last executing test programs: 12m15.189883228s ago: executing program 32 (id=1030): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="feffffc300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000007a2c9fbac30000000000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0xffffff85, 0x9, 0x5, 0x84, r1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x10, 0x803, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x18, 0x30, 0x25, 0x0, 0x25dfdbfc, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) flock(r9, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) 10m58.680318366s ago: executing program 33 (id=1414): syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a0200261804000000040000000c0068cb59558dda6d112da4df16000000d778", @ANYRES32, @ANYBLOB="6fff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='batadv_slave_1\x00', 0x10) r5 = dup(r1) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8000000190001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000f9ff0308000000000000000000000000000007000000000000000000000000000000000000000000000005000000000000000700000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000030044000500ff010000000000000000000000000001000000003c00000008000000ac1414bb000000000000000000000000000000000100"/176], 0xf8}}, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x4000, 0x0, 0x4}, &(0x7f00000004c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sync_file_range(0xffffffffffffffff, 0x401, 0x5, 0x1) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 10m54.59253594s ago: executing program 34 (id=1427): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r0, 0x0) 10m51.076130566s ago: executing program 35 (id=1436): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x100000, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x101800, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) socket$qrtr(0x2a, 0x2, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) 10m49.638109521s ago: executing program 36 (id=1443): syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a0200261804000000040000000c0068cb59558dda6d112da4df16000000d778", @ANYRES32, @ANYBLOB="6fff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8000000190001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000f9ff0308000000000000000000000000000007000000000000000000000000000000000000000000000005000000000000000700000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000030044000500ff010000000000000000000000000001000000003c00000008000000ac1414bb000000000000000000000000000000000100"/176], 0xf8}}, 0x0) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x4000, 0x0, 0x4}, &(0x7f00000004c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sync_file_range(0xffffffffffffffff, 0x401, 0x5, 0x1) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 10m38.614320479s ago: executing program 37 (id=1494): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2002, 0x13) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r2, 0xc3d33000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 10m35.146329484s ago: executing program 38 (id=1514): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) r1 = syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) 10m32.586065494s ago: executing program 39 (id=1525): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) ioprio_set$pid(0x3, 0x0, 0x64) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="000104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) pipe(0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000740)={0xf}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x5) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x9) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x25, 0x5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 10m23.363047476s ago: executing program 40 (id=1554): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x100000, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x101800, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) socket$qrtr(0x2a, 0x2, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) 10m22.78915504s ago: executing program 41 (id=1559): syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000003280)={0x0, 0x0, 0x0}) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x100c0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000020d118009400000000000109022400010000000009040000010300000009210100fd012204000905810300000100008b2c5c8cf3857afaf6dfb74bd876191ec6a486df9cdb24894beb"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r3) r4 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r4, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) 10m19.768969567s ago: executing program 42 (id=1570): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x100000, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x101800, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) socket$qrtr(0x2a, 0x2, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) 10m8.288006343s ago: executing program 43 (id=1613): syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a0200261804000000040000000c0068cb59558dda6d112da4df16000000d778", @ANYRES32, @ANYBLOB="6fff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8000000190001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000f9ff0308000000000000000000000000000007000000000000000000000000000000000000000000000005000000000000000700000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000030044000500ff010000000000000000000000000001000000003c00000008000000ac1414bb000000000000000000000000000000000100"/176], 0xf8}}, 0x0) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x4000, 0x0, 0x4}, &(0x7f00000004c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sync_file_range(0xffffffffffffffff, 0x401, 0x5, 0x1) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 10m1.778764177s ago: executing program 44 (id=1629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4000000}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203850000a26939d6000000000000"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000002d00090027bd7000000000000500000014000a00000000000000000000000000000000014cd27473cae1627840ddc2116be301c6934d9b561502514401fb7e2598d0aad8da830034cbf5bfeb5322da30c46668a15cfbfd36f735f8fb61e84a68f287a6ebe067816778798f962f4cca486942edba652c14d6ada528cd29d4e258e256dc9172b1ec26829405c46eed45e52d652745870da4283bef5ef2191f2edb0bc3f447d17694a826d8d1721b587220ffacb71b61665cabe74532a6f8e7eef31fc9770207cdf27029a8d946d7e4ce15fec57e2eeccbc8ca1350f623d80df180c58c6694f89ef6862193ed5cdf168a1c380a79811912a42a9fc7ddb376bd2800c3c9efe8f979b0294c4a87e3a3dc467b91c260c6d623b0cfed27139f5e804bdc8ad4f0c28741bfac54521084df58656f7269f79b71a2dae4dc5be56baf7bf19743e1c6db9658781d"], 0x28}}, 0x84) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x5}, {0x9, 0xa}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8900}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdc02, {}, ["", "", "", ""]}, 0x1c}}, 0x4005) openat$vcs(0xffffff9c, &(0x7f0000000100), 0x80, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r7, 0x0, 0x0, 0x2, 0x0, 0x2}]) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r10, 0x5437, 0x0) 9m59.601759969s ago: executing program 45 (id=1635): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x100000, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x101800, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) 9m59.085428125s ago: executing program 4 (id=1639): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x100000, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) 9m58.767635749s ago: executing program 46 (id=1640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313, 0x1000000}], 0x0, 0x0, 0x0}) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, 0x0) 9m58.062391066s ago: executing program 4 (id=1643): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000004}, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000500)={0x50, 0x0, r5, {0x7, 0x1f, 0x4, 0x8004090, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000a3c0)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009885f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4dbcacea29d4554d2d95ed4444e9bcbd6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa35e548ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f5823", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x0, {0x4000000000003, 0x0, 0x0, {0x1, 0x9, 0x1, 0x800000004, 0x0, 0x0, 0x0, 0xffffffff, 0x2000, 0x8001, 0x0, 0x0, r6, 0x0, 0x3fe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 9m57.72549877s ago: executing program 4 (id=1644): socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 9m57.724788974s ago: executing program 4 (id=1645): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000003280)={0x0, 0x0, 0x0}) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x100c0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000020d118009400000000000109022400010000000009040000010300000009210100fd012204000905810300000100008b2c5c8cf3857afaf6dfb74bd876191ec6a486df9cdb24894beb"], 0x0) r5 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r5, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r6 = fcntl$dupfd(r0, 0x0, r1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) 9m57.492155941s ago: executing program 4 (id=1646): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x100000, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3ffff) 9m56.715373779s ago: executing program 4 (id=1647): timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x6, @thr={0x0, 0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) mkdir(0x0, 0x0) r1 = creat(0x0, 0x0) r2 = semget$private(0x0, 0x1, 0x210) semctl$GETALL(r2, 0x0, 0xd, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0x8, 0x5]}, &(0x7f0000000240)=0x44) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) socket(0x1e, 0x4, 0x0) openat$autofs(0xffffff9c, 0x0, 0x208400, 0x0) epoll_create1(0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mknod$loop(0x0, 0xfff, 0x0) execve(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048840}, 0x800) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2d, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}]}, 0x44}}, 0x0) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) 9m56.637261395s ago: executing program 47 (id=1647): timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x6, @thr={0x0, 0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) mkdir(0x0, 0x0) r1 = creat(0x0, 0x0) r2 = semget$private(0x0, 0x1, 0x210) semctl$GETALL(r2, 0x0, 0xd, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0x8, 0x5]}, &(0x7f0000000240)=0x44) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) socket(0x1e, 0x4, 0x0) openat$autofs(0xffffff9c, 0x0, 0x208400, 0x0) epoll_create1(0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mknod$loop(0x0, 0xfff, 0x0) execve(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x2c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048840}, 0x800) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2d, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}]}, 0x44}}, 0x0) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) 9m53.318080898s ago: executing program 8 (id=1652): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000004}, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, 0x0) read$FUSE(r4, &(0x7f000000e440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000500)={0x50, 0x0, r5, {0x7, 0x1f, 0x4, 0x8004090, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x0, {0x4000000000003, 0x0, 0x0, {0x1, 0x9, 0x1, 0x800000004, 0x0, 0x0, 0x0, 0xffffffff, 0x2000, 0x8001, 0x0, 0x0, r6, 0x0, 0x3fe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 9m52.814766419s ago: executing program 8 (id=1653): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x100000, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x101800, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) socket$qrtr(0x2a, 0x2, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) 9m51.907654072s ago: executing program 8 (id=1656): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x50a, &(0x7f0000000780)=ANY=[@ANYRESDEC=r1, @ANYBLOB="7b22aeb25a5db6132fa5908b051c3abdb67d00be008ce84568404b2e7af9cf36e354cbf38cd732e0617383dfafb83b949c4e955a80ae286de239f0cddcd3585e5a7184a9656050a417ebde5c8df25e5f28e402abd40356ddac21bf6f6281c79d1229b1f6fe8a9994596fe24f96680ee48633002ba2d03fd14739c5af3979d18eb1c77fc0f1195b056d79769a17b0108aa708fbd6292fd83fddf3c218e750eec6a858b4faee30ec665e7854251d197d8d8752b6952a3a354857", @ANYRESHEX=r0], 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) openat$rtc(0xffffff9c, 0x0, 0x638580, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x2, 0x5}, {0x6, 0x7f36}, {0x200, 0x70}, {0x3, 0xf}, {0xa, 0x100}, {0x6, 0x589}, {0x8, 0x7}, {0x10001, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x3}}) r2 = openat$uinput(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x4) openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r4, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 9m50.49918666s ago: executing program 8 (id=1659): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000003280)={0x0, 0x0, 0x0}) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x100c0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000020d118009400000000000109022400010000000009040000010300000009210100fd012204000905810300000100008b2c5c8cf3857afaf6dfb74bd876191ec6a486df9cdb24894beb"], 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r5) write(0xffffffffffffffff, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r6 = fcntl$dupfd(r0, 0x0, r1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) 9m50.117350448s ago: executing program 8 (id=1661): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000003280)={0x0, 0x0, 0x0}) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x100c0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r4, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r5 = fcntl$dupfd(r0, 0x0, r1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) 9m46.805515505s ago: executing program 8 (id=1665): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb2d839f3bf337ccd0d8f3513ab30aba4b00b6f0ef506a60f4082ace5a8a10d80d8d595071f2ff529ff6996481ffc7e4de448343b85079722c4f1a1ce360836392283201a1a5ac0b6e24ccf9f075c64fe58b7a37d37019a49908876bc37c9f304eeefed8a6d8cae3ca0f81e900c8735b8b3063967b68a1567e30726f2c0edb6c85e78619700b0645b728a0c88b22d18366a6db2e391401feb630396bf42b987b102eb2d0a804e188648df6c8dd", 0xad}], 0x1}}], 0x1, 0x40000d0) sendto$inet(r0, &(0x7f0000000840)='\t&', 0x62, 0x40040011, 0x0, 0x0) 9m46.747573765s ago: executing program 48 (id=1665): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb2d839f3bf337ccd0d8f3513ab30aba4b00b6f0ef506a60f4082ace5a8a10d80d8d595071f2ff529ff6996481ffc7e4de448343b85079722c4f1a1ce360836392283201a1a5ac0b6e24ccf9f075c64fe58b7a37d37019a49908876bc37c9f304eeefed8a6d8cae3ca0f81e900c8735b8b3063967b68a1567e30726f2c0edb6c85e78619700b0645b728a0c88b22d18366a6db2e391401feb630396bf42b987b102eb2d0a804e188648df6c8dd", 0xad}], 0x1}}], 0x1, 0x40000d0) sendto$inet(r0, &(0x7f0000000840)='\t&', 0x62, 0x40040011, 0x0, 0x0) 9m38.131143032s ago: executing program 3 (id=1695): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0xfffc, 0x6}, 0x4) close(r3) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x4, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) dup(r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {}, {0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x34}}, 0x20040054) inotify_init1(0x80800) bind(0xffffffffffffffff, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) 9m37.684383178s ago: executing program 3 (id=1696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x1001020, 0x0) 9m37.594289708s ago: executing program 3 (id=1699): sched_setscheduler(0x0, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313, 0x1000000}], 0x0, 0x0, 0x0}) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) 9m37.477804295s ago: executing program 7 (id=1701): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0xfffc, 0x6}, 0x4) close(r3) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x4, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) dup(r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0xfff1}, {}, {0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x34}}, 0x20040054) inotify_init1(0x80800) bind(0xffffffffffffffff, &(0x7f0000000140)=@l2tp={0x2, 0x0, @multicast2}, 0x80) 9m37.068645855s ago: executing program 7 (id=1702): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x50a, &(0x7f0000000780)=ANY=[@ANYRESDEC=r1, @ANYBLOB="7b22aeb25a5db6132fa5908b051c3abdb67d00be008ce84568404b2e7af9cf36e354cbf38cd732e0617383dfafb83b949c4e955a80ae286de239f0cddcd3585e5a7184a9656050a417ebde5c8df25e5f28e402abd40356ddac21bf6f6281c79d1229b1f6fe8a9994596fe24f96680ee48633002ba2d03fd14739c5af3979d18eb1c77fc0f1195b056d79769a17b0108aa708fbd6292fd83fddf3c218e750eec6a858b4faee30ec665e7854251d197d8d8752b6952a3a354857", @ANYRESHEX=r0], 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) openat$rtc(0xffffff9c, 0x0, 0x638580, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r3, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 9m36.892775477s ago: executing program 3 (id=1704): syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000003280)={0x0, 0x0, 0x0}) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x100c0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r2 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r2, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) 9m36.735326259s ago: executing program 7 (id=1706): r0 = socket$inet6(0xa, 0x800, 0x4000eec7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRESHEX=r1, @ANYBLOB="200001"], 0x38}}, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000009004"]) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000000)="260f01cfbaf80c66b835b9ca8166efbafc0cec66640f32baf80c66b83065cd8966efbafc0c66b88f9b000066efbaf80c66b8a8a86e8866efbafc0c66b80100000066efbaf80c66b8983d448366efbafc0cb000eeea012b5d00660ff96700c4e2bddfdd0f01c2", 0x66}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x47]}, 0x8, 0x0) ppoll(&(0x7f0000000080)=[{r8, 0x240}], 0x1, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xe0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) syz_init_net_socket$x25(0x9, 0x5, 0x0) 9m36.51446517s ago: executing program 3 (id=1707): r0 = socket$netlink(0x10, 0x3, 0xe) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x240600) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) mount(&(0x7f0000000000)=@filename='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f0000658000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x40004000, &(0x7f0000000140), 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="48bb081dcd98b3ababd2f86978623fc18fbf") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) syz_open_dev$amidi(&(0x7f00000006c0), 0x3e0, 0x123e81) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f"], 0x64}}, 0x10000) sendmsg$IPSET_CMD_HEADER(r0, 0x0, 0x40) r3 = syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x101b, 0x0, 0x0, 0x6, 0x2, 0x1}}) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x4, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0xba}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) 9m36.182942588s ago: executing program 3 (id=1709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f0000000300)={0xed, 0x0, 0x7}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x88}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) eventfd2(0x9, 0x80800) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/91, 0x5b}], 0x1, 0x1041, 0x200000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x6, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsopen(&(0x7f00000000c0)='ext3\x00', 0x1) close_range(r6, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'veth0_to_batadv\x00'}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x8014}, 0x81) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000040000180060001000a000000080005"], 0x54}}, 0x0) 9m36.022360376s ago: executing program 49 (id=1709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000280)) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f0000000300)={0xed, 0x0, 0x7}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x88}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) eventfd2(0x9, 0x80800) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/91, 0x5b}], 0x1, 0x1041, 0x200000) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x6, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsopen(&(0x7f00000000c0)='ext3\x00', 0x1) close_range(r6, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'veth0_to_batadv\x00'}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x8014}, 0x81) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000040000180060001000a000000080005"], 0x54}}, 0x0) 9m33.623639659s ago: executing program 7 (id=1717): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000003280)={0x0, 0x0, 0x0}) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x100c0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) r5 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r5, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r6 = fcntl$dupfd(r0, 0x0, r1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) 9m33.089517899s ago: executing program 7 (id=1718): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="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", 0x725}], 0x1}}], 0x1, 0x40000d0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000840)='\t&', 0x62, 0x40040011, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0xc80, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rt_sigaction(0x19, &(0x7f0000000180)={&(0x7f0000000080)="366465f029144d00000081f30fc27f5e06ae0d0fd82e2e460f01d626f00994aff7000000c4c1796f960600000040cd00c4e2f1453c99f340a56544ca0c00", 0xfe0a4928daa4e86b, 0x0, {[0x200000]}}, 0x0, 0x8, &(0x7f0000000000)) ftruncate(r3, 0x3292e291) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f00000000c0)=0x7ff) r4 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) setsockopt(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000001c0)="020900000080efff", 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0189436, &(0x7f0000000140)) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000240)={0xfffe, 0x80, 0x5, 0xb3, 0x6, "4851125c17125db7"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x4) 9m32.655735994s ago: executing program 7 (id=1722): syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000003280)={0x0, 0x0, 0x0}) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x100c0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) 9m32.512793506s ago: executing program 50 (id=1722): syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000003280)={0x0, 0x0, 0x0}) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x100c0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) 9m28.574758812s ago: executing program 6 (id=1728): sched_setscheduler(0x0, 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) 9m27.165282603s ago: executing program 6 (id=1731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x4000000}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) socket$inet6(0xa, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203850000a26939d60000000000000f0800010001"], 0x1c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x84) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x5}, {0x9, 0xa}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8900}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdc02, {}, ["", "", "", ""]}, 0x1c}}, 0x4005) openat$vcs(0xffffff9c, &(0x7f0000000100), 0x80, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r7, 0x0, 0x0, 0x2, 0x0, 0x2}]) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r10, 0x5437, 0x0) 9m25.21759324s ago: executing program 6 (id=1737): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000004}, &(0x7f00000000c0), &(0x7f00000001c0)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[]) read$FUSE(r4, &(0x7f000000e440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000500)={0x50, 0x0, r5, {0x7, 0x1f, 0x4, 0x8004090, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x0, {0x4000000000003, 0x0, 0x0, {0x1, 0x9, 0x1, 0x800000004, 0x0, 0x0, 0x0, 0xffffffff, 0x2000, 0x8001, 0x0, 0x0, r6, 0x0, 0x3fe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 9m24.931715493s ago: executing program 6 (id=1738): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000003280)={0x0, 0x0, 0x0}) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x100c0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r4, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r5 = fcntl$dupfd(r0, 0x0, r1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) 9m24.639115478s ago: executing program 6 (id=1739): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x50a, &(0x7f0000000780)=ANY=[@ANYRESDEC=r1, @ANYBLOB="7b22aeb25a5db6132fa5908b051c3abdb67d00be008ce84568404b2e7af9cf36e354cbf38cd732e0617383dfafb83b949c4e955a80ae286de239f0cddcd3585e5a7184a9656050a417ebde5c8df25e5f28e402abd40356ddac21bf6f6281c79d1229b1f6fe8a9994596fe24f96680ee48633002ba2d03fd14739c5af3979d18eb1c77fc0f1195b056d79769a17b0108aa708fbd6292fd83fddf3c218e750eec6a858b4faee30ec665e7854251d197d8d8752b6952a3a354857", @ANYRESHEX=r0], 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) openat$rtc(0xffffff9c, 0x0, 0x638580, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r3, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 9m24.334163136s ago: executing program 6 (id=1741): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb2d839f3bf337ccd0d8f3513ab30aba4b00b6f0ef506a60f4082ace5a8a10d80d8d595071f2ff529ff6996481ffc7e4de448343b85079722c4f1a1ce360836392283201a1a5ac0b6e24ccf9f075c64fe58b7a37d37019a49908876bc37c9f304eeefed8a6d8cae3ca0f81e900c8735b8b3063967b68a1567e30726f2c0edb6c85e78619700b0645b728a0c88b22d18366a6db2e391401feb630396bf42b987b102eb2d0a804e188648df6c8ddd79e0fde3893930e06e91c39cc01d239a1c20cb0cee84da924212382163c6638e798d66660c356195a56523456052c42aca7c8404e259561dfea5cbdc21a31b7e7eb73a710b68ba2ae2eff86d3d4fbda8b72014f5de839d48acbc9d217f7ac0b3362a66f3a7d04277cc4b918687ed082170f98dc54bd56f28ea3fecc4e86e1820ed811919dac4d09c18e27c4d839c7ac015d34522c7d87ae968dc872d97db81da9a4b6f631535348d9d44ca3fe846f6706fd3d3bd2f62f2d046a2973c9e8c6ccbf96fd0060d532433732627bf213a35870cea250f79ac773b8adba386e0ae960801b073646dcfe7c89f0cb410d22146cb3109bb9a12649e943104875c0272dfdfac5998854c0f62438909522fba45a4ac83b917a6d9a45704fefe035986b7ae676dd6b8094d2ce7ed64f0aaf138cc827553d74b2c04488d849df41fb98a6c966c07cbb1a9fe3ee5e41c3082c51b37f9df811461cf123830ee606c7b5816b6b86b21860177bfc3fd9aeb689dbb39963a55cee2afe7352200f719a3c0fe44e059446bd7226d9e814d2358c2524c0103c48f7516cc69eb04815bbef84a5bd840a5131f45c335ef8939d6100cf89160f5f1c5aec60e479d18f4680a5a525964fbf2371c1493df2c3e67f98645f329d984250dc98a48a5ab14624438ad259145794a22055ace7d33b5218ed2bda0a528bee49e4e4ae3068477da429945eef0e06128a3202f62634d8faba02e7a951fd2ceba99d2a1488872c66ceef1c5ba5a3e4a523be24c7c2de0316ae12a66d11a8089888c1e2635206ad43da841b07324fdb18eaf8d8a41a8eee7e9cd948967234049bf5ff3c8ce9cd708cf33fca2896221990573c08ef7eb0843189f7033f93b753a40c49bfc92effc9a663fbd1389f1719d14b3d33558bc1ca6c7a66c3ce93151091b23b0efdc14b6e4af3bd914ae73ef2c823346af97d7d2a53f644ba75587ab85e95c43244ba1c97cd1e692bd3e781c21b937e005c9b617ef80b0b39be0da367d2d6320a9d9efa49b574239631adb87f1b5028ee294136a8ba08b36a4faa93dc03960054a7d8655beae9a5b59db4880ba897ee9bdae083bc90567876375c747e6e19876f3ec81d6306fe252c5b7339c3f8aa409a2b745db9709e0152974db8463d16f16174be5ca677ce5bccdedc1c916919a4c919a92f0529ccca4f5c15546347cbfb94924541d8d8c1ad22bd579a620195ba98c4e1aac394c483d5ec233b7d645893ce835c19f5f58179d838d8ff31391beab43f5d01ce477cb305804b2ce0412788b2e516d049a2b55aa7bf673ade77522ef7299da43acc8cb6c6be9b9bbe90c0347a87eaa000383afd0b6ff6c3e53f11ae2449bfb75b717bd5f2068680e5677782a9fecfed818e69a54849a25ba9fc1894a43076860e1beb0149baf2bef5c712a295b5c8f27fbd75f738100c2e9d2e358b5c8805d1f8f94bea753fb4c3e72802844f7f54b1120310fc1d9bceac33a1e0dad1ac318b03e39e63845ef90b7c14d543e5248626a4deb328d3ababa54de95d6b9d4947f9afbe64fa36d731670adb4efd53f981f1acaa5361293e6b1c67ed7acef1bbc61e3b92dba85773bb83850b9ec0ce204c0e109284e0de7a9007e1a0227d5a9061602fa40728e6e9e0e198bafbfe4e06450a44a8cb98ba38d02744ca3aff2dcc74054ee57cfef01af36cd5d4768ebbe1f60d302d0c56de5de0b52b15ccc824f9376fd28a303d3c9f274967f288d0775349885dbe6d4d0d921ea05130a5abd835c09a5afcf42d74db5eb2ed5b382691657ce5d101d97c4c30f9e48618fb7d9b1332f3457602306d908ac58d33f267d016a49d9f176376be5cc176df7ba603e0eae0d3aa1d0e4aba2b3e367e09d3ea776fa77a417707359532177826cc3dc36d265b2ee0ad921d787e3f88a8e4e9b21376aea3e399631998eb5f3d10a1c9e9d8337d3e820323c99985b3e98a8075ea0dbad82a243ab80704caad7e7b304c39eb437e067eae93d6772c33d744f79283f118ed07d7fe00d406c305724ab15ec417f7354b3411731bf5d08c336f10c6ce92720e4cdd0f939ebc47b4556d6b8e0e539c8bbaa2f5b1e24301985e1984a99a4b81122d6454030976159e588382dd3c0fd55517cfda7273ce59befee278b95891ee05093c0f569cecdc163d293f892f4f2f0ab7b25db89f3ae8ccb774474d760486b4332c7f730da0635370059ee117b18fcdff0f1aed557d45dca6de57fd5001b0d8626113c357945d86e832969d", 0x6ed}], 0x1}}], 0x1, 0x40000d0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000840)='\t&', 0x62, 0x40040011, 0x0, 0x0) 9m24.220265841s ago: executing program 51 (id=1741): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb2d839f3bf337ccd0d8f3513ab30aba4b00b6f0ef506a60f4082ace5a8a10d80d8d595071f2ff529ff6996481ffc7e4de448343b85079722c4f1a1ce360836392283201a1a5ac0b6e24ccf9f075c64fe58b7a37d37019a49908876bc37c9f304eeefed8a6d8cae3ca0f81e900c8735b8b3063967b68a1567e30726f2c0edb6c85e78619700b0645b728a0c88b22d18366a6db2e391401feb630396bf42b987b102eb2d0a804e188648df6c8ddd79e0fde3893930e06e91c39cc01d239a1c20cb0cee84da924212382163c6638e798d66660c356195a56523456052c42aca7c8404e259561dfea5cbdc21a31b7e7eb73a710b68ba2ae2eff86d3d4fbda8b72014f5de839d48acbc9d217f7ac0b3362a66f3a7d04277cc4b918687ed082170f98dc54bd56f28ea3fecc4e86e1820ed811919dac4d09c18e27c4d839c7ac015d34522c7d87ae968dc872d97db81da9a4b6f631535348d9d44ca3fe846f6706fd3d3bd2f62f2d046a2973c9e8c6ccbf96fd0060d532433732627bf213a35870cea250f79ac773b8adba386e0ae960801b073646dcfe7c89f0cb410d22146cb3109bb9a12649e943104875c0272dfdfac5998854c0f62438909522fba45a4ac83b917a6d9a45704fefe035986b7ae676dd6b8094d2ce7ed64f0aaf138cc827553d74b2c04488d849df41fb98a6c966c07cbb1a9fe3ee5e41c3082c51b37f9df811461cf123830ee606c7b5816b6b86b21860177bfc3fd9aeb689dbb39963a55cee2afe7352200f719a3c0fe44e059446bd7226d9e814d2358c2524c0103c48f7516cc69eb04815bbef84a5bd840a5131f45c335ef8939d6100cf89160f5f1c5aec60e479d18f4680a5a525964fbf2371c1493df2c3e67f98645f329d984250dc98a48a5ab14624438ad259145794a22055ace7d33b5218ed2bda0a528bee49e4e4ae3068477da429945eef0e06128a3202f62634d8faba02e7a951fd2ceba99d2a1488872c66ceef1c5ba5a3e4a523be24c7c2de0316ae12a66d11a8089888c1e2635206ad43da841b07324fdb18eaf8d8a41a8eee7e9cd948967234049bf5ff3c8ce9cd708cf33fca2896221990573c08ef7eb0843189f7033f93b753a40c49bfc92effc9a663fbd1389f1719d14b3d33558bc1ca6c7a66c3ce93151091b23b0efdc14b6e4af3bd914ae73ef2c823346af97d7d2a53f644ba75587ab85e95c43244ba1c97cd1e692bd3e781c21b937e005c9b617ef80b0b39be0da367d2d6320a9d9efa49b574239631adb87f1b5028ee294136a8ba08b36a4faa93dc03960054a7d8655beae9a5b59db4880ba897ee9bdae083bc90567876375c747e6e19876f3ec81d6306fe252c5b7339c3f8aa409a2b745db9709e0152974db8463d16f16174be5ca677ce5bccdedc1c916919a4c919a92f0529ccca4f5c15546347cbfb94924541d8d8c1ad22bd579a620195ba98c4e1aac394c483d5ec233b7d645893ce835c19f5f58179d838d8ff31391beab43f5d01ce477cb305804b2ce0412788b2e516d049a2b55aa7bf673ade77522ef7299da43acc8cb6c6be9b9bbe90c0347a87eaa000383afd0b6ff6c3e53f11ae2449bfb75b717bd5f2068680e5677782a9fecfed818e69a54849a25ba9fc1894a43076860e1beb0149baf2bef5c712a295b5c8f27fbd75f738100c2e9d2e358b5c8805d1f8f94bea753fb4c3e72802844f7f54b1120310fc1d9bceac33a1e0dad1ac318b03e39e63845ef90b7c14d543e5248626a4deb328d3ababa54de95d6b9d4947f9afbe64fa36d731670adb4efd53f981f1acaa5361293e6b1c67ed7acef1bbc61e3b92dba85773bb83850b9ec0ce204c0e109284e0de7a9007e1a0227d5a9061602fa40728e6e9e0e198bafbfe4e06450a44a8cb98ba38d02744ca3aff2dcc74054ee57cfef01af36cd5d4768ebbe1f60d302d0c56de5de0b52b15ccc824f9376fd28a303d3c9f274967f288d0775349885dbe6d4d0d921ea05130a5abd835c09a5afcf42d74db5eb2ed5b382691657ce5d101d97c4c30f9e48618fb7d9b1332f3457602306d908ac58d33f267d016a49d9f176376be5cc176df7ba603e0eae0d3aa1d0e4aba2b3e367e09d3ea776fa77a417707359532177826cc3dc36d265b2ee0ad921d787e3f88a8e4e9b21376aea3e399631998eb5f3d10a1c9e9d8337d3e820323c99985b3e98a8075ea0dbad82a243ab80704caad7e7b304c39eb437e067eae93d6772c33d744f79283f118ed07d7fe00d406c305724ab15ec417f7354b3411731bf5d08c336f10c6ce92720e4cdd0f939ebc47b4556d6b8e0e539c8bbaa2f5b1e24301985e1984a99a4b81122d6454030976159e588382dd3c0fd55517cfda7273ce59befee278b95891ee05093c0f569cecdc163d293f892f4f2f0ab7b25db89f3ae8ccb774474d760486b4332c7f730da0635370059ee117b18fcdff0f1aed557d45dca6de57fd5001b0d8626113c357945d86e832969d", 0x6ed}], 0x1}}], 0x1, 0x40000d0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000840)='\t&', 0x62, 0x40040011, 0x0, 0x0) 8m28.215343444s ago: executing program 0 (id=2053): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x50a, &(0x7f0000000780)=ANY=[@ANYRESDEC, @ANYBLOB="7b22aeb25a5db6132fa5908b051c3abdb67d00be008ce84568404b2e7af9cf36e354cbf38cd732e0617383dfafb83b949c4e955a80ae286de239f0cddcd3585e5a7184a9656050a417ebde5c8df25e5f28e402abd40356ddac21bf6f6281c79d1229b1f6fe8a9994596fe24f96680ee48633002ba2d03fd14739c5af3979d18eb1c77fc0f1195b056d79769a17b0108aa708fbd6292fd83fddf3c218e750eec6a858b4faee30ec665e7854251d197d8d8752b6952a3a354857", @ANYRESHEX=r0], 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) openat$rtc(0xffffff9c, 0x0, 0x638580, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x2, 0x5}, {0x6, 0x7f36}, {0x200, 0x70}, {0x3, 0xf}, {0xa, 0x100}, {0x6, 0x589}, {0x8, 0x7}, {0x10001, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x3}}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 8m26.834822968s ago: executing program 0 (id=2059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x84}}, 0x4) 8m26.754542447s ago: executing program 0 (id=2060): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0x9, "4861dc509257d8e00fcc404f014969df56b916244cbae647c1b6e5181c4cfe2c", 0x2, 0x8, 0x8, 0xff06ff, 0x2}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x10, 0x802, 0xffff, 0x0, 0x0, '\a\x00'}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @reserved}) r2 = openat$userio(0xffffff9c, &(0x7f0000000100), 0x40000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000140)={0x1, 0x1}, 0x2) 8m26.738331225s ago: executing program 0 (id=2061): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3ffff) 8m25.703695625s ago: executing program 0 (id=2065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000440)={0x2, 'syzkaller1\x00', 0x3}, 0x18) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 8m24.743638708s ago: executing program 0 (id=2072): mkdir(&(0x7f0000001e00)='./file0\x00', 0x58) mount$9p_tcp(0x0, &(0x7f0000002500)='./file0\x00', &(0x7f0000002540), 0x0, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0904000000000000000002000000e6d347a60e670698b77a7cf90a34000480300001800d00010073796e70726f7879000000001c00028005000200060000000615014000000000080003400000000c0900010073797a30000000000900020073797a320000000014000000180a0108000000000000000005000003140000001100010000000000000000000500000a702d86080fe85d7bcb4a0109035bfb27ec2e750284bfd9"], 0x9c}}, 0x0) r1 = openat$cachefiles(0xffffff9c, &(0x7f0000000180), 0x42000, 0x0) keyctl$assume_authority(0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) chdir(&(0x7f0000000280)='./file0\x00') r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c77080000003d56417aa5a525e962ae0a867f9e014d3dd8edc3e6f4b8c3b818752cf8041f72e209e1b4000000000000a2fb5290345a5b0000000000", @ANYRESHEX=r6, @ANYBLOB=',\x00']) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000300)=0xe4) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@uname={'uname', 0x3d, '+\x81/[@-(/:)(*(%]'}}], [{@appraise}, {@appraise_type}, {@smackfstransmute}, {@obj_type={'obj_type', 0x3d, '+-]'}}, {@uid_gt={'uid>', r7}}, {@appraise}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{&(0x7f0000000380)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000740)="f37feebf5377fcb77246fa710b40ec794a453dfa26130f3df482a0b45bc0ad765c38de9b70c89ccce93669b6493ec8f82e2c08abdf1eedf0611f406121357baee078c890407aa5d991", 0x49}], 0x1}}, {{&(0x7f0000000800)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000840)="f2406018b60e8355d93c974dc244c500dcdda12a5fbd929e9179d9cb0233829c81fefe252448e3cb4a903b2d28bd42e42b2ee213e13636d8e8554de00ec5ea348cebb3f47ac6c0edacb0ebac780155d40e90e59ecbbc0ddffb0cf901f57b1a85afd6443a0a880253b89baa4763a8ee98ada28cd73259e03cd8ddceef61c874afa8a9935f0d72f208a4a5c722b726ffa49830c57cabb39bc9c8a3f3f93358ad060af9bd0b1d203f54434b0fc39bb6454aedff4d3338d0ace6179122a8a49c3b085b0d13a46311a72b45f9c3b41515", 0xce}, {&(0x7f0000000940)="07b751dcfd1beb7a3fb0d653ebeab98b03893825b53517933c99b83a622944bd1d5c67dc557b4c501a7ec457f90ce31a5e6d23906f301bcf2bbe9c41eebb9036f8d9179232088dd9acd4d32a809482a1a229de43a2e2d218198602851a0438", 0x5f}], 0x2, &(0x7f0000000a00)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0xca}}], 0x10}}], 0x2, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0xf, 0x4, 0x0) 8m9.452689155s ago: executing program 52 (id=2072): mkdir(&(0x7f0000001e00)='./file0\x00', 0x58) mount$9p_tcp(0x0, &(0x7f0000002500)='./file0\x00', &(0x7f0000002540), 0x0, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0904000000000000000002000000e6d347a60e670698b77a7cf90a34000480300001800d00010073796e70726f7879000000001c00028005000200060000000615014000000000080003400000000c0900010073797a30000000000900020073797a320000000014000000180a0108000000000000000005000003140000001100010000000000000000000500000a702d86080fe85d7bcb4a0109035bfb27ec2e750284bfd9"], 0x9c}}, 0x0) r1 = openat$cachefiles(0xffffff9c, &(0x7f0000000180), 0x42000, 0x0) keyctl$assume_authority(0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) chdir(&(0x7f0000000280)='./file0\x00') r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c77080000003d56417aa5a525e962ae0a867f9e014d3dd8edc3e6f4b8c3b818752cf8041f72e209e1b4000000000000a2fb5290345a5b0000000000", @ANYRESHEX=r6, @ANYBLOB=',\x00']) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000300)=0xe4) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@uname={'uname', 0x3d, '+\x81/[@-(/:)(*(%]'}}], [{@appraise}, {@appraise_type}, {@smackfstransmute}, {@obj_type={'obj_type', 0x3d, '+-]'}}, {@uid_gt={'uid>', r7}}, {@appraise}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{&(0x7f0000000380)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000740)="f37feebf5377fcb77246fa710b40ec794a453dfa26130f3df482a0b45bc0ad765c38de9b70c89ccce93669b6493ec8f82e2c08abdf1eedf0611f406121357baee078c890407aa5d991", 0x49}], 0x1}}, {{&(0x7f0000000800)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000840)="f2406018b60e8355d93c974dc244c500dcdda12a5fbd929e9179d9cb0233829c81fefe252448e3cb4a903b2d28bd42e42b2ee213e13636d8e8554de00ec5ea348cebb3f47ac6c0edacb0ebac780155d40e90e59ecbbc0ddffb0cf901f57b1a85afd6443a0a880253b89baa4763a8ee98ada28cd73259e03cd8ddceef61c874afa8a9935f0d72f208a4a5c722b726ffa49830c57cabb39bc9c8a3f3f93358ad060af9bd0b1d203f54434b0fc39bb6454aedff4d3338d0ace6179122a8a49c3b085b0d13a46311a72b45f9c3b41515", 0xce}, {&(0x7f0000000940)="07b751dcfd1beb7a3fb0d653ebeab98b03893825b53517933c99b83a622944bd1d5c67dc557b4c501a7ec457f90ce31a5e6d23906f301bcf2bbe9c41eebb9036f8d9179232088dd9acd4d32a809482a1a229de43a2e2d218198602851a0438", 0x5f}], 0x2, &(0x7f0000000a00)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0xca}}], 0x10}}], 0x2, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0xf, 0x4, 0x0) 3.573589529s ago: executing program 2 (id=4925): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000001, 0x800000000, 0x20, 0x0, 0x0, 0x2004cc, 0x5, 0x0, 0x0, 0xfffffffdfffffffc, 0xfffffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0xc0086}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x964}, 0x4c) openat$tun(0xffffff9c, &(0x7f00000000c0), 0x420140, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000880)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xff2d) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r9, {r10, 0xee01}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000100)={'vlan0\x00', @local}) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000280)={0x1f, 0x14, 0x7, 0xe8d7, 0x3f, 0x3, &(0x7f0000000200)="36d22103827cf575b72ab9eab967b74fb4e417a55bc46ccc71fd6c84f20e14f572ff3e265205b12a3bc671da12d974a760fa8fbc4173e1ef46ac700fdf1111"}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="08cf5f2cfddba23ceab09429ab00f8a35f09000000d3000000040000000000300000000000", @ANYRES32, @ANYBLOB="0004000000000000000010000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.399716685s ago: executing program 9 (id=4926): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x3f00, 0x1f00, 0x0, 0x0}) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000080), 0xc) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000480)=0x19) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0x5, 0x1, [0x2, 0x423, 0x1, 0x7, 0x5], [0x2, 0x8, 0x5, 0x3, 0x9, 0xffffffff, 0x10001, 0x7, 0x40, 0x5bc4, 0x6, 0x1, 0xe, 0x8b, 0xfffffffffffffffa, 0x0, 0x1, 0x0, 0x100000001, 0x4, 0x2, 0x7fffffff, 0xe, 0x8000000000000001, 0xa, 0x10000, 0x669, 0x2, 0x8, 0xffffffffffffffff, 0x1, 0x9, 0xb127, 0x5, 0x6, 0x3, 0xffffffffffffff9c, 0x3, 0x5a6a, 0x4, 0x0, 0x4, 0x73439597, 0x24, 0x4, 0x4, 0x5, 0x2, 0x81, 0x9, 0x6, 0xfffffffffffeffff, 0x1000, 0x9, 0xffffffff80000001, 0xfff, 0x1, 0x7, 0x6, 0x0, 0xd678, 0x2, 0x0, 0xf, 0xffffffffffffffff, 0x8000, 0xf, 0x9, 0x5, 0x5, 0x6, 0x7f, 0x1, 0x9, 0x8, 0x40, 0xc, 0xd, 0x81, 0xfffffffffffff454, 0x2, 0xffffffff, 0x0, 0x1, 0x0, 0x10001, 0xd, 0x5, 0x3, 0x3, 0x4, 0x4, 0x7, 0x155a, 0x7f, 0x6, 0xc, 0x1a34, 0x7, 0x7c19, 0x4, 0x4, 0x6a3b, 0x10, 0x8000000000000000, 0x2, 0x4, 0x3, 0x6, 0xccb0, 0x0, 0x1, 0x4, 0x8000000000000000, 0x5, 0x400, 0x1000, 0x4, 0x2, 0x1, 0x1]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000900)={0x10, 0x0, {0x2, @struct={0x2, 0xbf8}, 0x0, 0xc94, 0x176, 0x9, 0xe56, 0x22fa694b, 0x4a4, @usage=0x7f, 0x1, 0xc000000, [0x6, 0x3, 0x7fff, 0x1, 0x0, 0x7]}, {0x1, @usage=0xfffffffffffffffa, 0x0, 0x4, 0x2, 0x6, 0x8, 0x1, 0x450, @struct={0x4, 0x7f}, 0xffffffff, 0x1, [0x66, 0x2, 0x10000, 0x3, 0x7, 0x5]}, {0x5, @struct={0x8000}, 0x0, 0xe3, 0x2, 0x4, 0x4000000000, 0x8, 0x50, @usage=0x401, 0xf, 0x3, [0x3, 0x5, 0x9, 0xfffffffffffffff9, 0x7, 0x8]}, {0x3, 0x9, 0xfff}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000d00)={0x3, 0x4, {0x2, @struct={0x4}, 0x0, 0xf18b, 0x2, 0xe2, 0xc, 0x7, 0x0, @usage=0x3ff, 0x3, 0x0, [0xfffffffffffffff9, 0x3, 0x100, 0x6eea, 0x6, 0x7fffffff]}, {0x3, @usage=0x4, 0x0, 0x7fff, 0xde, 0x8000000000000001, 0x6, 0x0, 0x440, @usage=0x100000001, 0x6, 0x4, [0x6, 0xc, 0x8000, 0xffffffffffffffd9, 0x0, 0x16bd]}, {0x2, @usage=0x8, 0x0, 0x5, 0xfffffffffffffffc, 0x3, 0x10, 0x8001, 0x80, @struct={0x3, 0x2}, 0x2, 0x0, [0xfbb2, 0xfffffffffffffff9, 0x111c23d9, 0x5, 0x3, 0x1]}, {0x9, 0x3, 0x2}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001100)={0x0, 0x0, {0x7, @struct={0xab8, 0xc01}, r4, 0x2, 0x6, 0x3310, 0x63f, 0x80000001, 0x1, @usage=0xc00000000, 0x6, 0x1, [0xffff, 0x8001, 0x4, 0xd, 0x91, 0x1]}, {0x0, @struct={0x0, 0x3ff}, r5, 0x7, 0x7, 0x101, 0x78e, 0x9, 0x88, @struct={0x3}, 0x400, 0x81, [0x101, 0x9, 0xd6, 0x7, 0x2, 0xa988e5f]}, {0x2, @usage=0x101, r6, 0x9, 0x0, 0x7, 0x6, 0xffffffffffffff88, 0x25, @struct={0x30, 0xf}, 0x1, 0x9, [0x10000, 0x5, 0x9, 0x6, 0x9, 0x8000000000000000]}, {0x9, 0x4, 0xe}}) r7 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001400350065727370616e3000000000000000000008000a00", @ANYRES32=r12, @ANYBLOB="f4"], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000000)) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000002000000004451000000"], 0x0) 3.349890534s ago: executing program 2 (id=4927): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x100000, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x101800, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) socket$qrtr(0x2a, 0x2, 0x0) write(r4, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x3ffff) 3.34754864s ago: executing program 9 (id=4928): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/74, 0x2a) getdents64(r2, 0x0, 0x44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r3, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r5, 0x25, 0x0, @void}, 0x10) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 3.247524396s ago: executing program 9 (id=4929): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, 0x0, 0x0, 0x54, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20181, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffff9c, 0x0, 0x420140, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, 0x0, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140), 0x10) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r8, {0x0, 0xee01}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000100)={'vlan0\x00', @local}) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="08cf5f2cfddba23ceab09429ab00f8a35f09000000d3000000040000000000300000000000", @ANYRES32, @ANYBLOB="0004000000000000000010000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 3.131873945s ago: executing program 9 (id=4931): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xbc, &(0x7f00000000c0)={[{0x3e, 0x4e00, "5b26dcb14d646fa33a68fe3283e7d95a1f648efedbb33e1fb3cc630b7eca4f742735e8352ca56c452f017a094017e32e7e5436135bdf83b5ad829b037a8f"}, {0x73, 0x4e00, "1afce32cf205b858ecaea2ad58d81bb20bbfb8d3e783dd963a66decf2897736ae4e9d21234f170c8efe91819d24a4107945286ca0bf442c8e846de49c4a97f2248e958906c3f0c2bdc0988326066c8a9133cf8725fc430808bbb9c6713deeda13ed893760263a98c9245ae3b7336cbfd83e314"}]}) 2.612861754s ago: executing program 1 (id=4934): mkdir(&(0x7f00000003c0)='./file0\x00', 0x68) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '', @void}}}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0xaee1, 0x0, 0x0, 0x1a3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0, 0x40000000, 0x1}) io_uring_enter(r2, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) 2.492000905s ago: executing program 1 (id=4935): msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000) msgsnd(0x0, &(0x7f00000000c0)={0x2}, 0x8, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[], 0x20}}, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000022000103780000000000000001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000240)) r5 = socket(0x1d, 0x6, 0x9) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r5) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x8, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 1.917568645s ago: executing program 5 (id=4936): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000001, 0x800000000, 0x20, 0x0, 0x0, 0x2004cc, 0x5, 0x0, 0x0, 0xfffffffdfffffffc, 0xfffffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0xc0086}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x964}, 0x4c) openat$tun(0xffffff9c, &(0x7f00000000c0), 0x420140, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000880)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xff2d) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r9, {r10, 0xee01}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000100)={'vlan0\x00', @local}) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000280)={0x1f, 0x14, 0x7, 0xe8d7, 0x3f, 0x3, &(0x7f0000000200)="36d22103827cf575b72ab9eab967b74fb4e417a55bc46ccc71fd6c84f20e14f572ff3e265205b12a3bc671da12d974a760fa8fbc4173e1ef46ac700fdf1111"}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="08cf5f2cfddba23ceab09429ab00f8a35f09000000d3000000040000000000300000000000", @ANYRES32, @ANYBLOB="0004000000000000000010000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.878027105s ago: executing program 2 (id=4937): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x228, @empty, 0x40}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x22c000, 0x800}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rt_cache\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000a40)=""/59, 0x3b}], 0x1, 0x0, 0x5) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'team_slave_1\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x723, 0x1, 0x3247504d, 0x1, 0x6, 0x9, 0x5, 0x6, 0x0, 0x4, 0x0, 0x3}}) socket(0x2c, 0x3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc2c45512, &(0x7f0000000340)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff50e, 0x0, 0x0, 0x0, 0x0, 0xffffffc7, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.675674618s ago: executing program 5 (id=4938): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) close(r2) r3 = userfaultfd(0x80001) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000200"/21], 0x50) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendto$inet6(r4, &(0x7f0000847fff)='\n', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mlockall(0x7) shutdown(r4, 0x2) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) socket$netlink(0x10, 0x3, 0x12) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 1.403462656s ago: executing program 5 (id=4939): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$iommufd(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) accept4$ax25(r2, &(0x7f0000000500)={{}, [@default, @bcast, @remote, @netrom, @netrom, @bcast, @rose, @bcast]}, &(0x7f0000000580)=0x48, 0x81000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x4, 0x0, 0x0, 0xd6, &(0x7f0000000400)="fab5a1c860f863fff86a91b56d270dc365d269fb965a92fe3cbac8615584e04d9b7cc6b9913a0e6a5b9a26cddc43f18a155f6b16cfd16cec0b968932e961c9afce40462b1e6780fa104c61d286f54d213d1eb002a57b8c2adebd4d2859bb7d78aa4539083e2324bc75eb6c2da8fa0cc1990d6166e04f562b0949657a1b7886c1a5fb9dac940cfa9c99fd6c48f72430144532d37a6bf2b0605b6e05601270801b6da47f44618a77dd60b9cba15b7999ce3dc1663a94561ca70fdb318d5902e9cb0ed978301937826d14b9dd105ed1b9b2d8828f25ef53", 0x6}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000180)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x1, r3, 0x0, &(0x7f0000000200)="c3e88d1293a6371392f78659d2648d26bdff20baffa890e14849cb86928321811a552684a1e5abc26d100de6315d2b07c4aa33368e9f2a20133eb7283e4a686b63f2beef7de4a5f5798934530d3c02cf3eb43b9d108ec74f59ad8f0ae7da32156a7c3336973857f7a9e38582075e4ffe6e1964b690b842ecf0", 0x79, 0x5}) 1.303163124s ago: executing program 1 (id=4940): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000001, 0x800000000, 0x20, 0x0, 0x0, 0x2004cc, 0x5, 0x0, 0x0, 0xfffffffdfffffffc, 0xfffffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0xc0086}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x964}, 0x4c) openat$tun(0xffffff9c, &(0x7f00000000c0), 0x420140, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140), 0x10) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000880)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xff2d) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r8, {r9, 0xee01}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000100)={'vlan0\x00', @local}) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000280)={0x1f, 0x14, 0x7, 0xe8d7, 0x3f, 0x3, &(0x7f0000000200)="36d22103827cf575b72ab9eab967b74fb4e417a55bc46ccc71fd6c84f20e14f572ff3e265205b12a3bc671da12d974a760fa8fbc4173e1ef46ac700fdf1111"}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="08cf5f2cfddba23ceab09429ab00f8a35f09000000d3000000040000000000300000000000", @ANYRES32, @ANYBLOB="0004000000000000000010000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1.302932748s ago: executing program 5 (id=4941): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@mpls_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x9, {0x6, 0x12, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x3) ppoll(&(0x7f0000003840)=[{r3, 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000000000003000000030000000100000000000000000000000700"/42]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x206090c4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_PKTS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24008094) 1.264188692s ago: executing program 5 (id=4942): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000040)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}}, 0x4000) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x1004000, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d58f05ac64648c7000f6d6f64653d30303030303030303030303030303030303032303030", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$fuseblk(0x0, &(0x7f0000004240)='./file0\x00', 0x0, 0x8104a9, 0x0) r6 = creat(&(0x7f0000000300)='./bus\x00', 0x15d) bind$netrom(r6, &(0x7f0000000340)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default]}, 0x48) 748.537735ms ago: executing program 1 (id=4943): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008"], 0x125) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x10, 0x701, 0x0, 0x0, {0x1e}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="0200b66d", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000006c00088068000080200009801c0000800600010020000000080002007f000001050003000200000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c200004000a004e2000000008fc0100000000000000000000000000000400000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e060006004e21"], 0xfffffedc}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x200003, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f00000000c0)=""/204, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010003b15000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100627269646765000004000280"], 0x34}}, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 692.266722ms ago: executing program 1 (id=4944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket(0x25, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b5, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0x23, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d986ddc8421d7fb2465abe96ddb08bbf6db422e0475ca797", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 627.642567ms ago: executing program 2 (id=4945): mkdir(&(0x7f00000003c0)='./file0\x00', 0x68) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '', @void}}}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0xaee1, 0x0, 0x0, 0x1a3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0, 0x40000000, 0x1}) io_uring_enter(r2, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) 506.056336ms ago: executing program 2 (id=4946): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000001, 0x800000000, 0x20, 0x0, 0x0, 0x2004cc, 0x5, 0x0, 0x0, 0xfffffffdfffffffc, 0xfffffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0xc0086}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x964}, 0x4c) openat$tun(0xffffff9c, &(0x7f00000000c0), 0x420140, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000880)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xff2d) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r9, {r10, 0xee01}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000100)={'vlan0\x00', @local}) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000280)={0x1f, 0x14, 0x7, 0xe8d7, 0x3f, 0x3, &(0x7f0000000200)="36d22103827cf575b72ab9eab967b74fb4e417a55bc46ccc71fd6c84f20e14f572ff3e265205b12a3bc671da12d974a760fa8fbc4173e1ef46ac700fdf1111"}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="08cf5f2cfddba23ceab09429ab00f8a35f09000000d3000000040000000000300000000000", @ANYRES32, @ANYBLOB="0004000000000000000010000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 310.49815ms ago: executing program 5 (id=4947): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x100000, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x101800, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) socket$qrtr(0x2a, 0x2, 0x0) write(r4, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x3ffff) 111.186223ms ago: executing program 2 (id=4948): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) close(r2) r3 = userfaultfd(0x80001) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000200"/21], 0x50) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendto$inet6(r4, &(0x7f0000847fff)='\n', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mlockall(0x7) shutdown(r4, 0x2) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) socket$netlink(0x10, 0x3, 0x12) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 103.587615ms ago: executing program 1 (id=4949): r0 = socket(0x2000000000000021, 0x2, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000004c0)={0x1, 0x9, [@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @local, @multicast]}) shutdown(r0, 0x0) 99.318343ms ago: executing program 9 (id=4950): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f000054a000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) madvise(&(0x7f00004cf000/0x4000)=nil, 0x4000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sigaltstack(0x0, 0x0) 0s ago: executing program 9 (id=4951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000001, 0x800000000, 0x20, 0x0, 0x0, 0x2004cc, 0x5, 0x0, 0x0, 0xfffffffdfffffffc, 0xfffffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0xc0086}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x964}, 0x4c) openat$tun(0xffffff9c, &(0x7f00000000c0), 0x420140, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000880)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xff2d) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r9, {r10, 0xee01}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000100)={'vlan0\x00', @local}) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000280)={0x1f, 0x14, 0x7, 0xe8d7, 0x3f, 0x3, &(0x7f0000000200)="36d22103827cf575b72ab9eab967b74fb4e417a55bc46ccc71fd6c84f20e14f572ff3e265205b12a3bc671da12d974a760fa8fbc4173e1ef46ac700fdf1111"}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="08cf5f2cfddba23ceab09429ab00f8a35f09000000d3000000040000000000300000000000", @ANYRES32, @ANYBLOB="0004000000000000000010000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 547098][T20734] 9pnet_fd: Insufficient options for proto=fd [ 791.867667][T20743] usb usb1: usbfs: process 20743 (syz.2.3978) did not claim interface 0 before use [ 791.874181][T20743] netlink: 'syz.2.3978': attribute type 1 has an invalid length. [ 791.909786][T20743] 8021q: adding VLAN 0 to HW filter on device bond3 [ 791.933746][T20743] 8021q: adding VLAN 0 to HW filter on device bond3 [ 791.935944][T20743] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 791.939730][T20743] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 791.988263][T18219] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 791.994402][T18219] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 792.007682][T18219] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 792.018087][T18219] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 792.018581][ T46] smc: removing ib device syz1 [ 792.022487][T18219] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 792.031139][T20746] bond2: (slave erspan0): Releasing active interface [ 792.038983][T20746] bond3: (slave erspan0): making interface the new active one [ 792.043353][T20746] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 792.046604][ T6776] syz1: Port: 1 Link DOWN [ 792.078355][T20745] lo speed is unknown, defaulting to 1000 [ 792.092839][T20745] lo speed is unknown, defaulting to 1000 [ 792.150098][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 792.160846][T20749] binder: 20748:20749 ioctl 4018620d 0 returned -22 [ 792.614809][T19255] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 792.755410][ T106] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.767901][T20745] chnl_net:caif_netlink_parms(): no params data found [ 792.773537][T19255] usb 10-1: Using ep0 maxpacket: 32 [ 792.777425][T19255] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.782292][T19255] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.785831][T19255] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 792.790300][T19255] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 792.794183][T19255] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.799015][T19255] usb 10-1: config 0 descriptor?? [ 792.836817][ T106] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.907932][T20745] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.910517][T20745] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.912923][T20745] bridge_slave_0: entered allmulticast mode [ 792.915621][T20745] bridge_slave_0: entered promiscuous mode [ 792.918886][T20745] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.922545][T20745] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.924928][T20745] bridge_slave_1: entered allmulticast mode [ 792.927591][T20745] bridge_slave_1: entered promiscuous mode [ 792.934722][ T106] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.977089][T20745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.982108][T20745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.030723][T20745] team0: Port device team_slave_0 added [ 793.046220][ T106] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.055095][T20745] team0: Port device team_slave_1 added [ 793.078777][T20775] tmpfs: Bad value for 'mpol' [ 793.085802][T20745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.088095][T20745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.096471][T20745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.103019][T20745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.105330][T20745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.113756][T20745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.176807][T20745] hsr_slave_0: entered promiscuous mode [ 793.179142][T20745] hsr_slave_1: entered promiscuous mode [ 793.182273][T20745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 793.185739][T20745] Cannot create hsr debugfs directory [ 793.189937][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 793.215445][T19255] usbhid 10-1:0.0: can't add hid device: -71 [ 793.217692][T19255] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 793.223200][T19255] usb 10-1: USB disconnect, device number 35 [ 793.296101][ T106] bridge_slave_1: left allmulticast mode [ 793.298411][ T106] bridge_slave_1: left promiscuous mode [ 793.300781][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.304689][ T106] bridge_slave_0: left allmulticast mode [ 793.306543][ T106] bridge_slave_0: left promiscuous mode [ 793.308590][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.314606][ T106] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 793.360819][ T106] batman_adv: batadv0: Removing interface: ip6gretap1 [ 793.619940][ T106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.625207][ T106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.630222][ T106] bond0 (unregistering): Released all slaves [ 793.637165][ T106] bond1 (unregistering): Released all slaves [ 793.644478][ T106] bond2 (unregistering): Released all slaves [ 793.798105][T20778] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 793.804876][T20778] overlayfs: failed to set xattr on upper [ 793.807550][T20778] overlayfs: ...falling back to redirect_dir=nofollow. [ 793.814157][ T106] bond3 (unregistering): (slave veth3): Releasing backup interface [ 793.817672][ T106] veth3: left promiscuous mode [ 793.820661][T20778] overlayfs: ...falling back to index=off. [ 793.823874][T20778] overlayfs: ...falling back to uuid=null. [ 793.918517][ T106] bond3 (unregistering): Released all slaves [ 793.974551][T20784] 9pnet_fd: Insufficient options for proto=fd [ 794.042670][ T106] tipc: Left network mode [ 794.071415][T18219] Bluetooth: hci5: command tx timeout [ 794.140995][T20789] binder: 20788:20789 ioctl 4018620d 0 returned -22 [ 794.229928][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 794.481303][ T106] hsr_slave_0: left promiscuous mode [ 794.487130][ T106] hsr_slave_1: left promiscuous mode [ 794.489291][ T106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.493344][ T106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.496846][ T106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.499380][ T106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.528383][ T106] veth1_macvtap: left promiscuous mode [ 794.530570][ T106] veth0_macvtap: left promiscuous mode [ 794.724216][T20795] 9pnet_virtio: no channels available for device syz [ 795.114530][T20804] 9pnet_virtio: no channels available for device syz [ 795.269911][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 795.305467][T20808] tmpfs: Bad value for 'mpol' [ 795.977331][T20812] tmpfs: Bad value for 'mpol' [ 796.154515][T18219] Bluetooth: hci5: command tx timeout [ 796.319900][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 796.352163][T19982] libceph: connect (1)[c::]:6789 error -101 [ 796.354268][T19982] libceph: mon0 (1)[c::]:6789 connect error [ 796.442671][T20818] ceph: No mds server is up or the cluster is laggy [ 796.454151][T20815] syz.1.3998 (20815): drop_caches: 1 [ 796.476557][T20815] syz.1.3998 (20815): drop_caches: 1 [ 796.708325][T20830] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 796.711285][T20830] overlayfs: failed to set xattr on upper [ 796.713708][T20830] overlayfs: ...falling back to redirect_dir=nofollow. [ 796.717581][T20830] overlayfs: ...falling back to index=off. [ 796.719953][T20830] overlayfs: ...falling back to uuid=null. [ 796.902176][T20833] 9pnet_virtio: no channels available for device syz [ 796.992738][T20745] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 796.996961][T20745] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 797.018770][T20745] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 797.021914][T20745] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 797.088130][T20745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.103867][T20745] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.109502][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.111950][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.140900][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.143633][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.296288][T20745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.349926][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 797.523243][T20745] veth0_vlan: entered promiscuous mode [ 797.528020][T20745] veth1_vlan: entered promiscuous mode [ 797.587837][T20745] veth0_macvtap: entered promiscuous mode [ 797.591741][T20745] veth1_macvtap: entered promiscuous mode [ 797.600587][T20745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.606550][T20745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.611493][T20745] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.614422][T20745] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.618117][T20745] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.623074][T20745] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.694441][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.697888][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.716447][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.718974][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.771289][T20855] usb usb1: usbfs: process 20855 (syz.9.3977) did not claim interface 0 before use [ 797.778752][T20855] netlink: 'syz.9.3977': attribute type 1 has an invalid length. [ 797.836699][T20859] erspan0: entered allmulticast mode [ 798.011789][T20862] tmpfs: Bad value for 'mpol' [ 798.187370][T20866] 9pnet_fd: Insufficient options for proto=fd [ 798.250599][T18219] Bluetooth: hci5: command tx timeout [ 798.306381][T20879] 9pnet_fd: Insufficient options for proto=fd [ 798.323189][T20871] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 798.357559][T20883] tmpfs: Bad value for 'mpol' [ 798.400014][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 799.283882][T20899] tmpfs: Bad value for 'mpol' [ 799.334001][T20902] usb usb1: usbfs: process 20902 (syz.2.4021) did not claim interface 0 before use [ 799.345867][T20902] netlink: 'syz.2.4021': attribute type 1 has an invalid length. [ 799.429907][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 799.443413][T20902] 8021q: adding VLAN 0 to HW filter on device bond4 [ 799.484755][T20907] 8021q: adding VLAN 0 to HW filter on device bond4 [ 799.494058][T20907] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 799.506222][T20907] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 799.542737][T20902] bond3: (slave erspan0): Releasing active interface [ 799.548876][T20902] bond4: (slave erspan0): making interface the new active one [ 799.552052][T20902] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 800.024892][T20917] 9pnet_fd: Insufficient options for proto=fd [ 800.248985][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 800.254272][ T5946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 800.257159][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 800.271717][ T5946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 800.274277][ T5946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 800.301749][T20921] lo speed is unknown, defaulting to 1000 [ 800.304192][T20921] lo speed is unknown, defaulting to 1000 [ 800.309995][T18219] Bluetooth: hci5: command tx timeout [ 800.422854][T20926] tmpfs: Bad value for 'mpol' [ 800.469982][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 800.496581][T20928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4026'. [ 800.912873][T20921] chnl_net:caif_netlink_parms(): no params data found [ 801.033187][T20921] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.035449][T20921] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.038046][T20921] bridge_slave_0: entered allmulticast mode [ 801.041513][T20921] bridge_slave_0: entered promiscuous mode [ 801.045183][T20921] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.047460][T20921] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.049725][T20921] bridge_slave_1: entered allmulticast mode [ 801.060727][T20921] bridge_slave_1: entered promiscuous mode [ 801.174090][T20943] 9pnet_virtio: no channels available for device syz [ 801.192580][ T106] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.214457][T20921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.220620][T20921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.258302][T20921] team0: Port device team_slave_0 added [ 801.282060][T20921] team0: Port device team_slave_1 added [ 801.339717][ T106] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.364774][T20921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.367104][T20921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.389031][T20921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.393430][T20921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.395603][T20921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 801.404137][T20921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.463268][ T106] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.471459][T20921] hsr_slave_0: entered promiscuous mode [ 801.474340][T20921] hsr_slave_1: entered promiscuous mode [ 801.545645][ T106] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.550022][T19255] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 801.699924][T19255] usb 6-1: Using ep0 maxpacket: 32 [ 801.703307][T19255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.703327][T19255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.703340][T19255] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 801.703360][T19255] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 801.703373][T19255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.704685][T19255] usb 6-1: config 0 descriptor?? [ 801.871026][ T106] bond4 (unregistering): (slave erspan0): Releasing active interface [ 802.118730][T20967] 9pnet_fd: Insufficient options for proto=fd [ 802.121359][T19255] usbhid 6-1:0.0: can't add hid device: -71 [ 802.123330][T19255] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 802.124546][ T106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.127598][T19255] usb 6-1: USB disconnect, device number 34 [ 802.137104][ T106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.146013][ T106] bond0 (unregistering): Released all slaves [ 802.153205][ T106] bond1 (unregistering): Released all slaves [ 802.231014][T20973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4038'. [ 802.311351][ T106] bond2 (unregistering): Released all slaves [ 802.312000][T18219] Bluetooth: hci0: command tx timeout [ 802.404656][T20975] 9pnet_virtio: no channels available for device syz [ 802.419228][ T106] bond3 (unregistering): Released all slaves [ 802.533575][ T106] bond4 (unregistering): Released all slaves [ 802.659601][ T106] tipc: Disabling bearer [ 802.663728][ T106] tipc: Left network mode [ 802.671122][T20982] 9pnet_fd: Insufficient options for proto=fd [ 802.712202][T20985] tmpfs: Bad value for 'mpol' [ 802.842896][T20921] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 802.846950][T20921] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 802.861897][T20921] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 802.882197][T20921] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 802.927576][T20921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.937156][T20921] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.947158][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.949616][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.956016][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.958412][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.030400][ T106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.032793][ T106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.035651][ T106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.038039][ T106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.070273][ T106] veth1_macvtap: left promiscuous mode [ 803.072090][ T106] veth0_macvtap: left promiscuous mode [ 803.275696][T20993] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 803.278016][T20993] overlayfs: failed to set xattr on upper [ 803.280029][T20993] overlayfs: ...falling back to redirect_dir=nofollow. [ 803.282188][T20993] overlayfs: ...falling back to index=off. [ 803.284020][T20993] overlayfs: ...falling back to uuid=null. [ 803.575796][T20997] 9pnet_fd: Insufficient options for proto=fd [ 803.593241][T20999] 9pnet_virtio: no channels available for device syz [ 804.080408][ T1331] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 804.281744][ T1331] usb 6-1: Using ep0 maxpacket: 32 [ 804.287317][ T1331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.290953][ T1331] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.294673][ T1331] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 804.298695][ T1331] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 804.302402][ T1331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.308599][T21014] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 804.312830][ T1331] usb 6-1: config 0 descriptor?? [ 804.313684][T21014] overlayfs: failed to set xattr on upper [ 804.316362][T21014] overlayfs: ...falling back to redirect_dir=nofollow. [ 804.318628][T21014] overlayfs: ...falling back to index=off. [ 804.320747][T21014] overlayfs: ...falling back to uuid=null. [ 804.390764][ T5946] Bluetooth: hci0: command tx timeout [ 804.478069][T21018] tmpfs: Bad value for 'mpol' [ 804.726629][ T1331] usbhid 6-1:0.0: can't add hid device: -71 [ 804.728770][ T1331] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 804.740111][ T1331] usb 6-1: USB disconnect, device number 35 [ 804.776831][T21023] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 804.779133][T21023] overlayfs: failed to set xattr on upper [ 804.781267][T21023] overlayfs: ...falling back to redirect_dir=nofollow. [ 804.783441][T21023] overlayfs: ...falling back to index=off. [ 804.784967][T21025] 9pnet_virtio: no channels available for device syz [ 804.785421][T21023] overlayfs: ...falling back to uuid=null. [ 805.077869][T20921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.114343][ T40] audit: type=1804 audit(1747496313.019:4668): pid=21031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4058" name="/newroot/447/file0/bus/bus" dev="overlay" ino=98981 res=1 errno=0 [ 805.128249][T20921] veth0_vlan: entered promiscuous mode [ 805.134071][T20921] veth1_vlan: entered promiscuous mode [ 805.148155][T20921] veth0_macvtap: entered promiscuous mode [ 805.170785][T20921] veth1_macvtap: entered promiscuous mode [ 805.182564][T20921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.193373][T20921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.202468][T20921] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.205569][T20921] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.208374][T20921] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.211483][T20921] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.299192][T21038] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 805.303410][T21038] overlayfs: failed to set xattr on upper [ 805.305266][T21038] overlayfs: ...falling back to redirect_dir=nofollow. [ 805.307425][T21038] overlayfs: ...falling back to index=off. [ 805.310087][T21038] overlayfs: ...falling back to uuid=null. [ 805.316655][ T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.319278][ T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.335037][ T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.337982][ T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.462761][T21047] tmpfs: Bad value for 'mpol' [ 805.523075][ T106] IPVS: stop unused estimator thread 0... [ 805.696279][T21060] tmpfs: Bad value for 'mpol' [ 805.716516][T21061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4067'. [ 806.470124][T18219] Bluetooth: hci0: command tx timeout [ 806.844179][T21069] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 806.846684][T21069] overlayfs: failed to set xattr on upper [ 806.848748][T21069] overlayfs: ...falling back to redirect_dir=nofollow. [ 806.851413][T11300] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 806.854203][T21069] overlayfs: ...falling back to index=off. [ 806.860656][T21069] overlayfs: ...falling back to uuid=null. [ 807.009993][T11300] usb 7-1: Using ep0 maxpacket: 32 [ 807.013522][T11300] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.017280][T11300] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.020626][T11300] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 807.024712][T11300] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 807.028156][T11300] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.035464][T11300] usb 7-1: config 0 descriptor?? [ 807.055724][T21077] 9pnet_virtio: no channels available for device syz [ 807.509368][T21083] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4075'. [ 807.552565][T21086] tmpfs: Bad value for 'mpol' [ 807.656527][T11300] usbhid 7-1:0.0: can't add hid device: -71 [ 807.658639][T11300] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 807.662923][T11300] usb 7-1: USB disconnect, device number 34 [ 808.054130][T21091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4077'. [ 808.166075][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.168593][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.211618][T21094] 9pnet_virtio: no channels available for device syz [ 808.559966][T18219] Bluetooth: hci0: command tx timeout [ 808.627884][T21101] 9pnet_fd: Insufficient options for proto=fd [ 808.837571][T21107] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 808.840517][T21107] overlayfs: failed to set xattr on upper [ 808.842411][T21107] overlayfs: ...falling back to redirect_dir=nofollow. [ 808.844650][T21107] overlayfs: ...falling back to index=off. [ 808.846613][T21108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4079'. [ 808.852034][T21107] overlayfs: ...falling back to uuid=null. [ 808.902655][T21114] 9pnet_virtio: no channels available for device syz [ 808.918553][ T40] audit: type=1804 audit(1747496316.819:4669): pid=21116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4082" name="/newroot/585/file0/bus/bus" dev="overlay" ino=102838 res=1 errno=0 [ 808.928398][ T40] audit: type=1804 audit(1747496316.819:4670): pid=21116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4082" name="/newroot/585/file0/bus/bus" dev="overlay" ino=102838 res=1 errno=0 [ 808.953335][T21115] gtp0: entered promiscuous mode [ 808.955144][T21115] gtp0: entered allmulticast mode [ 809.259933][ T65] usb 14-1: new high-speed USB device number 31 using dummy_hcd [ 809.346538][T21126] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4087'. [ 809.430580][ T65] usb 14-1: Using ep0 maxpacket: 32 [ 809.436789][ T65] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.440781][ T65] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.444033][ T65] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 809.448823][ T65] usb 14-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 809.453103][ T65] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.460416][ T65] usb 14-1: config 0 descriptor?? [ 809.552623][T21129] tmpfs: Bad value for 'mpol' [ 809.826778][T21134] 9pnet_fd: Insufficient options for proto=fd [ 810.285893][ T65] usbhid 14-1:0.0: can't add hid device: -71 [ 810.445655][ T65] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 810.454763][ T65] usb 14-1: USB disconnect, device number 31 [ 810.704546][T21140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4091'. [ 810.887361][T21149] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4092'. [ 811.161653][T21151] tmpfs: Bad value for 'mpol' [ 811.654934][T21154] 9pnet_virtio: no channels available for device syz [ 812.667133][T21173] binder: 21172:21173 ioctl 4018620d 0 returned -22 [ 812.929403][T21179] usb usb1: usbfs: process 21179 (syz.5.4102) did not claim interface 0 before use [ 812.936051][T21179] netlink: 'syz.5.4102': attribute type 1 has an invalid length. [ 812.951473][T21179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 812.976211][T21179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 812.978672][T21179] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 812.985004][T21179] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 813.021874][T21181] erspan0: entered allmulticast mode [ 813.026603][T21183] 9pnet_virtio: no channels available for device syz [ 813.026699][T21181] bond1: (slave erspan0): making interface the new active one [ 813.034154][T21181] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 813.264795][T21187] tmpfs: Bad value for 'mpol' [ 813.662716][T21193] tmpfs: Bad value for 'mpol' [ 814.187422][T21198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4107'. [ 814.652839][T21209] usb usb1: usbfs: process 21209 (syz.1.4111) did not claim interface 0 before use [ 814.659273][T21209] netlink: 'syz.1.4111': attribute type 1 has an invalid length. [ 814.679910][T21209] 8021q: adding VLAN 0 to HW filter on device bond3 [ 814.719768][T21209] 8021q: adding VLAN 0 to HW filter on device bond3 [ 814.722363][T21209] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 814.726514][T21209] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 814.758895][T21211] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4108'. [ 814.793946][T21212] erspan0: entered allmulticast mode [ 814.932986][T21216] 9pnet_virtio: no channels available for device syz [ 814.950429][T21218] usb usb1: usbfs: process 21218 (syz.1.4113) did not claim interface 0 before use [ 814.955851][T21218] netlink: 'syz.1.4113': attribute type 1 has an invalid length. [ 814.972887][T21218] 8021q: adding VLAN 0 to HW filter on device bond4 [ 814.986013][T21218] 8021q: adding VLAN 0 to HW filter on device bond4 [ 814.988465][T21218] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 814.994277][T21218] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 815.205737][T21227] 9pnet_virtio: no channels available for device syz [ 815.450243][T21235] 9pnet_virtio: no channels available for device syz [ 815.573864][T21239] tmpfs: Bad value for 'mpol' [ 816.667470][T21259] usb usb1: usbfs: process 21259 (syz.2.4123) did not claim interface 0 before use [ 816.674157][T21259] netlink: 'syz.2.4123': attribute type 1 has an invalid length. [ 816.700881][T21261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4119'. [ 816.797808][T21264] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4121'. [ 817.624873][T21273] 9pnet_virtio: no channels available for device syz [ 817.658384][T21275] 9pnet_virtio: no channels available for device syz [ 817.704861][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 817.714235][ T5946] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 817.720263][ T5946] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 817.727673][ T5946] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 817.730932][ T5946] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 817.760421][T21277] lo speed is unknown, defaulting to 1000 [ 817.763143][T21277] lo speed is unknown, defaulting to 1000 [ 817.998405][T21277] chnl_net:caif_netlink_parms(): no params data found [ 818.128285][T21292] tmpfs: Bad value for 'mpol' [ 819.016330][T21277] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.018684][T21277] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.021141][T21277] bridge_slave_0: entered allmulticast mode [ 819.023896][T21277] bridge_slave_0: entered promiscuous mode [ 819.066469][T21277] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.069015][T21277] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.076515][T21277] bridge_slave_1: entered allmulticast mode [ 819.079644][T21277] bridge_slave_1: entered promiscuous mode [ 819.126056][T21277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.132066][T21277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.137730][T21305] gtp1: entered promiscuous mode [ 819.139430][T21305] gtp1: entered allmulticast mode [ 819.178230][T21309] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 819.180612][T21309] overlayfs: failed to set xattr on upper [ 819.182421][T21309] overlayfs: ...falling back to redirect_dir=nofollow. [ 819.184636][T21309] overlayfs: ...falling back to index=off. [ 819.186569][T21309] overlayfs: ...falling back to uuid=null. [ 819.304857][T21277] team0: Port device team_slave_0 added [ 819.319047][T21277] team0: Port device team_slave_1 added [ 819.368294][T21277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.372015][T21277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.380594][T21277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.384939][T21277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.387926][T21277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.396576][T21277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.456907][T21317] 9pnet_virtio: no channels available for device syz [ 819.472403][T21277] hsr_slave_0: entered promiscuous mode [ 819.474775][T21277] hsr_slave_1: entered promiscuous mode [ 819.477167][T21277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 819.479636][T21277] Cannot create hsr debugfs directory [ 819.741559][T21322] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 819.744157][T21322] overlayfs: failed to set xattr on upper [ 819.746485][T21322] overlayfs: ...falling back to redirect_dir=nofollow. [ 819.748745][T21322] overlayfs: ...falling back to index=off. [ 819.754299][T21322] overlayfs: ...falling back to uuid=null. [ 819.760643][T18219] Bluetooth: hci1: command tx timeout [ 819.770631][T21277] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.002017][T21277] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.112234][ T40] audit: type=1804 audit(1747496328.019:4671): pid=21327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4137" name="/newroot/21/file0/bus/bus" dev="overlay" ino=105553 res=1 errno=0 [ 820.151067][ T40] audit: type=1804 audit(1747496328.019:4672): pid=21327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4137" name="/newroot/21/file0/bus/bus" dev="overlay" ino=105553 res=1 errno=0 [ 820.181085][T21277] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.262473][T21329] tmpfs: Bad value for 'mpol' [ 820.326466][T21277] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.783104][T21332] 9pnet_virtio: no channels available for device syz [ 820.795908][T21277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 820.814013][T21277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 820.818254][T21277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 820.823980][T21277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 820.862002][T21277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.872947][T21277] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.879722][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.882147][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.893617][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.896160][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.066715][T21277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.119397][T21277] veth0_vlan: entered promiscuous mode [ 821.126017][T21277] veth1_vlan: entered promiscuous mode [ 821.152066][T21277] veth0_macvtap: entered promiscuous mode [ 821.162096][T21277] veth1_macvtap: entered promiscuous mode [ 821.175283][T21277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.182211][T21277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.186449][T21277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.188902][T21277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.192929][T21277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.196224][T21277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.290062][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.292410][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.312614][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.314939][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.402728][T21352] 9pnet_virtio: no channels available for device syz [ 821.403156][T21351] usb usb1: usbfs: process 21351 (syz.1.4125) did not claim interface 0 before use [ 821.410050][T21353] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4142'. [ 821.413444][T21353] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4142'. [ 821.419305][T21351] netlink: 'syz.1.4125': attribute type 1 has an invalid length. [ 821.516452][T21356] erspan0: entered allmulticast mode [ 821.763413][T21361] gtp0: entered promiscuous mode [ 821.765111][T21361] gtp0: entered allmulticast mode [ 821.804717][T21363] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 821.807091][T21363] overlayfs: failed to set xattr on upper [ 821.809065][T21363] overlayfs: ...falling back to redirect_dir=nofollow. [ 821.812040][T21363] overlayfs: ...falling back to index=off. [ 821.814008][T21363] overlayfs: ...falling back to uuid=null. [ 821.846874][T18219] Bluetooth: hci1: command tx timeout [ 821.979993][T21070] usb 14-1: new high-speed USB device number 32 using dummy_hcd [ 822.132515][T21070] usb 14-1: Using ep0 maxpacket: 32 [ 822.136068][T21070] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.140212][T21070] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.144252][T21070] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 822.160198][T21070] usb 14-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 822.163181][T21070] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.178659][T21070] usb 14-1: config 0 descriptor?? [ 822.182119][ T40] audit: type=1804 audit(1747496330.079:4673): pid=21366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4148" name="/newroot/23/file0/bus/bus" dev="overlay" ino=104508 res=1 errno=0 [ 822.201210][ T40] audit: type=1804 audit(1747496330.089:4674): pid=21366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4148" name="/newroot/23/file0/bus/bus" dev="overlay" ino=104508 res=1 errno=0 [ 822.214424][T21370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4149'. [ 822.385393][T21374] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4150'. [ 822.814728][T21070] usbhid 14-1:0.0: can't add hid device: -71 [ 822.816845][T21070] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 822.824939][T21070] usb 14-1: USB disconnect, device number 32 [ 822.932929][T21379] binder: 21378:21379 ioctl 4018620d 0 returned -22 [ 823.077455][T21383] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 823.080179][T21383] overlayfs: failed to set xattr on upper [ 823.082223][T21383] overlayfs: ...falling back to redirect_dir=nofollow. [ 823.084486][T21383] overlayfs: ...falling back to index=off. [ 823.086409][T21383] overlayfs: ...falling back to uuid=null. [ 823.817536][T21397] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 823.820456][T21397] overlayfs: failed to set xattr on upper [ 823.822826][T21397] overlayfs: ...falling back to redirect_dir=nofollow. [ 823.825682][T21397] overlayfs: ...falling back to index=off. [ 823.828160][T21397] overlayfs: ...falling back to uuid=null. [ 823.910033][T18219] Bluetooth: hci1: command tx timeout [ 824.303951][T21407] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 824.305831][T21408] IPVS: stopping master sync thread 21407 ... [ 825.022019][T21417] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 825.038592][T21417] overlayfs: failed to set xattr on upper [ 825.043900][T21417] overlayfs: ...falling back to redirect_dir=nofollow. [ 825.046761][T21417] overlayfs: ...falling back to index=off. [ 825.052785][T21417] overlayfs: ...falling back to uuid=null. [ 825.080649][T21419] tmpfs: Bad value for 'mpol' [ 825.214457][T21422] binder: 21421:21422 ioctl 4018620d 0 returned -22 [ 825.686532][T21427] 9pnet_virtio: no channels available for device syz [ 825.706003][ T40] audit: type=1804 audit(1747496333.609:4675): pid=21428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4164" name="/newroot/474/file0/bus/bus" dev="overlay" ino=105634 res=1 errno=0 [ 825.719624][ T40] audit: type=1804 audit(1747496333.619:4676): pid=21428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4164" name="/newroot/474/file0/bus/bus" dev="overlay" ino=105634 res=1 errno=0 [ 825.845882][T21429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4166'. [ 825.990664][T18219] Bluetooth: hci1: command tx timeout [ 826.308822][T21439] netlink: 'syz.5.4169': attribute type 2 has an invalid length. [ 826.383814][T21441] 9pnet_virtio: no channels available for device syz [ 826.507990][T21447] usb usb1: usbfs: process 21447 (syz.1.4172) did not claim interface 0 before use [ 826.518668][T21447] netlink: 'syz.1.4172': attribute type 1 has an invalid length. [ 827.082722][T21457] 9pnet_fd: Insufficient options for proto=fd [ 827.114695][T21461] tmpfs: Bad value for 'mpol' [ 827.121590][T21460] tmpfs: Bad value for 'mpol' [ 828.013459][T21466] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 828.016311][T21466] overlayfs: failed to set xattr on upper [ 828.018341][T21466] overlayfs: ...falling back to redirect_dir=nofollow. [ 828.020921][T21466] overlayfs: ...falling back to index=off. [ 828.022848][T21466] overlayfs: ...falling back to uuid=null. [ 828.270051][ T40] audit: type=1804 audit(1747496336.169:4677): pid=21476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4178" name="/newroot/478/file0/bus/bus" dev="overlay" ino=105786 res=1 errno=0 [ 828.280810][ T40] audit: type=1804 audit(1747496336.179:4678): pid=21476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4178" name="/newroot/478/file0/bus/bus" dev="overlay" ino=105786 res=1 errno=0 [ 829.298164][T21495] tmpfs: Bad value for 'mpol' [ 829.425533][T21498] tmpfs: Bad value for 'mpol' [ 829.937730][T21508] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 829.942237][T21508] overlayfs: failed to set xattr on upper [ 829.944798][T21508] overlayfs: ...falling back to redirect_dir=nofollow. [ 829.947819][T21508] overlayfs: ...falling back to index=off. [ 829.950513][T21508] overlayfs: ...falling back to uuid=null. [ 830.227724][ T40] audit: type=1804 audit(1747496338.129:4679): pid=21512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4191" name="/newroot/47/file0/bus/bus" dev="overlay" ino=105830 res=1 errno=0 [ 830.281391][ T40] audit: type=1804 audit(1747496338.139:4680): pid=21512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4191" name="/newroot/47/file0/bus/bus" dev="overlay" ino=105830 res=1 errno=0 [ 830.860980][T21519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4195'. [ 831.155348][T21528] tmpfs: Bad value for 'mpol' [ 831.508187][T21543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4199'. [ 831.861410][T21549] tmpfs: Bad value for 'mpol' [ 832.351199][T19982] page_pool_release_retry() stalled pool shutdown: id 142, 1 inflight 60 sec [ 832.832368][T21557] 9pnet_virtio: no channels available for device syz [ 833.016838][T21564] usb usb1: usbfs: process 21564 (syz.9.4207) did not claim interface 0 before use [ 833.029896][T21564] netlink: 'syz.9.4207': attribute type 1 has an invalid length. [ 833.050363][T21564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 833.085732][T21564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 833.089233][T21564] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 833.097283][T21564] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 833.601572][T21579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4209'. [ 833.935928][T21586] tmpfs: Bad value for 'mpol' [ 834.062793][T21592] 9pnet_virtio: no channels available for device syz [ 834.562708][T21605] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 834.565115][T21605] overlayfs: failed to set xattr on upper [ 834.567060][T21605] overlayfs: ...falling back to redirect_dir=nofollow. [ 834.569408][T21605] overlayfs: ...falling back to index=off. [ 834.572172][T21605] overlayfs: ...falling back to uuid=null. [ 834.839671][T21613] usb usb1: usbfs: process 21613 (syz.2.4222) did not claim interface 0 before use [ 834.854491][T21613] netlink: 'syz.2.4222': attribute type 1 has an invalid length. [ 834.897889][T21613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 834.931363][T21613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 834.940838][T21613] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 834.947515][T21613] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 834.982555][T21617] erspan0: entered allmulticast mode [ 835.233746][T21620] tmpfs: Bad value for 'mpol' [ 835.450206][T21625] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4224'. [ 835.479953][T21629] tmpfs: Bad value for 'mpol' [ 835.643354][ T9] libceph: connect (1)[c::]:6789 error -101 [ 835.646049][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 835.900165][ T9] libceph: connect (1)[c::]:6789 error -101 [ 835.902301][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 835.950457][T21632] ceph: No mds server is up or the cluster is laggy [ 835.983806][T21638] 9pnet_virtio: no channels available for device syz [ 835.993262][T21636] Invalid ELF header magic: != ELF [ 836.352457][T21625] team0 (unregistering): Port device team_slave_0 removed [ 836.377255][T21625] team0 (unregistering): Port device team_slave_1 removed [ 837.658648][T21669] 9pnet_fd: Insufficient options for proto=fd [ 838.275119][T21678] tmpfs: Bad value for 'mpol' [ 838.852901][T21684] 9pnet_virtio: no channels available for device syz [ 839.132844][T21689] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 839.135159][T21689] overlayfs: failed to set xattr on upper [ 839.137024][T21689] overlayfs: ...falling back to redirect_dir=nofollow. [ 839.139537][T21689] overlayfs: ...falling back to index=off. [ 839.141671][T21689] overlayfs: ...falling back to uuid=null. [ 839.770792][T21703] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 839.773162][T21703] overlayfs: failed to set xattr on upper [ 839.775086][T21703] overlayfs: ...falling back to redirect_dir=nofollow. [ 839.777387][T21703] overlayfs: ...falling back to index=off. [ 839.779251][T21703] overlayfs: ...falling back to uuid=null. [ 841.179702][T21723] tmpfs: Bad value for 'mpol' [ 842.244404][T21740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4254'. [ 842.387208][T21740] team0 (unregistering): Port device team_slave_0 removed [ 842.413167][T21740] team0 (unregistering): Port device team_slave_1 removed [ 842.489488][T21745] 9pnet_fd: Insufficient options for proto=fd [ 842.917315][T21749] binder: 21748:21749 ioctl 4018620d 0 returned -22 [ 843.569500][T21764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4262'. [ 843.832664][T21769] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 843.835575][T21769] overlayfs: failed to set xattr on upper [ 843.838032][T21769] overlayfs: ...falling back to redirect_dir=nofollow. [ 843.844569][T21769] overlayfs: ...falling back to index=off. [ 843.846452][T21769] overlayfs: ...falling back to uuid=null. [ 844.108776][ T40] audit: type=1804 audit(1747496352.009:4681): pid=21771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4263" name="/newroot/51/file0/bus/bus" dev="overlay" ino=108602 res=1 errno=0 [ 844.144709][ T40] audit: type=1804 audit(1747496352.019:4682): pid=21771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4263" name="/newroot/51/file0/bus/bus" dev="overlay" ino=108602 res=1 errno=0 [ 844.468179][T21775] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4264'. [ 844.872775][T21781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4267'. [ 845.107860][T21781] team0 (unregistering): Port device team_slave_0 removed [ 845.107926][T21790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4266'. [ 845.126053][T21781] team0 (unregistering): Port device team_slave_1 removed [ 845.141341][T21792] 9pnet_virtio: no channels available for device syz [ 845.472452][T21801] 9pnet_virtio: no channels available for device syz [ 845.488155][T21803] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 845.490764][T21803] overlayfs: failed to set xattr on upper [ 845.492708][T21803] overlayfs: ...falling back to redirect_dir=nofollow. [ 845.494947][T21803] overlayfs: ...falling back to index=off. [ 845.496814][T21803] overlayfs: ...falling back to uuid=null. [ 845.782719][ T40] audit: type=1804 audit(1747496353.679:4683): pid=21808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4273" name="/newroot/68/file0/bus/bus" dev="overlay" ino=108633 res=1 errno=0 [ 845.801156][ T40] audit: type=1804 audit(1747496353.709:4684): pid=21808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4273" name="/newroot/68/file0/bus/bus" dev="overlay" ino=108633 res=1 errno=0 [ 846.011751][T21817] usb usb1: usbfs: process 21817 (syz.5.4276) did not claim interface 0 before use [ 846.017078][T21817] netlink: 'syz.5.4276': attribute type 1 has an invalid length. [ 846.079615][T21817] 8021q: adding VLAN 0 to HW filter on device bond2 [ 846.093384][T21819] bond1: (slave erspan0): Releasing active interface [ 846.098616][T21819] bond2: (slave erspan0): making interface the new active one [ 846.101919][T21819] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 846.200791][T21822] tmpfs: Bad value for 'mpol' [ 846.353600][T21826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4275'. [ 846.519593][T21836] 9pnet_virtio: no channels available for device syz [ 846.691827][T21846] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4283'. [ 846.882369][T21850] usb usb1: usbfs: process 21850 (syz.5.4285) did not claim interface 0 before use [ 846.911901][T21850] bond2: (slave erspan0): Releasing active interface [ 847.003158][T21859] tmpfs: Bad value for 'mpol' [ 847.088564][T21862] 9pnet_virtio: no channels available for device syz [ 847.230092][T21871] 9pnet_fd: Insufficient options for proto=fd [ 847.369580][T21876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4291'. [ 847.834326][ T9] page_pool_release_retry() stalled pool shutdown: id 144, 1 inflight 60 sec [ 848.119205][T21894] tmpfs: Bad value for 'mpol' [ 848.655662][T21905] 9pnet_virtio: no channels available for device syz [ 848.851628][T21909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4302'. [ 849.142478][T21922] 9pnet_fd: Insufficient options for proto=fd [ 849.427565][T21930] tmpfs: Bad value for 'mpol' [ 849.478482][T21933] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4308'. [ 849.804792][T21944] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 849.807123][T21944] overlayfs: failed to set xattr on upper [ 849.809475][T21944] overlayfs: ...falling back to redirect_dir=nofollow. [ 849.811928][T21944] overlayfs: ...falling back to index=off. [ 849.813912][T21944] overlayfs: ...falling back to uuid=null. [ 850.194701][ T40] audit: type=1804 audit(1747496358.099:4685): pid=21952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4313" name="/newroot/42/file0/bus/bus" dev="overlay" ino=108869 res=1 errno=0 [ 850.446542][T21958] usb usb1: usbfs: process 21958 (syz.9.4317) did not claim interface 0 before use [ 850.928109][T21965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4319'. [ 850.991344][T21970] tmpfs: Bad value for 'mpol' [ 851.106854][T21974] tmpfs: Bad value for 'mpol' [ 853.139448][T22002] tmpfs: Bad value for 'mpol' [ 853.380930][T22006] tmpfs: Bad value for 'mpol' [ 853.445820][T22009] tmpfs: Bad value for 'mpol' [ 854.445882][T22026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4335'. [ 854.616931][T22031] 9pnet_virtio: no channels available for device syz [ 854.819715][T22037] 9pnet_virtio: no channels available for device syz [ 855.032801][T22044] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 855.035471][T22044] overlayfs: failed to set xattr on upper [ 855.037388][T22044] overlayfs: ...falling back to redirect_dir=nofollow. [ 855.039690][T22044] overlayfs: ...falling back to index=off. [ 855.043478][T22044] overlayfs: ...falling back to uuid=null. [ 855.267300][T22052] tmpfs: Bad value for 'mpol' [ 855.495382][T22058] 9pnet_virtio: no channels available for device syz [ 856.066758][T22072] 9pnet_virtio: no channels available for device syz [ 856.164867][T22075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4352'. [ 856.617056][T22097] 9pnet_fd: Insufficient options for proto=fd [ 856.853413][T22105] usb usb1: usbfs: process 22105 (syz.2.4362) did not claim interface 0 before use [ 857.365184][T22120] 9pnet_fd: Insufficient options for proto=fd [ 857.419146][T22121] mkiss: ax0: crc mode is auto. [ 857.443899][T22124] tmpfs: Bad value for 'mpol' [ 857.517468][T22125] ipvlan0: entered promiscuous mode [ 857.722113][T22131] usb usb1: usbfs: process 22131 (syz.1.4372) did not claim interface 0 before use [ 858.341375][T22139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4374'. [ 858.633814][T22151] tmpfs: Bad value for 'mpol' [ 859.423864][T22165] tmpfs: Bad value for 'mpol' [ 859.556908][T22170] 9pnet_fd: Insufficient options for proto=fd [ 859.835940][T22187] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4389'. [ 860.019550][T22191] 9pnet_virtio: no channels available for device syz [ 860.489008][T22199] 9pnet_virtio: no channels available for device syz [ 860.546650][T22203] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 860.549115][T22203] overlayfs: failed to set xattr on upper [ 860.552390][T22203] overlayfs: ...falling back to redirect_dir=nofollow. [ 860.554919][T22203] overlayfs: ...falling back to index=off. [ 860.556944][T22203] overlayfs: ...falling back to uuid=null. [ 862.135077][T22222] usb usb1: usbfs: process 22222 (syz.1.4399) did not claim interface 0 before use [ 862.586478][T22230] 9pnet_fd: Insufficient options for proto=fd [ 863.385338][T22246] 9pnet_virtio: no channels available for device syz [ 864.376082][T22267] 9pnet_virtio: no channels available for device syz [ 864.813420][T22284] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 864.815718][T22284] overlayfs: failed to set xattr on upper [ 864.818411][T22284] overlayfs: ...falling back to redirect_dir=nofollow. [ 864.822324][T22284] overlayfs: ...falling back to index=off. [ 864.824234][T22284] overlayfs: ...falling back to uuid=null. [ 865.114248][ T40] audit: type=1804 audit(1747496373.019:4686): pid=22290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4414" name="/newroot/94/file0/bus/bus" dev="overlay" ino=109253 res=1 errno=0 [ 865.145457][ T40] audit: type=1804 audit(1747496373.029:4687): pid=22290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4414" name="/newroot/94/file0/bus/bus" dev="overlay" ino=109253 res=1 errno=0 [ 865.856005][T22300] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 865.858682][T22300] overlayfs: failed to set xattr on upper [ 865.861219][T22300] overlayfs: ...falling back to redirect_dir=nofollow. [ 865.863722][T22300] overlayfs: ...falling back to index=off. [ 865.865942][T22300] overlayfs: ...falling back to uuid=null. [ 865.981545][T22304] tmpfs: Bad value for 'mpol' [ 867.381406][T22322] binder: 22321:22322 ioctl 4018620d 0 returned -22 [ 867.392554][T22324] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 867.395272][T22324] overlayfs: failed to set xattr on upper [ 867.404082][T22324] overlayfs: ...falling back to redirect_dir=nofollow. [ 867.410296][T22324] overlayfs: ...falling back to index=off. [ 867.414910][T22324] overlayfs: ...falling back to uuid=null. [ 867.750339][ T40] audit: type=1804 audit(1747496375.649:4688): pid=22332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4425" name="/newroot/68/file0/bus/bus" dev="overlay" ino=109265 res=1 errno=0 [ 867.837511][ T40] audit: type=1804 audit(1747496375.669:4689): pid=22332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4425" name="/newroot/68/file0/bus/bus" dev="overlay" ino=109265 res=1 errno=0 [ 869.000660][T22339] usb usb1: usbfs: process 22339 (syz.9.4428) did not claim interface 0 before use [ 869.124158][T22342] 9pnet_virtio: no channels available for device syz [ 869.430096][T22357] 9pnet_virtio: no channels available for device syz [ 869.455349][T22361] 9pnet_virtio: no channels available for device syz [ 869.593871][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.593934][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.856249][T22371] 9pnet_virtio: no channels available for device syz [ 869.953222][T22373] 9pnet_fd: Insufficient options for proto=fd [ 870.219313][T22379] usb usb1: usbfs: process 22379 (syz.2.4439) did not claim interface 0 before use [ 870.421182][T22391] 9pnet: Unknown protocol version 9p20\++} [ 870.423334][T22391] 9pnet: Unknown protocol version 9p20\++} [ 870.425434][T22391] 9pnet: Unknown protocol version 9p20\++} [ 870.435240][T22391] 9pnet: Unknown protocol version 9p20\++} [ 870.437495][T22391] 9pnet: Unknown protocol version 9p20\++} [ 870.439587][T22391] 9pnet: Unknown protocol version 9p20\++} [ 870.444548][T22391] 9pnet: Unknown protocol version 9p20\++} [ 870.446694][T22391] 9pnet: Unknown protocol version 9p20\++} [ 870.450444][T22391] 9pnet: Unknown protocol version 9p20\++} [ 870.452530][T22391] 9pnet: Unknown protocol version 9p20\++} [ 870.454828][T22391] 9pnet: Unknown protocol version 9p20\++} [ 870.464311][T22391] 9pnet: Unknown protocol version 9p20\++} [ 870.469455][T22391] 9pnet: Unknown protocol version 9p20\++} [ 870.673234][T22403] tmpfs: Bad value for 'mpol' [ 871.059596][T22409] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 871.070079][T22409] overlayfs: failed to set xattr on upper [ 871.071914][T22409] overlayfs: ...falling back to redirect_dir=nofollow. [ 871.074207][T22409] overlayfs: ...falling back to index=off. [ 871.076101][T22409] overlayfs: ...falling back to uuid=null. [ 871.446536][T22423] usb usb1: usbfs: process 22423 (syz.5.4454) did not claim interface 0 before use [ 871.547095][T22426] 9pnet_virtio: no channels available for device syz [ 871.625774][T22429] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4455'. [ 871.628605][T22429] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4455'. [ 871.635305][T22429] FAULT_INJECTION: forcing a failure. [ 871.635305][T22429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.639348][T22429] CPU: 1 UID: 0 PID: 22429 Comm: syz.2.4455 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 871.639374][T22429] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 871.639381][T22429] Call Trace: [ 871.639385][T22429] [ 871.639390][T22429] dump_stack_lvl+0x16c/0x1f0 [ 871.639409][T22429] should_fail_ex+0x512/0x640 [ 871.639437][T22429] _copy_from_user+0x2e/0xd0 [ 871.639448][T22429] move_addr_to_kernel+0x65/0x170 [ 871.639467][T22429] __get_compat_msghdr+0x3f1/0x4d0 [ 871.639482][T22429] get_compat_msghdr+0xd2/0x170 [ 871.639494][T22429] ? __pfx_get_compat_msghdr+0x10/0x10 [ 871.639509][T22429] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 871.639528][T22429] ___sys_sendmsg+0x1ae/0x1d0 [ 871.639542][T22429] ? __pfx____sys_sendmsg+0x10/0x10 [ 871.639573][T22429] __sys_sendmsg+0x16d/0x220 [ 871.639586][T22429] ? __pfx___sys_sendmsg+0x10/0x10 [ 871.639605][T22429] ? rcu_is_watching+0x12/0xc0 [ 871.639618][T22429] __do_fast_syscall_32+0x73/0x120 [ 871.639637][T22429] do_fast_syscall_32+0x32/0x80 [ 871.639654][T22429] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 871.639667][T22429] RIP: 0023:0xf70fe579 [ 871.639676][T22429] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 871.639687][T22429] RSP: 002b:00000000f50ac55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 871.639697][T22429] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 871.639704][T22429] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000000 [ 871.639727][T22429] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 871.639737][T22429] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 871.639743][T22429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 871.639757][T22429] [ 872.279251][T22447] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4460'. [ 872.313502][T22450] tmpfs: Bad value for 'mpol' [ 872.711484][T22460] 9pnet_fd: Insufficient options for proto=fd [ 873.433022][T22472] 9pnet_virtio: no channels available for device syz [ 873.853525][T22488] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 873.896618][T22488] overlayfs: failed to set xattr on upper [ 873.898557][T22488] overlayfs: ...falling back to redirect_dir=nofollow. [ 873.901498][T22488] overlayfs: ...falling back to index=off. [ 873.903395][T22488] overlayfs: ...falling back to uuid=null. [ 874.110585][ T40] audit: type=1804 audit(1747496382.019:4690): pid=22491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4474" name="/newroot/108/file0/bus/bus" dev="overlay" ino=109390 res=1 errno=0 [ 874.126526][ T40] audit: type=1804 audit(1747496382.019:4691): pid=22491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4474" name="/newroot/108/file0/bus/bus" dev="overlay" ino=109390 res=1 errno=0 [ 874.974631][T22508] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4479'. [ 875.249552][T22515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4481'. [ 875.612163][T22530] 9pnet_virtio: no channels available for device syz [ 877.107550][T22560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4492'. [ 877.175470][ T6776] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 877.207146][T22568] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4496'. [ 877.239395][T22568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4496'. [ 877.386641][T22573] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4498'. [ 877.502147][T22551] fuse: Bad value for 'group_id' [ 877.503954][T22551] fuse: Bad value for 'group_id' [ 878.899299][T22601] fuse: Bad value for 'fd' [ 878.904281][T22603] mkiss: ax0: crc mode is auto. [ 878.959980][T22608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4513'. [ 878.963362][T22608] hsr0: left allmulticast mode [ 878.964983][T22608] hsr_slave_0: left allmulticast mode [ 878.966728][T22608] hsr_slave_1: left allmulticast mode [ 878.969196][T22608] macvlan0: left promiscuous mode [ 878.970957][T22608] macvlan0: left allmulticast mode [ 878.974025][T22608] netlink: 'syz.5.4513': attribute type 1 has an invalid length. [ 878.976530][T22608] netlink: 'syz.5.4513': attribute type 2 has an invalid length. [ 879.634503][ T6776] usb 6-1: unable to get BOS descriptor or descriptor too short [ 879.640424][ T6776] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 879.642938][ T6776] usb 6-1: can't read configurations, error -71 [ 880.029945][T22626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4506'. [ 880.544657][T22630] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4510'. [ 880.814477][T22638] 9pnet_virtio: no channels available for device syz [ 880.903316][T22641] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4511'. [ 881.253084][T22650] FAULT_INJECTION: forcing a failure. [ 881.253084][T22650] name failslab, interval 1, probability 0, space 0, times 0 [ 881.257860][T22650] CPU: 3 UID: 0 PID: 22650 Comm: syz.9.4516 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 881.257884][T22650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 881.257895][T22650] Call Trace: [ 881.257902][T22650] [ 881.257911][T22650] dump_stack_lvl+0x16c/0x1f0 [ 881.257941][T22650] should_fail_ex+0x512/0x640 [ 881.257978][T22650] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 881.258003][T22650] should_failslab+0xc2/0x120 [ 881.258026][T22650] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 881.258046][T22650] ? __alloc_skb+0x2b2/0x380 [ 881.258071][T22650] __alloc_skb+0x2b2/0x380 [ 881.258091][T22650] ? __pfx___alloc_skb+0x10/0x10 [ 881.258109][T22650] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 881.258139][T22650] netlink_ack+0x15d/0xb80 [ 881.258171][T22650] netlink_rcv_skb+0x347/0x440 [ 881.258195][T22650] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 881.258219][T22650] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 881.258255][T22650] ? netlink_deliver_tap+0x1ae/0xd30 [ 881.258283][T22650] netlink_unicast+0x53a/0x7f0 [ 881.258309][T22650] ? __pfx_netlink_unicast+0x10/0x10 [ 881.258340][T22650] netlink_sendmsg+0x8d1/0xdd0 [ 881.258368][T22650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 881.258393][T22650] ? __import_iovec+0x1c8/0x660 [ 881.258416][T22650] ____sys_sendmsg+0xa95/0xc70 [ 881.258444][T22650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 881.258470][T22650] ? get_compat_msghdr+0x11a/0x170 [ 881.258501][T22650] ___sys_sendmsg+0x134/0x1d0 [ 881.258521][T22650] ? __pfx____sys_sendmsg+0x10/0x10 [ 881.258563][T22650] __sys_sendmsg+0x16d/0x220 [ 881.258576][T22650] ? __pfx___sys_sendmsg+0x10/0x10 [ 881.258603][T22650] ? rcu_is_watching+0x12/0xc0 [ 881.258624][T22650] __do_fast_syscall_32+0x73/0x120 [ 881.258651][T22650] do_fast_syscall_32+0x32/0x80 [ 881.258675][T22650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 881.258697][T22650] RIP: 0023:0xf710e579 [ 881.258713][T22650] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 881.258730][T22650] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 881.258747][T22650] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 881.258759][T22650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 881.258769][T22650] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 881.258779][T22650] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 881.258789][T22650] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 881.258813][T22650] [ 881.675405][T22657] fuseblk: Unknown parameter 'rootmXðZÆFHÇ' [ 881.954655][T22663] usb usb1: usbfs: process 22663 (syz.1.4521) did not claim interface 0 before use [ 881.965542][T22663] netlink: 'syz.1.4521': attribute type 1 has an invalid length. [ 881.977703][T22663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 881.980745][T22666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4522'. [ 881.998486][T22663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 882.002488][T22663] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 882.006496][T22663] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 882.024067][T22669] 9pnet_virtio: no channels available for device syz [ 882.046539][T22670] bond1: (slave erspan0): making interface the new active one [ 882.053503][T22670] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 882.332850][T22681] usb usb1: usbfs: process 22681 (syz.9.4526) did not claim interface 0 before use [ 882.425405][T22683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4527'. [ 882.432589][T22683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4527'. [ 882.448849][T22683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4527'. [ 882.461467][T22686] 9pnet_virtio: no channels available for device syz [ 882.769931][T22698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4529'. [ 883.177197][T22718] usb usb1: usbfs: process 22718 (syz.1.4537) did not claim interface 0 before use [ 883.238841][T22718] bond1: (slave erspan0): Releasing active interface [ 884.280983][T22745] usb usb1: usbfs: process 22745 (syz.9.4548) did not claim interface 0 before use [ 884.654067][T22750] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 884.656448][T22750] overlayfs: failed to set xattr on upper [ 884.658342][T22750] overlayfs: ...falling back to redirect_dir=nofollow. [ 884.664877][T22750] overlayfs: ...falling back to index=off. [ 884.666878][T22750] overlayfs: ...falling back to uuid=null. [ 884.930710][ T40] audit: type=1804 audit(1747496392.829:4692): pid=22755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4550" name="/newroot/98/file0/bus/bus" dev="overlay" ino=112054 res=1 errno=0 [ 884.938080][ T40] audit: type=1804 audit(1747496392.829:4693): pid=22755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4550" name="/newroot/98/file0/bus/bus" dev="overlay" ino=112054 res=1 errno=0 [ 885.127921][T22751] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4549'. [ 885.624566][T22764] 9pnet_virtio: no channels available for device syz [ 885.669285][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4556'. [ 885.922899][T22776] usb usb1: usbfs: process 22776 (syz.1.4558) did not claim interface 0 before use [ 886.961165][T22789] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 886.963786][T22789] overlayfs: failed to set xattr on upper [ 886.965778][T22789] overlayfs: ...falling back to redirect_dir=nofollow. [ 886.968624][T22789] overlayfs: ...falling back to index=off. [ 886.971110][T22789] overlayfs: ...falling back to uuid=null. [ 887.223558][ T40] audit: type=1804 audit(1747496395.129:4694): pid=22806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4562" name="/newroot/140/file0/bus/bus" dev="overlay" ino=112169 res=1 errno=0 [ 887.241571][ T40] audit: type=1804 audit(1747496395.139:4695): pid=22806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4562" name="/newroot/140/file0/bus/bus" dev="overlay" ino=112169 res=1 errno=0 [ 887.475978][T22807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4565'. [ 887.979485][T22813] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 887.982508][T22813] overlayfs: failed to set xattr on upper [ 887.984965][T22813] overlayfs: ...falling back to redirect_dir=nofollow. [ 887.987897][T22813] overlayfs: ...falling back to index=off. [ 887.990430][T22813] overlayfs: ...falling back to uuid=null. [ 888.009440][T22815] netlink: 3 bytes leftover after parsing attributes in process `syz.9.4568'. [ 888.014014][T22815] 0ªX¹¦À: renamed from caif0 [ 888.017893][T22815] 0ªX¹¦À: entered allmulticast mode [ 888.019717][T22815] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 888.234468][T22819] 9pnet_virtio: no channels available for device syz [ 888.473499][ T40] audit: type=1804 audit(1747496396.269:4696): pid=22822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4569" name="/newroot/105/file0/bus/bus" dev="overlay" ino=113639 res=1 errno=0 [ 888.481473][ T40] audit: type=1804 audit(1747496396.269:4697): pid=22822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4569" name="/newroot/105/file0/bus/bus" dev="overlay" ino=113639 res=1 errno=0 [ 888.554221][T22825] 9pnet_virtio: no channels available for device syz [ 888.952406][T22832] usb usb1: usbfs: process 22832 (syz.2.4573) did not claim interface 0 before use [ 889.176522][T22837] 9pnet_virtio: no channels available for device syz [ 889.548736][T22843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4576'. [ 889.591488][T22845] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 889.593743][T22845] overlayfs: failed to set xattr on upper [ 889.595600][T22845] overlayfs: ...falling back to redirect_dir=nofollow. [ 889.597812][T22845] overlayfs: ...falling back to index=off. [ 889.622702][T22845] overlayfs: ...falling back to uuid=null. [ 889.774489][ T40] audit: type=1804 audit(1747496397.679:4698): pid=22847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4577" name="/newroot/145/file0/bus/bus" dev="overlay" ino=111386 res=1 errno=0 [ 889.782538][ T40] audit: type=1804 audit(1747496397.689:4699): pid=22847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4577" name="/newroot/145/file0/bus/bus" dev="overlay" ino=111386 res=1 errno=0 [ 890.506196][T22856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4586'. [ 890.577899][T22858] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 890.600507][T22858] netlink: 'syz.9.4579': attribute type 10 has an invalid length. [ 890.640954][T22858] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 891.007371][T22868] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 891.014120][T22868] overlayfs: failed to set xattr on upper [ 891.016964][T22868] overlayfs: ...falling back to redirect_dir=nofollow. [ 891.019980][T22868] overlayfs: ...falling back to index=off. [ 891.022509][T22868] overlayfs: ...falling back to uuid=null. [ 891.050406][T22869] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4581'. [ 891.499335][ T40] audit: type=1804 audit(1747496399.399:4700): pid=22872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4582" name="/newroot/582/file0/bus/bus" dev="overlay" ino=114060 res=1 errno=0 [ 891.559238][ T40] audit: type=1804 audit(1747496399.459:4701): pid=22872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4582" name="/newroot/582/file0/bus/bus" dev="overlay" ino=114060 res=1 errno=0 [ 892.034125][T22882] 9pnet_virtio: no channels available for device syz [ 892.494265][T22888] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 892.501583][T22888] overlayfs: failed to set xattr on upper [ 892.503646][T22888] overlayfs: ...falling back to redirect_dir=nofollow. [ 892.511034][T22888] overlayfs: ...falling back to index=off. [ 892.513416][T22888] overlayfs: ...falling back to uuid=null. [ 892.882882][ T40] audit: type=1804 audit(1747496400.789:4702): pid=22896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4589" name="/newroot/110/file0/bus/bus" dev="overlay" ino=111406 res=1 errno=0 [ 893.371693][ T40] audit: type=1804 audit(1747496401.279:4703): pid=22896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4589" name="/newroot/110/file0/bus/bus" dev="overlay" ino=111406 res=1 errno=0 [ 893.685989][T22910] usb usb1: usbfs: process 22910 (syz.9.4593) did not claim interface 0 before use [ 893.690835][T22911] usb usb1: usbfs: process 22911 (syz.1.4601) did not claim interface 0 before use [ 893.697695][T22910] netlink: 'syz.9.4593': attribute type 1 has an invalid length. [ 893.732815][T22910] 8021q: adding VLAN 0 to HW filter on device bond2 [ 893.766904][T22910] 8021q: adding VLAN 0 to HW filter on device bond2 [ 893.770494][T22910] bond2: (slave vxcan11): The slave device specified does not support setting the MAC address [ 893.774770][T22910] bond2: (slave vxcan11): Error -95 calling set_mac_address [ 893.854868][T22916] 9pnet_virtio: no channels available for device syz [ 895.078021][T22944] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 895.094679][T22944] overlayfs: failed to set xattr on upper [ 895.097235][T22944] overlayfs: ...falling back to redirect_dir=nofollow. [ 895.101618][T22944] overlayfs: ...falling back to index=off. [ 895.104109][T22944] overlayfs: ...falling back to uuid=null. [ 895.290881][ T40] audit: type=1804 audit(1747496403.199:4704): pid=22947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4604" name="/newroot/153/file0/bus/bus" dev="overlay" ino=114123 res=1 errno=0 [ 895.298805][ T40] audit: type=1804 audit(1747496403.199:4705): pid=22947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4604" name="/newroot/153/file0/bus/bus" dev="overlay" ino=114123 res=1 errno=0 [ 895.469952][ T1331] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 895.630039][ T1331] usb 10-1: Using ep0 maxpacket: 32 [ 895.634457][ T1331] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 895.637574][ T1331] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 895.641000][ T1331] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 895.643894][ T1331] usb 10-1: config 1 has no interface number 0 [ 895.645885][ T1331] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 895.649355][ T1331] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 895.653550][ T1331] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 895.656399][ T1331] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.667884][ T1331] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 895.701887][T22953] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 895.704270][T22953] overlayfs: failed to set xattr on upper [ 895.706164][T22953] overlayfs: ...falling back to redirect_dir=nofollow. [ 895.708545][T22953] overlayfs: ...falling back to index=off. [ 895.710639][T22953] overlayfs: ...falling back to uuid=null. [ 895.876929][ T1331] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 895.998107][ T40] audit: type=1804 audit(1747496403.899:4706): pid=22955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4607" name="/newroot/131/file0/bus/bus" dev="overlay" ino=114131 res=1 errno=0 [ 896.020092][ T40] audit: type=1804 audit(1747496403.909:4707): pid=22955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4607" name="/newroot/131/file0/bus/bus" dev="overlay" ino=114131 res=1 errno=0 [ 896.171012][T22959] usb usb1: usbfs: process 22959 (syz.9.4609) did not claim interface 0 before use [ 896.309584][ T1331] usb 10-1: USB disconnect, device number 36 [ 896.312414][ T1331] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 896.798705][T22969] 9pnet_virtio: no channels available for device syz [ 896.815342][T22967] netlink: 'syz.2.4611': attribute type 10 has an invalid length. [ 896.858526][T22967] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 896.876363][T22972] 9pnet_virtio: no channels available for device syz [ 897.117606][T22982] 9pnet_virtio: no channels available for device syz [ 897.410212][T22996] tmpfs: Bad value for 'mpol' [ 897.414681][T22995] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 897.418047][T22995] overlayfs: failed to set xattr on upper [ 897.420839][T22995] overlayfs: ...falling back to redirect_dir=nofollow. [ 897.423812][T22995] overlayfs: ...falling back to index=off. [ 897.426491][T22995] overlayfs: ...falling back to uuid=null. [ 897.663634][ T40] audit: type=1804 audit(1747496405.569:4708): pid=22995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4618" name="/newroot/119/file0/bus/bus" dev="overlay" ino=114172 res=1 errno=0 [ 897.686178][ T40] audit: type=1804 audit(1747496405.569:4709): pid=22995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4618" name="/newroot/119/file0/bus/bus" dev="overlay" ino=114172 res=1 errno=0 [ 898.576774][T23010] 9pnet_virtio: no channels available for device syz [ 898.879950][ T65] page_pool_release_retry() stalled pool shutdown: id 167, 1 inflight 60 sec [ 899.058760][T23020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4623'. [ 899.516287][T23023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4624'. [ 900.041766][ T1331] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 900.190024][ T1331] usb 6-1: Using ep0 maxpacket: 32 [ 900.193195][ T1331] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 900.195942][ T1331] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 900.198852][ T1331] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 900.202853][ T1331] usb 6-1: config 1 has no interface number 0 [ 900.205391][ T1331] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 900.209804][ T1331] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 900.215130][ T1331] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 900.218798][ T1331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.226690][ T1331] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 900.430436][ T1331] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 900.831835][ T1331] usb 6-1: USB disconnect, device number 38 [ 900.834473][ T1331] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 900.853169][T23040] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 900.877126][T23040] netlink: 'syz.5.4630': attribute type 10 has an invalid length. [ 900.891296][T23040] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 900.954088][T23042] usb usb1: usbfs: process 23042 (syz.5.4631) did not claim interface 0 before use [ 900.994136][T23044] 9pnet_virtio: no channels available for device syz [ 902.146584][T23071] usb usb1: usbfs: process 23071 (syz.9.4640) did not claim interface 0 before use [ 902.186615][T23073] 9pnet_virtio: no channels available for device syz [ 902.310495][T23078] 9pnet_virtio: no channels available for device syz [ 902.431218][T23082] 9pnet_virtio: no channels available for device syz [ 902.700103][ T1331] usb 14-1: new high-speed USB device number 33 using dummy_hcd [ 902.752307][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 902.759531][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 902.763978][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 902.766995][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 902.770679][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 902.789178][T23092] lo speed is unknown, defaulting to 1000 [ 902.792786][T23092] lo speed is unknown, defaulting to 1000 [ 902.859901][ T1331] usb 14-1: Using ep0 maxpacket: 32 [ 902.864930][ T1331] usb 14-1: config index 0 descriptor too short (expected 35577, got 27) [ 902.868918][ T1331] usb 14-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 902.872818][ T1331] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 902.876970][ T1331] usb 14-1: config 1 has no interface number 0 [ 902.879792][ T1331] usb 14-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 902.884780][ T1331] usb 14-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 902.890486][ T1331] usb 14-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 902.893917][ T1331] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.902415][ T1331] snd_usb_pod 14-1:1.1: Line 6 Pocket POD found [ 902.964405][T23092] chnl_net:caif_netlink_parms(): no params data found [ 903.054285][T23092] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.056583][T23092] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.059301][T23092] bridge_slave_0: entered allmulticast mode [ 903.062188][T23092] bridge_slave_0: entered promiscuous mode [ 903.065454][T23092] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.067824][T23092] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.070312][T23092] bridge_slave_1: entered allmulticast mode [ 903.073435][T23092] bridge_slave_1: entered promiscuous mode [ 903.108100][ T1331] snd_usb_pod 14-1:1.1: Line 6 Pocket POD now attached [ 903.109020][T23092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.116885][T23092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.155672][T23092] team0: Port device team_slave_0 added [ 903.159774][T23092] team0: Port device team_slave_1 added [ 903.193415][T23092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.195714][T23092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.204547][T23092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.208863][T23092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.211229][T23092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.221651][T23092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.261459][T23092] hsr_slave_0: entered promiscuous mode [ 903.263768][T23092] hsr_slave_1: entered promiscuous mode [ 903.265886][T23092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 903.268362][T23092] Cannot create hsr debugfs directory [ 903.360153][T23092] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.434941][T23092] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.507914][T23092] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.522603][ T10] usb 14-1: USB disconnect, device number 33 [ 903.529063][ T10] snd_usb_pod 14-1:1.1: Line 6 Pocket POD now disconnected [ 903.566797][T23092] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.699642][T23092] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 903.709440][T23092] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 903.715253][T23092] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 903.721033][T23092] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 903.738281][T23092] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.741156][T23092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.744254][T23092] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.747196][T23092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.790628][T23092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.803848][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.808553][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.834229][T23092] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.841052][ T59] page_pool_release_retry() stalled pool shutdown: id 169, 1 inflight 60 sec [ 903.881232][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.884168][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.888114][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.891072][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.473138][T23092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.528659][T23124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4650'. [ 904.665861][T23092] veth0_vlan: entered promiscuous mode [ 904.672531][T23092] veth1_vlan: entered promiscuous mode [ 904.691564][T23092] veth0_macvtap: entered promiscuous mode [ 904.695458][T23092] veth1_macvtap: entered promiscuous mode [ 904.706839][T23092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.716320][T23092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.721636][T23092] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.724511][T23092] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.727296][T23092] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.734863][T23092] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.775621][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.779558][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.791788][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.794825][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.800546][T18219] Bluetooth: hci2: command tx timeout [ 904.868693][T23134] usb usb1: usbfs: process 23134 (syz.2.4651) did not claim interface 0 before use [ 904.875695][T23134] netlink: 'syz.2.4651': attribute type 1 has an invalid length. [ 904.901086][T23134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 904.925243][T23134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 904.927572][T23134] bond2: (slave vxcan9): The slave device specified does not support setting the MAC address [ 904.933770][T23134] bond2: (slave vxcan9): Error -95 calling set_mac_address [ 905.006506][T23140] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 905.009535][T23140] overlayfs: failed to set xattr on upper [ 905.012961][T23140] overlayfs: ...falling back to redirect_dir=nofollow. [ 905.015154][T23140] overlayfs: ...falling back to index=off. [ 905.017037][T23140] overlayfs: ...falling back to uuid=null. [ 905.439152][T23150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4657'. [ 905.653466][T23153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4656'. [ 906.505361][T23161] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4659'. [ 906.653218][T23166] 9pnet_virtio: no channels available for device syz [ 906.870037][T18219] Bluetooth: hci2: command tx timeout [ 907.287489][T23178] usb usb1: usbfs: process 23178 (syz.1.4663) did not claim interface 0 before use [ 907.473315][T23183] tmpfs: Bad value for 'mpol' [ 907.737459][T23185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4665'. [ 907.923073][T23191] 9pnet_virtio: no channels available for device syz [ 907.953133][T23193] 9pnet_virtio: no channels available for device syz [ 908.343119][T23202] usb usb1: usbfs: process 23202 (syz.5.4668) did not claim interface 0 before use [ 908.416032][T23202] erspan0: entered allmulticast mode [ 908.697935][T23214] 9pnet_virtio: no channels available for device syz [ 908.949972][T18219] Bluetooth: hci2: command tx timeout [ 909.321199][T23227] 9pnet_fd: Insufficient options for proto=fd [ 910.445559][T23239] usb usb1: usbfs: process 23239 (syz.2.4680) did not claim interface 0 before use [ 910.974999][T23247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4682'. [ 911.030023][T18219] Bluetooth: hci2: command tx timeout [ 911.212129][ T6776] page_pool_release_retry() stalled pool shutdown: id 170, 1 inflight 60 sec [ 911.384503][T23256] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4684'. [ 911.946242][T23259] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 911.948529][T23259] overlayfs: failed to set xattr on upper [ 911.951025][T23259] overlayfs: ...falling back to redirect_dir=nofollow. [ 911.953226][T23259] overlayfs: ...falling back to index=off. [ 911.955112][T23259] overlayfs: ...falling back to uuid=null. [ 912.024747][ T40] audit: type=1804 audit(1747496419.929:4710): pid=23264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4686" name="/newroot/150/file0/bus/bus" dev="overlay" ino=114666 res=1 errno=0 [ 912.037059][ T40] audit: type=1804 audit(1747496419.929:4711): pid=23264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4686" name="/newroot/150/file0/bus/bus" dev="overlay" ino=114666 res=1 errno=0 [ 912.057598][T23262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4685'. [ 912.127887][T23268] 9pnet_fd: Insufficient options for proto=fd [ 912.576592][T23275] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 912.579039][T23275] overlayfs: failed to set xattr on upper [ 912.581807][T23275] overlayfs: ...falling back to redirect_dir=nofollow. [ 912.584159][T23275] overlayfs: ...falling back to index=off. [ 912.586120][T23275] overlayfs: ...falling back to uuid=null. [ 912.816811][T23278] usb usb1: usbfs: process 23278 (syz.2.4690) did not claim interface 0 before use [ 913.545946][T23293] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4693'. [ 914.162320][T23302] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 914.164461][T23302] overlayfs: failed to set xattr on upper [ 914.166345][T23302] overlayfs: ...falling back to redirect_dir=nofollow. [ 914.168839][T23302] overlayfs: ...falling back to index=off. [ 914.176624][T23302] overlayfs: ...falling back to uuid=null. [ 914.238647][T23307] 9pnet_fd: Insufficient options for proto=fd [ 914.512653][ T40] audit: type=1804 audit(1747496422.419:4712): pid=23315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4697" name="/newroot/11/file0/bus/bus" dev="overlay" ino=118831 res=1 errno=0 [ 914.532182][ T40] audit: type=1804 audit(1747496422.429:4713): pid=23315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4697" name="/newroot/11/file0/bus/bus" dev="overlay" ino=118831 res=1 errno=0 [ 914.569954][T23319] usb usb1: usbfs: process 23319 (syz.1.4702) did not claim interface 0 before use [ 915.678424][T23333] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4703'. [ 916.142420][T23337] 9pnet_virtio: no channels available for device syz [ 916.226045][T23342] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 916.228380][T23342] overlayfs: failed to set xattr on upper [ 916.230842][T23342] overlayfs: ...falling back to redirect_dir=nofollow. [ 916.233059][T23342] overlayfs: ...falling back to index=off. [ 916.234960][T23342] overlayfs: ...falling back to uuid=null. [ 916.596193][ T40] audit: type=1804 audit(1747496424.499:4714): pid=23342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4706" name="/newroot/144/file0/bus/bus" dev="overlay" ino=118852 res=1 errno=0 [ 916.630345][ T40] audit: type=1804 audit(1747496424.509:4715): pid=23342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4706" name="/newroot/144/file0/bus/bus" dev="overlay" ino=118852 res=1 errno=0 [ 916.894435][T23356] tmpfs: Bad value for 'mpol' [ 916.972619][T23358] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4709'. [ 917.122614][T23361] 9pnet_virtio: no channels available for device syz [ 917.760023][ T5946] Bluetooth: hci5: command 0x0406 tx timeout [ 917.817951][T23373] 9pnet_virtio: no channels available for device syz [ 917.847493][T23374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4714'. [ 918.947893][T23387] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 918.973697][T23387] overlayfs: failed to set xattr on upper [ 918.975632][T23387] overlayfs: ...falling back to redirect_dir=nofollow. [ 918.977864][T23387] overlayfs: ...falling back to index=off. [ 918.981120][T23387] overlayfs: ...falling back to uuid=null. [ 919.209409][ T40] audit: type=1804 audit(1747496427.109:4716): pid=23390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4719" name="/newroot/148/file0/bus/bus" dev="overlay" ino=118894 res=1 errno=0 [ 919.221905][T19255] usb 14-1: new high-speed USB device number 34 using dummy_hcd [ 919.233598][ T40] audit: type=1804 audit(1747496427.129:4717): pid=23390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4719" name="/newroot/148/file0/bus/bus" dev="overlay" ino=118894 res=1 errno=0 [ 919.255999][T23392] 9pnet_virtio: no channels available for device syz [ 919.392008][T19255] usb 14-1: Using ep0 maxpacket: 32 [ 919.397896][T19255] usb 14-1: config index 0 descriptor too short (expected 35577, got 27) [ 919.403792][T19255] usb 14-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 919.422103][T19255] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 919.422120][T19255] usb 14-1: config 1 has no interface number 0 [ 919.422143][T19255] usb 14-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 919.422157][T19255] usb 14-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 919.422178][T19255] usb 14-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 919.422190][T19255] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.436146][T19255] snd_usb_pod 14-1:1.1: Line 6 Pocket POD found [ 919.646705][T19255] snd_usb_pod 14-1:1.1: Line 6 Pocket POD now attached [ 920.065773][ T59] usb 14-1: USB disconnect, device number 34 [ 920.105242][ T59] snd_usb_pod 14-1:1.1: Line 6 Pocket POD now disconnected [ 921.102396][T23416] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4727'. [ 922.087309][T23434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4732'. [ 922.237148][T23442] 9pnet_fd: Insufficient options for proto=fd [ 922.279716][T23434] team0 (unregistering): Port device team_slave_0 removed [ 922.297004][T23434] team0 (unregistering): Port device team_slave_1 removed [ 922.872237][ T5946] Bluetooth: hci0: command 0x0406 tx timeout [ 923.995022][T23454] 9pnet_virtio: no channels available for device syz [ 924.169949][T19255] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 924.509997][T19255] usb 7-1: Using ep0 maxpacket: 32 [ 924.515965][T19255] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 924.515981][T19255] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 924.515992][T19255] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 924.516003][T19255] usb 7-1: config 1 has no interface number 0 [ 924.516022][T19255] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 924.516036][T19255] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 924.516056][T19255] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 924.516067][T19255] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.020496][T19255] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 925.067454][T23475] 9pnet_virtio: no channels available for device syz [ 925.225322][T19255] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 925.631450][T11300] usb 7-1: USB disconnect, device number 35 [ 925.634142][T11300] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 926.200709][T23496] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4749'. [ 926.650634][T23504] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4750'. [ 927.561367][T23513] 9pnet_virtio: no channels available for device syz [ 927.626513][ T13]  (unregistering): Released all slaves [ 927.636771][ T13] bond0 (unregistering): Released all slaves [ 927.643708][ T13] bond1 (unregistering): Released all slaves [ 927.650729][ T13] bond2 (unregistering): Released all slaves [ 927.668314][T23519] tmpfs: Bad value for 'mpol' [ 927.778007][ T13] bond3 (unregistering): Released all slaves [ 928.078964][ T13] bond4 (unregistering): Released all slaves [ 928.198311][ T13] tipc: Left network mode [ 928.565596][ T13] hsr0: left allmulticast mode [ 928.568182][ T13] veth1_macvtap: left promiscuous mode [ 928.570369][ T13] veth0_macvtap: left promiscuous mode [ 930.039935][ T59] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 930.189977][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 930.194778][ T59] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 930.197501][ T59] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 930.201111][ T59] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 930.205011][ T59] usb 7-1: config 1 has no interface number 0 [ 930.207732][ T59] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 930.212624][ T59] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 930.216827][ T59] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 930.219817][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.229535][ T59] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 930.289798][T23547] 9pnet_fd: Insufficient options for proto=fd [ 930.340510][T11300] lo speed is unknown, defaulting to 1000 [ 930.342430][T11300] infiniband syz0: ib_query_port failed (-19) [ 930.378289][T23552] 9pnet_virtio: no channels available for device syz [ 930.432539][ T59] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 930.683548][T23561] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 930.686128][T23561] overlayfs: failed to set xattr on upper [ 930.688374][T23561] overlayfs: ...falling back to redirect_dir=nofollow. [ 930.690903][T23561] overlayfs: ...falling back to index=off. [ 930.693204][T23561] overlayfs: ...falling back to uuid=null. [ 930.745938][T23563] tmpfs: Bad value for 'mpol' [ 930.856930][ T29] usb 7-1: USB disconnect, device number 36 [ 930.860612][ T29] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 930.953860][ T40] audit: type=1804 audit(1747496438.849:4718): pid=23566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4764" name="/newroot/163/file0/bus/bus" dev="overlay" ino=117459 res=1 errno=0 [ 930.964473][ T40] audit: type=1804 audit(1747496438.849:4719): pid=23566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4764" name="/newroot/163/file0/bus/bus" dev="overlay" ino=117459 res=1 errno=0 [ 931.033702][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.035798][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.455110][T23590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4771'. [ 933.313446][T23600] tmpfs: Bad value for 'mpol' [ 933.383809][T23603] 9pnet_virtio: no channels available for device syz [ 934.629657][T23620] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4780'. [ 934.987774][T23632] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 934.990300][T23632] overlayfs: failed to set xattr on upper [ 934.993041][T23632] overlayfs: ...falling back to redirect_dir=nofollow. [ 934.995539][T23632] overlayfs: ...falling back to index=off. [ 934.997454][T23632] overlayfs: ...falling back to uuid=null. [ 935.353817][T23641] 9pnet_virtio: no channels available for device syz [ 935.501360][T23647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4784'. [ 936.700722][T23662] usb usb1: usbfs: process 23662 (syz.5.4789) did not claim interface 0 before use [ 937.752919][T23677] 9pnet_fd: Insufficient options for proto=fd [ 938.519432][T23695] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 938.522376][T23695] overlayfs: failed to set xattr on upper [ 938.524307][T23695] overlayfs: ...falling back to redirect_dir=nofollow. [ 938.526578][T23695] overlayfs: ...falling back to index=off. [ 938.528852][T23695] overlayfs: ...falling back to uuid=null. [ 938.805724][ T40] audit: type=1804 audit(1747496446.709:4720): pid=23698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4799" name="/newroot/168/file0/bus/bus" dev="overlay" ino=119163 res=1 errno=0 [ 938.820026][ T40] audit: type=1804 audit(1747496446.719:4721): pid=23698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4799" name="/newroot/168/file0/bus/bus" dev="overlay" ino=119163 res=1 errno=0 [ 939.793518][T23706] 9pnet_virtio: no channels available for device syz [ 939.996427][T23712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4803'. [ 940.100055][ T1331] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 940.109546][T23719] 9pnet_virtio: no channels available for device syz [ 940.275636][ T1331] usb 7-1: Using ep0 maxpacket: 32 [ 940.334051][ T1331] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 940.334068][ T1331] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 940.334079][ T1331] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 940.334090][ T1331] usb 7-1: config 1 has no interface number 0 [ 940.334113][ T1331] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 940.334127][ T1331] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 940.334147][ T1331] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 940.334182][ T1331] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.442301][ T1331] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 940.634007][ T1331] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 941.071559][ T1331] usb 7-1: USB disconnect, device number 37 [ 941.077074][ T1331] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 941.262547][T23732] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 941.264856][T23732] overlayfs: failed to set xattr on upper [ 941.266716][T23732] overlayfs: ...falling back to redirect_dir=nofollow. [ 941.269277][T23732] overlayfs: ...falling back to index=off. [ 941.279464][T23732] overlayfs: ...falling back to uuid=null. [ 941.636181][T23737] 9pnet_virtio: no channels available for device syz [ 941.642173][ T40] audit: type=1804 audit(1747496449.549:4722): pid=23736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4809" name="/newroot/209/file0/bus/bus" dev="overlay" ino=119191 res=1 errno=0 [ 941.651662][ T40] audit: type=1804 audit(1747496449.549:4723): pid=23736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4809" name="/newroot/209/file0/bus/bus" dev="overlay" ino=119191 res=1 errno=0 [ 941.976872][T23740] 9pnet_virtio: no channels available for device syz [ 942.136596][T23752] 9pnet_virtio: no channels available for device syz [ 943.138176][T23768] 9pnet_fd: Insufficient options for proto=fd [ 943.230228][T12068] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 943.349991][T18219] Bluetooth: hci1: command 0x0406 tx timeout [ 943.367554][T23776] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4821'. [ 943.400590][T12068] usb 6-1: Using ep0 maxpacket: 32 [ 943.408030][T12068] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 943.416535][T12068] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 943.431857][T12068] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 943.443493][T12068] usb 6-1: config 1 has no interface number 0 [ 943.451937][T12068] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 943.474000][T12068] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 943.494513][T12068] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 943.499276][T23778] 9pnet_virtio: no channels available for device syz [ 943.500003][T12068] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.511645][T12068] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 943.742911][T12068] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 944.241082][T11300] usb 6-1: USB disconnect, device number 39 [ 944.487099][T11300] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 944.655956][T23800] 9pnet_virtio: no channels available for device syz [ 944.847091][T23805] 9pnet_fd: Insufficient options for proto=fd [ 945.111590][T23808] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 945.114596][T23808] overlayfs: failed to set xattr on upper [ 945.117106][T23808] overlayfs: ...falling back to redirect_dir=nofollow. [ 945.120291][T23808] overlayfs: ...falling back to index=off. [ 945.122751][T23808] overlayfs: ...falling back to uuid=null. [ 945.359700][ T40] audit: type=1804 audit(1747496453.259:4724): pid=23810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4831" name="/newroot/174/file0/bus/bus" dev="overlay" ino=119295 res=1 errno=0 [ 945.370017][ T40] audit: type=1804 audit(1747496453.259:4725): pid=23810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4831" name="/newroot/174/file0/bus/bus" dev="overlay" ino=119295 res=1 errno=0 [ 945.386254][T23814] 9pnet_virtio: no channels available for device syz [ 945.676023][T23831] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 945.678658][T23831] overlayfs: failed to set xattr on upper [ 945.681100][T23831] overlayfs: ...falling back to redirect_dir=nofollow. [ 945.683719][T23831] overlayfs: ...falling back to index=off. [ 945.685440][T23831] overlayfs: ...falling back to uuid=null. [ 945.979957][ T1331] usb 14-1: new high-speed USB device number 35 using dummy_hcd [ 946.150076][ T1331] usb 14-1: Using ep0 maxpacket: 32 [ 946.153317][ T1331] usb 14-1: config index 0 descriptor too short (expected 35577, got 27) [ 946.156070][ T1331] usb 14-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 946.158875][ T1331] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 946.162131][ T1331] usb 14-1: config 1 has no interface number 0 [ 946.164175][ T1331] usb 14-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 946.167706][ T1331] usb 14-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 946.172122][ T1331] usb 14-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 946.175136][ T1331] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.184161][ T1331] snd_usb_pod 14-1:1.1: Line 6 Pocket POD found [ 946.386804][ T1331] snd_usb_pod 14-1:1.1: Line 6 Pocket POD now attached [ 946.685037][T23842] 9pnet_fd: Insufficient options for proto=fd [ 946.768177][ T40] audit: type=1804 audit(1747496454.669:4726): pid=23843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4838" name="/newroot/185/file0/bus/bus" dev="overlay" ino=119305 res=1 errno=0 [ 946.777741][ T40] audit: type=1804 audit(1747496454.669:4727): pid=23843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4838" name="/newroot/185/file0/bus/bus" dev="overlay" ino=119305 res=1 errno=0 [ 946.788013][ T1331] usb 14-1: USB disconnect, device number 35 [ 946.793239][ T1331] snd_usb_pod 14-1:1.1: Line 6 Pocket POD now disconnected [ 947.333573][T23852] 9pnet_virtio: no channels available for device syz [ 947.445337][T23859] 9pnet_fd: Insufficient options for proto=fd [ 947.866308][T23865] 9pnet_fd: Insufficient options for proto=fd [ 949.028046][T23877] 9pnet_virtio: no channels available for device syz [ 949.314958][T23882] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 949.317615][T23882] overlayfs: failed to set xattr on upper [ 949.319533][T23882] overlayfs: ...falling back to redirect_dir=nofollow. [ 949.321842][T23882] overlayfs: ...falling back to index=off. [ 949.323837][T23882] overlayfs: ...falling back to uuid=null. [ 949.578647][ T40] audit: type=1804 audit(1747496457.479:4728): pid=23893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4852" name="/newroot/191/file0/bus/bus" dev="overlay" ino=119412 res=1 errno=0 [ 949.588627][ T40] audit: type=1804 audit(1747496457.489:4729): pid=23893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4852" name="/newroot/191/file0/bus/bus" dev="overlay" ino=119412 res=1 errno=0 [ 949.621530][ T1331] usb 14-1: new high-speed USB device number 36 using dummy_hcd [ 949.693395][T23895] 9pnet_virtio: no channels available for device syz [ 949.789913][ T1331] usb 14-1: Using ep0 maxpacket: 32 [ 949.793067][ T1331] usb 14-1: config index 0 descriptor too short (expected 35577, got 27) [ 949.795881][ T1331] usb 14-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 949.798702][ T1331] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 949.802535][ T1331] usb 14-1: config 1 has no interface number 0 [ 949.804588][ T1331] usb 14-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 949.808225][ T1331] usb 14-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 949.813214][ T1331] usb 14-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 949.816237][ T1331] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.825664][ T1331] snd_usb_pod 14-1:1.1: Line 6 Pocket POD found [ 950.028323][ T1331] snd_usb_pod 14-1:1.1: Line 6 Pocket POD now attached [ 950.359811][T23900] 9pnet_fd: Insufficient options for proto=fd [ 950.437641][ T1331] usb 14-1: USB disconnect, device number 36 [ 950.440717][ T1331] snd_usb_pod 14-1:1.1: Line 6 Pocket POD now disconnected [ 951.728971][T23919] usb usb1: usbfs: process 23919 (syz.1.4862) did not claim interface 0 before use [ 951.944736][T23931] usb usb1: usbfs: process 23931 (syz.9.4867) did not claim interface 0 before use [ 952.630176][T11300] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 953.190076][T11300] usb 10-1: Using ep0 maxpacket: 32 [ 953.194188][T11300] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 953.197360][T11300] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 953.210175][T11300] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 953.213532][T11300] usb 10-1: config 1 has no interface number 0 [ 953.215561][T11300] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 953.233432][T23953] 9pnet_virtio: no channels available for device syz [ 953.241683][T11300] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 953.246295][T11300] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 953.249414][T11300] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.262913][T11300] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 953.514640][T23958] usb usb1: usbfs: process 23958 (syz.2.4877) did not claim interface 0 before use [ 953.680796][T23961] tmpfs: Bad value for 'mpol' [ 953.782823][T23963] usb usb1: usbfs: process 23963 (syz.2.4879) did not claim interface 0 before use [ 953.953612][T23966] 9pnet_virtio: no channels available for device syz [ 954.111733][T23970] 9pnet_fd: Insufficient options for proto=fd [ 954.301821][T23979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4884'. [ 954.544740][T23984] 9pnet_virtio: no channels available for device syz [ 954.664264][T23986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4885'. [ 954.715809][T23995] usb usb1: usbfs: process 23995 (syz.9.4888) did not claim interface 0 before use [ 955.126581][T24004] tmpfs: Bad value for 'mpol' [ 955.152342][T24006] 9pnet_virtio: no channels available for device syz [ 955.192307][T11300] snd_usb_pod 10-1:1.1: set_interface failed [ 955.194430][T11300] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 955.200552][T11300] snd_usb_pod 10-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 955.234289][T24010] 9pnet_fd: Insufficient options for proto=fd [ 955.241067][T11300] usb 10-1: USB disconnect, device number 37 [ 955.583703][T24020] usb usb1: usbfs: process 24020 (syz.2.4896) did not claim interface 0 before use [ 955.591052][T24022] usb usb1: usbfs: process 24022 (syz.1.4897) did not claim interface 0 before use [ 955.834379][T24028] 9pnet_virtio: no channels available for device syz [ 956.119147][T24040] 9pnet_virtio: no channels available for device syz [ 956.172877][T24043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4901'. [ 956.609917][T19255] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 956.770004][T19255] usb 7-1: Using ep0 maxpacket: 32 [ 956.775768][T19255] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 956.781052][T19255] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 956.785951][T19255] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 956.791474][T19255] usb 7-1: config 1 has no interface number 0 [ 956.795460][T19255] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 956.805510][T19255] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 956.815409][T19255] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 956.832101][T19255] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.877813][T19255] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 956.939425][ T40] audit: type=1804 audit(1747496464.839:4730): pid=24059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4908" name="/newroot/236/bus/file0" dev="overlay" ino=1321 res=1 errno=0 [ 957.061735][T24064] tmpfs: Bad value for 'mpol' [ 957.638593][T24075] 9pnet_virtio: no channels available for device syz [ 957.846876][T24081] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 957.849342][T24081] overlayfs: failed to set xattr on upper [ 957.851345][T24081] overlayfs: ...falling back to redirect_dir=nofollow. [ 957.854491][T24081] overlayfs: ...falling back to index=off. [ 957.856783][T24081] overlayfs: ...falling back to uuid=null. [ 958.078606][ T40] audit: type=1804 audit(1747496465.979:4731): pid=24086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4915" name="/newroot/198/file0/bus/bus" dev="overlay" ino=119604 res=1 errno=0 [ 958.090168][ T40] audit: type=1804 audit(1747496465.989:4732): pid=24086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4915" name="/newroot/198/file0/bus/bus" dev="overlay" ino=119604 res=1 errno=0 [ 958.143584][T24087] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4916'. [ 958.240696][T24090] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 958.243079][T24090] overlayfs: failed to set xattr on upper [ 958.245125][T24090] overlayfs: ...falling back to redirect_dir=nofollow. [ 958.247684][T24090] overlayfs: ...falling back to index=off. [ 958.249707][T24090] overlayfs: ...falling back to uuid=null. [ 958.614980][ T40] audit: type=1804 audit(1747496466.519:4733): pid=24092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.4917" name="/newroot/240/file0/bus/bus" dev="overlay" ino=119626 res=1 errno=0 [ 958.624967][ T40] audit: type=1804 audit(1747496466.529:4734): pid=24092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.4917" name="/newroot/240/file0/bus/bus" dev="overlay" ino=119626 res=1 errno=0 [ 958.818474][T24094] 9pnet_virtio: no channels available for device syz [ 959.099918][T19982] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 959.251375][T19982] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.255027][T19982] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 959.258053][T19982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.262328][T19982] usb 10-1: config 0 descriptor?? [ 959.332580][T19255] snd_usb_pod 7-1:1.1: set_interface failed [ 959.334748][T19255] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 959.337153][T19255] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 959.351106][T19255] usb 7-1: USB disconnect, device number 38 [ 959.452668][T24114] 9pnet_virtio: no channels available for device syz [ 959.615958][T24118] usb usb1: usbfs: process 24118 (syz.9.4926) did not claim interface 0 before use [ 959.660701][T24120] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 959.663170][T24120] overlayfs: failed to set xattr on upper [ 959.665707][T24120] overlayfs: ...falling back to redirect_dir=nofollow. [ 959.667980][T24120] overlayfs: ...falling back to index=off. [ 959.669998][T24120] overlayfs: ...falling back to uuid=null. [ 959.681605][T19982] usbhid 10-1:0.0: can't add hid device: -71 [ 959.683710][T19982] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 959.692639][T19982] usb 10-1: USB disconnect, device number 38 [ 959.781952][T24126] 9pnet_virtio: no channels available for device syz [ 959.876536][ T40] audit: type=1804 audit(1747496467.779:4735): pid=24131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4927" name="/newroot/207/file0/bus/bus" dev="overlay" ino=119753 res=1 errno=0 [ 959.889816][ T40] audit: type=1804 audit(1747496467.779:4736): pid=24131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4927" name="/newroot/207/file0/bus/bus" dev="overlay" ino=119753 res=1 errno=0 [ 960.109943][T19982] usb 14-1: new high-speed USB device number 37 using dummy_hcd [ 960.259926][T19982] usb 14-1: Using ep0 maxpacket: 32 [ 960.263199][T19982] usb 14-1: config index 0 descriptor too short (expected 35577, got 27) [ 960.265959][T19982] usb 14-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 960.268802][T19982] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 960.272071][T19982] usb 14-1: config 1 has no interface number 0 [ 960.274293][T19982] usb 14-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 960.278625][T19982] usb 14-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 960.283159][T19982] usb 14-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 960.286137][T19982] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.295549][T19982] snd_usb_pod 14-1:1.1: Line 6 Pocket POD found [ 960.401700][T24141] tmpfs: Bad value for 'mpol' [ 961.104476][T24146] 9pnet_virtio: no channels available for device syz [ 961.729025][T24164] 9pnet_virtio: no channels available for device syz [ 961.994961][T24171] fuseblk: Unknown parameter 'rootmXðZÆFHÇ' [ 962.403702][T24177] tmpfs: Bad value for 'mpol' [ 962.529596][T24180] 9pnet_virtio: no channels available for device syz [ 962.719962][T24184] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 962.719978][T24184] overlayfs: failed to set xattr on upper [ 962.719982][T24184] overlayfs: ...falling back to redirect_dir=nofollow. [ 962.719987][T24184] overlayfs: ...falling back to index=off. [ 962.719991][T24184] overlayfs: ...falling back to uuid=null. [ 962.893832][T19982] snd_usb_pod 14-1:1.1: set_interface failed [ 962.896422][T19982] snd_usb_pod 14-1:1.1: Line 6 Pocket POD now disconnected [ 962.899337][T19982] snd_usb_pod 14-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 962.904042][T19982] usb 14-1: USB disconnect, device number 37 [ 962.932105][ T40] audit: type=1804 audit(1747496470.839:4737): pid=24190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4947" name="/newroot/64/file0/bus/bus" dev="overlay" ino=119770 res=1 errno=0 [ 962.940202][ T40] audit: type=1804 audit(1747496470.839:4738): pid=24190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.4947" name="/newroot/64/file0/bus/bus" dev="overlay" ino=119770 res=1 errno=0 [ 962.978234][T24197] 9pnet_virtio: no channels available for device syz [ 963.067051][T24191] ================================================================== [ 963.069661][T24191] BUG: KASAN: global-out-of-bounds in fib6_ifdown+0x7f5/0x8f0 [ 963.072160][T24191] Read of size 8 at addr ffffffff9af85cd0 by task syz.1.4949/24191 [ 963.076262][T24191] [ 963.077421][T24191] CPU: 3 UID: 0 PID: 24191 Comm: syz.1.4949 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 963.077436][T24191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 963.077443][T24191] Call Trace: [ 963.077447][T24191] [ 963.077452][T24191] dump_stack_lvl+0x116/0x1f0 [ 963.077472][T24191] print_report+0xc3/0x670 [ 963.077485][T24191] ? __virt_addr_valid+0x5e/0x590 [ 963.077499][T24191] ? __phys_addr+0xc6/0x150 [ 963.077513][T24191] ? fib6_ifdown+0x7f5/0x8f0 [ 963.077526][T24191] kasan_report+0xe0/0x110 [ 963.077539][T24191] ? fib6_ifdown+0x7f5/0x8f0 [ 963.077552][T24191] fib6_ifdown+0x7f5/0x8f0 [ 963.077565][T24191] ? __pfx_fib6_ifdown+0x10/0x10 [ 963.077577][T24191] fib6_clean_node+0x2a4/0x5b0 [ 963.077590][T24191] ? __pfx_fib6_clean_node+0x10/0x10 [ 963.077605][T24191] fib6_walk_continue+0x44f/0x8d0 [ 963.077617][T24191] fib6_walk+0x182/0x370 [ 963.077628][T24191] ? __pfx_fib6_ifdown+0x10/0x10 [ 963.077639][T24191] fib6_clean_tree+0xd4/0x110 [ 963.077650][T24191] ? __pfx_fib6_clean_tree+0x10/0x10 [ 963.077662][T24191] ? __pfx_fib6_clean_node+0x10/0x10 [ 963.077674][T24191] ? __pfx_fib6_ifdown+0x10/0x10 [ 963.077687][T24191] ? __pfx_fib6_ifdown+0x10/0x10 [ 963.077699][T24191] __fib6_clean_all+0x107/0x2d0 [ 963.077712][T24191] rt6_disable_ip+0x2ec/0x990 [ 963.077728][T24191] ? __mutex_trylock_common+0xe9/0x250 [ 963.077743][T24191] ? __pfx___mutex_trylock_common+0x10/0x10 [ 963.077758][T24191] ? __pfx_rt6_disable_ip+0x10/0x10 [ 963.077774][T24191] ? rcu_is_watching+0x12/0xc0 [ 963.077786][T24191] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 963.077801][T24191] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 963.077818][T24191] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 963.077832][T24191] ? tls_dev_event+0xfd/0x10b0 [ 963.077845][T24191] addrconf_notify+0x220/0x19e0 [ 963.077860][T24191] ? ip6mr_device_event+0x1bc/0x230 [ 963.077876][T24191] notifier_call_chain+0xbc/0x410 [ 963.077889][T24191] ? __pfx_addrconf_notify+0x10/0x10 [ 963.077905][T24191] call_netdevice_notifiers_info+0xbe/0x140 [ 963.077923][T24191] unregister_netdevice_many_notify+0xf9a/0x26f0 [ 963.077940][T24191] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 963.077955][T24191] ? __queue_work+0x431/0x10f0 [ 963.077966][T24191] ? __queue_work+0x43b/0x10f0 [ 963.077978][T24191] unregister_netdevice_queue+0x305/0x3f0 [ 963.077992][T24191] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 963.078007][T24191] ? linkwatch_schedule_work+0x181/0x1c0 [ 963.078023][T24191] ? linkwatch_fire_event+0x6f/0x270 [ 963.078040][T24191] __tun_detach+0x1249/0x1540 [ 963.078052][T24191] ? __pfx_tun_chr_close+0x10/0x10 [ 963.078062][T24191] tun_chr_close+0xc2/0x230 [ 963.078071][T24191] __fput+0x3ff/0xb70 [ 963.078086][T24191] task_work_run+0x14d/0x240 [ 963.078103][T24191] ? __pfx_task_work_run+0x10/0x10 [ 963.078119][T24191] ? __pfx___do_sys_close_range+0x10/0x10 [ 963.078134][T24191] ? rcu_is_watching+0x12/0xc0 [ 963.078145][T24191] syscall_exit_to_user_mode+0x27b/0x2a0 [ 963.078161][T24191] __do_fast_syscall_32+0x80/0x120 [ 963.078178][T24191] do_fast_syscall_32+0x32/0x80 [ 963.078195][T24191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 963.078209][T24191] RIP: 0023:0xf7f01579 [ 963.078218][T24191] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 963.078229][T24191] RSP: 002b:00000000ffeb600c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 963.078239][T24191] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 963.078246][T24191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 963.078252][T24191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 963.078259][T24191] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 963.078265][T24191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 963.078275][T24191] [ 963.078278][T24191] [ 963.202370][T24191] The buggy address belongs to the variable: [ 963.204292][T24191] __key.0+0x30/0x40 [ 963.205571][T24191] [ 963.206366][T24191] The buggy address belongs to the physical page: [ 963.208437][T24191] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af85 [ 963.211275][T24191] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 963.213804][T24191] raw: 00fff00000002000 ffffea00006be148 ffffea00006be148 0000000000000000 [ 963.216535][T24191] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 963.219295][T24191] page dumped because: kasan: bad access detected [ 963.219302][T24191] page_owner info is not present (never set?) [ 963.219306][T24191] [ 963.219309][T24191] Memory state around the buggy address: [ 963.219315][T24191] ffffffff9af85b80: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 963.219323][T24191] ffffffff9af85c00: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 963.219331][T24191] >ffffffff9af85c80: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 963.219337][T24191] ^ [ 963.219343][T24191] ffffffff9af85d00: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00 [ 963.219350][T24191] ffffffff9af85d80: 00 00 00 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 963.219356][T24191] ================================================================== [ 963.219645][T24191] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 963.219655][T24191] CPU: 3 UID: 0 PID: 24191 Comm: syz.1.4949 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(full) [ 963.219669][T24191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 963.219676][T24191] Call Trace: [ 963.219680][T24191] [ 963.219685][T24191] dump_stack_lvl+0x3d/0x1f0 [ 963.219704][T24191] panic+0x71c/0x800 [ 963.219720][T24191] ? __pfx_panic+0x10/0x10 [ 963.219735][T24191] ? mark_held_locks+0x49/0x80 [ 963.219750][T24191] ? fib6_ifdown+0x7f5/0x8f0 [ 963.219763][T24191] ? check_panic_on_warn+0x1f/0xb0 [ 963.219780][T24191] ? fib6_ifdown+0x7f5/0x8f0 [ 963.219791][T24191] check_panic_on_warn+0xab/0xb0 [ 963.219807][T24191] end_report+0x107/0x170 [ 963.219820][T24191] kasan_report+0xee/0x110 [ 963.219847][T24191] ? fib6_ifdown+0x7f5/0x8f0 [ 963.219861][T24191] fib6_ifdown+0x7f5/0x8f0 [ 963.219873][T24191] ? __pfx_fib6_ifdown+0x10/0x10 [ 963.219885][T24191] fib6_clean_node+0x2a4/0x5b0 [ 963.219899][T24191] ? __pfx_fib6_clean_node+0x10/0x10 [ 963.219914][T24191] fib6_walk_continue+0x44f/0x8d0 [ 963.219925][T24191] fib6_walk+0x182/0x370 [ 963.219936][T24191] ? __pfx_fib6_ifdown+0x10/0x10 [ 963.219947][T24191] fib6_clean_tree+0xd4/0x110 [ 963.219958][T24191] ? __pfx_fib6_clean_tree+0x10/0x10 [ 963.219970][T24191] ? __pfx_fib6_clean_node+0x10/0x10 [ 963.219982][T24191] ? __pfx_fib6_ifdown+0x10/0x10 [ 963.219996][T24191] ? __pfx_fib6_ifdown+0x10/0x10 [ 963.220008][T24191] __fib6_clean_all+0x107/0x2d0 [ 963.220020][T24191] rt6_disable_ip+0x2ec/0x990 [ 963.220037][T24191] ? __mutex_trylock_common+0xe9/0x250 [ 963.220052][T24191] ? __pfx___mutex_trylock_common+0x10/0x10 [ 963.220066][T24191] ? __pfx_rt6_disable_ip+0x10/0x10 [ 963.220083][T24191] ? rcu_is_watching+0x12/0xc0 [ 963.220094][T24191] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 963.220109][T24191] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 963.220131][T24191] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 963.220145][T24191] ? tls_dev_event+0xfd/0x10b0 [ 963.220158][T24191] addrconf_notify+0x220/0x19e0 [ 963.220173][T24191] ? ip6mr_device_event+0x1bc/0x230 [ 963.220190][T24191] notifier_call_chain+0xbc/0x410 [ 963.220203][T24191] ? __pfx_addrconf_notify+0x10/0x10 [ 963.220219][T24191] call_netdevice_notifiers_info+0xbe/0x140 [ 963.220237][T24191] unregister_netdevice_many_notify+0xf9a/0x26f0 [ 963.220254][T24191] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 963.220269][T24191] ? __queue_work+0x431/0x10f0 [ 963.220280][T24191] ? __queue_work+0x43b/0x10f0 [ 963.220292][T24191] unregister_netdevice_queue+0x305/0x3f0 [ 963.220307][T24191] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 963.220322][T24191] ? linkwatch_schedule_work+0x181/0x1c0 [ 963.220338][T24191] ? linkwatch_fire_event+0x6f/0x270 [ 963.220355][T24191] __tun_detach+0x1249/0x1540 [ 963.220368][T24191] ? __pfx_tun_chr_close+0x10/0x10 [ 963.220377][T24191] tun_chr_close+0xc2/0x230 [ 963.220387][T24191] __fput+0x3ff/0xb70 [ 963.220402][T24191] task_work_run+0x14d/0x240 [ 963.220418][T24191] ? __pfx_task_work_run+0x10/0x10 [ 963.220435][T24191] ? __pfx___do_sys_close_range+0x10/0x10 [ 963.220446][T24191] ? rcu_is_watching+0x12/0xc0 [ 963.220457][T24191] syscall_exit_to_user_mode+0x27b/0x2a0 [ 963.220474][T24191] __do_fast_syscall_32+0x80/0x120 [ 963.220491][T24191] do_fast_syscall_32+0x32/0x80 [ 963.220507][T24191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 963.220520][T24191] RIP: 0023:0xf7f01579 [ 963.220529][T24191] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 963.220540][T24191] RSP: 002b:00000000ffeb600c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 963.220551][T24191] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 963.220557][T24191] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 963.220564][T24191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 963.220570][T24191] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 963.220576][T24191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 963.220586][T24191] [ 963.221116][T24191] Kernel Offset: disabled VM DIAGNOSIS: 15:41:11 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff88802b232de8 RCX=ffffffff8b37173b RDX=0000000000000000 RSI=ffffffff8bf48ae0 RDI=ffffffff8dce7d20 RBP=0000000000000000 RSP=ffffc900070bfb18 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81a07970 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880977e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000006c309000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88801e00c300 RCX=1ffffffff3565ebc RDX=1ffff110046e729c RSI=ffffffff822b960d RDI=ffff88801e00c318 RBP=0000000000000000 RSP=ffffc90004837a90 R8 =0000000000000006 R9 =0000000000056e00 R10=0000000000013a78 R11=0000000000000000 R12=0000000056e00867 R13=0000000000000000 R14=ffff888065852000 R15=0000000000000000 RIP=ffffffff8b6c375a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978e7000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f5f8ff8 CR3=000000006c309000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 EAX=00000000 EBX=00000001 ECX=00000000 EDX=00000020 ESI=00000000 EDI=00000000 EBP=00000005 ESP=002004c6 EIP=00000040 EFL=00080046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 00000000 0000ffff 00009300 CS =0000 00000000 0000ffff 00009b00 SS =0000 00000000 0000ffff 00009300 DS =0000 00000000 0000ffff 00009300 FS =0000 00000000 0000ffff 00009300 GS =0000 00000000 0000ffff 00009300 LDT=0000 00000000 0000ffff 00008200 TR =0000 00000000 0000ffff 00008b00 GDT= 00000000 0000ffff IDT= 00000000 0000ffff CR0=00000030 CR2=00000000 CR3=00000000 CR4=00002040 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000000 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff854c5b70 RDI=ffffffff9ade4c80 RBP=ffffffff9ade4c40 RSP=ffffc90004fbeeb8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3966666666666666 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff35bc9e2 R15=dffffc0000000000 RIP=ffffffff854c5b97 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097ae7000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50ddda4 CR3=000000004f6f9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000