000000000 [ 397.860145][ C0] ? __lock_acquire+0xab9/0xd20 [ 397.860164][ C0] ? sched_core_balance+0xc9/0xf00 [ 397.860189][ C0] ? finish_task_switch+0x18b/0x950 [ 397.860215][ C0] ? __pfx_sched_core_balance+0x10/0x10 [ 397.860247][ C0] ? __pfx_sched_core_balance+0x10/0x10 [ 397.860272][ C0] finish_task_switch+0x3a7/0x950 [ 397.860302][ C0] __schedule+0x16b2/0x4c90 [ 397.860327][ C0] ? schedule_idle+0x52/0x90 [ 397.860345][ C0] ? __pfx___schedule+0x10/0x10 [ 397.860361][ C0] ? flush_smp_call_function_queue+0x1e4/0x250 [ 397.860380][ C0] ? flush_smp_call_function_queue+0x1ed/0x250 [ 397.860402][ C0] ? __pfx_tick_nohz_idle_exit+0x10/0x10 [ 397.860428][ C0] schedule_idle+0x52/0x90 [ 397.860443][ C0] do_idle+0x4ad/0x510 [ 397.860465][ C0] ? __pfx_do_idle+0x10/0x10 [ 397.860510][ C0] cpu_startup_entry+0x44/0x60 [ 397.860530][ C0] rest_init+0x2de/0x300 [ 397.860553][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 397.860583][ C0] start_kernel+0x47d/0x500 [ 397.860606][ C0] x86_64_start_reservations+0x24/0x30 [ 397.860633][ C0] x86_64_start_kernel+0x143/0x1c0 [ 397.860661][ C0] common_startup_64+0x13e/0x147 [ 397.860694][ C0] [ 397.861521][ C1] task:kworker/u8:4 state:R running task stack:21032 pid:59 tgid:59 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 398.238204][ C1] Workqueue: bat_events batadv_nc_worker [ 398.243889][ C1] Call Trace: [ 398.247212][ C1] [ 398.250182][ C1] __schedule+0x16aa/0x4c90 [ 398.254729][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 398.260044][ C1] ? __pfx___schedule+0x10/0x10 [ 398.264934][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 398.270248][ C1] preempt_schedule_irq+0xb5/0x150 [ 398.275398][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 398.281239][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 398.287072][ C1] irqentry_exit+0x6f/0x90 [ 398.291510][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 398.296995][ C1] RIP: 0010:rcu_is_watching+0x67/0xb0 [ 398.302389][ C1] Code: 89 f7 e8 2c e2 78 00 48 c7 c3 58 bf 9d 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 39 65 f5 10 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f e9 17 38 c2 09 cc e8 a1 7b [ 398.322011][ C1] RSP: 0018:ffffc9000210fa00 EFLAGS: 00000286 [ 398.328096][ C1] RAX: 00000000005259cc RBX: ffff8880b8632f58 RCX: d455e29e93603500 [ 398.336082][ C1] RDX: ffff88801c785a00 RSI: ffffffff8be1ba20 RDI: ffffffff8be1b9e0 [ 398.344076][ C1] RBP: ffff88802a189968 R08: 0000000000000000 R09: ffffffff8b345592 [ 398.352066][ C1] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: dffffc0000000000 [ 398.360068][ C1] R13: ffffffff8b345592 R14: ffffffff8dba8c70 R15: dffffc0000000000 [ 398.368056][ C1] ? batadv_nc_worker+0xd2/0x610 [ 398.373028][ C1] ? batadv_nc_worker+0xd2/0x610 [ 398.378009][ C1] batadv_nc_worker+0x10c/0x610 [ 398.382897][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 398.388642][ C1] process_scheduled_works+0xade/0x17b0 [ 398.394245][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 398.400282][ C1] worker_thread+0x8a0/0xda0 [ 398.404943][ C1] kthread+0x70e/0x8a0 [ 398.409046][ C1] ? __pfx_worker_thread+0x10/0x10 [ 398.414179][ C1] ? __pfx_kthread+0x10/0x10 [ 398.418827][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.424145][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.429363][ C1] ? __pfx_kthread+0x10/0x10 [ 398.433982][ C1] ret_from_fork+0x3fc/0x770 [ 398.438607][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 398.443750][ C1] ? __switch_to_asm+0x39/0x70 [ 398.448539][ C1] ? __switch_to_asm+0x33/0x70 [ 398.453331][ C1] ? __pfx_kthread+0x10/0x10 [ 398.457955][ C1] ret_from_fork_asm+0x1a/0x30 [ 398.462762][ C1] [ 398.465800][ C1] task:syz-executor state:R running task stack:21896 pid:7879 tgid:7879 ppid:7870 task_flags:0x400140 flags:0x00004000 [ 398.479309][ C1] Call Trace: [ 398.482600][ C1] [ 398.485590][ C1] __schedule+0x16aa/0x4c90 [ 398.490140][ C1] ? __page_table_check_zero+0x406/0x530 [ 398.495807][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 398.501122][ C1] ? get_page_from_freelist+0x21d5/0x22b0 [ 398.506876][ C1] ? __pfx___schedule+0x10/0x10 [ 398.511755][ C1] ? __lock_acquire+0xab9/0xd20 [ 398.516624][ C1] ? __lock_acquire+0xab9/0xd20 [ 398.521516][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 398.526832][ C1] preempt_schedule_irq+0xb5/0x150 [ 398.531961][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 398.537713][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 398.543561][ C1] irqentry_exit+0x6f/0x90 [ 398.548002][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 398.553483][ C1] RIP: 0010:lock_release+0x2b5/0x3e0 [ 398.558791][ C1] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 fb 42 fe 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 398.578431][ C1] RSP: 0018:ffffc9000ab575f0 EFLAGS: 00000206 [ 398.584523][ C1] RAX: adf663275cef8a00 RBX: 0000000000000202 RCX: adf663275cef8a00 [ 398.592512][ C1] RDX: 0000000000000000 RSI: ffffffff8db6fcc6 RDI: ffffffff8be1ba40 [ 398.600571][ C1] RBP: ffff8880335a0af0 R08: ffffc9000ab57ee0 R09: 0000000000000000 [ 398.608585][ C1] R10: ffffc9000ab57778 R11: fffff5200156aef1 R12: 0000000000000000 [ 398.616578][ C1] R13: 0000000000000000 R14: ffffffff8e13f0e0 R15: ffff8880335a0000 [ 398.624604][ C1] ? unwind_next_frame+0xa5/0x2390 [ 398.629838][ C1] ? unwind_next_frame+0xa5/0x2390 [ 398.634968][ C1] unwind_next_frame+0x19a9/0x2390 [ 398.640106][ C1] ? unwind_next_frame+0xa5/0x2390 [ 398.645237][ C1] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 398.650651][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 398.656852][ C1] arch_stack_walk+0x11c/0x150 [ 398.661654][ C1] ? do_syscall_64+0xfa/0x3b0 [ 398.666375][ C1] stack_trace_save+0x9c/0xe0 [ 398.671080][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 398.676582][ C1] save_stack+0xf7/0x1f0 [ 398.680845][ C1] ? __pfx_save_stack+0x10/0x10 [ 398.685718][ C1] ? __free_frozen_pages+0xc65/0xe60 [ 398.691023][ C1] ? vfree+0x25a/0x400 [ 398.695116][ C1] ? __do_replace+0x827/0x980 [ 398.699820][ C1] ? do_ip6t_set_ctl+0xa16/0xce0 [ 398.704786][ C1] ? nf_setsockopt+0x26c/0x290 [ 398.709580][ C1] ? do_sock_setsockopt+0x179/0x1b0 [ 398.714795][ C1] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 398.720217][ C1] ? page_ext_put+0x97/0xc0 [ 398.724747][ C1] __reset_page_owner+0x71/0x1f0 [ 398.729720][ C1] __free_frozen_pages+0xc65/0xe60 [ 398.734865][ C1] vfree+0x25a/0x400 [ 398.738793][ C1] __do_replace+0x827/0x980 [ 398.743339][ C1] ? __pfx___do_replace+0x10/0x10 [ 398.748390][ C1] ? _copy_from_user+0x94/0xb0 [ 398.753185][ C1] do_ip6t_set_ctl+0xa16/0xce0 [ 398.757992][ C1] ? rcu_is_watching+0x15/0xb0 [ 398.762782][ C1] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 398.768123][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 398.773167][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 398.779180][ C1] ? do_sock_getsockopt+0x36f/0x450 [ 398.784418][ C1] nf_setsockopt+0x26c/0x290 [ 398.789045][ C1] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 398.794968][ C1] do_sock_setsockopt+0x179/0x1b0 [ 398.800029][ C1] __x64_sys_setsockopt+0x13f/0x1b0 [ 398.805265][ C1] do_syscall_64+0xfa/0x3b0 [ 398.809803][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.815031][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.821135][ C1] ? clear_bhb_loop+0x60/0xb0 [ 398.825844][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.831767][ C1] RIP: 0033:0x7f0b2c790a5a [ 398.836391][ C1] RSP: 002b:00007ffd723024e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 398.844826][ C1] RAX: ffffffffffffffda RBX: 00007ffd72302570 RCX: 00007f0b2c790a5a [ 398.852829][ C1] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 398.860830][ C1] RBP: 0000000000000003 R08: 00000000000002e8 R09: 0079746972756365 [ 398.868858][ C1] R10: 00007f0b2c984140 R11: 0000000000000202 R12: 00007f0b2c9840e0 [ 398.876877][ C1] R13: 00007ffd7230250c R14: 0000000000000000 R15: 00007f0b2c984e60 [ 398.884895][ C1] [ 398.887947][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g26513 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 398.899159][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 398.909139][ C1] rcu: RCU grace-period kthread stack dump: [ 398.915058][ C1] task:rcu_preempt state:R running task stack:27192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 398.928597][ C1] Call Trace: [ 398.931920][ C1] [ 398.934877][ C1] __schedule+0x16aa/0x4c90 [ 398.939426][ C1] ? schedule+0x165/0x360 [ 398.943785][ C1] ? __pfx___schedule+0x10/0x10 [ 398.948687][ C1] ? schedule+0x91/0x360 [ 398.952968][ C1] schedule+0x165/0x360 [ 398.957152][ C1] schedule_timeout+0x12b/0x270 [ 398.962040][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 398.967448][ C1] ? __pfx_process_timeout+0x10/0x10 [ 398.972789][ C1] ? prepare_to_swait_event+0x341/0x380 [ 398.978381][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 398.983279][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 398.988324][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.993543][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 398.998847][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 399.004071][ C1] ? finish_swait+0xcd/0x1f0 [ 399.008705][ C1] rcu_gp_kthread+0x99/0x390 [ 399.013324][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 399.018550][ C1] ? __kthread_parkme+0x7b/0x200 [ 399.023525][ C1] ? __kthread_parkme+0x1a1/0x200 [ 399.028580][ C1] kthread+0x70e/0x8a0 [ 399.032681][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 399.037916][ C1] ? __pfx_kthread+0x10/0x10 [ 399.042715][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.047929][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.053142][ C1] ? __pfx_kthread+0x10/0x10 [ 399.057783][ C1] ret_from_fork+0x3fc/0x770 [ 399.062402][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 399.067540][ C1] ? __switch_to_asm+0x39/0x70 [ 399.072332][ C1] ? __switch_to_asm+0x33/0x70 [ 399.077126][ C1] ? __pfx_kthread+0x10/0x10 [ 399.081752][ C1] ret_from_fork_asm+0x1a/0x30 [ 399.086564][ C1] [ 399.089605][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 399.095953][ C1] CPU: 1 UID: 0 PID: 8256 Comm: modprobe Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 399.105694][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 399.115772][ C1] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 399.122487][ C1] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 80 6e 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 2b 6a 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 10 6a 0b [ 399.142120][ C1] RSP: 0018:ffffc9000ab676e0 EFLAGS: 00000293 [ 399.148215][ C1] RAX: ffffffff81b4bbb0 RBX: ffff8880b873b040 RCX: ffff8880275d3c00 [ 399.156210][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 399.164197][ C1] RBP: ffffc9000ab67840 R08: ffffc9000ab67787 R09: 1ffff9200156cef0 [ 399.172191][ C1] R10: dffffc0000000000 R11: fffff5200156cef1 R12: 1ffff110170c835d [ 399.180184][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8641ae8 [ 399.188176][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 399.197126][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.203725][ C1] CR2: 000000110c34cb07 CR3: 0000000078400000 CR4: 00000000003526f0 [ 399.211743][ C1] Call Trace: [ 399.215041][ C1] [ 399.218023][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 399.224373][ C1] ? free_pgd_range+0x144b/0x14c0 [ 399.229434][ C1] ? rcu_is_watching+0x15/0xb0 [ 399.234231][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 399.239460][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 399.244612][ C1] flush_tlb_mm_range+0x6b1/0x12c0 [ 399.249846][ C1] ? free_pgtables+0xa12/0xaf0 [ 399.254632][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 399.260212][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 399.265352][ C1] tlb_flush_mmu+0x1a7/0x680 [ 399.269965][ C1] ? __pfx_down_write+0x10/0x10 [ 399.274838][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 399.279456][ C1] exit_mmap+0x44c/0xb50 [ 399.283722][ C1] ? uprobe_clear_state+0x20f/0x290 [ 399.288940][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 399.293728][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 399.299401][ C1] ? __pfx_exit_aio+0x10/0x10 [ 399.304105][ C1] ? uprobe_clear_state+0x274/0x290 [ 399.309317][ C1] ? mm_update_next_owner+0xa7/0x870 [ 399.314633][ C1] __mmput+0x118/0x410 [ 399.318738][ C1] exit_mm+0x1da/0x2c0 [ 399.322842][ C1] ? __pfx_exit_mm+0x10/0x10 [ 399.327452][ C1] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 399.332944][ C1] ? rcu_is_watching+0x15/0xb0 [ 399.337744][ C1] do_exit+0x648/0x22e0 [ 399.341940][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 399.347345][ C1] ? __pfx_do_exit+0x10/0x10 [ 399.351973][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.357186][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.362399][ C1] do_group_exit+0x21c/0x2d0 [ 399.367017][ C1] __x64_sys_exit_group+0x3f/0x40 [ 399.372063][ C1] x64_sys_call+0x21ba/0x21c0 [ 399.376768][ C1] do_syscall_64+0xfa/0x3b0 [ 399.381301][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.386528][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.392703][ C1] ? clear_bhb_loop+0x60/0xb0 [ 399.397406][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.403423][ C1] RIP: 0033:0x7f246462a6c5 [ 399.407866][ C1] Code: Unable to access opcode bytes at 0x7f246462a69b. [ 399.414897][ C1] RSP: 002b:00007ffc7fbe4098 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 399.423336][ C1] RAX: ffffffffffffffda RBX: 00007f246472bfe8 RCX: 00007f246462a6c5 [ 399.431328][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 399.439320][ C1] RBP: 0000000000000001 R08: 00007ffc7fbe4028 R09: 0000000000000000 [ 399.447305][ C1] R10: 00007ffc7fbe3ec0 R11: 0000000000000202 R12: 0000000000000000 [ 399.455292][ C1] R13: 0000000000000001 R14: 00007f246472a680 R15: 00007f246472c000 [ 399.463299][ C1]