last executing test programs: 47m53.866666594s ago: executing program 32 (id=1401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) unshare(0x400) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 44m43.330721426s ago: executing program 33 (id=3913): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @remote, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 42m8.153504161s ago: executing program 34 (id=5806): r0 = syz_usb_connect(0x5, 0x24, &(0x7f00000022c0)={{0x12, 0x1, 0x0, 0x58, 0x99, 0xdc, 0x20, 0xbfd, 0x113, 0xf08f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0xb4, 0xff, 0x0, 0xd1, 0xab, 0x88, 0x6}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 41m59.268994289s ago: executing program 35 (id=5864): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='L', 0x1}]) sendmmsg$alg(r1, &(0x7f0000001300)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="6016cbe8f20263e4d65ab67b056f8aa4", 0x10}], 0x1}], 0x1, 0x4008884) 41m7.308272284s ago: executing program 36 (id=6414): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r1 = userfaultfd(0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 41m2.040350159s ago: executing program 37 (id=6452): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 40m25.358913391s ago: executing program 3 (id=6773): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x1}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) 40m24.986767744s ago: executing program 3 (id=6776): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x4, r2, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r2, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) open(0x0, 0x60840, 0x1d2) close_range(r0, 0xffffffffffffffff, 0x0) 40m24.592095518s ago: executing program 3 (id=6778): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 40m24.474811867s ago: executing program 3 (id=6779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 40m9.320466301s ago: executing program 38 (id=6779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 40m8.782815327s ago: executing program 39 (id=6940): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x42140, 0x0) 39m35.517982539s ago: executing program 40 (id=7176): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000102010100000000000000000a00028003000100430000002c000180140003002001000000000000022b00040020"], 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x0, 0x6, 0x1d, 0x0, 0x0, 0x63, 0x6, 0x8, 0x6, 0xa0, 0x2, 0xfe, 0x0, 0x2, 0x1, 0xef, 0x8, 0x81, 0x5, '\x00', 0x1, 0x7fff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) 30m55.665621759s ago: executing program 41 (id=9242): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x44000911) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x20000000000006) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r3, r4, 0x8000000000003, 0x0) 28m45.255584591s ago: executing program 7 (id=9611): syz_open_dev$video4linux(&(0x7f0000000080), 0x10000, 0x20000) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = epoll_create(0x10000e9) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000080)={0x30000009}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0x3ff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x68, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 28m43.947794227s ago: executing program 7 (id=9612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 28m42.622945541s ago: executing program 7 (id=9615): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @binary="38eac21a"}]}, 0x1c}}, 0x20000000) r5 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x20, 0xf, 0xff, 0xfffff038}, {0x20, 0x1f, 0xf6, 0xfffff010}, {0x6, 0x80}]}, 0x10) 28m39.384111586s ago: executing program 7 (id=9622): r0 = socket$inet(0x2, 0x3, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) creat(&(0x7f0000000000)='./file0\x00', 0x6a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 28m35.322510546s ago: executing program 7 (id=9635): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x18, 0x1402, 0x1, 0x70bd2a, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 28m34.012627968s ago: executing program 7 (id=9642): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x1, 0x1, 0x1}, {0x1}}], 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota') 28m18.870338057s ago: executing program 42 (id=9642): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x4, 0x1, 0x1, 0x1}, {0x1}}], 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota') 15m40.294393034s ago: executing program 5 (id=11350): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x209f0000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r6, 0x1, 0x4000812, r7, 0x100000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) 15m38.48219093s ago: executing program 5 (id=11353): syz_open_dev$video(&(0x7f0000000000), 0x9, 0x40400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$rds(0x15, 0x5, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000004b80)) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0xfffffffc, @private2={0xfc, 0x2, '\x00', 0x41}, 0x8}], 0x1c) statfs(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000140)=""/98) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={0xfffffffffffffffd, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/243, 0xf3}, 0x2003) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='romfs\x00', 0x208090, 0x0) 15m36.235071872s ago: executing program 5 (id=11357): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x1040, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x0) recvfrom(r0, 0x0, 0x12, 0x40002050, 0x0, 0x58) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x19) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 15m34.618754744s ago: executing program 5 (id=11362): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) getpriority(0x2, r5) r6 = epoll_create(0x802) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x60000005}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x4a883) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) 15m34.530830814s ago: executing program 5 (id=11365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000480)={0xf3c00000, 0xbf2, {0xffffffffffffffff}, {}, 0x5, 0x2}) ptrace$setopts(0x4206, 0x0, 0x6, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000c970bb288e0112c1691885b4179329a562360d3dd47ccf4f3b9c13e773f0fcf20409cd6f8eedacdfc139a4073d892d0a63cddeb98d3d5afde5f032531efd633fdd480709a5015752148a18629c237434058f17adfd093154760687256edfba00c187b887941c41436f897b48e806fc773d3ceab24caa09a09fe47de1c84df62680a4947de0f403c4517f97d3134168292835b355fae6cfc4", @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f00000001c0)=0x3, 0x4) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) fsopen(&(0x7f0000000240)='hfsplus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) mount(0x0, 0x0, &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') 15m33.471783118s ago: executing program 5 (id=11367): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) io_setup(0x0, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xe739, 0x1, 0x8000002, 0x1d4}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) close_range(r2, 0xffffffffffffffff, 0x0) 15m18.291240283s ago: executing program 43 (id=11367): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) io_setup(0x0, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xe739, 0x1, 0x8000002, 0x1d4}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) close_range(r2, 0xffffffffffffffff, 0x0) 14m26.46794353s ago: executing program 3 (id=11391): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x15) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000006c0)={0xa, 0x1, 0xd26f, 0x3, 0x1, 0x2, 0x9}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x10001, 0x0, 0x0, 0x0, 0xf6e4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x80000000, 0x0, 0x9, 0x0, 0x0, 0x10001, 0x2}, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 14m22.143338493s ago: executing program 3 (id=11504): r0 = socket(0x40000000015, 0x5, 0x0) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r1, 0xfffffffd) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5452, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) 14m6.34132061s ago: executing program 44 (id=11504): r0 = socket(0x40000000015, 0x5, 0x0) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r1, 0xfffffffd) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r1, 0x5452, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) 12m20.939862682s ago: executing program 6 (id=11751): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmsg$sock(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffe, 0x0, 0x20000000000000}, 0x0, &(0x7f0000000400)={0x3ff, 0x0, 0xfffffffffffffffe, 0x8000009, 0x2, 0x4c, 0x7fffffff, 0x3}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 12m19.658956562s ago: executing program 6 (id=11759): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setresuid(r1, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffff82, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x9, 0x5, 0xb}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ppoll(&(0x7f0000000140)=[{r6, 0x4100}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 12m17.488293164s ago: executing program 6 (id=11767): mkdir(0x0, 0x0) open(0x0, 0x400, 0x43) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) socket$rxrpc(0x21, 0x2, 0x2) r0 = getpid() sysfs$2(0x2, 0x80000001, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0c", 0xe) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r4, 0x3b65, 0x4) r5 = syz_io_uring_setup(0xe3e, &(0x7f0000000600)={0x0, 0xa9c8, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r5, 0x0, 0x0, 0x7c, 0x5, 0x0, {0x0, r8, r5}}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) 12m15.712513713s ago: executing program 6 (id=11770): socket$inet(0x2, 0x6000000000000001, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000600)={0x0, 0x0, 0x9}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xe}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 12m13.844411732s ago: executing program 6 (id=11775): mkdir(&(0x7f0000000000)='./file0\x00', 0x40) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff09", @ANYRES8=r0], 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x82) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x3, 0x3, 0x2, 0x747, 0x56}) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r8 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pread64(r8, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="110000000000fbdbdf252500", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200001000508005000200010000000400060008003500000000000a00060008021100000100000800260000000000"], 0x54}, 0x1, 0x0, 0x0, 0x8050}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf652100000008000300", @ANYRES32=r10, @ANYBLOB="0a00f5"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) 12m12.111647024s ago: executing program 6 (id=11781): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x2e, &(0x7f0000000240)=0x802) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000003c0)="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") ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x38, 0x1, [0x5]}}) syz_clone(0x10002000, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x2e, &(0x7f0000000240)=0x802) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000003c0)="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") ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x38, 0x1, [0x5]}}) syz_clone(0x10002000, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x180c6, 0x0) r3 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x4204, 0xffffffff, @mcast1, 0xd57a}}}, 0x90) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x3, 0xc9, "3f0ff8625acb6740"}}}}, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x208403, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000540)=0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/37, 0x25, 0x800000000000004) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@any, 0x80, 0x0, 0xc, "d56ab1", 0x0, 0x6}, {@none, 0x4, 0x7, 0x7, "514ba2", 0xb, 0x3}]}}}, 0x22) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r2, 0x3b83, &(0x7f0000000100)={0x28, 0x10000, r0, r1, 0x3ce89d, 0xa, 0x400002, 0x3bf6d7}) 2m35.774615711s ago: executing program 0 (id=12838): prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0x7fffffffeff3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'gre0\x00', @local}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) write$uinput_user_dev(r2, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) r4 = dup(r2) write$uinput_user_dev(r4, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x12, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x83, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x80000008, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x1, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x9, 0x2, 0x76c4, 0xfffffffd, 0x4, 0x401, 0x10000, 0xd, 0x2, 0x9, 0x20010, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x9, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0xb, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180100001f000100000000000000000006"], 0x118}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) mount$cgroup(0x0, 0x0, &(0x7f00000000c0), 0x2008000, &(0x7f0000000000)={[{@name={'name', 0x3d, '\xa2:\xd9\xbd\x84\xf7\x00'}}]}) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r7, 0x1, 0x0, 0x25dfdbfd, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x9}, {0x4}}, {0x51}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x4000800) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x401000000, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x3) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2m31.666906105s ago: executing program 0 (id=12846): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'gre0\x00', @local}) socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r3 = dup(r1) write$uinput_user_dev(r3, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x12, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x83, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x80000008, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x1, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x9, 0x2, 0x76c4, 0xfffffffd, 0x4, 0x401, 0x10000, 0xd, 0x2, 0x9, 0x20010, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x9, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0xb, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) 2m29.433909518s ago: executing program 0 (id=12853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) socket$unix(0x1, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x16}, 0x2c) r6 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffec0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) fcntl$notify(r4, 0x402, 0x6) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x294}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) fcntl$dupfd(r6, 0x406, r5) 2m24.715245711s ago: executing program 0 (id=12861): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x8007, 0x2, 0x100, 0x80, 0x408200, 0x2007, r1}, 0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) mount(&(0x7f00000001c0)=@sr0, 0x0, &(0x7f0000000200)='ocfs2\x00', 0x21000d, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefc9, 0x7f9, 0xb2, "20ab9809006ea4a7446c180000cd681ec267a0", 0x7, 0x200008}) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) 2m23.057063536s ago: executing program 0 (id=12866): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20004000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x23, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9) setrlimit(0x1, &(0x7f0000000000)={0x5, 0x3ff}) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$nci(r4, &(0x7f00000001c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x9, @v={0x1, 0x2, 0x2, 0x6, 0x7, 0x3, 0x80, {0xfc, 0xc, "30ea56c4f61cab1d"}, 0x7, 0xf3, 0xff, 0x4, 0x1, "eb"}}, 0x1a) syz_fuse_handle_req(r2, &(0x7f000000c280)="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", 0x2000, 0x0) migrate_pages(0x0, 0x8, 0x0, 0x0) 2m7.465411207s ago: executing program 46 (id=12866): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20004000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x23, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9) setrlimit(0x1, &(0x7f0000000000)={0x5, 0x3ff}) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$nci(r4, &(0x7f00000001c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x9, @v={0x1, 0x2, 0x2, 0x6, 0x7, 0x3, 0x80, {0xfc, 0xc, "30ea56c4f61cab1d"}, 0x7, 0xf3, 0xff, 0x4, 0x1, "eb"}}, 0x1a) syz_fuse_handle_req(r2, &(0x7f000000c280)="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", 0x2000, 0x0) migrate_pages(0x0, 0x8, 0x0, 0x0) 55.952033324s ago: executing program 8 (id=13034): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x5, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x10, 0x800, 0xbbbe, 0x0, 0x2, 0x4, {0x0, 0x0, 0x1}, {0x7, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x40a00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0xf4, 0x8, 0xa, 0xf0a, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x892f}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0x60, 0x7, 0x1, 0x0, "0f892b485d046c9329fc2fab944957b724197f85e0b5a98c9cf97d548e01e48cfd5373352d833ad95107c3136b851d699740f5d95168482198d966c77773427708690b8b0baec3ee2b13f76b69baca5d85f7378db86267a24b3f7ef9"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14}}, 0x11c}}, 0x8050) 54.734523828s ago: executing program 8 (id=13037): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x9, 0x10000) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r1 = syz_open_dev$vbi(&(0x7f0000000280), 0x2, 0x2) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000000c0)=0x8000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000003c0)=0xc26080b) write$binfmt_aout(r3, 0x0, 0xfce1) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000100)={0x6, [0xff, 0x8, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0xfc01, 0x1, 0x2, 0x10, 0x400, 0xa, 0x8, 0x2, 0x7, 0x8, 0x7f, 0x0, 0x4, 0x3, 0x97, 0x457f, 0x2, 0x5, 0x81, 0x1, 0x4, 0x8544, 0xb, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x8000, 0x8, 0x5, 0x2, 0x0, 0x5, 0xe9da, 0xf, 0x8, 0x6, 0x0, 0x8], 0x6}) socket$netlink(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0200000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe800000"], 0x94}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 52.293441669s ago: executing program 8 (id=13041): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0xfffe, 0x6}, 0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$TIOCSIG(r7, 0x40045436, 0xe) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @private1, @mcast2, {[@dstopts={0x21}]}}}}}, 0x0) r8 = signalfd4(r6, &(0x7f00000000c0)={[0xff]}, 0x8, 0x80800) io_uring_enter(r8, 0x43d0, 0x4add, 0x1, &(0x7f0000000140)={[0x8]}, 0x8) 50.612580969s ago: executing program 8 (id=13042): syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000140)={0x2, 0x15, 0x1, 0x0, 0x7, 0xd09f, &(0x7f0000000040)="081fda14f356e1"}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x23, 0x0, &(0x7f00000001c0)) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000740)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f0489010504"], 0x7) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) 44.994526216s ago: executing program 8 (id=13059): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x12, 0xb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 41.575874266s ago: executing program 8 (id=13053): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x806a}, {0x6, 0xfc, 0x0, 0x4}]}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000000), 0x3, r6, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000300)={0x24, r8, r6}) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x2, 0x3e8, 0x0, 0x300, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @multicast1, @broadcast, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0x3}}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x40, 0x10, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00', {}, {}, 0x0, 0x280}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write$binfmt_aout(r2, 0x0, 0xfdef) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21, 0x100}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r9}, 0x48) 25.699480285s ago: executing program 47 (id=13053): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x806a}, {0x6, 0xfc, 0x0, 0x4}]}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000000), 0x3, r6, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000300)={0x24, r8, r6}) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x2, 0x3e8, 0x0, 0x300, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @multicast1, @broadcast, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0x3}}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x40, 0x10, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00', {}, {}, 0x0, 0x280}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) write$binfmt_aout(r2, 0x0, 0xfdef) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21, 0x100}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r9}, 0x48) 17.380715389s ago: executing program 9 (id=13087): socket$tipc(0x1e, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c36, 0x4000, 0x103, 0x16}, 0x0, &(0x7f0000000280)) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x6178, 0x40, 0x8001002, 0x3d7}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) creat(&(0x7f0000000180)='./file0\x00', 0x181) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff50000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005858d66f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc23512700000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c54de53000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x6, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, 0x0) read$FUSE(r6, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x8010) 16.275404954s ago: executing program 4 (id=13088): sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000170a018859f822340177a0942cdc01000000000000000000000006ebe5d09fd9a7731ec389ac24f755126bfd514e572052dfc126613030b622d5a68e6c0f278deb71cbfd640f633ff71653eea9726e0fbe9269c138b1299a6e1a01bc8d3165bc71c0a07d26946c5e1c2cdc5f7731533856d6c56afe93f584302342b0d80c386c1b1b1bd371"], 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x230200) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) setrlimit(0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="ee61d15b176da8ea8abe33a2ac1a58bde11db6411b4864916c5ac483163a894aaee52e9e377fc5bab5055d789da66a7a70863f889aad1335f04ee4450038b9778f4d5ec530dd982feea0da048265c0ac677634f7f8a03936495e01ad2391429afd94e82dd69e1e130ee96890732fd2607f206484a26cd5fb3c25cedbf3e614e91913ecc6cb885d6634e642a4663fb173c97df34d038205965db55ba937f12ef8ec0905e1cd0aae11db41a3046e273aeecf2fe24cbdb77f0b7aaf43983b50874a6dd6bf1a1b37c155a4d520a4f14573abd041057b027c698396e651d92fa6"], &(0x7f0000000380)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0xbe55d000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}, r6}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000780), r6, 0x2}}, 0x18) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x100) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c8000006800e97800000400000000000a0003002000001004000400"], 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 16.148101542s ago: executing program 9 (id=13090): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019380)=""/102400, 0x19000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000009640), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x1, 0x0) close(0xffffffffffffffff) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)}, 0x0) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000100)=""/5, 0x5}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x80800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) fcntl$lock(r2, 0x5, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x1230004, &(0x7f0000000480)=ANY=[]) syz_open_dev$MSR(0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) 15.156800312s ago: executing program 4 (id=13091): socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0xd, r2}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r4, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r7, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r6, 0xff08, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r10, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "0a766976d5b3080c", "3a7d5da9a45c579e3d7fffb4108001ee", "04000001", "539057fa3b2cae06"}, 0x28) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 14.057565073s ago: executing program 2 (id=13092): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000180)='4\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 12.717933321s ago: executing program 2 (id=13093): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socket(0xa, 0x3, 0x3a) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000240)='resize', 0x0, r4) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) 11.793458714s ago: executing program 2 (id=13095): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x2c9, &(0x7f0000000780)=ANY=[@ANYRES8], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x27, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f27000122100470d28dc80cd6131eb38c0c2a95dfe341d8b4ef"], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x406}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r1, 0x7, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x7}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x7a, 0x0, '\x00', 0x1}, {}, {}, {0x10}, {0x20}, {0x2}, {}, {0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0x2}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x40}]}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r7 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) write$P9_RSTATu(r7, 0x0, 0x5a) mount(0x0, 0x0, &(0x7f00000000c0)='vfat\x00', 0xa08410, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000100)={0xf, 0xffff7fff, 0x2, 0xc9f, 0x5e, "08bd91aa90758062b5fffd9272e301aa98af75"}) write$UHID_INPUT(r8, &(0x7f0000001980)={0x9, {"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", 0x745}}, 0x1006) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) 8.886426813s ago: executing program 4 (id=13097): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084522, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r5, r5, 0x0, 0x101) mmap$binder(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x5) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f00000002c0)) r6 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') socket$inet6(0xa, 0x1, 0x8010800000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x4}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x1f, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 7.673243338s ago: executing program 1 (id=13098): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1f080045000024000000020011907800000000000000000000000700109078e2fd"], 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001300), 0x20002, 0x0) connect$inet6(r5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae00000085000000070000"], &(0x7f0000000080)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb000018"], &(0x7f0000000100)=""/189, 0x3c, 0xbd, 0x1}, 0x28) r8 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) write$smackfs_load(r8, &(0x7f0000000100)=ANY=[], 0x36) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r7}, 0x90) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000580)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) r11 = syz_clone3(&(0x7f0000000780)={0x200800, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000400), {0x20}, &(0x7f0000001340)=""/4096, 0x1000, &(0x7f0000000680)=""/187, &(0x7f00000004c0)=[r0, r0, r0, r0, r0], 0x5}, 0x58) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003740)=ANY=[@ANYBLOB="d41300003c000701fcffffffffdbdf25027c0000c01348806f1169800800c0", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="0800dd00", @ANYRES32=r11, @ANYBLOB="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"], 0x13d4}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000f1b51c40c60535904c26010203010902240001000000000904040002ff67180009050f1020000500400006a307"], 0x0) 7.044695747s ago: executing program 2 (id=13099): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0xbc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0x10000007) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r8, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r12, 0x0, 0x39000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) listen(0xffffffffffffffff, 0xeb) mount(0x0, 0x0, 0x0, 0x8000, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000140)) sendmmsg$unix(r1, &(0x7f0000000a00)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000400)="dbefae43dc539624a9abb41a1c89f5a1be952a8322bdde05160a05095bd5a9b09699d62ae99be6e1", 0x28}, {&(0x7f0000000500)="5c87b1ee4ae25451396bc8093a275c8978392a65f7fb50557bff926c8e8f21775f551605adba13ae194d0fdbeadd60b52396b565551b334047dbca20e1c6ce739bedbce474e7c3322ded385dc04550417fa592143a12eeb65548bb4c06073f4c66f16df980ebf7c7f3300c0382e7d37f21d78ca20318fa", 0x77}, {&(0x7f00000005c0)="37d2c0df6c63301294a45eaddde4ccc1cc78aaf4ab05a205081aed09609d9306381da6aaf44975180c6ee2ea278d91d32b9964d689fc7443408254ae771975a8b70713a108f7cf9dc6a0f8538b5ea35a8702524d093cad904fa239feda33f10f0d480f72bb060f6feb3855201686aa8661", 0x71}], 0x4, &(0x7f0000000b80)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, r11}}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x24, 0x1, 0x1, [r8, 0xffffffffffffffff, r12, r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r10, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r8, r6, 0xffffffffffffffff, r3, r12, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}], 0x108, 0x14080}}], 0x1, 0x8000) 7.039882978s ago: executing program 4 (id=13100): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) fanotify_init(0x20, 0x800) inotify_init1(0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setreuid(0xffffffffffffffff, 0xee01) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) r3 = syz_io_uring_setup(0x800071c7, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x8006, 0x1d4}, 0x0, &(0x7f0000000200)=0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, r4, 0x0) io_uring_enter(r3, 0x6e2, 0x600, 0x1, 0x0, 0x0) keyctl$session_to_parent(0x12) fanotify_init(0x200, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.583938268s ago: executing program 2 (id=13101): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r4, @ANYBLOB="ea02000000000000280012800b00010062726964676500001800028005001900800000000c0021"], 0x48}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r6) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) mkdir(&(0x7f0000000340)='./file0\x00', 0xff0c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r7, 0x4004743c, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x4}, {0x6, 0xfc}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a0302"], 0x34}}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x12020) ioctl$PPPIOCSDEBUG(r7, 0x40047440, &(0x7f0000000240)=0x10001) write(r7, &(0x7f0000000180)="1124", 0x2) fcntl$lock(r5, 0x25, &(0x7f00000000c0)) socket$inet6(0xa, 0x805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x20, &(0x7f00000001c0)=[@in={0x2, 0x0, @private=0xa010101}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) 5.380135351s ago: executing program 9 (id=13102): r0 = socket$inet6(0x10, 0x3, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x2, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r5, 0x10ada85e65c25359, 0x70bd29, 0x8000000, {{0x6b}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x800) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r5, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x207}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000042}, 0x24000800) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r8, r8, 0x0, 0x40008) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000000000)={0x48}) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 4.599137s ago: executing program 1 (id=13103): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000340), 0x5a, 0x0) ioctl$SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f0000000380)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3d8) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) ioctl$SIOCAX25OPTRT(r7, 0x89e7, &(0x7f0000000040)={@default, @bcast, 0x2, 0x20}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x7c}}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000000914290727bd3596fedbdf250800010001000000080001000100000008000100020200"/48], 0xfffffcb6}, 0x1, 0x0, 0x0, 0x24004800}, 0x24004851) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040)=0x8, 0x4) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) 3.552364804s ago: executing program 1 (id=13104): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040), 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f00000001c0)={0x0, "9800003de8f644ad6c8a55930700", 0x3}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000823292e4b74cb6c5c7d4a4a45805287ce528089f3a77156e46af5278919f5198e8969faa638d68ce85dff162e75d44f989c4af1895c8b91cae4abd2e41d9724daa46f2a37e916b5e6b58458153e531c1b809c1db2eee0f16fb3711bb18f6d9d781e79a1aa6dc3c42ee3680504125e5cf8d7a18bfda19c46c86fbb637ba7ef8d67900000000076c562df17f5bb5c128a38e1bcfb929f127a69c1653464e3ff37bb445d66e04ad3f8748117bbf0f4c3e99be9a4a83ea1f"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={[0x0]}, 0x0) r6 = memfd_create(&(0x7f0000000300)='\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xfe\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3@\xd3\xae\xd2\a\x11\xa9\xa5^\xa8ddj\x03\xbd\x16\x93\xb9r\x04h\xaa\x1aT\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xa3[\x00\xa9C%}C\xf4c\xba\xf9H\x98}<\x98m#\xf5\x9e\xd3\xea\x00\x00\x00\x00', 0x3) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4ea2, 0x1, @mcast2, 0x4}, 0x1c) 3.436043396s ago: executing program 1 (id=13105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) mkdir(0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000020000000200000004000000000000000000000b03"], 0x0, 0x5a}, 0x28) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) pipe2$9p(&(0x7f0000000100), 0x80000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2.189522594s ago: executing program 1 (id=13106): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000005c0)=ANY=[@ANYRES8=r0], &(0x7f0000000280)='GPL\x00', 0x81, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10168, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000"], 0x48) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x25, 0x5, 0x0) setreuid(0xffffffffffffffff, 0xee00) setresuid(0x0, 0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x100) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x4, 0xfffffffffffffffd, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x0, 0x2, 0x7}, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r5, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 2.188305869s ago: executing program 4 (id=13107): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x4800, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000001100)={0x3, 0x10, [0x0, 0x0, 0x0, 0x0]}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x9b) pipe2$9p(&(0x7f0000000240), 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r3, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b000000000000071200000000"], 0x30}, 0x0) r4 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\x98\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xcf\xb0\x18\xd3\xad*\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb+Y\x9e\r\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x041=\x9f\x99\xabQ\xf6\a\x81\x01\xe5\x98\t\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\xf0I{\x00\x00\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x1e\xd6l\xbc_\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88RW\xa9\xef\xe9\"]\xa8W?r\x88\xe6K\xc1gb\xc0\x9d\"*\xe2X\xb5#', 0x7) r5 = dup(r4) r6 = fanotify_init(0x2, 0x40000) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ppoll(&(0x7f0000000180)=[{r7, 0x1}], 0x1, 0x0, 0x0, 0x0) close(0x3) unshare(0x2a020480) fanotify_mark(r6, 0x1, 0x32, r5, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2004000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') 2.14824482s ago: executing program 9 (id=13108): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x48}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r4}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[], &(0x7f0000000340)=""/58, 0x10f, 0x3a, 0x1, 0x12b5, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) 1.123039224s ago: executing program 9 (id=13109): fsopen(&(0x7f0000000000)='proc\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newtaction={0x168, 0x30, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{0x154, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x11c, 0x10, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "bf3b86ec137868e5632b129d2603d7d8"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_PARMS={0x18, 0x1, {0x22, 0x6, 0x20000000, 0x1, 0x3ff}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x17}}]}, {0x90, 0x6, "0acebc5b12c9f42285ba59e3dbed741d48c59f89d0491a558428d78c95c10594c66a15ff054ac46773218c9a38141ee11b599fce526af421038e06ee8b240419275fa391a1c3955539adc654068b7ee54290f312af1db45a5b1afb8c09d135c129dc76015d0cbc5568ebbc8e30d7925cd93f338484ace957fb53da7ad0a20d30111742cb06727e99761fa385"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000003c0)=""/4096, 0x1000) vmsplice(r2, &(0x7f0000000780)=[{&(0x7f0000000800)="366c3d15cc3b565398e8b36c499f4ccb64274b83315c98a12cc2779ffd7920b8adb39bfd42274ad6c9300b77a2d6f571271493ccccdfb2b0e3335ff33fd688cf1adc1b5959e221d41b6a2c11d09fb84c7fc6ebdcd120", 0x56}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000015c0)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT=r4]) chdir(0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x860b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r5, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 911.491056ms ago: executing program 1 (id=13110): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000001140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "cbbf09c473ef3ee5", "d62cb2759e70ad75c3b50ef30b007511", "0894cb4c", "2a6f9fea1f1bb653"}, 0x28) sendmsg$sock(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[@txtime={{0x18, 0x11a, 0x3d, 0x4}}], 0x18}, 0x8000) connect$inet(r2, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) ftruncate(r2, 0x2911) sendmsg$xdp(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000180)={0x2a, 0x2}, 0xc) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)=0x3) 910.769045ms ago: executing program 2 (id=13111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x13f}}, 0x20) kcmp(r6, r6, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x8, 0x60, @empty, @mcast2, 0x20, 0x8000, 0x5, 0x81}}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf, '\x00', r8, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb7020000080000001823", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) r10 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r10) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x40000105, 0x0, 0x0, 0xfffffd30}) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) r12 = dup(r11) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, 0x0) 44.831494ms ago: executing program 4 (id=13112): set_mempolicy(0x3, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) close(r3) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000500)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev, @in=@multicast2}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000100)=0xe8) getgroups(0x2, &(0x7f00000003c0)=[0xee01, 0xee01]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r5) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001e0000000800040000000000080001"], 0x24}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0x48}) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) 0s ago: executing program 9 (id=13113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xfffffffffffffe34) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000}) kernel console output (not intermixed with test programs): s an invalid bInterval 255, changing to 11 [ 2024.139838][T15569] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2024.174367][T15569] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2024.192082][T15569] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.240394][T15569] usb 10-1: config 0 descriptor?? [ 2024.265991][ T5010] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2024.274588][T15569] hub 10-1:0.0: USB hub found [ 2024.480509][ T5010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2024.493470][ T5010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2024.509634][T15569] hub 10-1:0.0: config failed, can't read hub descriptor (err -22) [ 2024.525710][T15569] usbhid 10-1:0.0: can't add hid device: -71 [ 2025.484895][T15569] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2025.585070][T15569] usb 10-1: USB disconnect, device number 33 [ 2030.307525][ T5065] xt_hashlimit: size too large, truncated to 1048576 [ 2030.585529][T23142] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 2030.926544][T23142] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 2030.936078][T23142] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.957191][T23142] usb 10-1: config 0 descriptor?? [ 2031.732456][T23142] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 2032.372095][T23142] gspca_cpia1: usb_control_msg 05, error -71 [ 2032.385071][T23142] gspca_cpia1: usb_control_msg 01, error -71 [ 2032.391129][T23142] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0) [ 2032.405128][T23142] usb 10-1: USB disconnect, device number 34 [ 2032.550966][ T5069] Cannot find del_set index 3 as target [ 2037.225875][ T5123] block device autoloading is deprecated and will be removed. [ 2037.239664][ T5123] syz.8.11142: attempt to access beyond end of device [ 2037.239664][ T5123] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2038.969907][ T5134] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2038.983755][ T5134] Error validating options; rc = [-22] [ 2039.896582][ T5137] netlink: 277 bytes leftover after parsing attributes in process `syz.4.11146'. [ 2039.921267][ T5137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11146'. [ 2041.362717][ T5156] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 2041.372488][ T5156] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0 [ 2042.200047][ T5171] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11151'. [ 2045.939396][ T5196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11157'. [ 2051.831177][ T5241] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2051.843144][ T5241] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2052.416723][ T5167] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 1153 sec [ 2052.935406][ T5249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11175'. [ 2057.758013][ T5289] overlayfs: failed to clone upperpath [ 2058.890542][ T30] audit: type=1326 audit(1752961137.434:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5299 comm="syz.4.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2059.013280][ T30] audit: type=1326 audit(1752961137.434:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5299 comm="syz.4.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2059.201301][ T30] audit: type=1326 audit(1752961137.434:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5299 comm="syz.4.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2059.962360][ T30] audit: type=1326 audit(1752961137.434:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5299 comm="syz.4.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2060.055229][ T30] audit: type=1326 audit(1752961137.434:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5299 comm="syz.4.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2060.102803][ T30] audit: type=1326 audit(1752961137.434:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5299 comm="syz.4.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2060.132107][ T30] audit: type=1326 audit(1752961137.434:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5299 comm="syz.4.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2061.211639][ T30] audit: type=1326 audit(1752961137.444:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5299 comm="syz.4.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2061.524894][ T30] audit: type=1326 audit(1752961137.444:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5299 comm="syz.4.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2061.559254][ T30] audit: type=1326 audit(1752961137.444:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5299 comm="syz.4.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2065.457759][ T5343] futex_wake_op: syz.4.11196 tries to shift op by -1; fix this program [ 2067.927934][ T5355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11200'. [ 2068.883121][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 2068.883180][ T30] audit: type=1800 audit(1752961147.364:2128): pid=5361 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.11201" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2070.654992][ T5377] netlink: 384 bytes leftover after parsing attributes in process `syz.4.11206'. [ 2070.665277][ T5377] netlink: 'syz.4.11206': attribute type 2 has an invalid length. [ 2072.651162][ T5386] sock: sock_set_timeout: `syz.5.11207' (pid 5386) tries to set negative timeout [ 2072.941760][ T5386] tipc: Enabling of bearer rejected, failed to enable media [ 2075.997242][ T5420] syz.8.11217: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 2076.016336][ T5420] CPU: 1 UID: 0 PID: 5420 Comm: syz.8.11217 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 2076.016368][ T5420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2076.016384][ T5420] Call Trace: [ 2076.016394][ T5420] [ 2076.016405][ T5420] dump_stack_lvl+0x189/0x250 [ 2076.016441][ T5420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2076.016468][ T5420] ? __pfx__printk+0x10/0x10 [ 2076.016498][ T5420] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2076.016527][ T5420] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2076.016558][ T5420] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2076.016590][ T5420] warn_alloc+0x214/0x310 [ 2076.016625][ T5420] ? __pfx_warn_alloc+0x10/0x10 [ 2076.016673][ T5420] ? __get_vm_area_node+0x28f/0x300 [ 2076.016697][ T5420] ? packet_set_ring+0x6f4/0x2380 [ 2076.016733][ T5420] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 2076.016789][ T5420] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2076.016815][ T5420] ? alloc_pages_mpol+0x3c4/0x4a0 [ 2076.016841][ T5420] ? packet_set_ring+0x6f4/0x2380 [ 2076.016872][ T5420] vzalloc_noprof+0xb2/0xf0 [ 2076.016895][ T5420] ? packet_set_ring+0x6f4/0x2380 [ 2076.016936][ T5420] packet_set_ring+0x6f4/0x2380 [ 2076.016992][ T5420] ? __pfx_packet_set_ring+0x10/0x10 [ 2076.017044][ T5420] ? _copy_from_user+0x94/0xb0 [ 2076.017080][ T5420] packet_setsockopt+0xc5a/0x12c0 [ 2076.017110][ T5420] ? mpol_set_nodemask+0x311/0x3f0 [ 2076.017133][ T5420] ? __pfx_packet_setsockopt+0x10/0x10 [ 2076.017169][ T5420] ? __lock_acquire+0xab9/0xd20 [ 2076.017211][ T5420] ? __fget_files+0x2a/0x420 [ 2076.017248][ T5420] ? __fget_files+0x2a/0x420 [ 2076.017270][ T5420] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2076.017290][ T5420] ? __pfx_packet_setsockopt+0x10/0x10 [ 2076.017321][ T5420] do_sock_setsockopt+0x179/0x1b0 [ 2076.017355][ T5420] __x64_sys_setsockopt+0x13f/0x1b0 [ 2076.017390][ T5420] do_syscall_64+0xfa/0x3b0 [ 2076.017413][ T5420] ? lockdep_hardirqs_on+0x9c/0x150 [ 2076.017434][ T5420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2076.017454][ T5420] ? clear_bhb_loop+0x60/0xb0 [ 2076.017479][ T5420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2076.017498][ T5420] RIP: 0033:0x7fb73d38e9a9 [ 2076.017517][ T5420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2076.017534][ T5420] RSP: 002b:00007fb73e127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2076.017554][ T5420] RAX: ffffffffffffffda RBX: 00007fb73d5b6240 RCX: 00007fb73d38e9a9 [ 2076.017570][ T5420] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000004 [ 2076.017583][ T5420] RBP: 00007fb73d410d69 R08: 000000000000001c R09: 0000000000000000 [ 2076.017595][ T5420] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 2076.017608][ T5420] R13: 0000000000000000 R14: 00007fb73d5b6240 R15: 00007ffeb69bb988 [ 2076.017639][ T5420] [ 2076.017665][ T5420] Mem-Info: [ 2076.305333][ T5420] active_anon:24076 inactive_anon:29576 isolated_anon:0 [ 2076.305333][ T5420] active_file:26709 inactive_file:34692 isolated_file:0 [ 2076.305333][ T5420] unevictable:768 dirty:373 writeback:0 [ 2076.305333][ T5420] slab_reclaimable:11732 slab_unreclaimable:111098 [ 2076.305333][ T5420] mapped:34339 shmem:48029 pagetables:1684 [ 2076.305333][ T5420] sec_pagetables:0 bounce:0 [ 2076.305333][ T5420] kernel_misc_reclaimable:0 [ 2076.305333][ T5420] free:1231922 free_pcp:9942 free_cma:0 [ 2076.351535][ T5420] Node 0 active_anon:96304kB inactive_anon:118304kB active_file:106508kB inactive_file:138768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137284kB dirty:1484kB writeback:0kB shmem:190580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12100kB pagetables:6568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2076.386058][ T5420] Node 1 active_anon:0kB inactive_anon:0kB active_file:328kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2076.417803][ T5420] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2076.446780][ T5420] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 2076.452577][ T5420] Node 0 DMA32 free:1017264kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:96300kB inactive_anon:118256kB active_file:104752kB inactive_file:138700kB unevictable:1536kB writepending:1484kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:39716kB local_pcp:4620kB free_cma:0kB [ 2076.485590][ T5420] lowmem_reserve[]: 0 0 1 1 1 [ 2076.490417][ T5420] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:48kB active_file:1756kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2076.520241][ T5420] lowmem_reserve[]: 0 0 0 0 0 [ 2076.525027][ T5420] Node 1 Normal free:3895044kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:328kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:44kB local_pcp:44kB free_cma:0kB [ 2076.555898][ T5420] lowmem_reserve[]: 0 0 0 0 0 [ 2076.560624][ T5420] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2076.573381][ T5420] Node 0 DMA32: 30*4kB (UME) 49*8kB (UME) 699*16kB (UE) 521*32kB (UME) 1174*64kB (UME) 730*128kB (UME) 266*256kB (UME) 97*512kB (UME) 30*1024kB (UME) 8*2048kB (UM) 160*4096kB (UM) = 1017168kB [ 2076.592646][ T5420] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 2076.605163][ T5420] Node 1 Normal: 1*4kB (E) 4*8kB (E) 4*16kB (E) 7*32kB (ME) 9*64kB (ME) 3*128kB (UM) 4*256kB (ME) 3*512kB (M) 4*1024kB (UME) 4*2048kB (UME) 947*4096kB (M) = 3895044kB [ 2076.622264][ T5420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2076.632078][ T5420] Node 0 hugepages_total=3 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2076.641512][ T5420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2076.651268][ T5420] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2076.660633][ T5420] 109480 total pagecache pages [ 2076.665610][ T5420] 53 pages in swap cache [ 2076.669892][ T5420] Free swap = 124784kB [ 2076.674049][ T5420] Total swap = 124996kB [ 2076.678276][ T5420] 2097051 pages RAM [ 2076.682090][ T5420] 0 pages HighMem/MovableOnly [ 2076.686936][ T5420] 424693 pages reserved [ 2076.691103][ T5420] 0 pages cma reserved [ 2077.210412][ T30] audit: type=1326 audit(1752961155.754:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5426 comm="syz.8.11221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73d38e9a9 code=0x7ffc0000 [ 2077.283148][ T30] audit: type=1326 audit(1752961155.754:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5426 comm="syz.8.11221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73d38e9a9 code=0x7ffc0000 [ 2077.326526][ T30] audit: type=1326 audit(1752961155.784:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5426 comm="syz.8.11221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fb73d38e9a9 code=0x7ffc0000 [ 2077.374411][ T30] audit: type=1326 audit(1752961155.784:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5426 comm="syz.8.11221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73d38e9a9 code=0x7ffc0000 [ 2078.054976][ T30] audit: type=1326 audit(1752961155.784:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5426 comm="syz.8.11221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73d38e9a9 code=0x7ffc0000 [ 2078.076787][ T30] audit: type=1326 audit(1752961155.784:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5426 comm="syz.8.11221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb73d38e9a9 code=0x7ffc0000 [ 2078.165733][ T30] audit: type=1326 audit(1752961155.784:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5426 comm="syz.8.11221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73d38e9a9 code=0x7ffc0000 [ 2078.188129][ T30] audit: type=1326 audit(1752961155.784:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5426 comm="syz.8.11221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73d38e9a9 code=0x7ffc0000 [ 2078.215158][ T30] audit: type=1326 audit(1752961155.794:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5426 comm="syz.8.11221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb73d38e9a9 code=0x7ffc0000 [ 2078.237050][ T30] audit: type=1326 audit(1752961155.794:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5426 comm="syz.8.11221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb73d38e9a9 code=0x7ffc0000 [ 2078.619630][ T5438] overlayfs: failed to clone upperpath [ 2079.403967][ T5441] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 2080.407552][ T5447] batman_adv: batadv0: Interface deactivated: dummy0 [ 2080.415601][ T5447] dummy0: entered promiscuous mode [ 2090.755859][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 2090.755880][ T30] audit: type=1326 audit(1752961169.244:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5526 comm="syz.1.11248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a0e98e9a9 code=0x0 [ 2098.785832][ T5592] xt_socket: unknown flags 0x8 [ 2099.826736][ T5167] IPVS: starting estimator thread 0... [ 2099.934874][ T5609] IPVS: using max 38 ests per chain, 91200 per kthread [ 2101.216668][ T30] audit: type=1800 audit(1752961179.764:2175): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.11271" name="nullb0" dev="tmpfs" ino=4859 res=0 errno=0 [ 2103.950787][ T5644] overlay: Unknown parameter '/' [ 2106.084847][ T5655] bridge0: entered promiscuous mode [ 2106.091944][ T5655] batman_adv: batadv0: Adding interface: macsec1 [ 2106.098393][ T5655] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2106.123968][ T5655] batman_adv: batadv0: Interface activated: macsec1 [ 2112.271393][ T5712] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2112.282605][ T5712] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2113.225498][ T5170] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 1214 sec [ 2117.571490][ T5773] netlink: 52 bytes leftover after parsing attributes in process `syz.8.11308'. [ 2124.050471][ T5829] netlink: 'syz.9.11324': attribute type 4 has an invalid length. [ 2124.142239][ T5830] netlink: 'syz.9.11324': attribute type 4 has an invalid length. [ 2126.315350][ T5862] atomic_op ffff88804c623198 conn xmit_atomic 0000000000000000 [ 2126.324768][ T5862] overlayfs: failed to clone upperpath [ 2126.688024][T26641] Bluetooth: hci4: Unknown advertising packet type: 0x31 [ 2126.688306][T26641] Bluetooth: hci4: Unknown advertising packet type: 0x20 [ 2126.696109][T26641] Bluetooth: hci4: Malformed LE Event: 0x0d [ 2127.985146][ T5170] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 2129.976744][ T5884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11336'. [ 2130.067098][ T5170] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2130.239268][ T5170] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2130.312563][ T5170] usb 10-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 2132.424940][ T5170] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.458244][ T5894] dvmrp8: entered allmulticast mode [ 2133.251647][ T5170] usb 10-1: config 0 descriptor?? [ 2133.313073][ T5901] netlink: 40 bytes leftover after parsing attributes in process `syz.8.11341'. [ 2134.631788][ T5170] usb 10-1: can't set config #0, error -71 [ 2134.646908][ T5170] usb 10-1: USB disconnect, device number 35 [ 2135.968372][ T5908] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 2135.975036][ T5908] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2135.999122][ T5908] vhci_hcd vhci_hcd.0: Device attached [ 2136.009511][ T5915] vhci_hcd: connection closed [ 2136.012986][T28362] vhci_hcd: stop threads [ 2136.022030][T28362] vhci_hcd: release socket [ 2136.027245][T28362] vhci_hcd: disconnect device [ 2139.268794][ T5946] overlayfs: failed to clone upperpath [ 2143.161436][ T5975] fuse: Bad value for 'fd' [ 2145.274767][ T30] audit: type=1326 audit(1752961223.734:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.4.11366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2145.335013][ T30] audit: type=1326 audit(1752961223.734:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.4.11366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2146.349054][ T30] audit: type=1326 audit(1752961223.734:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.4.11366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2146.405579][ T30] audit: type=1326 audit(1752961223.734:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.4.11366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2146.450290][ T30] audit: type=1326 audit(1752961223.864:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.4.11366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2146.514732][ T30] audit: type=1326 audit(1752961223.864:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.4.11366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2146.573503][ T30] audit: type=1326 audit(1752961223.864:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.4.11366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2146.626301][ T6016] smb3: Unexpected value for 'rdma' [ 2146.876266][ T30] audit: type=1326 audit(1752961223.864:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.4.11366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2146.910568][ T30] audit: type=1326 audit(1752961223.864:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.4.11366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2147.519980][ T30] audit: type=1326 audit(1752961223.874:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5998 comm="syz.4.11366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2149.605400][ T6041] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11376'. [ 2151.802482][ T6054] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2151.814480][ T6054] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2152.626035][ T6057] netlink: 76 bytes leftover after parsing attributes in process `syz.9.11380'. [ 2153.250685][ T6065] hugetlbfs: syz.8.11383 (6065): Using mlock ulimits for SHM_HUGETLB is obsolete [ 2155.345807][ T6082] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.11384'. [ 2159.165077][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11389'. [ 2162.826591][ T3790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2162.838196][ T3790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2163.831712][ T3790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2163.841475][ T3790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2163.851607][ T3790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2164.220454][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11399'. [ 2165.381368][T28364] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2165.996999][ T3790] Bluetooth: hci0: command tx timeout [ 2166.751929][T28364] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.070302][ T6165] overlayfs: failed to clone lowerpath [ 2167.184759][ T6166] overlayfs: failed to clone upperpath [ 2168.064747][ T3790] Bluetooth: hci0: command tx timeout [ 2168.123782][ T6175] overlayfs: failed to clone upperpath [ 2168.345145][ T6178] overlayfs: missing 'lowerdir' [ 2168.824335][T28364] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2168.880121][ T6125] lo speed is unknown, defaulting to 1000 [ 2168.888391][ T6125] lo speed is unknown, defaulting to 1000 [ 2168.946705][T28364] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2170.135375][ T3790] Bluetooth: hci0: command tx timeout [ 2170.465824][ T6208] netlink: 'syz.4.11417': attribute type 1 has an invalid length. [ 2170.473759][ T6208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11417'. [ 2171.144956][ T24] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 2171.395003][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 2171.410786][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2171.438522][ T24] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2171.494714][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2171.524151][ T24] usb 10-1: config 0 descriptor?? [ 2171.682780][T28364] dvmrp8 (unregistering): left allmulticast mode [ 2171.992038][T28364] batman_adv: batadv0: Interface deactivated: macsec1 [ 2172.000873][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 2172.023305][T28364] batman_adv: batadv0: Removing interface: macsec1 [ 2172.173806][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2172.184965][ T24] usb 10-1: USB disconnect, device number 36 [ 2172.216604][ T3790] Bluetooth: hci0: command tx timeout [ 2172.968931][T28364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2172.980281][T28364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2172.990691][T28364] bond0 (unregistering): Released all slaves [ 2173.148572][T28364] bond1 (unregistering): Released all slaves [ 2173.869347][T28364] bond2 (unregistering): Released all slaves [ 2173.900427][ T6207] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 2173.908221][ T6217] macvlan2: entered promiscuous mode [ 2174.054821][ T5170] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 1275 sec [ 2174.088532][ T6125] chnl_net:caif_netlink_parms(): no params data found [ 2174.227869][T28364] tipc: Left network mode [ 2175.637264][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 2175.644564][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state [ 2175.753248][ T6125] bridge_slave_0: entered allmulticast mode [ 2175.762095][ T6125] bridge_slave_0: entered promiscuous mode [ 2176.822868][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 2176.833538][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.845741][ T6125] bridge_slave_1: entered allmulticast mode [ 2177.016974][ T6125] bridge_slave_1: entered promiscuous mode [ 2177.901448][ T6256] trusted_key: encrypted_key: insufficient parameters specified [ 2178.082907][ T6125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2178.805331][ T6272] overlayfs: missing 'lowerdir' [ 2179.114847][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11432'. [ 2180.582070][ T6125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2181.092466][ T6125] team0: Port device team_slave_0 added [ 2181.834197][ T6125] team0: Port device team_slave_1 added [ 2183.118794][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2183.141477][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2183.217569][ T6125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2183.260968][T28364] hsr_slave_0: left promiscuous mode [ 2183.268035][T28364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2183.285362][T28364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2183.318861][T28364] veth1_macvtap: left promiscuous mode [ 2183.324557][T28364] veth0_macvtap: left promiscuous mode [ 2183.461268][T28364] veth1_vlan: left promiscuous mode [ 2183.468504][T28364] veth0_vlan: left promiscuous mode [ 2184.420606][ T6320] netlink: 277 bytes leftover after parsing attributes in process `syz.1.11446'. [ 2184.454429][ T6320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11446'. [ 2185.836870][ T6125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2185.845466][ T6125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2185.873349][ T6125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2186.298406][ T6125] hsr_slave_0: entered promiscuous mode [ 2186.334780][ T6125] hsr_slave_1: entered promiscuous mode [ 2186.354071][ T6125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2186.376369][ T6125] Cannot create hsr debugfs directory [ 2188.107214][ T6357] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2189.024451][T28364] IPVS: stop unused estimator thread 0... [ 2191.883483][ T6376] No such timeout policy "syz1" [ 2195.911431][ T6395] xt_hashlimit: max too large, truncated to 1048576 [ 2195.918564][ T6395] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2198.387166][ T6125] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2199.617258][ T6125] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2199.881193][ T6125] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2199.913650][ T6125] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2201.231226][ T6440] 9pnet_virtio: no channels available for device syz [ 2201.267255][ T6437] ceph: No mds server is up or the cluster is laggy [ 2201.275595][ T24] libceph: connect (1)[c::]:6789 error -22 [ 2201.285806][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 2201.609486][T23142] libceph: connect (1)[c::]:6789 error -22 [ 2201.615629][T23142] libceph: mon0 (1)[c::]:6789 connect error [ 2201.959797][ T6125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2203.049109][ T6125] 8021q: adding VLAN 0 to HW filter on device team0 [ 2203.083024][T28364] bridge0: port 1(bridge_slave_0) entered blocking state [ 2203.090218][T28364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2203.455066][T28364] bridge0: port 2(bridge_slave_1) entered blocking state [ 2203.462516][T28364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2206.227914][ T6485] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 2206.237277][ T6485] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 2206.245893][ T6485] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 2206.254493][ T6485] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 2206.265325][ T6485] geneve2: entered promiscuous mode [ 2206.270740][ T6485] geneve2: entered allmulticast mode [ 2207.928824][ T6493] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 2208.606391][ T6125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2208.772111][ T6125] veth0_vlan: entered promiscuous mode [ 2208.808750][ T6125] veth1_vlan: entered promiscuous mode [ 2208.901547][ T6125] veth0_macvtap: entered promiscuous mode [ 2208.917313][ T6125] veth1_macvtap: entered promiscuous mode [ 2208.956670][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2209.099627][ T6125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2209.129031][ T6125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2210.086835][ T6515] fuse: Bad value for 'fd' [ 2210.102298][ T6125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2211.089036][ T6125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2211.098298][ T6125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2211.414379][T28354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2211.453895][T28354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2211.524988][T28349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2211.542054][T28349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2213.104871][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 2213.104887][ T30] audit: type=1326 audit(1752961291.294:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6528 comm="syz.3.11391" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c2cb8e9a9 code=0x0 [ 2214.598028][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11496'. [ 2217.247697][ T6573] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 2217.257709][ T6573] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 2218.704186][ T6581] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 2221.330885][ T6593] siw: device registration error -23 [ 2221.898652][ T6610] program syz.9.11514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2223.543425][ T6618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2225.362724][ T6628] xt_CT: No such helper "netbios-ns" [ 2226.189289][ T6644] trusted_key: encrypted_key: insufficient parameters specified [ 2233.410883][ T6690] siw: device registration error -23 [ 2235.070095][ T5170] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 1336 sec [ 2236.495230][T26641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2236.505720][T26641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2236.517759][T26641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2236.527237][T26641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2236.537344][T26641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2238.616071][ T3790] Bluetooth: hci5: command tx timeout [ 2239.896034][ T6748] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 2240.632878][ T6742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2240.780676][ T3790] Bluetooth: hci5: command tx timeout [ 2240.803926][ T6713] lo speed is unknown, defaulting to 1000 [ 2240.812616][ T6713] lo speed is unknown, defaulting to 1000 [ 2241.520116][ T6746] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2242.896531][ T3790] Bluetooth: hci5: command tx timeout [ 2242.943627][ T6769] kthread_run failed with err -4 [ 2243.480837][ T6713] chnl_net:caif_netlink_parms(): no params data found [ 2244.934908][ T3790] Bluetooth: hci5: command tx timeout [ 2247.015887][ T3790] Bluetooth: hci5: command 0x0405 tx timeout [ 2247.191782][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state [ 2247.365122][ T6713] bridge0: port 1(bridge_slave_0) entered disabled state [ 2247.372571][ T6713] bridge_slave_0: entered allmulticast mode [ 2247.381914][ T6713] bridge_slave_0: entered promiscuous mode [ 2247.391306][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state [ 2247.405015][ T6713] bridge0: port 2(bridge_slave_1) entered disabled state [ 2247.418935][ T6713] bridge_slave_1: entered allmulticast mode [ 2247.432864][ T6713] bridge_slave_1: entered promiscuous mode [ 2248.499880][ T1290] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.831010][ T1290] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2249.636573][ T30] audit: type=1326 audit(1752961328.174:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6806 comm="syz.4.11562" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44f998e9a9 code=0x0 [ 2249.869007][ T6713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2249.882583][ T6713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2251.158782][ T1290] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2252.713883][ T6713] team0: Port device team_slave_0 added [ 2252.815956][ T1290] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2253.012733][ T6713] team0: Port device team_slave_1 added [ 2253.137870][ T6713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2253.152946][ T6713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2253.190195][ T6713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2253.207683][ T6713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2253.217546][ T6713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2253.264976][ T6713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2255.823826][ T6713] hsr_slave_0: entered promiscuous mode [ 2255.833120][ T6713] hsr_slave_1: entered promiscuous mode [ 2255.839780][ T6713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2255.847561][ T6713] Cannot create hsr debugfs directory [ 2257.451872][ T6893] ubi31: attaching mtd0 [ 2257.473410][ T6893] ubi31: scanning is finished [ 2257.478705][ T6893] ubi31: empty MTD device detected [ 2258.448416][ T6893] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 2258.456111][ T6893] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 2258.463405][ T6893] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 2258.470504][ T6893] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 2258.478035][ T6893] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 2258.485389][ T6893] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 2258.493535][ T6893] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3578945848 [ 2258.503681][ T6893] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 2258.523047][ T1290] bridge_slave_1: left allmulticast mode [ 2258.524739][ T6897] ubi31: background thread "ubi_bgt31d" started, PID 6897 [ 2258.535894][ T1290] bridge_slave_1: left promiscuous mode [ 2258.536140][ T1290] bridge0: port 2(bridge_slave_1) entered disabled state [ 2258.570092][ T1290] bridge_slave_0: left allmulticast mode [ 2258.585425][ T1290] bridge_slave_0: left promiscuous mode [ 2258.611615][ T1290] bridge0: port 1(bridge_slave_0) entered disabled state [ 2263.318206][ T6939] xt_hashlimit: max too large, truncated to 1048576 [ 2263.327534][ T6939] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2265.703778][ T1290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2265.717255][ T1290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2265.727686][ T1290] bond0 (unregistering): Released all slaves [ 2267.016803][ T6966] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11600'. [ 2268.295680][T26641] Bluetooth: hci4: unknown advertising packet type: 0x70 [ 2277.686071][ T7033] binder: 7032:7033 ioctl 4018620d 0 returned -22 [ 2277.762600][ T7038] binder: 7032:7038 ioctl c018620c 0 returned -14 [ 2278.912260][ T1290] hsr_slave_0: left promiscuous mode [ 2278.931090][ T1290] hsr_slave_1: left promiscuous mode [ 2278.937600][ T1290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2278.947307][ T1290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2279.632861][ T1290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2279.649730][ T1290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2279.733223][ T1290] veth1_macvtap: left promiscuous mode [ 2279.745111][ T30] audit: type=1326 audit(1752961358.284:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7054 comm="syz.4.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2279.764765][ T1290] veth0_macvtap: left promiscuous mode [ 2279.772621][ T1290] veth1_vlan: left promiscuous mode [ 2279.788871][ T30] audit: type=1326 audit(1752961358.284:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7054 comm="syz.4.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2279.794198][ T1290] veth0_vlan: left promiscuous mode [ 2279.813528][ T30] audit: type=1326 audit(1752961358.324:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7054 comm="syz.4.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44f998d310 code=0x7ffc0000 [ 2280.032662][ T30] audit: type=1326 audit(1752961358.324:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7054 comm="syz.4.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2280.739843][ T30] audit: type=1326 audit(1752961358.324:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7054 comm="syz.4.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2280.912148][ T30] audit: type=1326 audit(1752961358.324:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7054 comm="syz.4.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2280.981082][ T30] audit: type=1326 audit(1752961358.324:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7054 comm="syz.4.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2281.047273][ T30] audit: type=1326 audit(1752961358.324:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7054 comm="syz.4.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2281.171555][ T30] audit: type=1326 audit(1752961358.324:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7054 comm="syz.4.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2282.141868][ T30] audit: type=1326 audit(1752961358.324:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7054 comm="syz.4.11620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998e9a9 code=0x7ffc0000 [ 2282.939480][ T7079] overlayfs: failed to clone upperpath [ 2286.939617][ T1290] team0 (unregistering): Port device team_slave_1 removed [ 2287.045554][ T1290] team0 (unregistering): Port device team_slave_0 removed [ 2289.606408][ T6713] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2293.346428][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11638'. [ 2294.871576][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11643'. [ 2295.269465][ T7153] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11642'. [ 2295.921173][ T5167] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 1397 sec [ 2296.843008][ T3790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2297.546084][ T3790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2297.564281][ T3790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2297.578341][ T3790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2297.590267][ T3790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2299.738051][T26641] Bluetooth: hci0: command tx timeout [ 2301.254910][ T7166] lo speed is unknown, defaulting to 1000 [ 2301.262577][ T7166] lo speed is unknown, defaulting to 1000 [ 2302.465677][T26641] Bluetooth: hci0: command tx timeout [ 2303.379650][ T7166] chnl_net:caif_netlink_parms(): no params data found [ 2303.457744][ T7236] vivid-000: disconnect [ 2303.563665][ T7239] vivid-000: reconnect [ 2304.182864][ T1290] bridge_slave_1: left allmulticast mode [ 2304.189686][ T1290] bridge_slave_1: left promiscuous mode [ 2304.196899][ T1290] bridge0: port 2(bridge_slave_1) entered disabled state [ 2304.237432][ T1290] bridge_slave_0: left allmulticast mode [ 2304.267664][ T1290] bridge_slave_0: left promiscuous mode [ 2304.274377][ T1290] bridge0: port 1(bridge_slave_0) entered disabled state [ 2304.637480][T26641] Bluetooth: hci0: command tx timeout [ 2306.085760][ T1290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2306.142988][ T1290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2306.198135][ T1290] bond0 (unregistering): Released all slaves [ 2306.854984][T26641] Bluetooth: hci0: command tx timeout [ 2306.978968][ T7240] batman_adv: batadv0: Adding interface: ip6gretap1 [ 2306.992744][ T7240] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2307.125318][ T7240] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 2307.312786][ T7246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2307.349829][ T7246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2308.049533][ T7246] batman_adv: batadv0: Removing interface: ip6gretap1 [ 2309.392991][ T1290] hsr_slave_0: left promiscuous mode [ 2309.417721][ T1290] hsr_slave_1: left promiscuous mode [ 2309.423901][ T1290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2309.435514][ T1290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2312.948303][ T1290] team0 (unregistering): Port device team_slave_1 removed [ 2313.673398][ T1290] team0 (unregistering): Port device team_slave_0 removed [ 2315.541135][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 2315.579743][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 2315.640022][ T7339] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.11685'. [ 2316.291854][ T7166] bridge_slave_0: entered allmulticast mode [ 2316.300002][ T7166] bridge_slave_0: entered promiscuous mode [ 2316.312877][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 2316.320144][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 2316.340261][ T7166] bridge_slave_1: entered allmulticast mode [ 2316.348579][ T7166] bridge_slave_1: entered promiscuous mode [ 2317.523090][ T7166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2317.619274][ T7166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2317.837430][ T7166] team0: Port device team_slave_0 added [ 2318.326025][ T7166] team0: Port device team_slave_1 added [ 2319.845405][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2319.863784][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2319.890741][ T7166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2319.913308][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2319.928671][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2320.389204][ T7383] netlink: 'syz.4.11696': attribute type 1 has an invalid length. [ 2320.397241][ T7383] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.11696'. [ 2320.738198][ T7166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2321.573538][ T7166] hsr_slave_0: entered promiscuous mode [ 2321.619125][ T7166] hsr_slave_1: entered promiscuous mode [ 2321.779023][ T7166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2321.787106][ T7166] Cannot create hsr debugfs directory [ 2322.885880][ T7412] can0: slcan on ttyS3. [ 2323.845734][ T7414] can0 (unregistered): slcan off ttyS3. [ 2324.352321][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11707'. [ 2325.852708][ T7444] virtio-fs: tag not found [ 2327.164405][ T7166] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2327.679485][T30743] libceph: connect (1)[c::]:6789 error -101 [ 2328.144981][ T7457] ceph: No mds server is up or the cluster is laggy [ 2328.164963][T30743] libceph: mon0 (1)[c::]:6789 connect error [ 2328.178794][ T7166] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2328.367007][ T7166] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2328.678480][ T7166] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2329.385600][ T7166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2329.426265][ T7489] overlayfs: failed to resolve './file0': -2 [ 2329.469987][ T7166] 8021q: adding VLAN 0 to HW filter on device team0 [ 2329.641113][T28354] bridge0: port 1(bridge_slave_0) entered blocking state [ 2329.648431][T28354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2329.875935][T28354] bridge0: port 2(bridge_slave_1) entered blocking state [ 2329.883222][T28354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2331.852038][ T7166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2331.995016][ T7538] SET target dimension over the limit! [ 2333.621031][ T7166] veth0_vlan: entered promiscuous mode [ 2333.655174][T26641] Bluetooth: hci0: command tx timeout [ 2333.672340][ T7166] veth1_vlan: entered promiscuous mode [ 2333.737349][ T7166] veth0_macvtap: entered promiscuous mode [ 2333.753282][ T7166] veth1_macvtap: entered promiscuous mode [ 2333.936712][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2334.676677][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2334.751194][ T7166] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.762115][ T7166] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.774082][ T7166] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.784757][ T7166] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.972399][T28350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2334.992215][T28350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2335.062615][T28349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2335.092542][T28349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2337.644305][ T7601] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0 [ 2339.260767][ T7612] netlink: 'syz.8.11757': attribute type 5 has an invalid length. [ 2339.275162][ T7612] ip6erspan0: entered promiscuous mode [ 2339.921734][ T7627] overlayfs: failed to clone upperpath [ 2344.835380][T26641] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 2345.432580][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11775'. [ 2348.854910][T26641] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 2348.864081][T26641] Bluetooth: hci4: Injecting HCI hardware error event [ 2348.875083][ T3790] Bluetooth: hci4: hardware error 0x00 [ 2351.017554][ T3790] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2352.510432][ T7710] ubi31: detaching mtd0 [ 2354.219709][ T7710] ubi31: mtd0 is detached [ 2356.301445][T30741] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 1457 sec [ 2361.141777][ T7747] netlink: 'syz.8.11797': attribute type 5 has an invalid length. [ 2361.144929][ T7742] ceph: No mds server is up or the cluster is laggy [ 2361.150578][ T5170] libceph: connect (1)[c::]:6789 error -101 [ 2361.164136][ T5170] libceph: mon0 (1)[c::]:6789 connect error [ 2361.497010][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11798'. [ 2362.275833][ T7753] netlink: 'syz.4.11800': attribute type 1 has an invalid length. [ 2362.681832][ T7755] bond5: (slave geneve2): Opening slave failed [ 2363.377357][ T7760] bond5: (slave bridge4): making interface the new active one [ 2363.405999][ T7760] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 2363.487234][ T7753] macvlan2: entered promiscuous mode [ 2363.492609][ T7753] macvlan2: entered allmulticast mode [ 2363.505788][ T7765] overlayfs: failed to clone upperpath [ 2363.565535][ T7753] bond5: entered promiscuous mode [ 2363.570660][ T7753] bridge4: entered promiscuous mode [ 2363.667047][ T7753] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2363.719116][ T7753] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2363.763001][ T7753] bond5: left promiscuous mode [ 2363.776327][T26641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2363.789655][T26641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2363.800630][T26641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2363.809148][T26641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2363.819313][T26641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2363.867989][ T7753] bridge4: left promiscuous mode [ 2366.204962][T26641] Bluetooth: hci5: command tx timeout [ 2366.558036][ T7797] overlayfs: failed to clone upperpath [ 2368.487930][T26641] Bluetooth: hci5: command tx timeout [ 2368.740678][T28349] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2369.009738][ T7768] lo speed is unknown, defaulting to 1000 [ 2369.025237][ T7768] lo speed is unknown, defaulting to 1000 [ 2369.449176][ T7817] kAFS: unable to lookup cell '' [ 2369.491168][T28349] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2369.912352][T28349] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2370.869248][T26641] Bluetooth: hci5: command tx timeout [ 2371.695146][T28349] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.257681][ T7842] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 2372.267656][ T7842] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0 [ 2372.503366][ T7844] siw: device registration error -23 [ 2373.055533][T26641] Bluetooth: hci5: command tx timeout [ 2374.860466][ T7768] chnl_net:caif_netlink_parms(): no params data found [ 2374.965696][T28349] bridge_slave_1: left allmulticast mode [ 2374.982901][T28349] bridge_slave_1: left promiscuous mode [ 2374.997922][T28349] bridge0: port 2(bridge_slave_1) entered disabled state [ 2375.018747][T28349] bridge_slave_0: left allmulticast mode [ 2375.028046][T28349] bridge_slave_0: left promiscuous mode [ 2375.033887][T28349] bridge0: port 1(bridge_slave_0) entered disabled state [ 2375.263126][T26641] Bluetooth: hci5: command tx timeout [ 2376.021648][ T7871] overlay: Unknown parameter '/' [ 2378.596771][T28349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2378.609985][T28349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2378.621288][T28349] bond0 (unregistering): Released all slaves [ 2379.432771][ T7869] veth0_to_team: entered promiscuous mode [ 2379.438655][ T7869] veth0_to_team: entered allmulticast mode [ 2380.023549][ T7768] bridge0: port 1(bridge_slave_0) entered blocking state [ 2380.051976][ T7768] bridge0: port 1(bridge_slave_0) entered disabled state [ 2380.059991][ T7768] bridge_slave_0: entered allmulticast mode [ 2380.075454][ T7768] bridge_slave_0: entered promiscuous mode [ 2380.175217][ T7768] bridge0: port 2(bridge_slave_1) entered blocking state [ 2380.205419][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state [ 2380.227645][ T7768] bridge_slave_1: entered allmulticast mode [ 2380.250182][ T7768] bridge_slave_1: entered promiscuous mode [ 2380.585564][ T7915] ubi31: attaching mtd0 [ 2380.609933][ T7915] ubi31: scanning is finished [ 2381.340438][ T7915] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 2381.348421][ T7915] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 2381.356532][ T7915] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 2381.363817][ T7915] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 2381.371528][ T7915] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 2381.378811][ T7915] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 2381.386991][ T7915] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3578945848 [ 2381.397231][ T7915] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 2381.428384][ T7919] ubi31: background thread "ubi_bgt31d" started, PID 7919 [ 2381.461712][ T7768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2381.711889][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 2381.711910][ T30] audit: type=1326 audit(1752961460.254:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7908 comm="syz.1.11848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0e98e9a9 code=0x7fc00000 [ 2382.205476][ T30] audit: type=1326 audit(1752961460.254:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7908 comm="syz.1.11848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4a0e98e9a9 code=0x7fc00000 [ 2382.558030][ T7923] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2382.701757][ T7768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2383.851171][ T7768] team0: Port device team_slave_0 added [ 2383.917496][ T7930] lo speed is unknown, defaulting to 1000 [ 2383.931083][ T7930] lo speed is unknown, defaulting to 1000 [ 2384.014006][ T7768] team0: Port device team_slave_1 added [ 2387.515072][T28349] hsr_slave_0: left promiscuous mode [ 2387.561506][T28349] hsr_slave_1: left promiscuous mode [ 2387.641828][T28349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2388.305311][T28349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2388.682611][T28349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2388.691327][T28349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2388.739567][T28349] veth1_macvtap: left promiscuous mode [ 2388.745912][T28349] veth0_macvtap: left promiscuous mode [ 2388.751640][T28349] veth1_vlan: left promiscuous mode [ 2388.757218][T28349] veth0_vlan: left promiscuous mode [ 2390.033212][T28349] team0 (unregistering): Port device team_slave_1 removed [ 2390.089802][T28349] team0 (unregistering): Port device team_slave_0 removed [ 2390.674948][ T7768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2390.682103][ T7768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2390.709141][ T7768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2390.736480][ T7768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2390.743868][ T7768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2390.779156][ T7768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2390.791970][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11845'. [ 2391.183202][ T7964] netlink: 'syz.1.11849': attribute type 1 has an invalid length. [ 2391.194632][ T7964] netlink: 'syz.1.11849': attribute type 2 has an invalid length. [ 2391.383727][ T7768] hsr_slave_0: entered promiscuous mode [ 2391.390703][ T7768] hsr_slave_1: entered promiscuous mode [ 2391.397576][ T7768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2391.405297][ T7768] Cannot create hsr debugfs directory [ 2392.211428][ T7976] netlink: 'syz.9.11852': attribute type 10 has an invalid length. [ 2396.028888][ T7972] ceph: No mds server is up or the cluster is laggy [ 2396.049139][T30743] libceph: connect (1)[c::]:6789 error -101 [ 2396.057950][T30743] libceph: mon0 (1)[c::]:6789 connect error [ 2405.966568][ T7768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2405.982783][ T7768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2406.372407][ T7768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2406.685717][ T7768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2406.727298][ T8048] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 2408.499471][ T8065] lo speed is unknown, defaulting to 1000 [ 2408.506541][ T8065] lo speed is unknown, defaulting to 1000 [ 2409.051129][ T7768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2409.086848][ T7768] 8021q: adding VLAN 0 to HW filter on device team0 [ 2409.998546][T28350] bridge0: port 1(bridge_slave_0) entered blocking state [ 2410.005823][T28350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2410.051519][T28350] bridge0: port 2(bridge_slave_1) entered blocking state [ 2410.059060][T28350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2410.192342][ T8077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11874'. [ 2411.600751][ T8089] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11877'. [ 2412.259480][ T3501] libceph: connect (1)[c::]:6789 error -101 [ 2412.274734][ T3501] libceph: mon0 (1)[c::]:6789 connect error [ 2412.299510][ T8082] ceph: No mds server is up or the cluster is laggy [ 2412.313621][ T8098] vxfs: WRONG superblock magic 00000000 at 1 [ 2412.321759][ T8098] vxfs: WRONG superblock magic 00000000 at 8 [ 2412.327983][ T8098] vxfs: can't find superblock. [ 2412.342780][ T3501] libceph: connect (1)[c::]:6789 error -101 [ 2412.394289][ T3501] libceph: mon0 (1)[c::]:6789 connect error [ 2413.021021][ T7768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2413.246859][ T7768] veth0_vlan: entered promiscuous mode [ 2413.262075][ T7768] veth1_vlan: entered promiscuous mode [ 2413.314426][ T7768] veth0_macvtap: entered promiscuous mode [ 2413.338009][ T7768] veth1_macvtap: entered promiscuous mode [ 2413.380539][ T7768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2413.690248][ T7768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2413.706117][ T7768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2414.666747][ T7768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2414.677417][ T7768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2414.686547][ T7768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2414.709930][ T8109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2416.525161][T28363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2416.533133][T28363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2416.614927][ T1290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2416.622809][ T1290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2417.489979][T23142] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 1518 sec [ 2417.576251][ T8129] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2417.660770][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11885'. [ 2421.325078][ T8165] netlink: 224 bytes leftover after parsing attributes in process `syz.9.11893'. [ 2421.344673][ T8165] ksmbd: Unknown IPC event: 4, ignore. [ 2421.472517][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11897'. [ 2421.481835][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11897'. [ 2423.664583][ T8186] No such timeout policy "syz1" [ 2423.982500][ T8188] macvtap1: entered allmulticast mode [ 2423.988270][ T8188] syz_tun: entered allmulticast mode [ 2425.464121][ T8199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2427.415490][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11904'. [ 2427.682091][ T8203] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2427.691036][ T8203] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2427.699896][ T8203] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2427.708770][ T8203] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2428.369925][ T8203] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2428.379428][ T8203] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2428.388888][ T8203] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2428.398331][ T8203] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2431.600239][ T8230] netlink: 'syz.8.11911': attribute type 1 has an invalid length. [ 2432.301563][ T8249] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 2432.775031][T23142] IPVS: starting estimator thread 0... [ 2432.874876][ T8250] IPVS: using max 24 ests per chain, 57600 per kthread [ 2434.926015][ T8270] bridge1: entered promiscuous mode [ 2434.931457][ T8270] bridge1: entered allmulticast mode [ 2434.954042][ T8270] team0: Port device bridge1 added [ 2437.142539][ T8297] netlink: 'syz.4.11926': attribute type 10 has an invalid length. [ 2437.190109][ T8297] mac80211_hwsim hwsim11 `ëÿÿ: entered promiscuous mode [ 2437.210232][ T8297] mac80211_hwsim hwsim11 `ëÿÿ: entered allmulticast mode [ 2437.225963][ T8297] bond0: (slave `ëÿÿ): Enslaving as an active interface with an up link [ 2437.413321][T28364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2437.422526][T28364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2439.846258][ T8322] futex_wake_op: syz.9.11933 tries to shift op by -1; fix this program [ 2447.386384][ T8386] loop6: detected capacity change from 0 to 524287999 [ 2448.656731][ T8390] netlink: 'syz.0.11946': attribute type 12 has an invalid length. [ 2449.162106][ T8386] loop6: unable to read partition table [ 2449.168155][ T8386] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2450.132586][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11951'. [ 2450.141862][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11951'. [ 2452.548727][ T8418] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 2454.550633][ T8428] Invalid ELF header magic: != ELF [ 2454.757427][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11959'. [ 2454.767000][ T8428] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 2454.775011][ T8428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2464.660190][ T8477] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11973'. [ 2464.888140][ T8477] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11973'. [ 2464.947620][ T8477] netlink: 'syz.8.11973': attribute type 4 has an invalid length. [ 2465.035492][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11973'. [ 2470.343725][ T8533] netlink: 452 bytes leftover after parsing attributes in process `syz.1.11987'. [ 2471.264629][ T5170] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 2473.116787][ T8550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2475.410038][ T5170] usb 10-1: device not accepting address 37, error -71 [ 2475.893375][ T8582] netlink: 60 bytes leftover after parsing attributes in process `syz.9.11996'. [ 2476.149349][ T8582] hub 8-0:1.0: USB hub found [ 2476.175383][ T8582] hub 8-0:1.0: 1 port detected [ 2477.211956][ T8578] overlayfs: failed to clone upperpath [ 2477.738270][ T24] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 1578 sec [ 2483.198854][ T8628] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0 [ 2487.329063][ T8668] netlink: 'syz.8.12020': attribute type 1 has an invalid length. [ 2487.337120][ T8668] netlink: 'syz.8.12020': attribute type 2 has an invalid length. [ 2487.674986][ T8673] Device name cannot be null; rc = [-22] [ 2488.992727][ T8685] netlink: 'syz.8.12024': attribute type 10 has an invalid length. [ 2489.021952][ T8685] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2495.174133][ T8728] netlink: 'syz.9.12036': attribute type 10 has an invalid length. [ 2496.677576][ T8749] netlink: zone id is out of range [ 2496.683087][ T8749] netlink: zone id is out of range [ 2496.688444][ T8749] netlink: zone id is out of range [ 2496.694031][ T8749] netlink: zone id is out of range [ 2496.699438][ T8749] netlink: zone id is out of range [ 2496.704833][ T8749] netlink: zone id is out of range [ 2496.710447][ T8749] netlink: zone id is out of range [ 2496.715835][ T8749] netlink: zone id is out of range [ 2496.721643][ T8749] netlink: zone id is out of range [ 2496.727022][ T8749] netlink: zone id is out of range [ 2498.909236][ T8760] netlink: 136 bytes leftover after parsing attributes in process `syz.1.12041'. [ 2499.990388][ T8765] xt_hashlimit: overflow, rate too high: 0 [ 2501.250438][ T8776] __vm_enough_memory: pid: 8776, comm: syz.4.12047, bytes: 21200045793280 not enough memory for the allocation [ 2503.186937][ T30] audit: type=1326 audit(1752961581.704:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8797 comm="syz.1.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0e98e9a9 code=0x7ffc0000 [ 2503.419702][ T30] audit: type=1326 audit(1752961581.704:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8797 comm="syz.1.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0e98e9a9 code=0x7ffc0000 [ 2504.644859][ T30] audit: type=1326 audit(1752961581.704:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8797 comm="syz.1.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a0e98e9a9 code=0x7ffc0000 [ 2504.675661][ T30] audit: type=1326 audit(1752961581.704:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8797 comm="syz.1.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0e98e9a9 code=0x7ffc0000 [ 2504.806295][ T30] audit: type=1326 audit(1752961581.704:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8797 comm="syz.1.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0e98e9a9 code=0x7ffc0000 [ 2504.942049][ T30] audit: type=1326 audit(1752961581.704:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8797 comm="syz.1.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4a0e98e9a9 code=0x7ffc0000 [ 2504.998469][ T30] audit: type=1326 audit(1752961581.704:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8797 comm="syz.1.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0e98e9a9 code=0x7ffc0000 [ 2505.048836][ T30] audit: type=1326 audit(1752961581.704:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8797 comm="syz.1.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0e98e9a9 code=0x7ffc0000 [ 2505.166427][ T30] audit: type=1326 audit(1752961581.704:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8797 comm="syz.1.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f4a0e98e9a9 code=0x7ffc0000 [ 2505.204073][ T30] audit: type=1326 audit(1752961581.704:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8797 comm="syz.1.12055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a0e98e9a9 code=0x7ffc0000 [ 2507.528887][ T8830] trusted_key: encrypted_key: insufficient parameters specified [ 2507.903037][ T8839] loop6: detected capacity change from 0 to 524287999 [ 2507.963186][ T8840] netlink: 'syz.9.12064': attribute type 12 has an invalid length. [ 2508.079823][ T8838] net_ratelimit: 8 callbacks suppressed [ 2508.085675][ T8838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2508.688866][ T8839] Dev loop6: unable to read RDB block 8 [ 2508.695046][ T8839] loop6: unable to read partition table [ 2508.701062][ T8839] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2512.350383][ T8859] new mount options do not match the existing superblock, will be ignored [ 2516.561622][ T8889] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 2518.775715][ T8918] overlayfs: failed to clone upperpath [ 2521.132166][ T8942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2521.915695][ T8944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12092'. [ 2523.162243][ T8958] comedi comedi4: bad chanlist[0]=0x00001001 chan=4097 range length=2 [ 2523.998505][ T8972] macvlan3: entered promiscuous mode [ 2524.004263][ T8972] bond0: entered promiscuous mode [ 2524.014354][ T8972] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 2528.451651][ T9001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2532.165392][ T9028] input: syz1 as /devices/virtual/input/input59 [ 2532.181210][ T9028] netlink: 'syz.0.12110': attribute type 3 has an invalid length. [ 2532.193211][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12110'. [ 2532.203623][ T9028] netlink: 'syz.0.12110': attribute type 3 has an invalid length. [ 2532.215552][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12110'. [ 2538.964832][ T3501] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 1640 sec [ 2546.406081][ T9095] tty tty20: ldisc open failed (-12), clearing slot 19 [ 2548.443550][ T9112] xt_hashlimit: size too large, truncated to 1048576 [ 2548.508374][ T9119] netlink: 'syz.4.12132': attribute type 33 has an invalid length. [ 2548.535021][ T9119] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12132'. [ 2551.707813][ T9134] netlink: 'syz.4.12138': attribute type 1 has an invalid length. [ 2551.715910][ T9134] netlink: 'syz.4.12138': attribute type 2 has an invalid length. [ 2551.739892][ T9134] /dev/nullb0: Can't lookup blockdev [ 2552.772917][ T9147] atomic_op ffff888023a21998 conn xmit_atomic 0000000000000000 [ 2557.528197][ T9183] xt_nat: multiple ranges no longer supported [ 2557.553812][ T9183] 9pnet_fd: Insufficient options for proto=fd [ 2561.404481][T30743] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2562.405796][T30743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2563.190010][T30743] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2563.200658][T30743] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2563.213704][T30743] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 2563.233834][T30743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2563.261768][T30743] usb 1-1: config 0 descriptor?? [ 2566.726402][T30743] usbhid 1-1:0.0: can't add hid device: -71 [ 2566.732557][T30743] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2566.749270][T30743] usb 1-1: USB disconnect, device number 32 [ 2567.782934][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12165'. [ 2570.857711][ T9277] overlayfs: failed to clone upperpath [ 2571.411458][ T9288] macvlan3: entered promiscuous mode [ 2571.417710][ T9288] bond0: entered promiscuous mode [ 2571.433551][ T9288] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 2571.499344][ T9288] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12170'. [ 2572.227871][ T9295] xt_nat: multiple ranges no longer supported [ 2574.241194][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 2574.241229][ T30] audit: type=1326 audit(1752961908.542:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.0.12173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab238e9a9 code=0x7ffc0000 [ 2574.396473][ T30] audit: type=1326 audit(1752961908.542:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.0.12173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab238e9a9 code=0x7ffc0000 [ 2574.464682][ T30] audit: type=1326 audit(1752961908.552:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.0.12173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7ffab238e9a9 code=0x7ffc0000 [ 2574.487476][ T30] audit: type=1326 audit(1752961908.552:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.0.12173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab238e9a9 code=0x7ffc0000 [ 2574.516983][ T30] audit: type=1326 audit(1752961908.552:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.0.12173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab238e9a9 code=0x7ffc0000 [ 2574.538847][ T30] audit: type=1326 audit(1752961908.552:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.0.12173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ffab238e9a9 code=0x7ffc0000 [ 2574.561948][ T30] audit: type=1326 audit(1752961908.552:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.0.12173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab238e9a9 code=0x7ffc0000 [ 2574.655639][ T9317] trusted_key: encrypted_key: insufficient parameters specified [ 2575.163404][ T30] audit: type=1326 audit(1752961908.562:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.0.12173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab238e9a9 code=0x7ffc0000 [ 2575.185378][ T30] audit: type=1326 audit(1752961908.562:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.0.12173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7ffab238e9a9 code=0x7ffc0000 [ 2575.207681][ T30] audit: type=1326 audit(1752961908.562:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.0.12173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab238e9a9 code=0x7ffc0000 [ 2575.757759][ T9329] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12181'. [ 2576.984465][ T9330] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 2579.408801][ T9360] input: syz1 as /devices/virtual/input/input60 [ 2582.889585][T30743] libceph: connect (1)[c::]:6789 error -101 [ 2582.918786][T30743] libceph: mon0 (1)[c::]:6789 connect error [ 2583.000121][ T9390] ceph: No mds server is up or the cluster is laggy [ 2583.000385][ T9398] netlink: 'syz.9.12198': attribute type 5 has an invalid length. [ 2583.037287][ T9398] ip6erspan0: entered promiscuous mode [ 2583.227918][T30743] libceph: connect (1)[c::]:6789 error -101 [ 2583.419648][T30743] libceph: mon0 (1)[c::]:6789 connect error [ 2583.890431][ T9409] input: syz1 as /devices/virtual/input/input61 [ 2584.449379][ T9417] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12202'. [ 2587.493515][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12207'. [ 2587.504004][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12207'. [ 2587.514050][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12207'. [ 2587.523373][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12207'. [ 2587.532602][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12207'. [ 2588.274511][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 2588.275208][ T30] audit: type=1326 audit(1752961922.812:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9435 comm="syz.1.12211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a0e98e9a9 code=0x0 [ 2589.695682][ T9451] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.12212'. [ 2589.912887][ T9453] Timeout policy `syz0' can only be used by L3 protocol number 26 [ 2590.429910][ T9455] input: syz1 as /devices/virtual/input/input62 [ 2591.344550][ T9467] netlink: 'syz.9.12215': attribute type 27 has an invalid length. [ 2593.749583][ T9479] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2597.082587][ T9507] fuse: Bad value for 'fd' [ 2597.098603][ T9507] Invalid source name [ 2597.102696][ T9507] UBIFS error (pid: 9507): cannot open "./file0", error -22 [ 2597.105169][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12223'. [ 2598.424934][ T9478] ceph: No mds server is up or the cluster is laggy [ 2598.638557][ T9507] team0: Port device team_slave_1 removed [ 2599.255495][ T9516] netlink: 'syz.8.12227': attribute type 1 has an invalid length. [ 2599.415449][ T24] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 1700 sec [ 2599.458602][ T9521] netlink: 76 bytes leftover after parsing attributes in process `syz.9.12228'. [ 2600.715801][ T9528] netlink: 'syz.4.12230': attribute type 10 has an invalid length. [ 2600.777816][ T9528] bond0: (slave `ëÿÿ): Releasing backup interface [ 2600.995083][ T9543] trusted_key: encrypted_key: insufficient parameters specified [ 2601.017775][ T9528] mac80211_hwsim hwsim11 `ëÿÿ: left promiscuous mode [ 2601.097312][ T9528] mac80211_hwsim hwsim11 `ëÿÿ: left allmulticast mode [ 2603.027310][ T9563] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 2606.464776][ T9598] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2606.531573][ T9601] siw: device registration error -23 [ 2607.348964][ T9595] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 2609.057208][ T5167] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 2609.294649][ T5167] usb 10-1: Using ep0 maxpacket: 16 [ 2612.915487][ T5167] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2612.944655][ T5167] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 2612.952439][ T5167] usb 10-1: can't read configurations, error -71 [ 2613.606320][ T9660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2617.487130][ T9681] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2627.388335][ T9753] : entered promiscuous mode [ 2628.341669][ T9758] netlink: 36 bytes leftover after parsing attributes in process `syz.8.12289'. [ 2631.064522][ T9776] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12291'. [ 2632.987500][ T9790] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 2633.223099][ T30] audit: type=1800 audit(1752961967.712:2362): pid=9793 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.12297" name="nullb0" dev="tmpfs" ino=2614 res=0 errno=0 [ 2633.724176][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12298'. [ 2638.348634][ T9825] batadv1: entered promiscuous mode [ 2640.006093][ T9838] Bluetooth: (null): Invalid header checksum [ 2642.913692][ T9873] QAT: Device 253 not found [ 2642.972185][ T9874] Invalid ELF header magic: != ELF [ 2643.693468][ T9880] hfsplus: unable to find HFS+ superblock [ 2647.910543][ T9903] input: syz1 as /devices/virtual/input/input64 [ 2647.932496][ T9895] could not allocate digest TFM handle xcbc(des3_ede) [ 2651.819371][ T9935] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2651.832456][ T9935] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2652.946579][ T9938] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2652.995629][ T9938] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 2654.567637][ T9943] lo speed is unknown, defaulting to 1000 [ 2654.589646][ T9943] lo speed is unknown, defaulting to 1000 [ 2655.431831][ T9948] netlink: 'syz.8.12336': attribute type 3 has an invalid length. [ 2655.463130][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12336'. [ 2656.443841][ T9957] virtio-fs: tag not found [ 2656.464544][ T9960] netlink: 'syz.1.12338': attribute type 10 has an invalid length. [ 2656.656801][ T9960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12338'. [ 2656.669018][ T9960] dummy0: entered promiscuous mode [ 2656.677438][ T9960] bridge0: port 1(dummy0) entered blocking state [ 2656.684303][ T9960] bridge0: port 1(dummy0) entered disabled state [ 2656.691101][ T9960] dummy0: entered allmulticast mode [ 2660.241493][ T9982] syz.9.12342: attempt to access beyond end of device [ 2660.241493][ T9982] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 2660.259695][ T9982] (syz.9.12342,9982,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 2660.268113][ T9982] (syz.9.12342,9982,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 2660.276179][ T9982] (syz.9.12342,9982,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 2660.285249][ T9982] (syz.9.12342,9982,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 2661.195987][T23142] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 1762 sec [ 2661.642170][ T9998] netlink: 'syz.1.12349': attribute type 3 has an invalid length. [ 2662.667535][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12349'. [ 2663.110173][T10004] futex_wake_op: syz.4.12352 tries to shift op by -1; fix this program [ 2664.553007][T10018] JFS: discard option not supported on device [ 2664.567046][T10018] Mount JFS Failure: -22 [ 2664.571483][T10018] jfs_mount failed w/return code = -22 [ 2669.146704][T10049] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12362'. [ 2670.464980][T10052] lo speed is unknown, defaulting to 1000 [ 2670.472775][T10052] lo speed is unknown, defaulting to 1000 [ 2672.006475][T10063] netlink: 'syz.4.12364': attribute type 3 has an invalid length. [ 2672.145054][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12364'. [ 2673.648756][T10083] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 2683.024513][ T5170] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2683.550144][T10154] netlink: 'syz.4.12388': attribute type 1 has an invalid length. [ 2684.191706][ T5170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2684.226093][ T5170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2684.250455][ T5170] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2684.263968][ T5170] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 2684.278096][ T5170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2684.291880][ T5170] usb 1-1: config 0 descriptor?? [ 2685.485825][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12389'. [ 2688.478153][ T30] audit: type=1326 audit(1752962022.242:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10173 comm="syz.9.12392" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6fd578e9a9 code=0x0 [ 2689.119835][ T30] audit: type=1326 audit(1752962023.022:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10175 comm="syz.1.12393" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a0e98e9a9 code=0x0 [ 2689.293790][ T5170] usbhid 1-1:0.0: can't add hid device: -71 [ 2689.302049][ T5170] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2689.317238][ T5170] usb 1-1: USB disconnect, device number 33 [ 2691.808656][T10186] Bluetooth: hci5: command 0x0406 tx timeout [ 2692.163901][T10212] netlink: 716 bytes leftover after parsing attributes in process `syz.8.12399'. [ 2692.226294][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12399'. [ 2696.278480][T10186] Bluetooth: hci0: sending frame failed (-49) [ 2696.287771][T26641] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 2699.824173][T10284] bridge0: Device is already in use. [ 2700.768194][T10287] ip6gretap0: default FDB implementation only supports local addresses [ 2702.923678][T10307] sock: sock_timestamping_bind_phc: sock not bind to device [ 2704.225206][T26641] Bluetooth: hci5: unexpected event for opcode 0x0405 [ 2707.285006][T10186] Bluetooth: hci5: command 0x0406 tx timeout [ 2711.482178][T10394] netlink: 'syz.1.12440': attribute type 7 has an invalid length. [ 2711.637436][T10394] : entered promiscuous mode [ 2714.327513][T10408] ip6tnl2: entered promiscuous mode [ 2714.332922][T10408] ip6tnl2: entered allmulticast mode [ 2721.498996][T10486] tipc: Bearer : already 2 bearers with priority 10 [ 2721.506968][T10486] tipc: Bearer : trying with adjusted priority [ 2721.514280][T10486] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2721.566396][T30743] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 1822 sec [ 2722.609395][T10494] overlayfs: failed to clone upperpath [ 2724.445443][T10484] input: syz1 as /devices/virtual/input/input66 [ 2724.572589][T10484] netlink: 'syz.9.12462': attribute type 3 has an invalid length. [ 2724.582660][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12462'. [ 2724.636238][T10484] netlink: 'syz.9.12462': attribute type 3 has an invalid length. [ 2724.725701][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12462'. [ 2726.926418][T10513] netlink: 'syz.4.12469': attribute type 1 has an invalid length. [ 2727.058580][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12469'. [ 2727.825308][T10513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12469'. [ 2727.835444][T10513] netlink: 204 bytes leftover after parsing attributes in process `syz.4.12469'. [ 2727.844744][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12469'. [ 2729.443636][T10558] /dev/nullb0: Can't lookup blockdev [ 2730.407762][T10559] netlink: 'syz.1.12481': attribute type 3 has an invalid length. [ 2731.354844][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12481'. [ 2733.076155][T10568] 9pnet_fd: Insufficient options for proto=fd [ 2733.332960][T10577] netlink: 4972 bytes leftover after parsing attributes in process `syz.1.12485'. [ 2733.383252][T10577] openvswitch: netlink: Message has 16 unknown bytes. [ 2733.619585][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12487'. [ 2733.771673][T10560] syz.9.12480 (10560): drop_caches: 2 [ 2738.408841][T10617] lo speed is unknown, defaulting to 1000 [ 2738.416488][T10617] lo speed is unknown, defaulting to 1000 [ 2740.322877][T10644] 9pnet: Could not find request transport: fdno= [ 2740.981931][ T9620] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2741.309713][ T9620] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2741.333043][ T9620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2742.170882][ T9620] usb 1-1: config 0 descriptor?? [ 2742.209049][ T9620] cp210x 1-1:0.0: cp210x converter detected [ 2742.424593][ T9620] usb 1-1: cp210x converter now attached to ttyUSB0 [ 2743.223454][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12500'. [ 2743.561737][ T30] audit: type=1326 audit(1752962078.102:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10657 comm="syz.9.12506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd578e9a9 code=0x7ffc0000 [ 2744.433154][ T30] audit: type=1326 audit(1752962078.132:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10657 comm="syz.9.12506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd578e9a9 code=0x7ffc0000 [ 2744.455608][ T30] audit: type=1326 audit(1752962078.132:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10657 comm="syz.9.12506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f6fd578e9a9 code=0x7ffc0000 [ 2744.478349][ T30] audit: type=1326 audit(1752962078.132:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10657 comm="syz.9.12506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd578e9a9 code=0x7ffc0000 [ 2744.500580][ T30] audit: type=1326 audit(1752962078.132:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10657 comm="syz.9.12506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd578e9a9 code=0x7ffc0000 [ 2744.574277][ T5170] usb 1-1: USB disconnect, device number 34 [ 2744.583713][ T5170] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2744.584818][ T30] audit: type=1326 audit(1752962078.132:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10657 comm="syz.9.12506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6fd578e9a9 code=0x7ffc0000 [ 2744.592630][ T5170] cp210x 1-1:0.0: device disconnected [ 2744.643313][ T30] audit: type=1326 audit(1752962078.252:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10667 comm="syz.9.12506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6fd57c1265 code=0x7ffc0000 [ 2744.669870][ T30] audit: type=1326 audit(1752962078.252:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10657 comm="syz.9.12506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd578e9a9 code=0x7ffc0000 [ 2744.693780][ T30] audit: type=1326 audit(1752962078.252:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10657 comm="syz.9.12506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd578e9a9 code=0x7ffc0000 [ 2744.716789][ T30] audit: type=1326 audit(1752962078.262:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10657 comm="syz.9.12506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd578e9a9 code=0x7ffc0000 [ 2745.429609][T10679] bridge0: entered promiscuous mode [ 2745.435801][T10679] macvlan2: entered promiscuous mode [ 2746.855917][T10684] siw: device registration error -23 [ 2747.427775][T10699] input: syz1 as /devices/virtual/input/input67 [ 2747.437339][T10697] xt_socket: unknown flags 0x8 [ 2752.571548][T10733] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2757.086224][T10772] 9pnet_fd: Insufficient options for proto=fd [ 2760.703661][T10800] input: syz1 as /devices/virtual/input/input68 [ 2760.753654][T10797] netlink: 'syz.0.12538': attribute type 3 has an invalid length. [ 2760.769380][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12538'. [ 2763.130790][T10829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2763.138214][T10829] IPv6: NLM_F_CREATE should be set when creating new route [ 2763.145705][T10829] IPv6: NLM_F_CREATE should be set when creating new route [ 2763.153011][T10829] IPv6: NLM_F_CREATE should be set when creating new route [ 2766.042795][T10847] netlink: 'syz.1.12553': attribute type 3 has an invalid length. [ 2766.051629][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12553'. [ 2766.402920][T10858] fuse: Unknown parameter '0x0000000000000006' [ 2766.417219][T10858] No source specified [ 2766.442747][T10858] binder: 10849:10858 ioctl 40046210 0 returned -14 [ 2770.621713][T10886] netlink: 28 bytes leftover after parsing attributes in process `syz.8.12563'. [ 2770.642975][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12563'. [ 2771.512519][T10902] input: syz1 as /devices/virtual/input/input69 [ 2771.929018][T10910] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 2771.996003][T10910] can0: slcan on ttyS3. [ 2773.954790][T10899] can0 (unregistered): slcan off ttyS3. [ 2775.778065][T10928] 9pnet_fd: Insufficient options for proto=fd [ 2778.290312][T10946] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 2780.000473][T10958] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2782.179896][ T3501] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 1883 sec [ 2783.875664][T10995] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2783.882238][T10995] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2785.710596][T28363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2785.761754][T28363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2786.244160][T11020] netlink: 'syz.9.12593': attribute type 1 has an invalid length. [ 2786.253019][T11020] netlink: 'syz.9.12593': attribute type 2 has an invalid length. [ 2787.510881][T11013] vxfs: WRONG superblock magic 00000000 at 1 [ 2787.517677][T11013] vxfs: WRONG superblock magic 00000000 at 8 [ 2787.523758][T11013] vxfs: can't find superblock. [ 2794.760636][T11078] overlayfs: failed to resolve './file1': -2 [ 2795.009994][T11087] netlink: 'syz.4.12609': attribute type 3 has an invalid length. [ 2795.041580][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12609'. [ 2795.940879][T11082] delete_channel: no stack [ 2799.945625][T11129] ip6erspan1: entered allmulticast mode [ 2800.916320][T11140] input: syz1 as /devices/virtual/input/input70 [ 2800.946807][T11140] netlink: 'syz.9.12620': attribute type 3 has an invalid length. [ 2802.951291][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12620'. [ 2802.997366][T11140] netlink: 'syz.9.12620': attribute type 3 has an invalid length. [ 2803.045607][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12620'. [ 2804.199155][T11155] netlink: 68 bytes leftover after parsing attributes in process `syz.9.12623'. [ 2807.966668][T11178] bridge0: Device is already in use. [ 2811.681418][T11201] ptrace attach of "./syz-executor exec"[21620] was attempted by " [ 2811.739000][T11201] netlink: 72 bytes leftover after parsing attributes in process `syz.9.12633'. [ 2821.138115][T11280] binder: 11272:11280 ioctl c0306201 200000000540 returned -14 [ 2835.980773][T11371] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12671'. [ 2835.997925][T11371] ubi: mtd0 is already attached to ubi31 [ 2836.606767][T11368] netlink: 'syz.1.12674': attribute type 8 has an invalid length. [ 2836.950229][T11379] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2836.958841][T11379] F2FS-fs (loop17): Can't find valid F2FS filesystem in 1th superblock [ 2836.968303][T11379] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2836.976450][T11379] F2FS-fs (loop17): Can't find valid F2FS filesystem in 2th superblock [ 2840.024402][ T3501] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 2840.272875][ T3501] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2840.288201][ T3501] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2840.301836][ T3501] usb 10-1: config 0 descriptor?? [ 2840.312911][ T3501] cp210x 10-1:0.0: cp210x converter detected [ 2840.525042][ T3501] usb 10-1: cp210x converter now attached to ttyUSB0 [ 2841.318400][T11394] netlink: 48 bytes leftover after parsing attributes in process `syz.9.12678'. [ 2842.342568][ T3501] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 1943 sec [ 2842.540590][ T3501] usb 10-1: USB disconnect, device number 41 [ 2842.570826][ T3501] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2842.592324][ T3501] cp210x 10-1:0.0: device disconnected [ 2847.636735][T11463] netlink: 164 bytes leftover after parsing attributes in process `syz.8.12697'. [ 2847.646178][T11463] netlink: 164 bytes leftover after parsing attributes in process `syz.8.12697'. [ 2848.796878][T11479] netlink: 'syz.1.12698': attribute type 3 has an invalid length. [ 2848.805264][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12698'. [ 2850.127457][T11490] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 2850.138459][T11490] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 2851.856300][T11507] netlink: 'syz.8.12706': attribute type 1 has an invalid length. [ 2851.864557][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12706'. [ 2853.571397][T11513] netlink: 'syz.1.12707': attribute type 12 has an invalid length. [ 2859.204506][ T5170] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2860.065495][T11555] netlink: 20 bytes leftover after parsing attributes in process `syz.9.12718'. [ 2860.081997][ T5170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2860.123167][ T5170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2860.156395][ T5170] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2860.364643][ T5170] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 2861.046673][ T5170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2861.148167][ T5170] usb 1-1: config 0 descriptor?? [ 2863.519396][ T5170] usbhid 1-1:0.0: can't add hid device: -71 [ 2863.545521][ T5170] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2863.602161][ T5170] usb 1-1: USB disconnect, device number 35 [ 2863.644734][T11587] netlink: 60 bytes leftover after parsing attributes in process `syz.8.12726'. [ 2863.720983][T11587] 9pnet_fd: Insufficient options for proto=fd [ 2865.003513][T11605] netlink: 'syz.9.12729': attribute type 4 has an invalid length. [ 2870.048809][T11629] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20001 [ 2870.569995][T11642] trusted_key: encrypted_key: insufficient parameters specified [ 2871.241041][T11646] overlayfs: failed to clone upperpath [ 2871.551571][ T7786] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2871.679219][T11649] netlink: 'syz.8.12739': attribute type 4 has an invalid length. [ 2873.445600][ T7786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2873.457431][ T7786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2873.468543][ T7786] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2873.481679][ T7786] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 2873.534467][ T7786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2873.565633][ T7786] usb 1-1: config 0 descriptor?? [ 2876.229540][ T7786] usbhid 1-1:0.0: can't add hid device: -71 [ 2876.244524][ T7786] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2876.287403][ T7786] usb 1-1: USB disconnect, device number 36 [ 2879.189657][T11704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12752'. [ 2879.870113][T11716] ufs: You didn't specify the type of your ufs filesystem [ 2879.870113][T11716] [ 2879.870113][T11716] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 2879.870113][T11716] [ 2879.870113][T11716] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 2879.901846][T11716] ufs: ufstype=old is supported read-only [ 2879.913815][T11716] syz.0.12756: attempt to access beyond end of device [ 2879.913815][T11716] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 2884.883973][T11728] ceph: No mds server is up or the cluster is laggy [ 2886.855025][T11747] lo speed is unknown, defaulting to 1000 [ 2886.862821][T11747] lo speed is unknown, defaulting to 1000 [ 2889.056542][T11767] ufs: You didn't specify the type of your ufs filesystem [ 2889.056542][T11767] [ 2889.056542][T11767] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 2889.056542][T11767] [ 2889.056542][T11767] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 2889.088281][T11767] ufs: ufstype=old is supported read-only [ 2889.096455][T11767] syz.9.12769: attempt to access beyond end of device [ 2889.096455][T11767] nbd9: rw=0, sector=16, nr_sectors = 2 limit=0 [ 2889.477283][T11772] netlink: 'syz.4.12770': attribute type 3 has an invalid length. [ 2889.493544][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12770'. [ 2891.051394][T11781] bond0: (slave veth0_to_hsr): Device is not bonding slave [ 2891.059193][T11781] bond0: option active_slave: invalid value (veth0_to_hsr) [ 2891.456451][T11788] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 2896.332473][T11823] IPVS: set_ctl: invalid protocol: 44 172.20.20.36:0 [ 2896.690135][T11832] input: syz1 as /devices/virtual/input/input71 [ 2896.718193][T11832] netlink: 'syz.0.12786': attribute type 3 has an invalid length. [ 2898.307277][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12786'. [ 2898.327289][T11832] netlink: 'syz.0.12786': attribute type 3 has an invalid length. [ 2898.335474][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12786'. [ 2900.712279][T11846] TCP: TCP_TX_DELAY enabled [ 2902.534820][T30743] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 2003 sec [ 2902.667544][T11858] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 2903.134028][T11858] can0: slcan on ttyS3. [ 2903.255839][T11859] can0 (unregistered): slcan off ttyS3. [ 2903.267603][T11856] can0: slcan on ttyS3. [ 2903.271961][T11856] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 2903.985084][T11849] can0 (unregistered): slcan off ttyS3. [ 2904.295668][T11869] fuse: Unknown parameter 'rootmode_®·Ž ǃ÷˜¥' [ 2904.690287][T11877] SET target dimension over the limit! [ 2907.553598][T11908] netlink: 'syz.8.12803': attribute type 10 has an invalid length. [ 2907.561683][T11908] netlink: 40 bytes leftover after parsing attributes in process `syz.8.12803'. [ 2907.571010][T11908] dummy0: entered promiscuous mode [ 2907.580670][T11908] bridge0: port 3(dummy0) entered blocking state [ 2907.587265][T11908] bridge0: port 3(dummy0) entered disabled state [ 2907.593969][T11908] dummy0: entered allmulticast mode [ 2908.447811][T11920] vlan2: left allmulticast mode [ 2908.452755][T11920] veth1: left allmulticast mode [ 2908.458906][T11920] bridge1: left allmulticast mode [ 2908.464870][T11920] ip6erspan1: left allmulticast mode [ 2913.124894][T11946] batadv_slave_1: entered promiscuous mode [ 2913.133794][T11945] batadv_slave_1: left promiscuous mode [ 2917.130672][T11973] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12823'. [ 2917.231027][T11975] overlayfs: failed to clone upperpath [ 2918.659255][T11989] xt_l2tp: v2 doesn't support IP mode [ 2920.580127][T12003] sit0: entered promiscuous mode [ 2921.091911][T12003] netlink: 'syz.9.12830': attribute type 1 has an invalid length. [ 2921.231481][T12003] netlink: 1 bytes leftover after parsing attributes in process `syz.9.12830'. [ 2922.729491][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12839'. [ 2923.985615][T12030] input: syz1 as /devices/virtual/input/input72 [ 2924.108050][T12030] netlink: 'syz.0.12838': attribute type 3 has an invalid length. [ 2924.116175][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12838'. [ 2924.771861][T12030] netlink: 'syz.0.12838': attribute type 3 has an invalid length. [ 2924.780065][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12838'. [ 2926.447681][T12050] CIFS mount error: No usable UNC path provided in device string! [ 2926.447681][T12050] [ 2926.461477][T12050] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2927.408055][T12062] netlink: 112 bytes leftover after parsing attributes in process `syz.1.12845'. [ 2928.272182][T12068] input: syz1 as /devices/virtual/input/input73 [ 2928.434498][T12074] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 2929.815135][T12085] Invalid source name [ 2929.819305][T12085] UBIFS error (pid: 12085): cannot open "ubifs", error -22 [ 2930.514360][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12853'. [ 2930.530850][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12853'. [ 2930.747297][T12088] IPVS: set_ctl: invalid protocol: 1536 0.32.0.0:37890 [ 2933.428286][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12857'. [ 2933.450634][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 2933.451684][ T30] audit: type=1326 audit(1752962267.992:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12108 comm="syz.8.12857" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb73d38e9a9 code=0x0 [ 2936.291418][T12136] netlink: 'syz.9.12865': attribute type 10 has an invalid length. [ 2936.742420][T12138] delete_channel: no stack [ 2937.442953][T12157] fuse: Unknown parameter '`fd' [ 2947.067134][T12223] netlink: 'syz.4.12887': attribute type 6 has an invalid length. [ 2954.528697][T12270] ALSA: mixer_oss: invalid OSS volume '' [ 2954.838230][T10186] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2954.857761][T10186] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2954.874690][T10186] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2954.884916][T10186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2954.892869][T10186] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2954.905883][T26641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2954.913222][T26641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2954.925213][T26641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2954.933635][T26641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2954.946438][T26641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2956.780372][T12279] lo speed is unknown, defaulting to 1000 [ 2956.787981][T12279] lo speed is unknown, defaulting to 1000 [ 2957.014535][T10186] Bluetooth: hci0: command tx timeout [ 2959.107688][T10186] Bluetooth: hci0: command tx timeout [ 2959.155061][T12279] chnl_net:caif_netlink_parms(): no params data found [ 2959.643695][T12279] bridge0: port 1(bridge_slave_0) entered blocking state [ 2959.704887][T12279] bridge0: port 1(bridge_slave_0) entered disabled state [ 2959.721185][T12279] bridge_slave_0: entered allmulticast mode [ 2959.739552][T12279] bridge_slave_0: entered promiscuous mode [ 2959.750049][T12279] bridge0: port 2(bridge_slave_1) entered blocking state [ 2959.758031][T12279] bridge0: port 2(bridge_slave_1) entered disabled state [ 2959.765522][T12279] bridge_slave_1: entered allmulticast mode [ 2959.774457][T12279] bridge_slave_1: entered promiscuous mode [ 2960.776740][T12355] overlayfs: failed to clone upperpath [ 2961.254630][T10186] Bluetooth: hci0: command tx timeout [ 2961.551086][T12279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2961.595688][T12279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2962.032682][T12279] team0: Port device team_slave_0 added [ 2962.059104][T12279] team0: Port device team_slave_1 added [ 2962.589476][T23142] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 2063 sec [ 2963.251262][ T30] audit: type=1326 audit(1752962297.792:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12370 comm="syz.4.12928" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44f998e9a9 code=0x0 [ 2963.364634][T10186] Bluetooth: hci0: command tx timeout [ 2963.891389][T12279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2963.914435][T12279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2964.114594][T12279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2964.147368][T12279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2964.157994][T12279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2964.185087][T12279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2964.674057][T12279] hsr_slave_0: entered promiscuous mode [ 2964.785884][T12279] hsr_slave_1: entered promiscuous mode [ 2964.792399][T12279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2964.827470][T12279] Cannot create hsr debugfs directory [ 2965.248037][T12396] /dev/nullb0: Can't lookup blockdev [ 2968.108740][T12279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2968.162821][T12279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2969.011677][T12279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2970.065566][T12279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2970.930383][T12279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2971.705931][T12279] 8021q: adding VLAN 0 to HW filter on device team0 [ 2971.732955][T28354] bridge0: port 1(bridge_slave_0) entered blocking state [ 2971.740166][T28354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2971.788862][T28354] bridge0: port 2(bridge_slave_1) entered blocking state [ 2971.796118][T28354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2972.862343][T12279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2976.260725][T12279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2977.462631][T12279] veth0_vlan: entered promiscuous mode [ 2977.523914][T12487] netlink: 'syz.1.12950': attribute type 3 has an invalid length. [ 2977.541339][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12950'. [ 2977.597106][T12279] veth1_vlan: entered promiscuous mode [ 2977.846203][T12279] veth0_macvtap: entered promiscuous mode [ 2977.880399][T12279] veth1_macvtap: entered promiscuous mode [ 2979.119734][T12279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2979.171992][T12279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2979.698293][T12502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2979.975310][T12279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2980.084153][T12279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2980.114897][T12279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2980.137225][T12279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2981.172223][ T30] audit: type=1326 audit(1752962315.712:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12509 comm="syz.1.12956" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a0e98e9a9 code=0x0 [ 2981.229191][T28350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2981.288106][T28350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2981.548191][ T8750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2981.574887][ T8750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2983.927312][T12534] input: syz1 as /devices/virtual/input/input74 [ 2991.447124][T30743] usb 10-1: new full-speed USB device number 42 using dummy_hcd [ 2992.867714][T12569] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12971'. [ 2992.886100][T12569] vlan1: entered promiscuous mode [ 2992.891634][T12569] team0: entered promiscuous mode [ 2996.594587][T30743] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2996.643743][T30743] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 2996.652595][T30743] usb 10-1: can't read configurations, error -71 [ 2997.761249][T12624] geneve2: entered allmulticast mode [ 3000.579058][T12647] xt_NFQUEUE: number of total queues is 0 [ 3000.806712][T12652] random: crng reseeded on system resumption [ 3002.522866][T12663] Cannot find add_set index 0 as target [ 3003.512692][T12661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12990'. [ 3003.574312][T12661] delete_channel: no stack [ 3004.030623][ T9620] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 3004.053855][ T9620] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3006.719967][T12701] overlayfs: failed to clone upperpath [ 3007.280876][T12708] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.13007'. [ 3007.291359][T12708] netlink: zone id is out of range [ 3007.296639][T12708] netlink: zone id is out of range [ 3007.301785][T12708] netlink: zone id is out of range [ 3008.059998][T12708] netlink: zone id is out of range [ 3008.065409][T12708] netlink: get zone limit has 8 unknown bytes [ 3009.889192][T12734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3015.578437][T12777] delete_channel: no stack [ 3017.474077][T12776] delete_channel: no stack [ 3018.376440][T26641] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 3018.386991][T26641] Bluetooth: hci0: Injecting HCI hardware error event [ 3018.411874][T26641] Bluetooth: hci0: hardware error 0x00 [ 3018.655811][T12795] netlink: 'syz.2.13025': attribute type 12 has an invalid length. [ 3018.665282][T12796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13026'. [ 3018.758611][T12800] i2c i2c-0: Invalid block write size 34 [ 3018.774789][T12800] netlink: 'syz.9.13028': attribute type 1 has an invalid length. [ 3019.906271][T12800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3021.096763][T26641] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 3023.245659][T23142] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 2124 sec [ 3024.137700][T12841] /dev/nullb0: Can't open blockdev [ 3028.153078][T12871] /dev/nullb0: Can't lookup blockdev [ 3029.227682][T12873] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 3031.329977][T12874] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818) [ 3033.322019][T12883] QAT: Device 7 not found [ 3036.542468][T12894] netlink: 'syz.8.13059': attribute type 10 has an invalid length. [ 3036.553275][T12894] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 3036.857208][T12903] fuse: Unknown parameter '0x00000000000000040000000000000000000000000000000000000000' [ 3039.569575][T12929] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3044.953247][T12954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13060'. [ 3046.082815][T12962] rdma_op ffff8880641401f0 conn xmit_rdma 0000000000000000 [ 3051.797215][T12992] netlink: 44 bytes leftover after parsing attributes in process `syz.9.13071'. [ 3053.162300][T13005] ip6erspan0: entered allmulticast mode [ 3054.805715][T30743] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 3056.031990][T30743] usb 10-1: Using ep0 maxpacket: 32 [ 3056.318740][T10186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3056.344546][T10186] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3056.361225][T10186] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3056.409005][T10186] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3056.417115][T10186] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3056.778514][T13023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3057.504494][T13017] lo speed is unknown, defaulting to 1000 [ 3057.517391][T13017] lo speed is unknown, defaulting to 1000 [ 3057.828655][T13025] delete_channel: no stack [ 3058.457074][T10186] Bluetooth: hci5: command tx timeout [ 3059.160204][T30743] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 3059.174703][T30743] usb 10-1: can't read configurations, error -71 [ 3060.785280][T10186] Bluetooth: hci5: command tx timeout [ 3060.808347][T13034] overlayfs: missing 'lowerdir' [ 3061.917600][T13043] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 3061.917961][T12494] IPVS: starting estimator thread 0... [ 3061.933292][T13046] netlink: 6 bytes leftover after parsing attributes in process `syz.2.13086'. [ 3062.233383][T13047] IPVS: using max 27 ests per chain, 64800 per kthread [ 3062.861762][T12494] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 3062.869971][T10186] Bluetooth: hci5: command tx timeout [ 3063.044026][T12494] usb 3-1: config 0 has an invalid interface number: 229 but max is 0 [ 3063.064552][T12494] usb 3-1: config 0 has no interface number 0 [ 3063.096383][T12494] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 3063.150043][ T8750] bond0: (slave netdevsim0): Releasing backup interface [ 3063.188616][T12494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3063.318617][T12494] usb 3-1: config 0 descriptor?? [ 3063.573558][T12494] usb 3-1: USB disconnect, device number 56 [ 3065.434433][T10186] Bluetooth: hci5: command tx timeout [ 3065.481564][T13017] chnl_net:caif_netlink_parms(): no params data found [ 3066.527964][ T8750] dummy0: left allmulticast mode [ 3066.717998][ T8750] bridge0: port 3(dummy0) entered disabled state [ 3067.326182][T13083] ubi: mtd0 is already attached to ubi31 [ 3067.751548][ T8750] bridge_slave_1: left allmulticast mode [ 3067.751569][ T8750] bridge_slave_1: left promiscuous mode [ 3067.751736][ T8750] bridge0: port 2(bridge_slave_1) entered disabled state [ 3067.753436][ T8750] bridge_slave_0: left allmulticast mode [ 3067.753453][ T8750] bridge_slave_0: left promiscuous mode [ 3067.753580][ T8750] bridge0: port 1(bridge_slave_0) entered disabled state [ 3070.697720][T13095] netlink: 588 bytes leftover after parsing attributes in process `syz.1.13098'. [ 3071.879319][ T8750] bond1 (unregistering): (slave gretap1): Releasing active interface [ 3072.576365][ T8750] dvmrp8 (unregistering): left allmulticast mode [ 3072.893191][ T8750] team0: Port device bridge1 removed [ 3073.522523][T13112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3073.534844][T13112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3073.776495][ T8750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3073.793749][ T8750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3073.812469][ T8750] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 3073.835477][ T8750] bond0 (unregistering): Released all slaves [ 3073.852448][ T8750] bond1 (unregistering): Released all slaves [ 3074.613318][ T8750] bond2 (unregistering): (slave veth3): Releasing active interface [ 3074.622545][ T8750] veth0_to_bond: entered promiscuous mode [ 3074.637692][ T8750] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 3074.680751][ T8750] bond2 (unregistering): (slave vlan2): Releasing active interface [ 3074.707372][ T8750] bond2 (unregistering): Released all slaves [ 3074.835720][T13017] bridge0: port 1(bridge_slave_0) entered blocking state [ 3074.843002][T13017] bridge0: port 1(bridge_slave_0) entered disabled state [ 3074.875918][T13017] bridge_slave_0: entered allmulticast mode [ 3074.900540][T13017] bridge_slave_0: entered promiscuous mode [ 3074.915560][T13017] bridge0: port 2(bridge_slave_1) entered blocking state [ 3074.934905][T13017] bridge0: port 2(bridge_slave_1) entered disabled state [ 3074.942981][T13017] bridge_slave_1: entered allmulticast mode [ 3074.951100][T13017] bridge_slave_1: entered promiscuous mode [ 3074.987209][T13106] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 3075.007654][T13106] bridge0: port 2(bridge_slave_1) entered disabled state [ 3075.017875][T13106] bridge0: port 1(bridge_slave_0) entered disabled state [ 3075.728980][T13106] bridge0: entered allmulticast mode [ 3075.795046][T13017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3075.812796][T13017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3075.999730][T13110] syz.2.13101 (13110) used obsolete PPPIOCDETACH ioctl [ 3076.027352][ T8750] : left promiscuous mode [ 3076.252779][T13017] team0: Port device team_slave_0 added [ 3076.284448][T13140] netlink: 'syz.1.13106': attribute type 10 has an invalid length. [ 3077.060336][ T8750] tipc: Left network mode [ 3077.066621][T13017] team0: Port device team_slave_1 added [ 3077.374110][T13017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3077.381661][T13017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3077.459972][T13149] 9pnet_virtio: no channels available for device syz [ 3078.004432][T13017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3078.153046][T13017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3078.163183][T13017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3078.200178][T13017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3080.118953][T13165] [ 3080.121368][T13165] ====================================================== [ 3080.128405][T13165] WARNING: possible circular locking dependency detected [ 3080.135449][T13165] 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 Not tainted [ 3080.142584][T13165] ------------------------------------------------------ [ 3080.149627][T13165] syz.9.13113/13165 is trying to acquire lock: [ 3080.155801][T13165] ffff8880831dd140 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x735/0xe50 [ 3080.165603][T13165] [ 3080.165603][T13165] but task is already holding lock: [ 3080.172990][T13165] ffff888057ba7c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 3080.182374][T13165] [ 3080.182374][T13165] which lock already depends on the new lock. [ 3080.182374][T13165] [ 3080.192803][T13165] [ 3080.192803][T13165] the existing dependency chain (in reverse order) is: [ 3080.201840][T13165] [ 3080.201840][T13165] -> #2 (&of->mutex){+.+.}-{4:4}: [ 3080.209101][T13165] lock_acquire+0x120/0x360 [ 3080.214150][T13165] __mutex_lock+0x182/0xe80 [ 3080.219206][T13165] kernfs_fop_write_iter+0x1e0/0x4f0 [ 3080.225159][T13165] iter_file_splice_write+0x93a/0x1000 [ 3080.231198][T13165] do_splice+0xc76/0x1660 [ 3080.236121][T13165] __se_sys_splice+0x2e1/0x460 [ 3080.241439][T13165] do_syscall_64+0xfa/0x3b0 [ 3080.246498][T13165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3080.252947][T13165] [ 3080.252947][T13165] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 3080.260383][T13165] lock_acquire+0x120/0x360 [ 3080.265442][T13165] __mutex_lock+0x182/0xe80 [ 3080.270508][T13165] anon_pipe_write+0x16a/0x1360 [ 3080.275915][T13165] __kernel_write_iter+0x3e9/0x860 [ 3080.281594][T13165] __kernel_write+0xef/0x150 [ 3080.286753][T13165] autofs_notify_daemon+0x748/0xe50 [ 3080.292509][T13165] autofs_wait+0x11dc/0x1870 [ 3080.297914][T13165] autofs_mount_wait+0x16b/0x330 [ 3080.303404][T13165] autofs_d_automount+0x393/0x720 [ 3080.308977][T13165] __traverse_mounts+0x305/0x5b0 [ 3080.314469][T13165] step_into+0x534/0xf30 [ 3080.319273][T13165] path_openat+0x1bc6/0x3830 [ 3080.324426][T13165] do_filp_open+0x1fa/0x410 [ 3080.329493][T13165] do_sys_openat2+0x121/0x1c0 [ 3080.334726][T13165] __x64_sys_openat+0x138/0x170 [ 3080.340135][T13165] do_syscall_64+0xfa/0x3b0 [ 3080.345209][T13165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3080.351663][T13165] [ 3080.351663][T13165] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 3080.359445][T13165] validate_chain+0xb9b/0x2140 [ 3080.364775][T13165] __lock_acquire+0xab9/0xd20 [ 3080.369996][T13165] lock_acquire+0x120/0x360 [ 3080.375052][T13165] __mutex_lock+0x182/0xe80 [ 3080.380125][T13165] autofs_notify_daemon+0x735/0xe50 [ 3080.385877][T13165] autofs_wait+0x11dc/0x1870 [ 3080.391015][T13165] autofs_mount_wait+0x16b/0x330 [ 3080.396512][T13165] autofs_d_automount+0x393/0x720 [ 3080.402088][T13165] __traverse_mounts+0x305/0x5b0 [ 3080.407585][T13165] step_into+0x534/0xf30 [ 3080.412378][T13165] path_lookupat+0x163/0x430 [ 3080.417527][T13165] filename_lookup+0x212/0x570 [ 3080.422957][T13165] kern_path+0x35/0x50 [ 3080.427583][T13165] lookup_bdev+0xc0/0x280 [ 3080.432470][T13165] resume_store+0x169/0x460 [ 3080.437531][T13165] kernfs_fop_write_iter+0x375/0x4f0 [ 3080.443385][T13165] vfs_write+0x548/0xa90 [ 3080.448177][T13165] ksys_write+0x145/0x250 [ 3080.453062][T13165] do_syscall_64+0xfa/0x3b0 [ 3080.458124][T13165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3080.464567][T13165] [ 3080.464567][T13165] other info that might help us debug this: [ 3080.464567][T13165] [ 3080.474816][T13165] Chain exists of: [ 3080.474816][T13165] &sbi->pipe_mutex --> &pipe->mutex --> &of->mutex [ 3080.474816][T13165] [ 3080.487301][T13165] Possible unsafe locking scenario: [ 3080.487301][T13165] [ 3080.494783][T13165] CPU0 CPU1 [ 3080.500169][T13165] ---- ---- [ 3080.505562][T13165] lock(&of->mutex); [ 3080.509596][T13165] lock(&pipe->mutex); [ 3080.516328][T13165] lock(&of->mutex); [ 3080.522881][T13165] lock(&sbi->pipe_mutex); [ 3080.527445][T13165] [ 3080.527445][T13165] *** DEADLOCK *** [ 3080.527445][T13165] [ 3080.535627][T13165] 4 locks held by syz.9.13113/13165: [ 3080.540948][T13165] #0: ffff888034e8b438 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 3080.550109][T13165] #1: ffff888035b84428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 3080.559082][T13165] #2: ffff888057ba7c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 3080.568922][T13165] #3: ffff888140439878 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 3080.579039][T13165] [ 3080.579039][T13165] stack backtrace: [ 3080.584986][T13165] CPU: 1 UID: 0 PID: 13165 Comm: syz.9.13113 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 3080.585021][T13165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3080.585038][T13165] Call Trace: [ 3080.585050][T13165] [ 3080.585063][T13165] dump_stack_lvl+0x189/0x250 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3080.585097][T13165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3080.585125][T13165] ? __pfx__printk+0x10/0x10 [ 3080.585159][T13165] ? print_lock_name+0xde/0x100 [ 3080.585194][T13165] print_circular_bug+0x2ee/0x310 [ 3080.585228][T13165] check_noncircular+0x134/0x160 [ 3080.585264][T13165] validate_chain+0xb9b/0x2140 [ 3080.585308][T13165] __lock_acquire+0xab9/0xd20 [ 3080.585336][T13165] ? autofs_notify_daemon+0x735/0xe50 [ 3080.585361][T13165] lock_acquire+0x120/0x360 [ 3080.585383][T13165] ? autofs_notify_daemon+0x735/0xe50 [ 3080.585427][T13165] __mutex_lock+0x182/0xe80 [ 3080.585454][T13165] ? autofs_notify_daemon+0x735/0xe50 [ 3080.585482][T13165] ? autofs_notify_daemon+0x6e5/0xe50 [ 3080.585510][T13165] ? autofs_notify_daemon+0x735/0xe50 [ 3080.585538][T13165] ? __pfx___mutex_lock+0x10/0x10 [ 3080.585566][T13165] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3080.585594][T13165] ? from_kgid_munged+0x1f4/0x6a0 [ 3080.585633][T13165] ? __pfx_from_kgid_munged+0x10/0x10 [ 3080.585669][T13165] ? kasan_save_track+0x4f/0x80 [ 3080.585707][T13165] ? __kasan_kmalloc+0x93/0xb0 [ 3080.585728][T13165] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 3080.585753][T13165] ? autofs_wait+0xd32/0x1870 [ 3080.585776][T13165] ? autofs_notify_daemon+0x3d1/0xe50 [ 3080.585806][T13165] autofs_notify_daemon+0x735/0xe50 [ 3080.585832][T13165] ? do_syscall_64+0xfa/0x3b0 [ 3080.585864][T13165] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 3080.585912][T13165] ? __raw_spin_lock_init+0x45/0x100 [ 3080.585947][T13165] ? autofs_wait+0xe13/0x1870 [ 3080.585974][T13165] autofs_wait+0x11dc/0x1870 [ 3080.585997][T13165] ? d_walk+0x2c0/0x780 [ 3080.586040][T13165] ? __pfx_autofs_wait+0x10/0x10 [ 3080.586070][T13165] ? do_raw_spin_unlock+0x122/0x240 [ 3080.586113][T13165] autofs_mount_wait+0x16b/0x330 [ 3080.586151][T13165] autofs_d_automount+0x393/0x720 [ 3080.586177][T13165] __traverse_mounts+0x305/0x5b0 [ 3080.586210][T13165] step_into+0x534/0xf30 [ 3080.586240][T13165] ? lookup_slow+0x5e/0x70 [ 3080.586272][T13165] ? __pfx_step_into+0x10/0x10 [ 3080.586300][T13165] ? walk_component+0x190/0x400 [ 3080.586330][T13165] path_lookupat+0x163/0x430 [ 3080.586364][T13165] filename_lookup+0x212/0x570 [ 3080.586397][T13165] ? __pfx_filename_lookup+0x10/0x10 [ 3080.586446][T13165] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 3080.586467][T13165] ? getname_kernel+0x146/0x2f0 [ 3080.586497][T13165] ? getname_kernel+0x20e/0x2f0 [ 3080.586526][T13165] kern_path+0x35/0x50 [ 3080.586555][T13165] lookup_bdev+0xc0/0x280 [ 3080.586583][T13165] ? rcu_is_watching+0x15/0xb0 [ 3080.586609][T13165] ? __pfx_lookup_bdev+0x10/0x10 [ 3080.586637][T13165] ? kstrndup+0xbf/0x160 [ 3080.586671][T13165] resume_store+0x169/0x460 [ 3080.586700][T13165] ? sysfs_file_kobj+0x1a/0x230 [ 3080.586723][T13165] ? __pfx_resume_store+0x10/0x10 [ 3080.586754][T13165] ? sysfs_file_kobj+0x1a/0x230 [ 3080.586776][T13165] ? sysfs_file_kobj+0x1a/0x230 [ 3080.586797][T13165] ? sysfs_file_kobj+0x1a/0x230 [ 3080.586820][T13165] ? sysfs_file_kobj+0x1e4/0x230 [ 3080.586842][T13165] ? sysfs_kf_write+0x166/0x260 [ 3080.586869][T13165] ? __pfx_sysfs_kf_write+0x10/0x10 [ 3080.586892][T13165] kernfs_fop_write_iter+0x375/0x4f0 [ 3080.586931][T13165] vfs_write+0x548/0xa90 [ 3080.586954][T13165] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 3080.586990][T13165] ? __pfx_vfs_write+0x10/0x10 [ 3080.587016][T13165] ? __fget_files+0x2a/0x420 [ 3080.587047][T13165] ksys_write+0x145/0x250 [ 3080.587070][T13165] ? __pfx_ksys_write+0x10/0x10 [ 3080.587088][T13165] ? rcu_is_watching+0x15/0xb0 [ 3080.587116][T13165] ? do_syscall_64+0xbe/0x3b0 [ 3080.587143][T13165] do_syscall_64+0xfa/0x3b0 [ 3080.587168][T13165] ? lockdep_hardirqs_on+0x9c/0x150 [ 3080.587191][T13165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3080.587214][T13165] ? clear_bhb_loop+0x60/0xb0 [ 3080.587240][T13165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3080.587264][T13165] RIP: 0033:0x7f6fd578e9a9 [ 3080.587284][T13165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3080.587306][T13165] RSP: 002b:00007f6fd3191038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3080.587330][T13165] RAX: ffffffffffffffda RBX: 00007f6fd59b6240 RCX: 00007f6fd578e9a9 [ 3080.587348][T13165] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000008 [ 3080.587363][T13165] RBP: 00007f6fd5810d69 R08: 0000000000000000 R09: 0000000000000000 [ 3080.587378][T13165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3080.587392][T13165] R13: 0000000000000000 R14: 00007f6fd59b6240 R15: 00007ffd515483e8 [ 3080.587426][T13165] [ 3081.362409][T13165] PM: Image not found (code -22) [ 3082.568055][T21679] syz_tun (unregistering): left allmulticast mode [ 3082.645407][ T6496] smc: removing ib device syz1 [ 3082.659948][ T8750] hsr_slave_0: left promiscuous mode [ 3082.674545][ T8750] hsr_slave_1: left promiscuous mode [ 3083.641359][ T8750] team0 (unregistering): Port device team_slave_0 removed [ 3084.221266][T11630] page_pool_release_retry() stalled pool shutdown: id 119, 832 inflight 2185 sec