last executing test programs: 10m57.672581233s ago: executing program 3 (id=537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0xff00, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10m57.672325261s ago: executing program 3 (id=538): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x40000) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000001c0)={0x7fb, 0x20005, 0x7, 0x0, 0x0, 0x58, &(0x7f0000000140)=""/88, 0x0, 0xffffffffffffffff}) 10m57.60842936s ago: executing program 3 (id=539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x2, @empty, 0x7}], 0x1c) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4048043) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r1, 0x1, 0x70bd2d, 0x1000000, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x39, 0xab, 0xfffffffc}}, {0x8, 0xb, 0xb6b}, {0x6}}]}, 0x4c}}, 0x4044040) 10m56.012501534s ago: executing program 3 (id=547): r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000200), 0x41, 0x0) write$UHID_INPUT(r0, &(0x7f0000000800)={0x8, {"35488c4ef835b1340c1f10afec9615c70950f0e85ef9911f50d4515298d0f6e38d57a5a89b33ce158a5db939d41aea74bd0b5c21f529451724abe1afef811a98f1e608c5d64dcb77e06f979e945047f1e0a5160b120d77e67be5dd4eb0ac8da8a1020ee17ced63db158fb9ed24c22279a9c02d8b98c0989546c0f9e06930dfff6f566e256a540dfb28dcceba902a5e830f4d02543606cec036aa33993229c72a9d4f2b22076058330339fd282180dbfa2c40af6fa00240f30c9debf5d7f4cb7b4b996c41e1ddb82d3d0b7a9bbf95c53e13e5b5e83b549ad1a271b799f361d5f3e4952b513a87c092fb7f69370a8ceff53d1a01c207d6baa300b670baff5859542648daa8175da984c201e7a14fbe744df00e4628260fe72622d7e7ec7b329ebe4094b29da0f2901149c887df3537aace06bb1aac2f1ed3be3cef05a52c231658717ff22461347e56d1c481674376e75d6f64fc431bb733919b1d59d070dfbe70495d373e594727f5371616c1576499a630a98bb6f6021f4e7a911e5dfeeed628cfb621f3c7aa556a00dd557db6bd33c049bcc68182cdf7f07f24264d2a9fda6110b1e5171837a370ec6d509a831738914edec3de3cb1b2d9fdf042394d612fbfac43a62fde90bf02904410010483b9d5d644b66e9d2981ab194516e52cca0b5485e30cd85325c62d35966d150342f5a6106ae99ed8f50f9857cf45a08938f0a79a3c7f87068ad07bcfdcc4ad0933017db6d27faf19188ad530dcdbf9dd233cda7772fb239414e1bf0fee4258ee7c09e7a93fd2d53d9ebb446d7bcf264feebdfbcfd2abda5e26a802783519ae18d17050afa98782becdc76084533510ab7bbb1da6fbb2f478ccec3fb0abcd466685a7c7c139459538eb6778c98869ae924d4827fed55227eac517a9ab33cbf378e86394332cd7161c0dc27915e18d45ffd05525a751819cce4e44d86017c2bb9d7291bb0627bdf724901e1e56cabb014610c0d9945dc040cba08dc768b7de67fc6fdbd97fdacf3ff0762505c28a247931e383282b446921c3ab25a988e800a6108b4d1ba1883842df21e5fcd76830a03eca6c92f63c8cf1fe302913d255f7672164321de74aac2089467ddd18bbd19ca1d5ae4d162314618cd246c7e0ab789b8ea3624fc02d5b36782ee58331c78835bac470ee7dd4900d5cfe31b6c3d7b2dab33fe4fb16d095b2b019c9a9b9e8ef1907712696998a529fdf685189626cf585ce1fc9ab2bed24d90460f30f16989849780444e85c73d6e688c8fcb14051689ee53c1c4ee218828245bd835499b0d9f7178e41d4132651394a9a63943e9748d0bbe62dc489a3959c5401dfe0f5bae7339a5be2da183e65173f4c8555356c8b1366dfb7f0831f13b742ebee07598715dc56d298ab8fa1cd97e945e025e31807da3665a4cce4f2c6ecefba9ca4ceae352b45ebed5ecd869f517a8292d2692802b3b8765cbb71b91ac9a2b1092703158f45c95124df618d7a8ab048480e2129bcd61f5baa8591cd92b18a0d7d5f0df791a5659af7e733cd06ae5b3e5b1a1a9fdc8b78af6a8159667269036c97888509783c12a4e67e3796589b3c819498867e95f94c09efdd6918396cb8693d82653d65d2a90afa401e2611b8ede52003fe59f187c582eced272e481484440c6a2c1078b78da338eb218df2e0a8eec0fb8ab35ff2c987dff07e9ba8100612fbe8e773a7f44c7704d4c03c980d694141908bc2004db84122a3145ed49d02a6c44fde9f1b1e60ae06b5c6d546fd7c5a94993b247a8dc5b967ccd767b7eaa4abbff607705e06aa8c8a4b1e668f953b3492fcbb9169d39dd7a6f4858b7ec4e198a1e89c252949c47850f01832fae669307872dee27c8bb4a42aa4ba30cc6a01d54e0b9845a2eebaa283d6cafbef555db0b705470e9da131b2b698706b0fe5d0413a33834b401a56e54260bde65871992c7f69de7d7199a145c2cdc8e4b6e1e2ba5ead54581a37cefb5605007d79c53efe311e2dded8f4750b5abb6d7a5d8ae6d26952ca868eab4b36716ac1b83ba513b5fad042dfea2cf6719e4fbcb740a3f9719879e47acc6763f01e787ad03b8778589b5d55dcf8751415222fc2e4169c6e5c505829240b7952fc297e16eb445c66ff5805a1463d005a7dfde9cd48578cbbffae2e49141c911c068d7bf229a002850840fd8d50401aedd85013eeb302e4971a1488b7a2c4042f7fb1bf32eba2be1166edd75528388f297c68d30f2ce93cd15738d2f9f3bed25e4d4fb94588c8b6b0e2fb3124a020d8535e6f68c890e8de0ff95485b47d39e38d1e11841f0fbc89676314a45b86fff891b2a0b41ad7affa22a353837e6dc23aeac524235b436f672a2bc97fd6102e3a927980e8d2922f04d2bb5d3f15be833d8f6df28d887329b9c841ed84f2a612075bb6b7cad134213e12aa3e80daba1bfdd1dcf0d6e514537c258e0a1ef87a73197053cd8890b33cf3f1b6da019bbbafa2800e554156d49c03828e5f4fb11aabd1fb3fea51ad5fffc9a1736a84161afecaa493681f77c028007b7bfb39e1a906e519fbf60b169a39a71480f0277134458d91f1ad115087c06b25d8aba04bb7f07d465123c51e0689a565d6b5cb767046993e2f312ea95629669766f073f67380838bc5192620fd726c6270d903a182a7cb64ddaa8dcf58252313a2f610171e51d6bb3312960f9dd49d22094cb0ca84cfc370e1a2b9e614bd182b9b153265fbf877de1569df5428ad713d783662c579ffe9dd164f4ae4c2e88db58ac1a54db360b4f0460563f89759fafa037470d032c169ec9e1675b029a6ba6b91141dfe4b53bd4293aab9ba9cf63537833b5e7612b14214c758cd060a797bf122d508df74b025addbc9c3bbb45e83d6ece029d640c6f7076da9ab0ae805127e9b43ac630146f43c42e225d6b764227113f5dfb3ae106ad5377371dc5122b2ffafde46046aaa59a2b4216ff666232ec87631d5c45630437a70d039b06263f0a5bddc5712b471a1163b19ff7601e2e46646943a8712049d8919400c4fc0fff774a26e6654e29d94a3b5f19940d13cbc3e282aadb3db2280566cf34482b25be5030fe0a2d90314f93fd9b4b2e5d0518e70636d0e2524cd56c52dceaf671cdf5e5338a95b02e65253484c7f18dbcca0f8860a1075238697edd201ca2472b521c05d0ea8d0f7cf2a521b8d53304d6023c85ebf15938ac0853e8267b706fc2a0321600003126fa54c44bb95b02b60360f4c374f61ebc763b13f92a0695137e46d27c4c370d2d0e94722adbf377ae02b2717bdbd1c1e667ffe18d12c19c73a293489b07c31ed5926c781bda3c0042419451369dab17a01b40c2b67f8f57843926aa5bd27c5e3ef70282c8364c27e99b02b04631041f271107f15347f5a91c09f015d60617f76e48ef81d98802457a68968147865c9df9b996f2f8651c74120013d6295e9c87565a45969d27931114b0b58c0bbb9db57121f9c522971085d080f37e8f561d66482a6a7591cdf54eeacda8941ce2c3c4bdeaab1b630f2da4e7000efb49a7d1a2793745d5221e598dac2475243caaabf7255c7929a33be4739450a794e6473f17b8e83386353ec460c2faa9b409a9762c98b6e8e295a0adf94ed49c3c4d6f8f5af9f2718a286980362e990df682b39344105915234c0c334e8a486e693a8d1da1a69ba3c41ab7ce6d463305e6c0decdaa8ff0b69db491670c60f9e9437363ee291eeb1d9b90731bcb12ca21640929e519c24b66730992d10cc679ec3aaa0a7bca5f3b705bb5816a4304925c2737155413224f4f9ce550cf101a9c83b67c456abce4946f212e3a8c0bda8433005d8c6be8dcc95e8d3d9a3b3e274aefbfd7d9710ee0b84c0b28e42717f5eebf39d2e899c5e77864331725deba3afacd1fde33c93902d7b3e556c228b1a20adbc2ddcc52ace02b6f5b4bf15291a8d1d2c5653ab4c987569c0d274e8702c0a9699e9b2d281169f5cdafd90229bad290e08ef7943f265b0ddc2d676da23bb608e414acee66e18353715eaa451bc75170a513c77d30a2b102fe46dc113f48249c74f4452be6565daeff9bfa86382e2fe6652bf6c11fe4a4d4c4f2470f941d1fd1feacc879729a9f4a0f16b597083f3969ac9db04027121856cd814f0d1a8f1f88eb58068bcc52325f2cfd6e871dedf5a7daf73efa2439b59eb75b6711510161aeedca44275d0ad8256725a0ad920045012e9ed2d9eaaaefef5c26b389b214d929fb35f0dbf8981fe8b99f532e8d3311e5f4954ffae0080ed70a4dbb297b5922d18c04a63ad1c2e2a9caac5a63364ab1c5d0f5217a53b8f725c1fc72df1267426e5dee8102e025eb712bce9447c45783b427f8e4b883703bc47b6f6dce4114888b250d71bb58fd10f6194f2c8502893bb5042dcc7e90d028d938a37cf3c2b7fbd6a4e1be636465ff2a3ca172b084d398cc216b3b84339f3e813524dabee6fb18c99a7ec56cfda8ab9db75a92f508d2f1ac0e3c0c57c47c8d10c4277045cd26d847502f415394376b3d7a099d824ba4c77de225e5242d62fdd61337b52ce454110b8eabc5fc94b43a6c2c7bfcce2dc20b4af2612e22406be5e5b0f798cc78a4da666537b8c7e3bce6565255c98496888eb554a5306ca657d390446f10bd7191c56e1d3baa940e12474e63ef9e8a4985e5b688084a10f7c66751caf8e6d66f10cef4c62e818d63207255a30f96ae1d39b2322e25c7f211d0ee378c54a2bb5fba4632fdfae18e7e7ae8aff782954c788c0f459b03313af46bc4c4eb60115546b4840787d1ea1f2b810b98247494df957b99de9c0a1c633cebcc8b3753e009c3558d026acc886395ad850c210e36f479c98c09588203049358a677bb2eb83520beebd5c0bb2a733957cffe6f7e7c8c1d2ea77d5b279c81f6554a5974562adcca60314c723741cb7a8b11ed720dbdfd5b144a8627856cd5e13998ff5e738b80eb4d93f9f7badaa0ccdfb5f50c769e90fbb20e77041577efda0c03a3e7a152e413a6017a1d6b210cced8a6f09da2f63e9b6739a0554c25deddc3a10ea9cb00ff8bab34d370cc2fa71bcfebce777ba678e6b411ed93a8f87c38531fce7c668958c2f663ad781f01c09a31c997c6df733ffe61a04ad83df5c1867d41e2fdb2bc0095ab5d9b5a413e130de7059f7145c3479ff87a550ca94c3dc812b6cd94a753a746e7e9e7bd1d1d0c99286ce859cbabb4614719a4fb5f751bd3d161f06b9ecc8808f244b106ca4d5bf1a45ecfc6d7b3cace5c73e0038d29cb436220f891ec724f4408f54c6f199b00e7e58f770af716bfb0633c62b7adbb856ab90c47124ccca4e873dde4f4ece26a8e8cc75059f1689463ecf9a23604029f1d59e07a1c7cbc6bc7c3f95ea655691c2735498dad8523ae88db13e39ff29f5e6fccbeca2852dfda92bc62c84c2b38ba83082fdd8a96992ec196f627449efe600301b5acc600381f1db12a77154c60ec291ea9622445fb1fd141abc852b88ba8187dd20e06e79ce4d1c3dfcd7672d203d3ddcba5d29c3cf5968b51e593a45235d96538d088581c32585efd40838e36bf6e4a7869dd2b4560e0f92a181d851f3edd775ff93d0c76fb7ea78a17afecdde396bc816982f0eb45141847efb447f541c7b6793a2fd82cfa7f5263fbc1fd9c454c5efa557d36bc07caddd791567b7cc7fcb460b6dafaf0da054d75a72f40115122efb53d455931366e747d2676f7e185c33504827f122689535fb2ba6d60774bf6dd585ff89908c99a6f41547642d75f61619ebdd3d851fe1eca17862ae1ce09d971aa20c7e6402afedd4", 0x1000}}, 0x1006) ioctl$RTC_EPOCH_SET(r0, 0x4004700e, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0xfffffcc6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='Iuxx', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x103e, &(0x7f0000001b40)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb86dd6a00000010081100fe8000000000000000000000000000aafe8000000000000000000000000000aa"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x1, &(0x7f0000000480)=@raw=[@ldst={0x0, 0x2, 0x1, 0x4, 0x7, 0x1, 0x4}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x947}, 0x94) 10m54.825742061s ago: executing program 3 (id=552): r0 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x244c0, 0x0) clock_gettime(0x0, &(0x7f0000002280)) recvmmsg(r0, &(0x7f00000040c0)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000440)=""/69, 0x45}, {&(0x7f0000000540)=""/235, 0xeb}, {&(0x7f0000000640)=""/187, 0xbb}, {&(0x7f0000000700)=""/115, 0x73}, {&(0x7f0000000080)=""/37, 0x25}, {&(0x7f0000004280)=""/106, 0x6a}], 0x8, &(0x7f0000000800)=""/100, 0x64}, 0x3}, {{&(0x7f0000000880)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004200)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/202, 0xca}, {&(0x7f0000001a00)=""/180, 0xb4}, {&(0x7f0000003b40)=""/52, 0x34}], 0x4}, 0x100}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001ac0)=""/12, 0xc}, {&(0x7f0000001b00)=""/77, 0x4d}, {&(0x7f0000001b80)=""/94, 0x5e}, {&(0x7f0000001c00)=""/249, 0xf9}, {&(0x7f0000001d00)=""/82, 0x52}, {&(0x7f0000001d80)=""/48, 0x30}], 0x6, &(0x7f0000001e00)=""/79, 0x4f}, 0x8}, {{&(0x7f0000001e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001f00)=""/186, 0xba}, {&(0x7f0000004300)=""/215, 0xd7}], 0x2, &(0x7f0000002100)=""/248, 0xf8}, 0x80}, {{&(0x7f0000002200)=@generic, 0x80, &(0x7f0000002280), 0x0, &(0x7f00000022c0)=""/120, 0x78}}, {{&(0x7f0000002340)=@sco, 0x80, &(0x7f00000027c0)=[{&(0x7f00000023c0)=""/176, 0xb0}, {&(0x7f0000002480)=""/112, 0x70}, {&(0x7f0000002500)=""/29, 0x1d}, {&(0x7f0000002540)=""/19, 0x13}, {&(0x7f0000002580)=""/64, 0x40}, {&(0x7f00000025c0)=""/152, 0x98}, {&(0x7f0000002680)=""/166, 0xa6}, {&(0x7f0000002740)=""/99, 0x63}], 0x8, &(0x7f0000002800)=""/86, 0x56}, 0x7f}, {{&(0x7f0000002880)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002900)=""/68, 0x44}, {&(0x7f0000002980)=""/101, 0x65}, {&(0x7f0000002a00)=""/13, 0xd}, {&(0x7f0000002a40)=""/236, 0xec}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)}, {&(0x7f0000003b80)=""/59, 0x3b}], 0x7, &(0x7f0000003c00)=""/13, 0xd}, 0x2}, {{&(0x7f0000003c40)=@xdp, 0x80, &(0x7f0000004000)=[{&(0x7f0000003cc0)=""/212, 0xd4}, {&(0x7f0000003dc0)=""/31, 0x1f}, {&(0x7f0000003e00)=""/19, 0x13}, {&(0x7f0000003e40)=""/154, 0x9a}, {&(0x7f0000003f00)=""/196, 0xc4}], 0x5, &(0x7f0000004040)=""/69, 0x45}, 0x9}], 0x8, 0x2, &(0x7f00000041c0)={0x77359400}) capset(0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r1, 0x0, 0x2000c001) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x400, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) timerfd_settime(r5, 0x3, &(0x7f00000004c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000004240)) bind$xdp(r6, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x0, r7}, 0x60) sendmmsg$inet(r1, &(0x7f0000003b00), 0x0, 0x40800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r3, r9, 0xf3a, 0x4) 10m53.814338774s ago: executing program 3 (id=554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a680f0000000a01040000000000000000020000003c000480380001800e000100627974656f726465720000002400028008000140000000100800024000000000080004400000001408000540000000a1ae583c88d75326fd2b104b36d30900010073797a30000000000900020073797a320000000014000000110001"], 0x90}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) capset(&(0x7f0000000100)={0x20071026}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18e800000000000000000000000000009500eff283fe0000c2db4f1f6107000000281f2905be923d2a245d3ef028de84ca93afbaab4cd5c79940006e43de2571e4b9f814ffe44d45ec8225b26838c8633f674b3f96f783a3a7a337ae7a94cf62b58cf7d93ab801b015f5b2b5e1702cb4d9cde1c8ec19"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x5}}, 0x14}}, 0x0) 10m38.76257028s ago: executing program 32 (id=554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a680f0000000a01040000000000000000020000003c000480380001800e000100627974656f726465720000002400028008000140000000100800024000000000080004400000001408000540000000a1ae583c88d75326fd2b104b36d30900010073797a30000000000900020073797a320000000014000000110001"], 0x90}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) capset(&(0x7f0000000100)={0x20071026}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18e800000000000000000000000000009500eff283fe0000c2db4f1f6107000000281f2905be923d2a245d3ef028de84ca93afbaab4cd5c79940006e43de2571e4b9f814ffe44d45ec8225b26838c8633f674b3f96f783a3a7a337ae7a94cf62b58cf7d93ab801b015f5b2b5e1702cb4d9cde1c8ec19"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x5}}, 0x14}}, 0x0) 9m38.91256332s ago: executing program 1 (id=943): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000005080851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 9m38.752419793s ago: executing program 1 (id=945): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0xfc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r2, 0x1) (async) shutdown(r2, 0x1) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@newlink={0x40, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@newlink={0x40, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}}, 0x0) gettid() (async) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) (async) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x60}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_emit_ethernet(0x68, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x32, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "251a50", 0x0, 0x2c, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], "fd0a"}}}}}}}, 0x0) 9m38.242911279s ago: executing program 1 (id=946): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='btrfs\x00', 0xa00001, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 9m38.171894768s ago: executing program 1 (id=947): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) timer_settime(r2, 0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000220000000000000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b657400001400028008000240000000030800014000000001240001800a00010071756575650000001400028008000440000000100600e93f000100000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xa0}}, 0x0) waitid(0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xc}}, 0x20) clock_gettime(0x0, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000280)={{r7, r8+10000000}, {0x77359400}}, &(0x7f0000000300)) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x1, 0x5003) (async) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x1, 0x5003) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@bridge_newneigh={0x28, 0x1c, 0x8, 0x70bd29, 0x25dfdbff, {0x1c, 0x0, 0x0, r10, 0x40, 0x0, 0x7}, [@NDA_DST_MAC={0xa, 0x1, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000100)=[{0x1, 0x0, [0x8, 0x0, 0x7f, 0x0, 0x5, 0x2, 0x5, 0x3, 0x317b7dd8, 0x6, 0x5, 0x3, 0x800, 0xddb, 0x9, 0xe]}, {0x3d, 0x0, [0x5, 0x6, 0x7, 0x6, 0x8b09, 0x6, 0x0, 0x3, 0x5, 0x101, 0x2, 0x7, 0xffff, 0xfffffff9, 0xd, 0x5]}, {0x29, 0x0, [0x8, 0x378, 0x7fff, 0x717f, 0xd9a9, 0x5, 0xfffffff9, 0x0, 0x200, 0x6, 0x0, 0x6, 0x9, 0xfffffffe, 0x2, 0x1ff]}], r6, 0x1, 0x1, 0xd8}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000100)=[{0x1, 0x0, [0x8, 0x0, 0x7f, 0x0, 0x5, 0x2, 0x5, 0x3, 0x317b7dd8, 0x6, 0x5, 0x3, 0x800, 0xddb, 0x9, 0xe]}, {0x3d, 0x0, [0x5, 0x6, 0x7, 0x6, 0x8b09, 0x6, 0x0, 0x3, 0x5, 0x101, 0x2, 0x7, 0xffff, 0xfffffff9, 0xd, 0x5]}, {0x29, 0x0, [0x8, 0x378, 0x7fff, 0x717f, 0xd9a9, 0x5, 0xfffffff9, 0x0, 0x200, 0x6, 0x0, 0x6, 0x9, 0xfffffffe, 0x2, 0x1ff]}], r6, 0x1, 0x1, 0xd8}}, 0x20) 9m38.011064076s ago: executing program 1 (id=949): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 9m37.422181722s ago: executing program 1 (id=955): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='btrfs\x00', 0xa00001, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 9m37.385221726s ago: executing program 33 (id=955): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='btrfs\x00', 0xa00001, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 8m1.259688348s ago: executing program 2 (id=1422): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 8m0.801521715s ago: executing program 2 (id=1426): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = gettid() r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) r3 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80400) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe4) r5 = getgid() r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fscache_access\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000640)={0x6, 0x4, {r1}, {0xffffffffffffffff}, 0x101, 0x1ff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) sendmsg$unix(r3, &(0x7f0000000780)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)="0d6d382fcca9d14d4d33591ca2e56ae685ad7540823a0afb3209039df25837ef24bd1581deb8b8b2f09c0250fbd7907d060e1e2f22ad43f1cb6ef4620d4545c17e76ccc281dc61b45ac207d17bf4147ae4189045bf6258e8626bfa1981fd24f2513806c17d554b7b0d264390287c1a5e7e435a277c365e58b15154ac889283d5b4900a9ed562254b253722659d16c37b109aa910919bb3f4146faad760fba2c319ad1a98f27eeaa6f43eda430f56c769701cbfe72cfa3321020537ebbf8a0f9c1fa06610423ac45aafa70e6ed8cd54b2fba49dc383dc33", 0xd7}, {&(0x7f0000000340)="80a4e170407d6cedeada2ce035b636131ff7f20814d78a2d906674640be8d2457b7dbfb9", 0x24}, {&(0x7f0000000380)="4ddf54200c871628639c7a33f888b820b49b28face490d5efe3ac5", 0x1b}], 0x3, &(0x7f0000000700)=[@cred={{0x18, 0x1, 0x2, {r1, r4, r5}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0, r6]}}, @cred={{0x18, 0x1, 0x2, {r7, r8, r9}}}], 0x4c, 0x200048c5}, 0x4) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) read(r10, &(0x7f0000000b80)=""/215, 0xd7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000100)={0xd, @time={0xd68e, 0x8001}, 0x0, {0x6}, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r10, 0xc08c5335, &(0x7f0000000280)={0x3, 0x69, 0x1, 'queue1\x00', 0x6}) tkill(r1, 0x7) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000000, 0x800000000, 0x0, 0xa, 0x20000061], 0x11e, 0x0, 0x0}, 0x108) 8m0.627244956s ago: executing program 2 (id=1428): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x6, 0x50100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x29}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x56, @empty, 0x526f}}, 0x0, 0x0, 0xdf8, 0x0, 0x32}, 0x9c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000, 0x0, 0xfffffffc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xffff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty, 0x2}}, 0x0, 0x0, 0x0, 0xfffffffe, 0xc2}, 0x9c) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r2, &(0x7f0000000100)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3f000000, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000019080)=0x30) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0xc, 0x7, 0xffffffff, 0x0, "4d6b5ccb00"}) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1) 7m58.251852488s ago: executing program 2 (id=1432): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x102, 0x4, 0x404, 0x0, 0x10c, 0x10c, 0x324, 0x324, 0x324, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @empty, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast1, @broadcast, 0x0, 0x30030000}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) 7m58.101259655s ago: executing program 2 (id=1433): socket$inet_smc(0x2b, 0x1, 0x0) bind$llc(0xffffffffffffffff, &(0x7f00000002c0)={0x1a, 0x8, 0x81, 0xbf, 0x9, 0x80, @link_local}, 0x10) (async) r0 = fsopen(&(0x7f00000001c0)='ubifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) pipe(&(0x7f0000000080)) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x45c9, 0x10, 0x2}, 0x8, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf6f, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x2000, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x80000007, 0x9, 0x4, 0x198ea6eb, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x3, 0x0, 0x4, 0x9, 0xfffffff0, 0x0, 0x200, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0x0, 0x1200000, 0x2, 0x0, 0x6, 0x0, 0x800, 0xbda7, 0x0, 0xfffffffe, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52e, 0x0, 0x5, 0x0, 0xfff, 0x5, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74df, 0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x100, 0x9, 0x80000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x105, 0x80000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x40, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x1000000, 0x100000, 0x0, 0x0, 0x3, 0x7, 0x0, 0xf, 0x4]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) syz_open_dev$admmidi(&(0x7f0000000280), 0x7f, 0x462040) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000002040)) (async) sendmmsg(r3, &(0x7f0000002540)=[{{&(0x7f0000000140)=@generic={0x6, "e7a7997b66bbb40320011aec735bf9d4160abf9df10c525a55cb6fe53dadfc3ef7646d8d408dc581ccfc67d444aa80cebf6fd652acbc74eaebd98f26f9aee9b24feca9e51ac669080442482db247fb1c00040e3a5463875ecbbe66c76f49c5ced152bc3acade664dedd2f76b81c561532c7d24d0819bc969ab8adc6fb6ef"}, 0x80, 0x0}}], 0x1, 0x40840) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000180)='./file1\x00') (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x63, 0x2, 0x6, 0x0, 0x2, 0x8000000, 0x1, 0x4, 0x7fffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) 7m57.991627303s ago: executing program 2 (id=1435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000, 0x800, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$setperm(0x5, r4, 0x30925) keyctl$get_security(0x11, r4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x200000, 0x1800, 0x7, 0x1}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 7m42.801997597s ago: executing program 34 (id=1435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000, 0x800, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$setperm(0x5, r4, 0x30925) keyctl$get_security(0x11, r4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x200000, 0x1800, 0x7, 0x1}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5m30.580237338s ago: executing program 0 (id=2161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x102, 0x4, 0x404, 0x0, 0x10c, 0x10c, 0x324, 0x324, 0x324, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @empty, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast1, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24, '\x00', 0x0, 0xfffffffb}}}}, 0x450) (fail_nth: 1) 5m30.270444108s ago: executing program 0 (id=2162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001480)='sys_enter\x00', r5, 0x0, 0x5}, 0x18) r6 = epoll_create(0xa60d) epoll_wait(r6, &(0x7f0000000040)=[{}], 0x1, 0x4) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) msgget$private(0x0, 0x50) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) 5m29.377906577s ago: executing program 0 (id=2166): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4f1d84a14c889144}, 0x4008801) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r3 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000080)='\x00', 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) 5m20.459082825s ago: executing program 0 (id=2186): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x26020480) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020777b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffffff850000002d000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0xfffd, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "1c412914c61f5b09", "0fa978d6d73102770adf9c296563636dba312dcecdfe5af8fd9592d02bf26732", "6b0ff119", "358b156d1a8a8224"}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = fcntl$dupfd(r3, 0x406, r4) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000100)=0xeea, 0x4) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000b, 0x0, 0x7ff, 0x2, 0x2, 0xd, 0x5, 0xa000, 0xa40, 0x0, 0x0, 0x3001, 0x2}}}, 0xffffff03) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) 5m20.035900702s ago: executing program 0 (id=2188): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) io_uring_setup(0x734a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000080)='i\xac;\xd1\xeb\xf5,Ei\x00\x00\xea\xff\x00\x00\x00w\xfd\x00'/29) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r3, &(0x7f0000000380)="674fe31d572036eecf17a205a9b8096fd48403c40e6a8ba895fe071e6e5bc8bd3670d9c3c18280e6a8073b573d7da9b548688516123cd20482194905d95359dae1eabeeff7307c3a29c46d169ef12e464d65e99544979088e1a18066e5e4af5d57943894bd9725d1275c3a180cb298b3a841264cfcedf51150e88c1f", 0x7c, 0x20000000, &(0x7f0000000400)=@file={0x0, './file2\x00'}, 0x6e) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x2000000, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 5m19.580635799s ago: executing program 0 (id=2190): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0000400}}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x34}}, 0x0) 5m19.420822288s ago: executing program 35 (id=2190): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0000400}}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x34}}, 0x0) 21.244759954s ago: executing program 5 (id=3426): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) openat$ttynull(0xffffffffffffff9c, 0x0, 0x141440, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_usb_connect(0x6, 0xb13, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x6d, 0xaa, 0x28, 0x40, 0x12d1, 0xb4d5, 0x166c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb01, 0x2, 0xb, 0x6, 0x50, 0x3, [{{0x9, 0x4, 0x31, 0x40, 0xa, 0xff, 0x3, 0x36, 0x7f, [@uac_control={{0xa, 0x24, 0x1, 0xfffb, 0x5}, [@mixer_unit={0xa, 0x24, 0x4, 0x2, 0x1, "74a8cf055d"}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x1, 0x3, [0x9, 0x77648638d89c0dcc, 0x4], 0x3}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0xfe, "9b4d63393b29"}]}], [{{0x9, 0x5, 0xc, 0xa, 0x20, 0x80, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x3}]}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0xff, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xd}]}}, {{0x9, 0x5, 0x86, 0x10, 0x40, 0x0, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x43, 0x4, 0x4645}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x1, 0x2c, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x3}]}}, {{0x9, 0x5, 0xf760948a7cc4f363, 0x10, 0x10, 0x80, 0xfd, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x6}, @generic={0xc9, 0x9, "f010f24b2de15f246c74f4f360c0f146a5b53fd8322c4b8dc220bd6bf059cb64ad1390208c089d5da3e9075b694b67bf9bc4eafa3f751f65db3787e2819646edf92e0fd3f97e2bdf6dc6fa55c862726959c433244b35bbc0f3ca8cd080b0d93db8cae9e360ca3095bf10fd8068b5ce4c5866a4f065e89bcf6bc8a02f9075517834d0eecf9c235226f3fa3ef97a1a7e423e4f59de085111becb9edd35dd1dd1977e1f4959d07f8fbb731e6f8ca0d265ec74ed5d5c4e4df5b5b5f6705116e0001117c47fb1e1dbd3"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x26, 0x6, 0x5, [@generic={0x9f, 0x7, "2c3d7d3e317da3687e1f801510f3cfcc22e47a2957aed9483a7f92655d9c80b54bf3b5609c28e23b6091857f4466192c602bcd0518ad62672a07b1b561c113ab51fcfe894460d94adf58a4eac1dc25312a65160e1faaebd2f30c56f40563b84d64af7843ce65b652422fc40c270d6c8d6d7ff1f48b96a75c39b080b9c932b3420f97325cfdf89a17a00c4c570df3ab4fa2576eabf8c51f4075bb24173c"}, @generic={0xfd, 0x5, "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"}]}}, {{0x9, 0x5, 0xe, 0x11, 0x20, 0x5, 0xf5, 0x7, [@generic={0xde, 0x22, "ec72224e712c3afea50e9574859ff6dafbe2ac17c3bf9ca6174ec41990c54a25cf46e446be681c903c5dfe93ff0e57c202fd13d362f2d97ff76b8d7cabf26a352560d5a30a9ff109994abb2bc266de665c72e87417f55a598f33d76d66d47bc9f5ae489df00de1f729815072932e001f9053b2698374846263a53fb625120b9aeabb4b568e6acef229833c2fbdc41024c7404c7e1f7979f0e96f7b041d1d8037bfdd4f8761233e949bf05665e2ab7f073642ebfe5c9136fc1075b9229797994860f91c64de450b3299e13a3a9f04ec32f0a09a64413f49d8f880c427"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0xc, 0x9, 0x6, [@generic={0xdf, 0x23, "5672e75ad1dd3fcb86e96eccb287d45283a47f4c69c7519fb15aec81784a457d5350570f88dedc1cd273dc558eef254d7ca6dbc8b6b9386a8655ecba011d764468de8483d07d0e7939f696811e5e2c7e371837f426e4356e780f4a241cf90b4427dd406bcca7c083d859d4185c134b5dc337e0cbb1ad1ba3968d648b5cb6e3b4217755e924639dde20859343255a4e9ef648cbfe3e33981e99d2839e9881b0a74fe3557b1db95fd2a220580e96fb4d7f4ab597e9a76ce412b7e3c3ffca6e6c14c8ee7d39d9c32735b1ebc384a488e7ce713a678ab26cedff269926335c"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x8, 0x4, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xca}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0xa, 0x3, 0x4, [@generic={0x17, 0x1, "96c75fe0866b59c7f2483e92b1f4742b1a6f9b97bc"}]}}]}}, {{0x9, 0x4, 0x3, 0x1, 0xa, 0xf9, 0x76, 0x50, 0x5, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, 'fbTw/'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x3, 0x8}, {0x6, 0x24, 0x1a, 0x2, 0x8}, [@obex={0x5, 0x24, 0x15, 0x80}, @mbim_extended={0x8, 0x24, 0x1c, 0x9bc, 0xf8, 0xc0d}, @acm={0x4, 0x24, 0x2, 0xa}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x80}, @mdlm_detail={0xd0, 0x24, 0x13, 0x3, "2c8a5ff0fcc7e8a6a5cb9e9565622a76f100e9fec0c63171f2bd3c26cd756810d6903e73a31ac8c8d159a595713b5557eb4480662f4eafae0eb3b894094eeca90b59cd273c695ee549bc17b0bdcf18d2c70780859933e077e53b257e35d1d465282ab4d3e81987fa4e9d57d999028b6430348541cc0a92c0c338b27b6f3604471693db41da919ea20c23a7fcaa9f3b1ad8332cb3f6816e7ebeda3c917f327e002cc48a1d4a691f92e998a52eda619d0928f0e7b3cd421fd2f32b7fc43b9ef06e0c346073493d494e28dee48f"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x7f, 0x4, 0x2, [@generic={0xc4, 0x24, "e4dad8b6c7aa8e784f26b545f124e9b1e3884305ffcf2ec6f296fa21ec7e28e240d5bdb333a7b35752e7422cf3c7b5d3a7e49e1f371c1b96565b1a475208ab3530dfdd69ebe5c70605f1c32e44bff3ef6df428b512a32bcbc8128a3729a6fb3f06a74c72f200488cb5a02968a092179d3574944d87b11951a8635b302095580ab0128245228012adba8b56ff3229bfc0cf2387715aa0cc896ed28662fb24dddd7ff2f6185eb71c2521ef20af9bbbc393278a749511d474a72d9a54434dc30f6c9eb3"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x1, 0x7f, 0x8, [@generic={0xf9, 0x11, "1c774185f65062e725208b76371c2a2f07f21a218831c0e785519a58d707df0c1a484cd1766b31b02e78793c510ebc9dd96ab931860d04a8d97535449fcf353ab2a54213d6178b632367ffbd29ef9a9a3d60e456803b99f260c566141164de39b16485e3838f5990af8e50033d50b84ed2d49df3d9a970ee4b16b7780cee004210a63547afd3859ff7a3135b98a5142b4b068c921784188733355b7ff9a3d78dcf30d098316be94923b59c0deb526b5250fd92548a1403413652d62108ae7f4103dcd44fa52f36aba72e5f774301d83cd2acefc76e82cb13ac23a87688b9afcdaccf2617b2eb3a20719ca0c862c14e0e02ea6f0b04be19"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x5ef, 0x4, 0x58, 0x9, [@generic={0x2, 0x31}]}}, {{0x9, 0x5, 0xb, 0x1, 0x400, 0x1, 0x2, 0x8, [@generic={0x3d, 0x24, "1c8ed6f2ba47af2e733b0eccf3568184b28dbb2aaf5645648702d37333696656fb91b69fde0317c6c1dc8b8cf932511587a7d3e1973c3292b37092"}]}}, {{0x9, 0x5, 0x15, 0xc, 0x20, 0x3, 0x0, 0x4b, [@generic={0xee, 0x10, "167e4151487981f769ec64794cd47692cc3a057b4ae435def71a205fbfcfb779653a4d82df0bb740a8faab598fda621329dcefbc70bd9b4ca3b6bf20da0f7cda65011c99cbc58e3c6a2c43024098f81be654844b827c7fa4d62ecd8ab57cc523081c63d24034f60e03312d756e9d2491bc04d3e8a88f53a9d145372d6aa1eaeff2bb9538cf39187870454a81a8bcbc542c026cf1c8a567d6a516d74a8ed33acb910ac91fb6be35c635befad739b906f9ac61d1b6a4fcf65245f1d95cb96cc845f8a217dbf23383a2abe2a3a70a4d547848bd494ccfe034666e6795b557dd0d933d7e4668cbfcf537c25c6801"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x9}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x2, 0x2, 0xb, [@generic={0xa, 0x9, "380181b54ecf842d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0xc, 0x10, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x81, 0x8, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0xfff}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0xc, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x5}, @generic={0xee, 0x31, "d89d64d1e68ac50a885ad5340d463ef63a06271ff0fcb5fcdadcd160b2ac722195726c4441f7744ea687b29a1e24a90c434ae552bacbb5f247622ae0d859c684a9fecf697b7945154f33f4b83fe27b1333f5991048c7d3b988c4212d4ba3c29a9ccaa3794b18489f202fc670b1f3ba9a202752a735fd37ee0eb0971f40f49565e043071ed21d7ac2dd0c4cf09cdd043790923193ad509f8c446e2f537b0592e8a96b9315eef6fb915e852586ffa5d5f8f1030b0302629f2988701e5cab120165aab3e5c3c4f57ac79ee44850020f4c268cf1c1ddcd53b9a383bd4319415a2e15650749e3bed0db5b2c93c7bd"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x5, 0x5, 0x4, [@generic={0x49, 0x21, "a3f862024b1fc208d7a82f5d7f7d4356547d6fe9ebb5018b43432fdaee2101b4da00e950dd22d0003380ee3d99ec3d405a712e33342bbb4af2d3f62dbfb744a861578bfca0303e"}, @generic={0x40, 0x22, "db829527dcf4d42cbd33435888fcd592166423e837ae8ba8b7b285be93dd192ab6ad9b39dc46870f9e8281ba70f8c2f41681019ef8c3768d2271c7e64b2c"}]}}]}}]}}]}}, &(0x7f0000001b80)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x310, 0x8, 0x8, 0x4, 0xff, 0xf}, 0x16, &(0x7f0000001780)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xe, 0x7, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1, 0x9, 0x8}]}, 0xa, [{0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xc0a}}, {0x3, &(0x7f0000002080)=ANY=[@ANYBLOB="eb005feade8287c21b1ccbc3a5b0e1f6b7fd322b675c0b81ef12ab91dbb71657b204b3b223"]}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x1c31}}, {0x9a, &(0x7f0000001900)=@string={0x9a, 0x3, "264b9c15f18fd712361e612d97f9880136aeff4be028cd6ed33c59e37b61a7f6e11d1ea0359842b32d70a2f05d5b2448e0dcc0b3b1b4b571e64857416aa9422251ce68ca36d787b0436bc9b920e975fde70f6e6a6ecf4659aeff1df430edac4b5a497038dd2d1acc946c96b43ed05de93dba211ed78bdf0099a69a06a98a4576b32329c85ca82204c850ed9a9e759ad4719eab10ad989843"}}, {0x3d, &(0x7f00000019c0)=@string={0x3d, 0x3, "caa55aa465add4665172d446680609008d085b181d50ae78d14e9bafbb2a77dccf31ae95580b68b07e85507024c65a571e9df72bbba03aff8a82ff"}}, {0xb6, &(0x7f0000001a00)=@string={0xb6, 0x3, "19545cd88b20105939d5669c5375f941d1729eea8a613021f237acdd78f682271bdcd127c90991e4df0fcbefe81b52d55e71a97b1db3c5834c5347f35fce5dec6ecf96e1b0454fc1d4d7f8d71c4ea0ea437024954c9e5f967b08042de57239a9bf69f1aca405e275e4210d5576b34c77bab2c059d520e1206dd37ab0d8ba7d8c12605f54c42458291dbc9a6166f08d655bdd0d205aff4dd57d88577172279eb594c2e800fff23782cab7299d2b0a9e4606542c3f"}}, {0x27, &(0x7f0000001ac0)=@string={0x27, 0x3, "6f2a0156ff34c7e1dd049a12752b811a000a76d3aadc534fcc38aec188ff2673e65adaaf92"}}, {0x69, &(0x7f0000001b00)=@string={0x69, 0x3, "90e02b4aed8bfbd6a93df567e42c23ed2d8225863c27af055220bcac6536cc4a9d4aa6256e568462990315436e620681952bcb9b861c09c04a8fef1bdc53bf2679c48e3b31f178fcfb78d4dde7b81d717e411592ca0e667839736e41d041f71ca4265adb95655b"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000001d80)={0x14, &(0x7f0000001c00)={0x20, 0x30, 0x91, {0x91, 0x2, "cee4f3c612189edf462db618820ba5f95b7127669c501303c9d83ebf52609a9828559cf73e2614db432e7f20bcf611fdab8ce6f71bab240be9618a7324a309458a0835a34a71e0bc850401771ded0b16cb0a9ee2ca8e12f0e630e0dcb3ea337e6d9b837362dfb1b0964f91122be0e347b2b1996bfe8102c77998fa849aeb88d051d081a9fa4880b9e5f91cd1705f50"}}, &(0x7f0000000480)={0x0, 0x3, 0xab, @string={0xab, 0x3, "0d3244669eb66968514ea7fdca3732175b12e8c9a369653b655321c52d0842484a3621e941694db34ac9845c2be1acd403875d0cb7a4aec62a23a77e6cd818e2a356fea8f45abe552423b49266321e9bf52c0ce60225999dd79f08f64f6f6ef5300f53caf8b36782c414f087d686687c5c828d0a41a861accfd67f319a7c7c3d23b7dd0d7fe91944839a11042345aa598f53b1dc85c6bae8008eaf1762a42bf8c9a68ead25f086f901"}}, &(0x7f0000001d00)=ANY=[@ANYBLOB="00220a0000000228bea1b8551eeb69fd"], &(0x7f0000001d40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x7a3}}}}, &(0x7f0000002040)={0x18, &(0x7f0000001080)={0x0, 0x9, 0xca, "8f075e95eda22dd76e9d32bfe5fe8ae393072b9915ba9b52167cd065e6fbb799d939754eef1689245add38b472ccad2159ed08e38b3dcad18fe73a754351d7d467a98eb82de52a92e1cfa4316f66881170eecd9d98be5661e245a4094a59f00a5b44e38a7abaed9aa7d934f87b011da656d58e8de20452d2a2600e99f61044d47cd88b89f7049c8b35c351970c40d4e34ecfea1c9272096c70723299b45df78b6b16f710e2621b3dbd1513258281f4207c2950de315c1c9e3fb823f7a073511b67f268d2d7867224f099"}, &(0x7f0000001e80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001ec0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001f00)={0x20, 0x1, 0xc7, "3ff969a7ede8a785e7cfe2b55ef92c39eebd9f86d961fcffb4492d558586fab8b7bbef57d6190c04745a4cdf30d505d3ad4a98de1a71a8cedc23a44d5cd27fe878cf58bc42dd35e2b109da274ee42d5a1fca3687b6138740fe0cbc2b4cc36fc8b314954c381205bb3748cad376366060c1c06c0033feea10fb083b40f7e41ae224ab77e6f9fe02bcc8feacac2f5d50cc0502815f3670bc26b4bb20c700376efabd5df0361d6be2d5c9e1b1e6e942be1832f647a01cc15847faa691df9e3a13f5ba7922779a0949"}, &(0x7f0000002000)={0x20, 0x3, 0x1, 0x2}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r4, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x5c3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5ec}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) read(r5, &(0x7f0000000200)=""/145, 0x91) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x9000000) 18.217106705s ago: executing program 5 (id=3437): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0x6, 0x2e}) 18.120747851s ago: executing program 5 (id=3438): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000020000040000000000000000020000efffffff000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) 18.016518576s ago: executing program 5 (id=3440): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x5, 0x9}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}]}}}]}, 0x3c}}, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000defddcad00"/28], 0x48) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x402, 0x108, 0x18}, 0x18) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000200)={0x60, 0x1, &(0x7f0000357000/0x2000)=nil, &(0x7f0000e6f000/0x2000)=nil, 0x9, &(0x7f0000000140)=[{0x1ff, 0x0, 0x80000001}, {0x2cf4, 0x6, 0x1}, {0x946f, 0x100, 0x9}, {0x9, 0xfffffffffffffffc, 0x2}, {0x63f6, 0xb5cf, 0x12}, {0x6f4, 0x6f, 0x1000}, {0x0, 0x6, 0x1}], 0x7, 0x9, 0x8, 0x2, 0x0, 0x1}) ioctl$I2C_FUNCS(r3, 0x705, &(0x7f0000000280)=0x9) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x3f) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbb816d48283bb26", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x88, 0x0, @rand_addr, @broadcast}, {0x0, 0x0, 0x17, 0x0, @opaque="767bdaf667316fa9910587b3951e0a"}}}}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f00002b1000/0x4000)=nil, 0x4000, 0x4) 17.286994641s ago: executing program 5 (id=3448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.067651487s ago: executing program 5 (id=3450): r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80086408, &(0x7f0000000140)={0xf, 0x0}) 16.941997548s ago: executing program 36 (id=3450): r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_RANGEINFO(r0, 0x80086408, &(0x7f0000000140)={0xf, 0x0}) 16.904315666s ago: executing program 6 (id=3452): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x3c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140b, 0x800, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000340)={0x74689ac60301a8bb, 0xffffffffffffffff, 0x1}) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r0) 16.539329835s ago: executing program 6 (id=3453): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 16.493491207s ago: executing program 6 (id=3454): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = inotify_init1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0xfffffe58, 0x3}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x14000000, 0xc, &(0x7f0000000000)=0x1) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) inotify_rm_watch(r0, r1) pipe2$9p(&(0x7f0000000040), 0x80000) 15.765226603s ago: executing program 6 (id=3456): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x5, 0x9}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}]}}}]}, 0x3c}}, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000defddcad00"/28], 0x48) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x402, 0x108, 0x18}, 0x18) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000200)={0x60, 0x1, &(0x7f0000357000/0x2000)=nil, &(0x7f0000e6f000/0x2000)=nil, 0x9, &(0x7f0000000140)=[{0x1ff, 0x0, 0x80000001}, {0x2cf4, 0x6, 0x1}, {0x946f, 0x100, 0x9}, {0x9, 0xfffffffffffffffc, 0x2}, {0x63f6, 0xb5cf, 0x12}, {0x6f4, 0x6f, 0x1000}, {0x0, 0x6, 0x1}], 0x7, 0x9, 0x8, 0x2, 0x0, 0x1}) ioctl$I2C_FUNCS(r3, 0x705, &(0x7f0000000280)=0x9) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x3f) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbb816d48283bb26", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x88, 0x0, @rand_addr, @broadcast}, {0x0, 0x0, 0x17, 0x0, @opaque="767bdaf667316fa9910587b3951e0a"}}}}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f00002b1000/0x4000)=nil, 0x4000, 0x4) 14.458871008s ago: executing program 6 (id=3461): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00', 0x8001}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500004e0000000000119078000000000000000000004e20003a907861ff0000eb51590e50a856d9f46ed86f22620a1f806ae23d99518042f2b325ca854082448fdb556d358d513cf29aed7876a2"], 0x0) recvmmsg(r2, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}], 0x2}, 0x5}], 0x1, 0x40000000, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7d, 0x9, 0x1, 0x51, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0x0, 0x460c6}, 0x1, 0x0, 0x25a1, 0x40}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x9c}, @nested={0x15, 0x9, 0x0, 0x1, [@generic="f8e6d8ffed6c1097d7a2e1b20a0bf42fdf"]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x200}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x2, 0x9}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x15}, @TCA_ROUTE4_IIF={0x8, 0x4, r10}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000070000000c000c00ffffffffe93616eacce176649a1ebc01000000b550cef3bae008609a3a020535e877152609e6a5eb99839a609543a13b4ee63dbec595", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="26082500090000dafd834fa52c9a210018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@getqdisc={0x28, 0x26, 0x4, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x6}, {0x7, 0x3}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x3b76a876814bae56}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 13.087168251s ago: executing program 6 (id=3463): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="1564d144000000000000") r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0xda, 0x5, 0xfffffffffffffffd, 0x85, 0x2, 0x2, 0x4002004c8, 0x1007, 0x7f, 0xc595, 0x0, 0x2, 0x7, 0x0, 0x80000004000000, 0x2000000010], 0x100000, 0x2010d3}) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x102, 0x7, {0xffffffff, 0x1, 0x7, 0x6}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, 0x0) epoll_create1(0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r10 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r10, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r10, 0x0) setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) 12.90829116s ago: executing program 37 (id=3463): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="1564d144000000000000") r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0xda, 0x5, 0xfffffffffffffffd, 0x85, 0x2, 0x2, 0x4002004c8, 0x1007, 0x7f, 0xc595, 0x0, 0x2, 0x7, 0x0, 0x80000004000000, 0x2000000010], 0x100000, 0x2010d3}) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x102, 0x7, {0xffffffff, 0x1, 0x7, 0x6}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, 0x0, 0x0) epoll_create1(0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r10 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r10, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r10, 0x0) setsockopt$sock_linger(r10, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) 3.782004323s ago: executing program 4 (id=3516): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000009440)=[{{&(0x7f0000000540)={0xa, 0x4e24, 0x200, @remote}, 0x1c, 0x0}}], 0x1, 0x2002800) 3.775898276s ago: executing program 4 (id=3518): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509", @ANYRESOCT], 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1a34, 0x802, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x673}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xfb, 0x1, 0x25}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6, 0x10, 0x5}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x0, 0x7, 0x8, 0x10, 0x4}, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="050f1000796c010b10010c810006ffebd50763d750fe4e3b7b740e18475147b5f44188ce17564b25773df740f140b35615c60df7aac72fb457faded54321a187eaa045059f55a230e4c679fc9fcaddfe3cf7499cf6a1abbe480398a0ad0fd7cf0fa8c04e05549c31817d145ba3714bc7fd03f79f25f2c45df35722b7286b353ea5e318ab4f093c4de231bbda05efd2688e0d8a26ecffc2e64f7aeb87ee2488bfb5f9fd8c5bdb17879d"], 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x413}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001440)=@newtfilter={0x88c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x4, 0x6, 0x2ef, 0x0, 0x5, 0x5, 0x8001, 0xd5, 0x6, 0x9, 0x6, 0x10001, 0x3, 0x1, 0x9, 0x9, 0x7, 0xfffffffb, 0x7, 0x0, 0x1, 0x6, 0x9, 0x2, 0x6, 0x0, 0x2, 0x4, 0x1, 0x3, 0x3ff, 0x7f, 0x3c, 0x7, 0x2, 0x5, 0x2, 0x800, 0x3, 0x64, 0xffff, 0xa37, 0x6, 0x1, 0x24ac, 0x8, 0x1, 0x0, 0x100, 0xfffff801, 0x80, 0x1, 0xfffff001, 0xff, 0x4, 0x64, 0x0, 0x388, 0x401, 0x9, 0xc, 0x7fffffff, 0x9, 0xcd, 0xffffffff, 0x7399f0ce, 0x28, 0x72, 0x500000, 0x3ff, 0x8, 0x4, 0xa, 0x1fb, 0xffffffc0, 0x2, 0x9, 0x0, 0x6, 0xfffffffb, 0x0, 0x3, 0x8, 0x5, 0x8, 0x755, 0xe7, 0x6, 0x1, 0x9, 0x401, 0x7fff, 0x10, 0x1, 0x800, 0x6, 0x5cf, 0x4, 0x1, 0x0, 0x1, 0x4847, 0xca, 0xe2, 0xffff, 0x3ff, 0x1, 0x200, 0x9f, 0x80, 0x7, 0x4, 0x9ef, 0x4, 0x1, 0x4, 0x1, 0xfffffff7, 0x0, 0x1, 0xc, 0x1, 0x9ed, 0x3, 0x8, 0x7, 0x200, 0x2, 0x4, 0x7fffffff, 0x7, 0x393e, 0x35fc, 0x5, 0x3ff, 0x400, 0x2000000, 0x7b, 0xd0b, 0x5, 0xfffffffa, 0x2, 0x7, 0x1, 0x9, 0x7, 0x80000000, 0x9, 0x4, 0x0, 0x8, 0x1, 0x5, 0xc2e, 0xb47, 0xffffffff, 0x4, 0x9, 0x7, 0x6, 0x1, 0x3, 0x4, 0x8, 0x4, 0x4, 0x6, 0x80000001, 0x6, 0x8, 0xc6, 0x0, 0x5, 0x44866607, 0x5, 0x334, 0x3, 0xc86f, 0x2, 0x0, 0x1, 0x548, 0x8, 0x5, 0x5fd, 0x184, 0x81, 0xc3, 0x9, 0xf, 0x74d6, 0x8, 0x7ff, 0x1, 0x75, 0x80000001, 0x92d, 0x1, 0x3, 0x60000, 0x3, 0x5, 0x7, 0xfffff327, 0x5, 0x4, 0x0, 0x3, 0x80, 0x65d6, 0x5, 0xfe, 0x8d9, 0x1, 0xfffffff0, 0x3, 0x7, 0xffff, 0x9, 0x2, 0x8202, 0x7, 0x10, 0x9574, 0xfffffff9, 0x3, 0x1, 0x9, 0x4, 0xbb01, 0x0, 0x6, 0x892, 0x0, 0x4, 0x4, 0xe6, 0x7, 0x1, 0x8, 0x1, 0x2bc3, 0x19a, 0x808, 0x7, 0x7, 0x76c59e0f, 0x1, 0x5, 0x10, 0x1, 0x9, 0xa2, 0x81, 0xa]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2cf, 0x3, 0xb, 0x81, 0x7ff, 0x401, 0xc, 0x5, 0xe86, 0x1, 0x5, 0xfffffff5, 0x8, 0x4, 0x3, 0x5, 0x6, 0x4000, 0xffff, 0xb, 0x80, 0x6, 0xef31, 0x8919, 0x9, 0x4c8, 0x0, 0x5, 0x7, 0x3, 0x9, 0xffffffc0, 0x7, 0x7fff, 0x7d, 0x1d, 0x8, 0x0, 0x562d, 0x9, 0x5, 0x0, 0x2, 0x7, 0x1ff, 0x70, 0x5, 0x4de, 0xffff, 0x6, 0x2, 0x772, 0x5, 0xa, 0x283, 0xafd, 0xfffffffc, 0x4cfe, 0x1, 0x400, 0x0, 0x6, 0x0, 0x1a86, 0x1, 0x5, 0x2, 0x1, 0x2, 0x1, 0x5, 0x1000, 0x8001, 0x10, 0x2, 0x1, 0x4, 0x4ff, 0x5, 0x2, 0xfffffdc7, 0xe4, 0xc22, 0x6, 0x8e5, 0xfffffffb, 0xffffffff, 0x2, 0xd6, 0x5, 0x6, 0xffffffff, 0x3ff, 0x0, 0xfff, 0x52, 0x10001, 0xfffffffc, 0x0, 0xffffffff, 0x766, 0xf, 0x8, 0x1, 0x800, 0x4, 0x10001, 0x7, 0x10000, 0x5, 0x10001, 0x9, 0x7, 0x6, 0x6, 0x7c33, 0x6, 0xb, 0x9, 0x4, 0x8, 0xffffffff, 0xff, 0x9, 0x7fff, 0xee, 0x4, 0x100, 0x4, 0x8, 0x73, 0xb, 0x3, 0x48e6, 0x4, 0x9, 0x33, 0x1, 0x4, 0x3, 0x8000, 0x8001, 0x5, 0x2, 0xe, 0x7, 0x1, 0x3, 0x7, 0xa7e5, 0xbac2, 0x0, 0x5, 0xb, 0xfffffff7, 0x3ff, 0x1, 0x7bc8, 0x9, 0x10, 0x8, 0x400, 0xb, 0x5, 0xd, 0x3, 0xfb5, 0x55, 0x8, 0xfffffeff, 0xd7, 0x8, 0x2, 0x2, 0x99, 0x8, 0x5, 0xbe, 0x8cc, 0x3, 0xffffffff, 0xf, 0x1e, 0xe, 0xfffffffa, 0xffff, 0x8, 0xee0, 0x3, 0x8001, 0x8, 0x1, 0x4, 0x10, 0x8, 0x8, 0x3289, 0x2, 0xfffffffd, 0x1, 0x1e69, 0x6, 0x5, 0x4, 0x8, 0x8, 0x3, 0x4, 0x7, 0x10, 0x0, 0x2, 0x8, 0x8, 0x8ff5, 0x3, 0x9, 0x7, 0x5, 0x1, 0x2, 0x23a2, 0x8, 0x1000, 0x1, 0x31b, 0x90, 0x1, 0x6, 0xff, 0x5, 0x0, 0x400, 0x1, 0x4, 0x1, 0x475d, 0x49f739d1, 0xb, 0x1, 0x86c7, 0x1ff, 0x3, 0x4, 0x5, 0xc, 0x2, 0x5, 0x9, 0x3, 0x100, 0xc, 0x5d, 0x0, 0xfffffff7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x7, 0x100, 0x4, {0x6, 0x0, 0x8, 0xfff7, 0x6, 0x9}, {0x5, 0x1, 0x200, 0x7, 0x7fff, 0x3}, 0x5, 0x81, 0x7f}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0xba37}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}}, 0x24040084) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000600)={0x0, 0x0, 0x6, &(0x7f0000000080)={0x2, "50e1046e0dffda611f117e88f8b2068bda55c85613a3fe0200"}}) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfe}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0xb}}}, 0x24}}, 0x800) 3.479326884s ago: executing program 9 (id=3523): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000080851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000306600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 3.437588431s ago: executing program 9 (id=3524): r0 = socket(0x28, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) munlock(&(0x7f00002de000/0x8000)=nil, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0xc8, 0x30, 0x1, 0x0, 0x0, {}, [{0xb4, 0x1, [@m_ct={0x68, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x28, 0x6, "ffae997c76e8e07a304f566404a024ab44d5b7ed6aa2b99fa98bcbf751c448f04b329d23"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x1}, @timestamp, @timestamp, @timestamp, @mss={0x2, 0x8}, @sack_perm, @sack_perm, @timestamp], 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000006f80)={0x23, 0x0, 0x8}, 0x10) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000000000000001400110076657468305f6d6163767461700000009b0bc89274c0b206ee2370d3366f6dbd1721e2a28b4ef7f14306fd7930691580142b18edbe3f5d78c85c027362fc7cf5d8861fed860539bc5baaac1c0b3daa152f3891f190cd7695c9201ce7cc8be77e555879a6c694aba6050fd166928e93bba39b432552922651ba66d0d8614b44dd165dab3f02718fe5e532cc3d846a7370d4943d6997ed151935b38458acfefbe9e8d6ff0473344004b174346eb548dfe929c96aac2e85de99cc794bdd7430c56038c3ccfa686036576fae7630a58a1be7c0a7db5054891f65efebdcc0e6bb4d544b3bc3f19c6d9b0faf"], 0x30}}, 0x48850) r7 = openat$cdrom(0xffffff9c, &(0x7f00000013c0), 0x4, 0x0) ioctl$CDROMREADTOCENTRY(r7, 0x5306, &(0x7f0000001400)={0xe, 0x7, 0x9, 0x1, @lba=0xfe3, 0xc}) 2.836862748s ago: executing program 8 (id=3525): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 2.75776386s ago: executing program 8 (id=3526): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000009440)=[{{&(0x7f0000000540)={0xa, 0x4e24, 0x200, @remote}, 0x1c, 0x0}}], 0x1, 0x2002800) 2.677381072s ago: executing program 8 (id=3527): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f0000000640)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_io_uring_setup(0x253e, &(0x7f0000000000)={0x0, 0xfc5f, 0x4, 0x1, 0x2de}, &(0x7f0000000080), &(0x7f0000000140)) umount2(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r2 = syz_io_uring_setup(0x2cdf, &(0x7f00000006c0)={0x0, 0x801a14, 0x10000, 0x2, 0x401ce, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000400)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000005c0)=@IORING_OP_RECVMSG={0xa, 0x34, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x12120, 0x0, {0x4}}) io_uring_enter(r2, 0x5b43, 0x0, 0x0, 0x0, 0x2a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601030000000000ffff0001000008"], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x4048400) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x13b080, 0x0) mkdirat(r7, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r8, &(0x7f00000002c0)='./file0\x00', 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r11], 0x68}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x1d, 0x11, 0x839, 0x70bd28, 0x1, {0x0, 0x0, 0x0, r11, {0x1, 0x2}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2.328627189s ago: executing program 8 (id=3531): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x8, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000300)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4e03, @empty}}, {{0x2, 0x4e22, @remote}}]}, 0x18c) unshare(0x8000000) semget$private(0x0, 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000100)) r3 = openat$qrtrtun(0xffffff9c, &(0x7f0000000080), 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000140)}, {&(0x7f0000001300)="e2886954d9efcda91618b779d202d068c5c2053a4f495b14eafcae7b894fc52bc42e534554caf606e84af975195169f63104a91017aba64971cf80198f57c19505f2bbb9cd9ac99e28e67838c73ed67ff10d66bac876fa07a5a0ccf9ab13a590c747cb29a403abe5908d91e45233d3a0c86eaa9d2a835111b59d0efb1c7901f8f35d3fc2beaefebd920d6895ff1cc45de79de6f635a80934da2117861c14d05a2fea5f71c1188cf4f126fd2ee099a6f1742a3554098f486d110c6bc74a5fb11147a8563d047fcff229f4fbb098b9422740b383a1a72b93f993fc3a466f9d52b5127c3abc69450c8f777351bb17c4ff6557cbe6dcb5b2d1edf932add922879fac5514f107dbabfe7a07b814cb3b05cbe97af636d140c2fb49a4b99b7fa61d19aa917623cad5ee4090aca5e8ee78e776aadb372c97e4c1b6c2dd23eb6699b640532eaad9b8a44f1689243cab769f04f505aac40ed07d8dd70145e5dc935092c734da97bd421c55f316d1a7fa9f945a3cbd4ac65c129134b1b9f6cdab4856ce22549466242bfed8878f49f9e3c2ec8a58af9467474ccbbbcfc4f3a787669dba8bc81510571d67e504540b74a0c3e16925d999e94e23c7ece2dc1aef590468a9dcd9b0f7bb6a334b642957625662f33d6d0c5d1ebf046f0b51d57d3582e113b31fe5e5e60b222ad4739c90b0315ce9d0a65038d31cdb65689af886bf2031a4233d7f90d596370719e82194b6d3aaf2a1f16fc5c63620574cbbc85c6e591c71b3c75bc0c85e597b5539792af141a484642df0cfc3b9afbd89ef275202df914b381398053cc5d6a7117506b4f8aaaf6772fe2d34df2206686d246736b0d704e2a4c2d88d1418e8c04b37ed1afd5eaf9520fb8cf7dfd10d8b7769dd12802383ef598500ec9d0bb1dd883b9a03f042c599c0c454593d773bd7a421f85ec912731aad205ea24f2015e7955af8ab6ce04fa474397dd57cca1f9462eca9f5d76d4bd686faed216412f22773d27369acd3ab383b49a5485b94e5ee855d19c7665e72dbf535616a9ce17eb36dc9e4e2e6ca82fdd7110783ccdc41ca33084ebea8364d70b92ad63b9844ddf3f15d8b1e84ed01ca4a15b2a9c62a9fc64f87f92dff7e1d09a4b338181c033b9f263fe4bd571ef2d6b4db080e446905840e4ecc766538b041d71a3f6c098022f5ca18669ba4bdf6564b9d6a63ec197b8979ff6f3861d1cd37061f534225e6feb267e82c204a7b120aae8d3dcfc4e559abbc95dba7b57c05ccafcb8c021aaaa6fccc081682fa6e9b6a650460381835f073934a18beee57dc7bda13f2ff32f51b8bee2e46350a3fb27710b3cb22b11f9ea3be96a0dd87ff30e26ba8141493bfe6748778be51ef7701a5134444b47e77a427d82cc94015f42a795a90dd0c6d8792be7515a613ab294afd33a5cac8b1e8ac3a8332bc8c694c683d889f2617daea4326cf8814c25e6b18b69693c4bf89bc0ccad6ce777a778856aaa724c6a965305deb2a79de5c8461725a76b11156d7207247f0fbbd193f3832a5f69ac1ee1a6694d9f8abdf7da7c12181e827521388e5e58b90c29f26bbd6621994ca2e40fa232194719a93260c0bc46f2876e41a79453e4a6d2f449b7967ecc5d10a4e052d1d61aee435c0cde85a016afaa09a50bcca672fecf45a18618cbad47efd0a9dfeefdc01e999fe11689ebf4e790747d221385e89af5664f60c0f22563ae940e03a99e0eadaacb19d3c369551ddf89ff4e5a14b5ede648a3e7473665b2a1430e2c030542c637330ba83da8deb3eafe91a83a95f37df6e746f251e43f81e914819e9c7d041957bdd286cb9f1dc760675a3e1fa7ea513787eeb30aa429fb183b428d17ce37f9c4938244e23c191f44d6d213d4b1ee348444144bbf73d6790d81cae3855d3e010d4dda4e4c2360ab6fd1d8dcb5b31c8e2466a88b3f532daacbe62ea5766d8d7e81be02313bca0ad2e4673f46a9aea711b6bc893a429156923608e001eb4e4658a51ec9cba6c3da1a1da19926f33a170fdb1ac2505999bd8843a0da4d0debf3148538fffd657e30572e961f6b77978560158d25fe336d5c56dcd4a6db920ebc671dc76ae711e19d0e377b904c594449c7fb65466194103441c6afab99f8c9d1766f4e785ad10ddcb608b4d4917b0a3e8767c311e125f5568ff31ae1b109f344d6525a37eaed89554abe9b3f939876a8ed8355965289c9b5d848b1a0862c86e061dd1ca6d63324f56e3f53733a075a4bcab66894d18799d1b22d259daa9d00994f9ee58ec6e05f4700d5aa0ce97e48f5713cc6047f14cffbfaadd15f7780f820051f608c9f4cbacc86d707eeca66431aea55f9658ac696748d1f4efd825c88515eafac84cf516848c1b34b7652190fbd561486b2cd5ec11333b62c833f9040c991cdd2e53e7261a8300d74d9689b56a50f4e7794ad5397177cfa0295b19d80deaf1957ede6ba8a5fd3b52e7c3b2f76b58f6b677f0165ee4ebdb327de721274329d240843cc11babfee5b7bab68406bb890cc10d481167e45cc96a294b39f4b28c82748d9abdd1aecf704703d0546e28e4a4ca1cb08dd02ecf3eebc9ee931971453b89d2969cbdee7955247f00a9ad264d6ba8103ee0c98d7a6b14d7f863f5a1072fdb210d27a664dbca0beddd830807e9036d5e7e0bb2fe130255748995672625d3f0f5cd01e32876c51f81f7f1f7b59679cfe23973376a5d4c229950698ae3cef8dd84e47b6dfb5c953f162d2344acce592c3f8344327e146437e2efbbf5710caa3fec4fee0bf7c83158f0948f2accefe08665e2491901c64262c1a5fc628c526bd40b8d0775e6a0be439494f603492955b92923088112c85eca530578975df5aae352315c53ff85c5f4c4ed1ac39841da7e6589d65cf32f38f25c8a95443803dd9bc0e4a0f56c56452b60e0c4b24ab3e554d471d092961c9cbab4bdf040349ac01a798ecea7a11247f7f08f83d8b5f1fb8ff0ecd79f020ae350de1e8c47c58d42522dbd4fbe95ed06b85eefa806dd178361fa336d7d0e630c7927fd7cb8566c0fa7ec0c56a006a9fdb54fad10fff5fe5a2d551e6a9c40ad01e028e3bf60fdd367433c456bc38d4e52845539c50d468f34822a9d5d18891d2eef19c0fd2dd9a5bdb118ad8838a38b6f040579d44b4c84d80b86dd9bedcaa1a6465068a3122a1de5e94f5aadf5e16e36c04f68092d1132b2012db8f76fbeb895ae1bba5c7b1834231d061e398c0d2dfd16307596736dbe3d160f281e6e873be88e28bef1275db41e09d24db0f0e0f3068588e640ff942ceb56e6951d116d3cf76e877ab8d29c3b486332401a7690d26f847d67b45b982b50370b8fecb3927c44c5de11b7c601873180ccb107829de7c29d07622548d0d24e509a3f24341a5f582f0397e35a935f8c11fbb7041b4c7eaa10497c6ca59cfb372b577add84704595c6a4e3c6824530882cc3f1dc581696d180e1d191e6ae687b78821d0ef93ef8632a7cb92e6715766b558f5243c2f454291ccc9dc90416dc121b30235f864ca5e1e38e9ae0fa701f74ced888c0c4638fc1273d416058a8a3ecc822c29118522d90cf10b9f3edfb090f36e6a826f3cb53f7acdb3ffe084a726062a14a51b7a17165df06ec6a087f17fd2a65fe331537b893d822b7e8be163d3a84eb1b66b1b72356c82b8448cc52ff01f6e4ed0b04b22b7f8c037d7e02fbf2f572863ac12c3fee9dc28af5ff1251430ea36968e3ec38577009b2f8d54f07dc069709a20efbb2d6d91e289ca65e4cae6d0e343b34918a608ab80fc8492e0d78b46083cc4a9a37e9385fcd39bca13f5c15b0b926217f96b73c855627bb7c7340bf78199a91de63f9e7b09f6d195773f0bba935d1dca4e644b1c11924c00c7f98d76588fccf522601ce5119495520712683fe2786c46630495b30909f9ad6f8cb4ccaed422401716570e90bfda25e2c10e7290d8d861f67a5b1e609d6c73a7c308b3ad344c1b010fa42116cd96dd7ad072479102983f54310766a59da37b68c5823840701ecfdb7ddfee341c6ca13dbfc2689df99104820eee4a63134b259fe04012eafdb5cc9bc47da9b465ff997361f10fc90c0c7cf5a3c04cd3721696cd08e591dcb87d76a2721e699c7a320320326e6d8e4ba93efefb95c6105689c3a8b370453a4524da2ce82ce1133c89ae66a56dce6a09d43da6da66db6c6829555cc8f94213fa6d9b3fbdb7c1a970eeebd04a4c18c2a201d2fc62597ee12c5b6ea29c24156e85a05f7033e73b559fd7e536c0baad31d8d181cd1d11117cd86eef21ba851da78050b34abc61000145721df0781f80fbbc99b3a9842e651bb9de350c7a78869471c86c418cacf2d9f383edcb0e7851a8c1706b6043a160fae35de83b4c022549d6fb0cf9a24f304053ad4a8d60127fb0cc7c5508d78053b25a21f72b7c8c4494c70b26375b1bef5602421ae620e3be8d7d5ce281db3f3b6db446843099782b147e2786840bf1c0ab9a229e984ceb8bf1bff9c0e22bbfa0850b062366f3daad1f44b6c4a12458287e64d35ee3a8c2ee941b057ffcd4d0ed28eb1ca96d860c8632162ca82c80a69f7acc594e698da33fd8a2293120b6ce42f136c5df69a0a3bcb2e381bd0059f44bf8bb923029897d175911dec90578ef7827da22b8ccc206c2d9f67284f050a30de518a282d4f31580b019a84a1ece74b6627cfd49520c7f911aa4da7fe347ff385bfd4f557418250be3a23c16d08c98be9526045bd75884c0e175c692db7d28b2f58045550aa37bf4ada61d6e119f65584a4a011cd7423cb143e31c937b5fd621138c7004b829ef2d1d6d29019082798c8cc275e9edeed480e2c9985df2260c45f8f481c164a2e1092dbcad7bb78b72a75e5f159b542a752c0c008fd54ec209e3ccf1bc33d3295c7896b05938d39f6ecb3bc99a734f33bbbddc49d791346a8e95431874800b5e95c5923e93124bfcdd8a11815326474f1f8fe85618cbb33f105acd3339e611c80e32085c1270b896101492827f3ae3a9cea75c8debfba12259f2a4a188896e3a8070dcae34295f673c0f761e6dff4bde35298b2da4d807d6902e375168dd839e1532331c87c6e24cb6d054a75be1f1a82d838183f1ac4ac7b7fe4e6d0b3b1c91f5b6a9b2f793bfec9ea59b646f670f8fb12384fe59681a729f669dbc57f194e6c3387ded96c617a9b4f1dae1c17c7f20b073aee5d96a9e3d75537000a030f856408d526334f8a19386f73956eccd0d66d82ad028c9a72e06cbc2fb0b99a2fb76aa35f8886588accf25cc3deee8d7b06f7df13fa1d68093ef7ec4cd8de4709422e2493b292c597c73a5ec4999acb5297379aa43c9b5172e3dbd8914342ffb6322db114fd2170ae762dfa565c356a0e9fc752d86bf20c39510ce9e8975d162e3b68862b2520de8d0720f72ddc15ae61f6ac0b297094650aa0606a6cbcf5cc77cff0e1dcba46ec59ed62981650d20c27e375ac825b4d98810d688bf8bf6e7856b6ebf86a5605d07152a4fefc87125c7fd1364cfbd2c37f7e452ea73be3de7446a2510713d2d4878369f3901e39af5aa0e0487dddd485d8a1e06d210ef1a474594943c9425dafcb9f736fc0a79845c87897d27320329060075ca567c778ebbe760896b75d0fd86db46836f060cfc1870e53827ee29051bd0d882e03958bde39101af9c9b5e68b367031d6bfb873377c26f78b3d502c3772e7f78c9aee0cb6b01680a8c9766f1357ca2a0d51bd839cf7415e85ee721cfa755ccf156ac97120739da46651bdddff7f46303dc0a5823e91096af6454ac99f342535f17529b5", 0x1000}], 0x2) unshare(0x22020600) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d000093000000080013"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000001c0)={r4}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="070000000000fddbdf250800000008000300", @ANYRES32=r9, @ANYBLOB="48dbc76c4a4e19ba7ec7a55b721d1695993952fd5650cf162b4c6cc5bd7adc7698a3f122d349de9e66b126f61d4f40f625a422130efefdda"], 0x1c}}, 0x0) 2.327496333s ago: executing program 7 (id=3532): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000080851000000600000018100000", @ANYRES32=r0, @ANYBLOB="000000000000003f6600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 2.097318919s ago: executing program 7 (id=3533): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000040)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000006000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000340)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SIOCSIFHWADDR(r2, 0x8b29, &(0x7f0000000000)={'bond0\x00', @remote}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000b11}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x6, 0x101183) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000280)=""/138) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001b000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x78, 0x30, 0x51b, 0x1, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x0, 0x0, 0xf}}}]}, {0x8, 0x14, "284527cc"}, {0xc}, {0xc, 0x6}}}]}]}, 0x78}}, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r12, r12, &(0x7f0000000000)=0x2eb4, 0x7ff) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) openat$tun(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x48) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) 1.286330936s ago: executing program 7 (id=3534): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) ptrace$ARCH_SHSTK_LOCK(0x1e, r3, 0x0, 0x5003) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r7, 0x29, 0xca, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0xf5ffffff}], 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000f00000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.249683293s ago: executing program 9 (id=3535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd8400fef7fa255100000008000300", @ANYRES32=r5, @ANYBLOB="05008a000100000005008a000100000005008a00040000000a0006"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0xcfb4854c0caad90c) r6 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback, 0xfffffeff}, 0x1c) shutdown(r6, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r6, &(0x7f0000000140)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x101}, 0x1c) r7 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r7, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x4}, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x400}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in6=@empty, 0x0, 0x3, 0x3}]}]}, 0xf8}}, 0x0) ioctl$EXT4_IOC_GETFSUUID(r7, 0x8008662c, &(0x7f0000000100)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r7, 0x58, &(0x7f0000000180)}, 0x10) fcntl$getownex(r3, 0x10, &(0x7f0000000280)) r9 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r9, 0x1000) r10 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="8ece5f44eece452a39aae9ae983788d9d16af822b9f13830ecf1a9297428ff07e14a3c41d47655a9691abf1edfd95850f461497e61b55ddd2722c08eef6c2be7c40c93d554fecab75c89dfef5fdb2762ae56ba93c0ea8fae711eb2520d6d75167a685b2ceeec870a12a0b9315beafadf8da9228c963bf1019d", 0x79, 0xfffffffffffffffd) r11 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="ae27048519dcf87179e771b2ca28f30e40827e83a97efc8f0682cc93f460377bf901443aa6308f6724e08f4be171643db3fe896d7e3fea83952e901928e387ed44fe592b53f5e49aa666e0ec1c6eacb33d5ce21f4bb601d9febbea79497c9394bd88fa5db7b661e5f07587a389e412f00b0ff0274f260d8e57ca245b10cd77301dd88ab1f30fa27dcaf2f07862bba40784d0f069037b00a01143751c9ba1a7268435cbf54982589b0d4f09c3a5cc408175b69e80d7", 0xb5, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000600)={r9, r10, r11}, &(0x7f0000000640)=""/203, 0xcb, 0x0) close(r6) 1.100702965s ago: executing program 8 (id=3536): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004}, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {r7, r8+60000000}}, 0x0) r9 = dup(r4) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_aout(r10, &(0x7f0000000180)=ANY=[], 0xfffffecc) mmap$binder(&(0x7f0000b3a000/0x4000)=nil, 0x4000, 0x1, 0x11, r10, 0x4) madvise(&(0x7f00004c0000/0x4000)=nil, 0x4000, 0x66) 1.030149449s ago: executing program 9 (id=3537): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sendmmsg$unix(r8, &(0x7f0000002c00)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000004c0)="e11d34fe0a81025e17d55b0ade33a28ce58b16fa4beb6602b74555e6f7f041cb4503f816d3f5e9862e69ae11e9b8db61ce1d90095d9db8f85d8e25f2a254f227f030d2e6b559ae0d60acd5ad8aa7e45e63eac17dd5960243af639d94", 0x5c}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000300)}, {&(0x7f0000000540)="093514cb1e49e6745df248fcb439fcf71d2fbc8e4b50b6ea2d450eadc597f655f247f9d7463f8c6f06ebb480b5fc88c08b6f5d7da7a307981e91aacc10b523e3e56ef98921525e45797844de074b710d5647ce2157e87feb744fe651043419312b0e2b66d5bcd6946d4fa0fc702e23f4b2d172ce2cbe122f99d84178779dc295319fa3fa99fcf8195c04eccb1cc719247f97df655406c0d7577fa7bbf3e2cd0b3d84e98ba2e221d663f368586bdad31f18f771bd82a323a6faa7296e9b3c2ddad7203a67dd6ef0", 0xc7}, {&(0x7f00000003c0)="11226cc330c07f66fd16db8536280416f6ffc1", 0x13}, {&(0x7f0000000640)="67a30460053ab4d063e0e484d641e3e75c5ee84b7ce94aee68d4d964c19f4c9cc1dd6c9c0772aeeb42d43f495bcda5e3b485897999c34414c7dfedc001c7cee5e28c172d8bf6693fc2ac644bd88ae349d976abda6e4979674ecd795d3416e4cda3359dfeee03454e18662c0496f0c43a48c8b6e059947a5ac689a05efd0d7cb1ec1c5ce2dc63ece7b1ff36165e7f120c6ad6cacce8068db71edb1b9ae0abdbbcb722de9db48779c312e6e7d1ef21980f0d", 0xb1}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000000700)="9dacce27a5327e48b6e917e5174dee91ab94040d971dd6d4eb2398164d6e", 0x1e}, {&(0x7f0000000740)="f4643239da1a8205a9c7bda3dab02a13bfb2b318df0dbc9b8d6079b7b78227cf2f7d6299050271b27ad180a29d0a9412df580aa39f062bfc206bf13f998831293195", 0x42}, {&(0x7f0000002900)="e42dee1ccb29cf4b28fa06914fc5366e81dedc49eff84271d613add84662adbd3f7fa82da5f89dfac99400315926e971da96461811239c3dcd4ae96ac13c9f6dfc2103c9b1bd4f532751e4e26d5e618054b5fccbd820c5a465daeffd0e3f3cc0aed5f162e32aa5de428e6f2d49606f99e399db8af6d34b3c2054792016bdacd455971eec5c41611dd55cd3edf2d510966568", 0x92}], 0xa, 0x0, 0x0, 0x1}}, {{&(0x7f00000029c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000002a40)="a59b56415d247f45948c2c188ace92c1e3064fc09bdfb64e96d3bbfd83a1ef86c880e92ac2c34a6bbca461", 0x2b}], 0x1, &(0x7f0000002b80)=[@rights={{0x14, 0x1, 0x1, [r7, r2]}}, @rights={{0x30, 0x1, 0x1, [r4, r7, r2, r8, 0xffffffffffffffff, 0xffffffffffffffff, r1, r8, r7]}}, @cred={{0x18, 0x1, 0x2, {r6}}}], 0x5c, 0x200000c0}}], 0x2, 0x80001) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d40)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=ANY=[@ANYRESDEC=r7, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010062726164e7650000200002800c002300060000000000000005002500010000000500170001000000", @ANYRES8=r9], 0x50}}, 0x0) 313.16204ms ago: executing program 7 (id=3538): socket$nl_xfrm(0x10, 0x3, 0x6) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x101, &(0x7f0000000080)=0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x11e41e7a, 0x20000000, 0x6, 0x2000002}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) (async, rerun: 64) chdir(&(0x7f0000000300)='./file0\x00') (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES32=r3, @ANYRES8=r1, @ANYRES32=0x0, @ANYBLOB="c063f6c29685c20029441ba7a98249917a737cd5c877c5bc0288e7944acf4ec505ebe339b23eedafffd48641e62255c76be5a5ffbd6e878b582ea464b48e9aa6e33b00000c002100010000000000008014006c8008004600", @ANYRES32=0x0, @ANYBLOB="0800daff", @ANYRES32=0x0, @ANYRES8=r2], 0x220}, 0x1, 0x0, 0x0, 0x804}, 0x84) (async) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0x100) (async) shutdown(r4, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) (async) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) 286.788082ms ago: executing program 4 (id=3539): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f00000029c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500002000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb709000008000000b703000000000028850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 217.64958ms ago: executing program 4 (id=3540): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000020000040000000000000000020000fffffffffffffff90002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) 166.657254ms ago: executing program 4 (id=3541): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc268978177e9717e5b04be960b254f3898acaa5f8d6b2b202daa894bee75631eead64e5971e7a4c3c6b9ae26459e93270506c3b87c83dfc109ce1f668d93e3b395abd1191e21a67e4472fc9d0c4d2fb75939520b75f3f47a403d534557a80d869c8b6497c6aed476bb01a82c7d01dbdbdf6ce62488099a2d73d5a77d78da8501be127eeb3a0b155eab8a4a0be3bd0caeefd8e186eca402712233ead89d0f4fcfe0fef176093ce1fc36e6712073dd104e49d3f386977c19194bb34533ddaebd7f69b55df0325b441f27e68ddd715370859d5c19f3aeae2968f6d3e55", @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="2c14b634f508aa17c346bd5793b1efef0e425c3b01825350f9f6445e00db388a84d8af0dbe31e3490ded26fecf4a8eb1e35d03304ff60622b6cd29b40446f7ca2510498c98d52d66ce7f7489ebbbfccd9e83ae3063c98b3a0ae2326c09f8a6e650812f8d247fe945f4b5aaf12d38d9c0f3de129930a15028ac2ef7859fce3dee87716b1f96"], 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=@newchain={0x21d4, 0x64, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff1, 0x3}, {0x10, 0xd}, {0x6, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x11b8, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x2c14}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x4}, @TCA_FLOW_ACT={0x119c, 0x9, 0x0, 0x1, [@m_skbedit={0x12c, 0x9, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5b}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0x10}}]}, {0xf0, 0x6, "3998f374b1a719ccb95f74483ddcf51e0cec819ede2c05e7043a3f59b3642be0263a9f2b131f0c3b93ec68ccf8a385c6ff47767784c0543ef17995176baa6f383d9857f3b64bda4ca3c397a68491d77e85352f7698c324ad7001b78bf1994b16c8a4a24afbbeddb32dce5d6155ce5965735acffd6c671fccf659e5178cbac08c934fa0ebdf00ffd344da9ff9809560a1c9601661343f75a7550af9c9e11935bc6e4468f7ff77173cbb9e750d4ccd1331c20d2e3354f6a9e5bafbff2da933bf97d5b19d503649ecb567f9aefcdb95081d9398eb78fde96f03b9572012ef8fe73f8caf250774701e50617b8545"}, {0xc}, {0xc, 0x8, {0x4}}}}, @m_gact={0x106c, 0x7, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1aea, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0xd60, 0xffffffffffffffff, 0x421}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xb0a, 0x2, 0x0, 0x6}}]}, {0x1004, 0x6, "6f1f9ef9d61d1aad41e18265359f44c28992b593a9443c69f525dd708dd30ee8d84ef564cff894ed25628a1aeae169d348de4edc95b7ce71c7e4e0a8c8616351d8984d8f49a3ba2d4f8eeb3962de52cb4766ca56db81d311349aab93031496bd6806289c0ca00dd623d7b6097fb0c09cfc3f22205512aed51260fbafde7008839b30a7a49ac54ef7cae7228efd4575c57b379d5098b84ffff26dfb69adc98113cb55cea2882f20ce2f26a9849cdef9aa88c70b1f78a08095071c22e56f5b9e7db9344865ed17ee9a058d38bd70d60dd9a526ae682538d4649bce22402650cda4c25062ae9d68c7956ee38647ca14501a683905051620d9f5a0478d25f0cf7ae9fe24b2492c6fb8fc22234b93e05b2d0d8d2383c9dafd58bad854018ea0c98cad8e81363a59a88cb2e179e531af7e4ca30043f9659c0c91ece0dbad65678ea5017acd6f265b1bedfde760a7055539621adcc93199a611475c774a4cc9ec90adb02c9c3524bb4fdba30fa102ca60fa6e7cd5f4c1e928a0f0adc203d7b5dcc48b5f967dd583c21e72c437469f7056337b024d7c49dc60080ab6efca5f3acbb9e3ebd2c805b0815ac57d324663a54f68c4814175888e395de0bd1e656f953903d7a7a7645c143c0c386b0d050592e829b3be90a9c32fa479c613a279fd570ed151921ebcc75cdf02acaf978df2a030ed11904d0fdfdc58a5dabbd2d32f5043c4abe3d0bf129625fece047e35b0937e042dde327ab709bf24e56d34097ee1860fcc1866689eb91378e1892866b1a2347e34b66fd251676771c2b45046b14637445a7edcb86de0a59f3928d2ec00c37fdc448cd7cedad1f2d69f321b7559fef8236cd1397ac308b6c1be883ef9b0826831533642e22fde69f8b9d1c8ed128f9d6ee246cbca5990e2bd8d15104c1dc2974698d43de4596b3b908f3aa918ee68d1ba85539b9a0c93801a365945da03c2191d842b519d1ee131556cfa18ddda67bae6252d886911952f46330494d56fef45faa0d4e7ca85b226eae24bcc08b4e402f1ad4eef374d5df5f27091fbc508fb9d8497cdcabb0d5f142e019f1c93f6a069b100dde51cb1670b797309e17b57cb2e3d6e34aadbde8b36a594d621a01a20ef1d82e7127be0a420aebfeafa6dc7eeb893e8713e15d1c3f1e7dd7c574ba6d7f20223f706d281eecf2e073098d68e7c5a875ec3b8e2bd83007e95d96f5f12f192f9c542b18a180740abd2c1556609395a2530faf4bd449d050f7b97dd4088514cf4dee2b7781c8986f5aa9a4bad1fc10eea11e28ac42ff69d74a96ef1beb284513d4713a1ac0bb486288e779a501d44a134d4611dcd33b2a5c777ada492a3f053c6cdb1c887c1da300df87b9c1ba73b612863fb2249533a351ff4f5076c8b4cb3d1593651bc4d47d199af19916b790b177df3facb3914ad66ffa9605b5bffd3b4816f6995d06c8fbadaab33e5803846082e3242526daaebc5ec37926f501091cf06e5169807f01a976f11a1db27320249a2dc1390d6ab841ee7c16164f7c5d6c00926072e0671b1c69d9674094aebd6c504927006e6aeda94aae9d904c727d240056a2e82ca78e382ce83130e20f291f5c0d7f7bd6894d72b251807cbd3489049273d976393765716e798a3fd8ee2bdd081aa4eb409e084fa49aafbe1fdf356066968ee9af8a4d595d69c7b5bf181316095ca1fe17c7efd8a255aaaedf44f15670e050edce0d5ea746450b6a754140c21a6fc1093f8652ad3e9dfc068aeab45aa446f2ec57bd935f8c3350542252f23924ca5961aab2789d861d3583180d44bc59cd18f94d7cd94c89c59ef3a5f1d19f138acc107b4b19ee426d5c411c0e8f22c2e5bbbab6403d932f9f0cc68de40568b6fdacce01db9160579baddaa8f0b35f3f6f1cb4bde34a0778f79bd276cf2625a57d7f1c23b6586dfc73cb20700ea5488c5e2788db84eba5308b3cb545c92560faf3a150a6156ae8817a5a4b42840e1ae78a7ea739d0db586eb10127592c2002431987cac3556683ef363efeea466d5bff378b12036f8afb2017942d26f794dde642c20d0587ba4542ab00cda6de3142b26d77caaf983bea95de7af11f62eaa3b9808facc207edbf9effb2df630a661000088b489b081ec207e842a6e8870b930bb26faf2f57176aaa23127c3f4aa8060da5f4743255faeb167d86ea94fc5757f9afeee5cc88a725c404afd81de4f70e0bfea7448c98fe1abdda271dfb9fc491b8f297e04ff9f38f927eff839f32af428e5a62c892e658ab0b4934c49249b22b2e7f0bc05608b9aa021efd4182740a7e3cac16dc12fca20618bfb22334046f283bb0735e638a413a68a9b231b65ee625df5c5d31dfb7bee1d9ab980cce72b8a848b8c38c01e222b9d474c740a3a69820a4a39c7821de61c06d4686d39da7b2bd952647f97cf108c599cda7e09f941b9534993afeb483bfe73d73ebe2ccdffd8d4031e94e43ed1afe4c165b283598777d1792f6b8d437894c29293f9bcd8ed76e2aa4e3cbe69347c35ca79652761de762298aac1f297ca074c461e8c1845260b162bfa40c3c123ead40c11c663f8642d8385a9dbce32b2fed6acf6f25296ea7117dccf7d6caef362cb8a9e0b208afea68d8abdeffadd3598fc2f2c321d6816bd40cd7cc1d7b1b73eeb840cc5cc1d6f61bf84768594d2f45437f9102a34364031df8f8cc82272cdaf46364f0ce31b337321de76b39ae912d60d965703015cbb7ad138c2a6f1d6128168d8786310d71c1e807556d716f5bf9aba160574e1fd9cc4d9e23bfc02e8a4c5e44287706e242e03f1bbcaf237e58963940d672fdb9c4f50688d5e9e1041f7c415187cf3e76dafae517ced9132f2f3579af5d4da45465aaba96af5dba0e4abb6872682829d23adac6a5a5c6f72b619e77daf0c4bd4a0afbcdb4fb97b1a6e3c1e32fc53f9fafb595131eea7a43a4780cd48bbbc22bd91a3a0c58b7f75fb4d0daceed2daed22f8f7eb719f91592eee9a13e04fb50c9391442f62b484b0e46c54df3a2d56f027c7e97797a014bfe7375f69a6c4f3b5149192effbbe72d34e1e44509582f7920883a720f0ca04d591b154798ce8a82ec5df654e034a5d7bb23a220bfefc8f90f62c50e36077644bd45661c235fb24c187abfacf0671325c37a28f5fbbaaeb1e9b21a47f8e9b50fc2bcd080550df65bbb0b516b1bff9f1b02adbf92fee2f308394cafead462e607b998c30155fce9948da12f73339ddb4aeaf541d919fe769de14aec865f5e23178f98601b18bef94bb5c184e87ffced9f33e82437383582d1645155a02056ffea5c4566caff670bb7fc6f9d42e544f838ce30cf7658ead6e407c44087419f4f70cb874e1d03e81cb96c50f6eda95c0dc4fc3626acfde5ab5dc6d710866c70c767747ae73a02659ba6f354dd2ffa292e1d8810a213376b78a56ae78bf1674a4994105001d1bfd8b744928f3f4befdc048718385141f042af3c9b8c486f3d8c0395758e7d21e3a2a2eacf80de991b1dc383bfc8c954d4742c0f0dff70db9537cf7c62e2cf7c759ccd41f55db52840f1a63726ff87c4f3ba0ec49d6e328379036ad8b9a3cb206c6453332df5044d0e508d45252ab0d98edd732a920f73178a990b4cba36eeed8a7a55b4adcb172a24831de34619d4ce5f4125f02e08b1c4043c9c011d9c8e6d880eb8709b29566c290640e0fe7bb1a82c87364a3ed76a726ab42e0b57ed763915b6387b386d7efb1de0fd098f0632a68f6c00368ba73bcd835f2304f06dc49e87eeaa6897d1c2de4b6818891e583cda59d7952b46a8f9f03ed4a371b1f02d76aef32da47e7521884a2f31a958e13ad0bedd778964120de665e8f1a76601e99f56fb936865bfcf3e8a85d711dc3acc70d4b901b5573e2848131c69b1f725cf63b123af8d48272e60978c54f45e4727d8c4a505edda3fdfc434e14eff524c3720938e4ceb2283c312c82edb160c5bc47b00355d5295f3034a4484953a8a9b36e43931199ba551ac637e9dbecec6d33ceaa8292c3f66c8031013d982d090269a29dc459ce10b8f63cdb3a347aebecd3f8d408b16f1cd3b142acf0f1dfa79b17d1795161bc3eb5e5a9e10360f090099c680379c4419c624e3de5931087ca1ef115b6588b7c5f8109fabba70fe56fd2494fcd41ac01eb9fd71f3353b4274ce75133c41659f919ae3fbdf45370d61a27166866175d72578cf0c632799900d2096fe3ec8cb96e3ea5b0fa74263adeddd8caed774f2496a4f86363bbf51ed4b9cc364ded6606ff50a346e12713129f1d2a94906cf39c90a74d41885aad11075546028e7a17be9986d097bbfa049686737b38e376342cae8776af2f0aecbb450a4897da82db3102ce3748c1e680818550353e01b586530278b162d41ab3e0a11a1964fb277657b218d2be05401ca10a9c027eb9de3db0a3a4f3e12ecd12e7c014279fd9be1a3be44f6c178127b4c4433253a9afbe51840bdc36e65d5271b82b93fff77510a8d50f1e4dd5f185167145e8676bd709c9b88e5cea9d493e846820bf37b821d0b9c9b5b381059aaf9762c30e0802d4fc387afce68f55666836332655f28ba8c3c99f11f82e7ba1a5414a32f13634d8daad902128b162882f665789e4b922b36c62f6ae13c12648193d7dafb93c9adceb66b9ba6adf424acf724b2dbe2002fe7f9ecde478f966c62b4ec8a69568f30d7b529054dba7aefe1a891e0ce691142e532f6bb309846a97d7675ed908b60fa52613f68776b0bccaf2ac1ca1f8ac2b7a13ef7e2884eb986c4ce00325868d96f14578d4345515cf0253550c972f607488f1c30c62cbe0250db1bbc34785d06f4fdd14ef65437fa0bcca71086dece5c2ed43d0ea3e61f7fd1e462d5da599c7cea2f7a36bcc7c9e7ed62e1d447b47520a089b6397c8465327798372ff530d922f8d298228e58865c3b28aa1770a5f26d97c255ef4b9b2cb39376ac927c42ff15b8e22880b3b73476b6035b6c91450e24bea30652af0a231ac1d303e4cc65b2e09eff41863e14deae0599cce65ca970b705ff24460d269aa9d369d40486655d5886916dd11247068c0983fc54f9ab0054ce09a34c0cffa8ba123245468fce5b17f8b7e77c50fab6de8268df63c17a63f04fd0b2c13472bbc91e4de054c3acb8c3d986eaf802675c673f31a5ee7596c881b110903125b04edd1c906eadb7f126743eabc1e7194d97b102ffa6c00ce8f1dabf12a0f16be9c8c40863d4bf658a32be7787397d263efc4cb17d127cf78befec2f5184f55849f3aa4bff2cf28e17dc60ce9464c063cbc2782f58b6a32137bac6ceea764667751a0e7eb674fe4a95d08d697cda969d1ef99298ba822f4bbc327666b37f79829894938f177a7fbb27cbcb955b3e9f387da407beaa2985f0bfe144fdaa8bdce1763538490f1fe9273d299e06c976c414762bf11066dd1669d58e17e4c33b5ee0953ec0965d98af740d0e4dd278d2a56e8805c14d1897cde4cb60764ebee7426d8d1d1b502640ba5f654411bef63c4e77e266d07615629320a5ace8bbd373b94f81fdb8c9f41e2047dc25f9597639958ed02b3ebec5325f7c1112696961a27d17b184412e797584609849ec2d20521968c6e585633335aecef05cfa5fa67f2bf574e883018f8d54d550655ef076eed83ab9a6e3df715ff675741f14efeac52afd21de13433b04fb2b8e4eafc490297caa9f6f25cb15d6fbdd18f20f51967b8e8cbc8ecb770b906c88d8291c95e0fa2c414c8071f660ebb22430587c555b94bb13ada02b9fe5da1ec6d9e2da1795dd1a2567c26060f326808f19a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4}}}}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xf}}]}}, @TCA_CHAIN={0x8, 0xb, 0xe9cb}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x9, 0x3a}}, @filter_kind_options=@f_u32={{0x8}, {0xfa0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_U32_ACT={0xf60, 0x7, [@m_pedit={0xf5c, 0x1a, 0x0, 0x0, {{0xa}, {0xe6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x8, 0x453, 0x7, 0x9, 0x1}, 0xb, 0x5, [{0x5, 0x3, 0x4, 0x4, 0x5, 0xffff}, {0x5, 0x0, 0x5, 0x6, 0x1, 0x6}, {0x2, 0x5, 0x3, 0x80, 0x10001, 0x6}]}, [{0x8, 0x4, 0xc, 0x1, 0x6, 0x1}, {0x9d83, 0x10, 0x8001, 0x6, 0x30000, 0x9}, {0xfffffffc, 0x0, 0xff77, 0x7fff, 0x98f, 0x5}, {0x6, 0x9, 0x6, 0x80000000, 0x9, 0xffff}, {0xfffffffd, 0xfffffffa, 0x8, 0x1, 0x4, 0x7}, {0x6, 0x0, 0x7, 0x5, 0x80000000}, {0x3, 0x0, 0x800, 0x0, 0x1, 0x6}, {0xff, 0x3, 0x3c4, 0x1ff, 0x20000, 0x3}, {0x0, 0x4, 0x7f, 0x8, 0x0, 0x101}, {0xff, 0x8, 0x6, 0x7fffffff, 0x6, 0x3ff}, {0x400, 0x4, 0x1, 0x9, 0x9, 0x7f}, {0x4b5, 0x3, 0xffff2f39, 0x9, 0x2, 0xfffffff3}, {0xffffffff, 0x1a, 0x2, 0x3, 0x8, 0xffffffff}, {0x7, 0x9, 0x6, 0x6, 0x5, 0x8000}, {0x0, 0x2, 0x2, 0x1, 0xb112, 0x69df}, {0xe, 0x200, 0x10001, 0x9, 0x7, 0x2}, {0x1, 0x7f, 0xffffffff, 0x0, 0x9, 0x7}, {0x9, 0x94, 0x3, 0x6, 0x6, 0x7}, {0x4, 0x2, 0x4, 0x8001, 0x6, 0xaa2f}, {0x1, 0x8, 0x7fffffff, 0x4, 0x8000, 0x7}, {0x3, 0x5, 0x8, 0x2, 0x8001, 0x5}, {0x8, 0x4, 0x6, 0xb, 0x7, 0x1237}, {0x2, 0x3, 0x9, 0x37c713c3, 0x3, 0x5}, {0x3, 0x382, 0xb0, 0x8, 0x4, 0x2}, {0x80, 0x3b9e, 0xfff, 0x6, 0x800, 0x7}, {0x5, 0x3, 0x0, 0x7, 0xfff, 0x1}, {0x3, 0x7, 0x4, 0x3ff, 0x2, 0x3}, {0x3, 0x1, 0x7, 0x6, 0x5, 0x7fffffff}, {0x5, 0x8, 0x5, 0x100, 0xe6, 0x4}, {0x8, 0x1ff, 0x4, 0x10001, 0x4, 0xffffffff}, {0x4, 0x3, 0x8, 0x1, 0x10001, 0x101}, {0x6, 0x2b6c, 0x6, 0x0, 0x80000000, 0x8}, {0x1ff, 0xbb1, 0x3, 0x1, 0x8, 0x2}, {0x7, 0x8, 0xf427, 0x7, 0x8, 0x8ae}, {0x2, 0x100, 0x21e0, 0x7, 0x2, 0x4}, {0x800, 0x9, 0x8, 0x9, 0x59, 0x200}, {0x2, 0x6, 0xffa, 0x4b, 0x2, 0x8001}, {0x3, 0x4, 0x9, 0x8, 0x9, 0x100}, {0x301, 0x0, 0x1, 0x1}, {0x5, 0x6, 0x0, 0x800, 0x9, 0x3}, {0x2, 0x4, 0x9, 0x1b, 0xf9e, 0x3}, {0x5, 0x5, 0xb5d, 0x9ed, 0xf, 0x62f}, {0x4b, 0x6, 0x8, 0x7, 0x6}, {0x0, 0x2, 0x1, 0x40, 0x101, 0x7}, {0x7fff, 0x4b, 0x1, 0x3, 0xff, 0x456}, {0x7, 0x0, 0x7, 0x6, 0x10000, 0x5}, {0x5, 0x4, 0x8, 0x9, 0x8, 0x75136528}, {0x641, 0x82, 0xffffffff, 0x0, 0x2, 0x6}, {0xa, 0x5, 0x200, 0xfb, 0x9dc3, 0xb}, {0xa, 0x3, 0x8, 0x0, 0x3, 0xf}, {0xdff, 0xfffffffe, 0x3, 0x9, 0x1, 0x7}, {0x8, 0x3, 0x4, 0xbd18, 0x2, 0x3ff}, {0x4, 0x8, 0x3ff, 0x81e, 0x2, 0x9}, {0xfffffff7, 0x6, 0xab, 0x8, 0x3}, {0x6, 0x7, 0x3, 0x3, 0x0, 0x8ab}, {0x80000001, 0x4, 0x986, 0x8, 0x10, 0x6326}, {0x6, 0x3, 0x9, 0x4, 0x0, 0x1}, {0x3, 0x7, 0x2, 0x96a6, 0x53a1f0f6, 0x1c000000}, {0x9, 0x2, 0x5, 0x2, 0xfff, 0x6}, {0x0, 0x8b, 0xd13a, 0x1000, 0xfffffff7, 0xba}, {0x1, 0x3, 0x1, 0x7ff, 0x5, 0x8}, {0x2, 0x80, 0x3, 0x401, 0x5, 0x7}, {0x9, 0xaf14dac, 0xffff, 0x2, 0x6, 0x2}, {0x8, 0x541a, 0x0, 0xc966, 0x10, 0x1}, {0x3, 0x81, 0x9, 0xe7c, 0x9, 0x8}, {0x7, 0xde3, 0x372, 0x2, 0xffffffff, 0x2}, {0xf3, 0x8, 0x4, 0x6d, 0x7, 0x9}, {0x4, 0x5, 0x3, 0x9, 0x4, 0x2}, {0x372, 0x9d6, 0x8, 0x39, 0x9, 0xabd2}, {0x3, 0x5, 0x0, 0x2, 0x2, 0x2}, {0x30, 0xd, 0x3, 0x10001, 0x2, 0x3}, {0x1089, 0xf, 0x6, 0x40000000, 0xfffff801, 0x3036c455}, {0x401, 0x9, 0x0, 0x4, 0xfff, 0x3}, {0xf8, 0x1000, 0x2, 0x5, 0x6, 0x2}, {0x0, 0x6, 0x1, 0x14, 0x0, 0x2}, {0x1, 0x1, 0x6, 0xffffff48, 0x800, 0x10}, {0x1, 0xa, 0x6, 0x8, 0x2, 0xd3e}, {0x7, 0x1, 0x80, 0x7, 0x5, 0x8000}, {0x4, 0x7, 0x4, 0x2, 0x1, 0x5b}, {0x544b, 0x497f, 0xf2aa, 0x1, 0x7f}, {0xffff8000, 0x2, 0xaf, 0xffff, 0x3, 0xfffffa2d}, {0x7c5, 0xd3, 0x9, 0x80, 0x3}, {0x9, 0x8, 0x6, 0x4, 0x0, 0x19}, {0xfffffffc, 0x5, 0x750b, 0xddb, 0x1, 0x80000001}, {0x2, 0x6, 0x0, 0x7, 0x6}, {0x2, 0x9, 0x0, 0x6, 0x5, 0x4}, {0x8, 0x9, 0x40, 0x7, 0x2, 0x9}, {0x4, 0x0, 0xfffffffd, 0x101, 0xfc3e, 0x2}, {0x7fffffff, 0x6, 0x2, 0x1, 0xbc, 0x1}, {0x9, 0xfffffffc, 0x5, 0xa, 0x7, 0x7}, {0xc603, 0x582, 0x0, 0x5, 0x8, 0x7}, {0x3, 0xfff, 0xfffffff9, 0x8, 0x5a, 0x4}, {0x5, 0x8, 0x8, 0x0, 0x43, 0x4000000}, {0x6, 0xfffffff7, 0x4, 0x9ef, 0x4, 0x9}, {0x400, 0x3, 0x8001, 0x4, 0x7237, 0x100000}, {0xf80, 0x9c, 0x8000000, 0x4250, 0x7fff, 0x6}, {0x9, 0xb264, 0x3b, 0x8001, 0x3, 0x6b}, {0xba99, 0x1ff, 0x7, 0x6c4, 0xff, 0x200}, {0x6, 0x9d, 0x47c, 0x5919, 0x2, 0x3}, {0x7, 0xa, 0x8, 0x5, 0x8000, 0x6}, {0x5, 0x0, 0x4, 0x9, 0x3, 0x6}, {0x2, 0x2, 0x6, 0xfff, 0x4}, {0x4, 0x1, 0x8, 0x101, 0xaa, 0x4}, {0x10000, 0xa0, 0xe0, 0xe93, 0x5}, {0x5, 0x2, 0x7, 0xead, 0x6, 0x8}, {0x4, 0x0, 0x1, 0x8, 0x1, 0x1}, {0xffffff01, 0x16, 0xdd59, 0x5, 0x7}, {0x9c90, 0x4, 0x10, 0x0, 0x1666, 0x6}, {0x769, 0x3, 0xfffffffe, 0xf, 0x0, 0x5}, {0x2, 0x9, 0x8, 0x9, 0xb, 0x5}, {0x3, 0x7, 0x0, 0x5, 0x2, 0xb8d}, {0x7, 0x6, 0x8, 0x1ff, 0x7, 0x6}, {0x8, 0xd0c, 0x5, 0xffffffff, 0x2, 0x5}, {0x10000, 0x8, 0x1, 0x8000, 0x4, 0x5}, {0x1ff, 0x10001, 0x4, 0x40f, 0x7fff, 0x4}, {0x2, 0x5, 0x2, 0x3, 0x2, 0x7}, {0x6, 0x1, 0x7, 0x81, 0x5, 0x200}, {0x800, 0x2, 0x8, 0x1, 0x8, 0x8}, {0xffffff85, 0x8, 0x10, 0x5, 0xfffffffd, 0x80000001}, {0x4, 0xe8, 0x5, 0x7ff, 0x6cde, 0x6}, {0x1, 0x8, 0x9, 0x5, 0x5}, {0x7, 0x7ff, 0x7, 0xe, 0xfff, 0x8}, {0x0, 0x4, 0x7, 0x4, 0x5, 0x1}, {0x8, 0x9, 0x2, 0x180, 0x8, 0x80000001}, {0x7fff, 0x3, 0x7, 0x3, 0x6, 0x2e}, {0x1, 0xe394, 0x1, 0x7, 0x3}, {0x3, 0x5, 0x4, 0xfff, 0x4, 0x2}, {0x0, 0x9, 0x2, 0x2e08, 0x2, 0x2}], [{0x5, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0xa91dc3ad85c9b8ce, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0xb52ff9b466edb02}, {0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x6, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x0, 0xf40a4439e1e8a96e}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x2, 0x1}, {0x1, 0x7ae1828628e38b43}, {0x3, 0x1}, {0x4}, {0x0, 0x2d450bd872f6b685}, {0x2}, {0x1}, {0x4}, {0x3}, {0x1}, {0x4}, {0x1}, {0x5}, {0x5}, {0x2}, {}, {}, {0x4}, {0x1, 0x2}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}], 0x1}}]}, {0xc7, 0x6, "82d00d85bf10b9fa2eb1abcd4fdbf17b367f4b9da8e59ff7ce79284f249f4e2df25ab45825b0e384f8309d74847bda54c639a8b4eedb619123c414d825aedee74e974e4f4a5255b0522a4a83dff5e0e12f1e343112b0be69721e256794b27d9b25105cecd670b5f37ce6032c9a6ba2898441b8b21aa37a477f9044022f353e31f0b6260705a96679a8ef3f04f8266b5d316729e561eda9dcab134b6be0ebd81df4f8b76851466560e99e09d16ef8fa5e92dd183ac35a6b109a42c84708f38046ead52b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x16}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0x10}}, @TCA_U32_CLASSID={0x8, 0x1, {0xf, 0xc}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x21d4}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x0, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x20000005, 0x7}) socket$inet_mptcp(0x2, 0x1, 0x106) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 90.386741ms ago: executing program 9 (id=3542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x2, 0x20, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x1, 0xb, 0x0, 0xb, 0xfffffffffffffff0, 0xffffffffffffffe4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x88}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x79cb233db19aea97}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 83.199185ms ago: executing program 4 (id=3543): r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) ppoll(&(0x7f0000000280)=[{r0, 0x1582}], 0x1, &(0x7f00000025c0), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x8020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x920421, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0x6, 0x2e}) 58.235673ms ago: executing program 8 (id=3544): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e20, @empty}]}, &(0x7f00000000c0)=0xc) 56.689843ms ago: executing program 7 (id=3545): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r0}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x6, &(0x7f0000000800)=ANY=[], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000000)=@ethtool_cmd={0x49, 0x7fff, 0x1, 0xb, 0x5, 0x74, 0x9, 0x4, 0x4, 0x1, 0x6, 0x7, 0x9, 0x2f, 0x4, 0x0, [0x0, 0x7]}}) 1.592999ms ago: executing program 9 (id=3546): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4cc, 0x0, 0xfffffffc}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x3, @remote}}, 0x1e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$rdma_cm(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000003c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x10, @private1, 0x8d}}}, 0x90) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e5000000000000001801000020207025000000001f2020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x8000) 0s ago: executing program 7 (id=3547): r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000440)={0x149, 0x8, &(0x7f0000000040)="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"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000540)=0x4, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='/dev/ptmx\x00', &(0x7f00000005c0)='/dev/ptmx\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r5) r6 = socket$inet(0x2, 0x800, 0xfffffffb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r8 = openat$dir(0xffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x9e) linkat(r7, &(0x7f0000000680)='./file0\x00', r8, &(0x7f0000000700)='./file0\x00', 0x1000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000740)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x3, 0x7fffffff, {{0x1a, 0x4, 0x2, 0x1, 0x68, 0x67, 0x0, 0x8, 0x29, 0x0, @loopback, @remote, {[@end, @end, @end, @timestamp_prespec={0x44, 0x24, 0x7b, 0x3, 0x5, [{@local, 0x5}, {@rand_addr=0x64010100, 0xf03}, {@multicast1, 0xbbed}, {@multicast2, 0x3}]}, @ssrr={0x89, 0x2b, 0x8d, [@rand_addr=0x64010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback, @private=0xa010101]}]}}}}}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0xff}}, @var={0xe, 0x0, 0x0, 0xe, 0x3, 0x1}, @const={0xe}, @enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0xa, [{0xd, 0x6, 0x7ff}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x7}}, @volatile={0x2, 0x0, 0x0, 0x9, 0x2}, @func={0x9, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x61, 0x2e, 0x0, 0x30, 0x61, 0x61, 0x30, 0x0]}}, &(0x7f0000000900)=""/197, 0x9e, 0xc5, 0x1, 0x7, 0x10000, @value=r7}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xe, 0x8b, 0x0, 0x4, 0x40000, r7, 0xa, '\x00', r9, r10, 0x1, 0x0, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='ext4_writepages\x00', r10, 0x0, 0x40004000}, 0x18) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@o_path={&(0x7f0000000b40)='./file1\x00', 0x0, 0x4000, r3}, 0x14) ioctl$FAT_IOCTL_GET_VOLUME_ID(r12, 0x80047213, &(0x7f0000000bc0)) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r7) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x58, r13, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x4046880) write$tcp_congestion(r7, &(0x7f0000000d80)='yeah\x00', 0x5) connect$bt_l2cap(r7, &(0x7f0000000dc0)={0x1f, 0x6, @any, 0x5, 0x2}, 0xe) r14 = openat$mice(0xffffff9c, &(0x7f0000000e00), 0x602) ioctl$RTC_WIE_OFF(r14, 0x7010) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000e40)={@empty, 0xa081, 0xf297af6c0784fcb4, 0x2, 0x0, 0x7, 0x5}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000e80)={0x0, @in={{0x2, 0x4e23, @broadcast}}, [0xc78b, 0x2, 0xa, 0x4, 0xa5, 0x9, 0x89, 0x9, 0x8, 0x101, 0x2, 0x7, 0xfffffffffffffff7, 0x81, 0x9]}, &(0x7f0000000f80)=0xfc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r14, 0x84, 0x72, &(0x7f0000000fc0)={r15, 0x4}, 0xc) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{&(0x7f0000001000)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000001080)="4425dd12d7d064788a15f017a08b91ee2555980e4e4d3ff225325ebd55cfe25b0352ecb1e8d789e6b2b888eb58aa095ed3c980963acb34fa086b841c36dc39ab06196c2f4000ae90bb575cd22fd71b52036010692ac907ed681a042ba970aea39468e4e30986b2ba3a39ebd29d993968137d2b120e79087fd167e15dbb21c6d37a8452c09b91794de42481c94f362e8eb00fc9784352870fa4bbcf889c6a65f0870f3ad3b5475ea9f693029178245dac2fea1f032f4247441a021ee18aa948e10a52701549b499e3a3fb690ab81bc0faf7face29a80172", 0xd7}, {&(0x7f0000001180)="c7c6ac3334a4c195212376b695ade69450c1b54c7caa874071e0aaa3f3ea4c42f35877b8be2d80f98dcfd379c72fff643d048278b11dca4e8c6b8c17de3b61231b087f21bfbfc7677f", 0x49}], 0x2, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10, r7, r11]}}, @rights={{0x18, 0x1, 0x1, [r0, r4, r1]}}, @rights={{0x18, 0x1, 0x1, [r7, r11, 0xffffffffffffffff]}}], 0x68, 0x40080}}, {{&(0x7f0000001380)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001400)="04b4fa15084741dd9b2f59da14d67341709b6b", 0x13}], 0x1, &(0x7f0000001480)=[@rights={{0x10, 0x1, 0x1, [r7]}}, @rights={{0x18, 0x1, 0x1, [r5, r14, r7]}}], 0x28, 0x4}}], 0x2, 0x10) kernel console output (not intermixed with test programs): 1h¥ä{•©þÞšwƦl$¸#ø¶)ø?÷77‚©_z]Ͼã_ÒxLi†¶Ô<’'Ñ$Íß„•‰ÍA¤Ìø@lÉó?õP!§üF‹„1G#mÿL©ÓÇÿ' [ 687.618627][T17397] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2923'. [ 687.659682][T17397] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2923'. [ 687.698229][T17397] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2923'. [ 689.076555][T17432] netlink: 'syz.7.2932': attribute type 1 has an invalid length. [ 689.085982][T17432] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 690.381466][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.389074][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.849085][ T6261] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 692.009050][ T6261] usb 12-1: Using ep0 maxpacket: 8 [ 692.013239][ T6261] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 692.015864][ T6261] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 692.029063][ T6261] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 692.039098][ T6261] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 692.051478][ T6261] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 692.079012][ T6261] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 692.082117][ T6261] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.370400][ T6261] usb 12-1: GET_CAPABILITIES returned 0 [ 692.372100][ T6261] usbtmc 12-1:16.0: can't read capabilities [ 692.773554][T14640] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 692.777048][T14640] Bluetooth: hci3: Frame reassembly failed (-84) [ 692.952573][ T6111] usb 12-1: USB disconnect, device number 8 [ 693.231293][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 693.231309][ T40] audit: type=1326 audit(1765760275.236:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17483 comm="syz.4.2947" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 693.291380][ T40] audit: type=1326 audit(1765760275.246:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17483 comm="syz.4.2947" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 693.346662][ T40] audit: type=1326 audit(1765760275.246:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17483 comm="syz.4.2947" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 693.402076][ T40] audit: type=1326 audit(1765760275.246:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17483 comm="syz.4.2947" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 693.436823][ T40] audit: type=1326 audit(1765760275.246:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17483 comm="syz.4.2947" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 693.864256][T17488] tipc: Enabling of bearer rejected, failed to enable media [ 694.789019][ T5303] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 696.334612][T17534] lo speed is unknown, defaulting to 1000 [ 696.337226][T17534] wlan0 speed is unknown, defaulting to 1000 [ 697.082792][T17544] lo speed is unknown, defaulting to 1000 [ 697.085690][T17544] wlan0 speed is unknown, defaulting to 1000 [ 697.519408][T17553] lo speed is unknown, defaulting to 1000 [ 697.523394][T17553] wlan0 speed is unknown, defaulting to 1000 [ 697.900021][T17561] lo speed is unknown, defaulting to 1000 [ 697.913552][T17561] lo speed is unknown, defaulting to 1000 [ 697.916489][T17561] lo speed is unknown, defaulting to 1000 [ 697.996074][T17561] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 698.261579][T17561] lo speed is unknown, defaulting to 1000 [ 698.299617][T17561] lo speed is unknown, defaulting to 1000 [ 698.310846][T17561] lo speed is unknown, defaulting to 1000 [ 698.360894][T17561] lo speed is unknown, defaulting to 1000 [ 698.400328][T17561] lo speed is unknown, defaulting to 1000 [ 698.411559][T17561] lo speed is unknown, defaulting to 1000 [ 699.342739][T17586] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2975'. [ 699.361524][T17586] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2975'. [ 699.361618][ T1145] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 699.404560][ T1145] Bluetooth: hci3: Frame reassembly failed (-84) [ 699.778178][T17597] netlink: 'syz.6.2976': attribute type 1 has an invalid length. [ 699.908530][T17597] 8021q: adding VLAN 0 to HW filter on device bond4 [ 701.419118][ T5957] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 701.640597][T17611] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 701.666254][T17611] CPU: 3 UID: 0 PID: 17611 Comm: syz.4.2981 Not tainted syzkaller #0 PREEMPT(full) [ 701.666279][T17611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 701.666290][T17611] Call Trace: [ 701.666296][T17611] [ 701.666303][T17611] dump_stack_lvl+0x16c/0x1f0 [ 701.666334][T17611] sysfs_warn_dup+0x7f/0xa0 [ 701.666355][T17611] sysfs_create_dir_ns+0x24b/0x2b0 [ 701.666374][T17611] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 701.666391][T17611] ? find_held_lock+0x2b/0x80 [ 701.666418][T17611] ? class_dir_child_ns_type+0xd/0x60 [ 701.666442][T17611] kobject_add_internal+0x2c4/0x9d0 [ 701.666462][T17611] kobject_add+0x16e/0x240 [ 701.666475][T17611] ? __pfx_kobject_add+0x10/0x10 [ 701.666496][T17611] ? get_device_parent+0x1c5/0x4e0 [ 701.666515][T17611] ? kobject_put+0xaf/0x6f0 [ 701.666542][T17611] ? device_add+0xc25/0x1980 [ 701.666567][T17611] device_add+0x288/0x1980 [ 701.666590][T17611] ? lockdep_init_map_type+0x5c/0x270 [ 701.666608][T17611] ? __pfx_device_add+0x10/0x10 [ 701.666630][T17611] ? lockdep_init_map_type+0x5c/0x270 [ 701.666647][T17611] ? __init_waitqueue_head+0xca/0x150 [ 701.666675][T17611] tty_register_device_attr+0x38e/0x7c0 [ 701.666701][T17611] ? __pfx_tty_register_device_attr+0x10/0x10 [ 701.666730][T17611] ? tty_port_init+0x156/0x1c0 [ 701.666757][T17611] gsm_activate_mux+0x157/0x2e0 [ 701.666790][T17611] gsmld_ioctl+0x8cb/0x1570 [ 701.666813][T17611] ? __pfx_gsmld_ioctl+0x10/0x10 [ 701.666855][T17611] ? __pfx_gsmld_ioctl+0x10/0x10 [ 701.666870][T17611] tty_compat_ioctl+0x42a/0x4d0 [ 701.666893][T17611] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 701.666917][T17611] __ia32_compat_sys_ioctl+0x242/0x370 [ 701.666943][T17611] __do_fast_syscall_32+0xe8/0x680 [ 701.666972][T17611] do_fast_syscall_32+0x32/0x80 [ 701.666998][T17611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 701.667020][T17611] RIP: 0023:0xf7fc1579 [ 701.667035][T17611] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 701.667051][T17611] RSP: 002b:00000000f54b655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 701.667068][T17611] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000404c4701 [ 701.667079][T17611] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 701.667090][T17611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 701.667100][T17611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.667110][T17611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 701.667134][T17611] [ 701.667154][T17611] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 702.409803][T17635] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2985'. [ 702.681138][T17638] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 702.683944][T17638] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 702.719327][T17638] vhci_hcd vhci_hcd.0: Device attached [ 702.837174][T17639] vhci_hcd: connection closed [ 702.838466][ T13] vhci_hcd vhci_hcd.7: stop threads [ 702.855196][ T13] vhci_hcd vhci_hcd.7: release socket [ 702.858068][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 703.059264][T17634] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 703.061512][T17634] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 703.064145][T17634] vhci_hcd vhci_hcd.0: Device attached [ 703.389072][ T6011] usb 49-1: new high-speed USB device number 5 using vhci_hcd [ 703.509392][T14683] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 703.512747][T14683] Bluetooth: hci3: Frame reassembly failed (-84) [ 703.519085][T14683] Bluetooth: hci3: Frame reassembly failed (-84) [ 703.521360][T14640] Bluetooth: hci3: Frame reassembly failed (-84) [ 703.878592][T17645] vhci_hcd: connection reset by peer [ 703.889310][ T46] vhci_hcd vhci_hcd.6: stop threads [ 703.891581][ T46] vhci_hcd vhci_hcd.6: release socket [ 703.899372][ T46] vhci_hcd vhci_hcd.6: disconnect device [ 705.460114][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2991'. [ 705.495765][T17660] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2991'. [ 705.509118][ T5957] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 705.549255][T17660] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2991'. [ 705.959864][T17670] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 705.987438][T17670] overlayfs: missing 'lowerdir' [ 707.369424][T17682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2995'. [ 708.602114][ T6011] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 708.964318][T17709] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2998'. [ 709.394462][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 709.411011][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 709.418187][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 709.422557][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 709.426375][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 709.445810][T17712] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 709.834992][T17716] ceph: No mds server is up or the cluster is laggy [ 710.265820][T10449] syz_tun (unregistering): left promiscuous mode [ 710.536858][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 710.541475][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 710.544903][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 710.548167][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 710.553061][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 710.557695][T17721] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 710.685240][T17719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 712.582377][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 712.593355][ T5957] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 712.601023][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 712.608457][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 712.611618][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 712.900883][T17740] lo speed is unknown, defaulting to 1000 [ 712.953746][T17740] wlan0 speed is unknown, defaulting to 1000 [ 712.957020][T17740] lo speed is unknown, defaulting to 1000 [ 713.139606][T17753] netlink: 'syz.6.3009': attribute type 4 has an invalid length. [ 713.144230][T17753] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3009'. [ 713.208083][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3008'. [ 713.217251][T17754] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3008'. [ 713.221156][T17754] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3008'. [ 713.871848][T14640] ip6gretap0 (unregistering): left promiscuous mode [ 714.231584][T14640] gretap0 (unregistering): left promiscuous mode [ 714.237133][T17761] x_tables: duplicate underflow at hook 2 [ 714.294169][T14640] bond1 (unregistering): (slave geneve3): Releasing active interface [ 714.334113][T14640] team0: Port device geneve0 removed [ 714.353262][T14640] team0: Port device bridge1 removed [ 714.424945][T14640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.429124][T14640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.432478][T14640] bond0 (unregistering): Released all slaves [ 714.521530][T14640] bond1 (unregistering): Released all slaves [ 714.611478][T14640] bond2 (unregistering): Released all slaves [ 714.627865][T17753] .`: renamed from bond0 (while UP) [ 714.699101][ T5303] Bluetooth: hci3: command tx timeout [ 714.726775][T17740] chnl_net:caif_netlink_parms(): no params data found [ 714.761052][T17775] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3015'. [ 714.826691][T17740] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.829357][T17740] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.832119][T17740] bridge_slave_0: entered allmulticast mode [ 714.835061][T17740] bridge_slave_0: entered promiscuous mode [ 714.838715][T17740] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.841483][T17740] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.849144][T17740] bridge_slave_1: entered allmulticast mode [ 714.852028][T17740] bridge_slave_1: entered promiscuous mode [ 714.891170][T17740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.896822][T17740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.943630][T17740] team0: Port device team_slave_0 added [ 714.948576][T17740] team0: Port device team_slave_1 added [ 714.963402][T17740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.966123][T17740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.989433][T17740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.996556][T17740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.000515][T17740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.011583][T17740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.041167][T17740] hsr_slave_0: entered promiscuous mode [ 715.044453][T17740] hsr_slave_1: entered promiscuous mode [ 715.047407][T17740] debugfs: 'hsr0' already exists in 'hsr' [ 715.082065][T17740] Cannot create hsr debugfs directory [ 715.367199][T17818] netlink: 216 bytes leftover after parsing attributes in process `syz.7.3024'. [ 715.371463][T17818] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3024'. [ 715.374558][T17818] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3024'. [ 715.383025][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3024'. [ 715.394153][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3024'. [ 715.616824][T17834] trusted_key: encrypted_key: hex blob is missing [ 715.621622][T17834] bad cache= option: none yes [ 715.621622][T17834] blocksize : 64 [ 715.621622][T17834] digestsize : 32 [ 715.621622][T17834] [ 715.621622][T17834] name : nhpoly1305 [ 715.621622][T17834] driver : cryptd(nhpoly1305-sse2) [ 715.621622][T17834] module : kernel [ 715.621622][T17834] priority : 250 [ 715.621622][T17834] refcnt : 1 [ 715.621622][T17834] selftest : passed [ 715.621622][T17834] internal : no [ 715.621622][T17834] type : ahash [ 715.621622][T17834] async : yes [ 715.621622][T17834] blocksize : 0 [ 715.621622][T17834] digestsize : 16 [ 715.621622][T17834] [ 715.621622][T17834] name : seqiv(rfc4543(gcm(aes))) [ 715.621622][T17834] driver : seqiv(rfc4543(generic-gcm-vaes-avx2)) [ 715.621622][T17834] module : kernel [ 715.621622][T17834] priority : 600 [ 715.621622][T17834] refcnt : 1 [ 715.621622][T17834] selftest : passed [ 715.621622][T17834] internal : no [ 715.621622][T17834] type : aead [ 715.621622][T17834] async : no [ 715.621622][T17834] blocksize : 1 [ 715.621622][T17834] ivsize : 8 [ 715.621622][T17834] maxauthsize : 16 [ 715.621622][T17834] geniv : [ 715.621622][T17834] [ 715.621622][T17834] name : rfc4543(gcm(aes)) [ 715.621622][T17834] driver : rfc4543(generic-gcm-vaes-avx2) [ 715.621622][T17834] module : kernel [ 715.621622][T17834] priority : 600 [ 715.621622][T17834] refcnt : 1 [ 715.621622][T17834] selftest : passed [ 715.621622][T17834] internal : no [ 715.621622][T17834] type : aead [ 715.621622][T17834] async : no [ 715.621622][T17834] blocksize : 1 [ 715.621622][T17834] ivsize : 8 [ 715.621622][T17834] maxauthsize : 16 [ 715.621622][T17834] geniv : [ 715.621622][T17834] [ 715.621622][T17834] name : xcbc(seed) [ 715.621622][T17834] driver : xcbc(seed-generic) [ 715.622102][T17834] CIFS: VFS: bad cache= option: none yes [ 715.622102][T17834] blocksize : 64 [ 715.622102][T17834] digestsize : 32 [ 715.622102][T17834] [ 715.622102][T17834] name : nhpoly1305 [ 715.622102][T17834] driver : cryptd(nhpoly1305-sse2) [ 715.622102][T17834] module : kernel [ 715.622102][T17834] priority : 250 [ 715.622102][T17834] refcnt : 1 [ 715.622102][T17834] selftest : passed [ 715.622102][T17834] internal : no [ 715.622102][T17834] type : ahash [ 715.622102][T17834] async : yes [ 715.622102][T17834] blocksize : 0 [ 715.622102][T17834] digestsize : 16 [ 715.622102][T17834] [ 715.622102][T17834] name : seqiv(rfc4543(gcm(aes))) [ 715.622102][T17834] driver : seqiv(rfc4543(generic-gcm-vaes-avx2)) [ 715.622102][T17834] module : kernel [ 715.622102][T17834] priority : 600 [ 715.622102][T17834] refcnt : 1 [ 715.622102][T17834] selftest : passed [ 715.622102][T17834] internal : no [ 715.622102][T17834] type : aead [ 715.622102][T17834] async : no [ 715.622102][T17834] blocksize : 1 [ 715.622102][T17834] ivsize : 8 [ 715.622102][T17834] maxauthsize : 16 [ 715.622102][T17834] geniv : [ 715.622102][T17834] [ 715.622102][T17834] name : rfc4543(gcm(aes)) [ 715.622102][T17834] driver : rfc4543(generic-gcm-vaes-avx2) [ 715.622102][T17834] module : kernel [ 715.622102][T17834] priority : 600 [ 715.622102][T17834] refcnt : 1 [ 715.622102][T17834] selftest : passed [ 715.622102][T17834] internal : no [ 715.622102][T17834] type : aead [ 715.622102][T17834] async : no [ 715.622102][T17834] blocksize : 1 [ 715.622102][T17834] ivsize : 8 [ 715.622102][T17834] maxauthsize : 16 [ 715.622102][T17834] geniv : [ 715.622102][T17834] [ 715.622102][T17834] name : xcbc(seed) [ 715.622102][T17834] driver : xcbc(seed-generic) [ 715.696045][T17834] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 715.782481][T17834] CIFS mount error: No usable UNC path provided in device string! [ 715.782481][T17834] [ 715.786958][T17834] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 716.024793][T17740] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 716.035230][T17740] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 716.043005][T17740] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 716.051880][T17740] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 716.131417][T17740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.143319][T17740] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.148814][ T4000] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.151887][ T4000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.167627][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.169829][T17861] 9p: Bad value for 'rfdno' [ 716.170645][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.349948][T14640] tipc: Left network mode [ 716.464629][T17740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.727910][T17740] veth0_vlan: entered promiscuous mode [ 716.742766][T17740] veth1_vlan: entered promiscuous mode [ 716.809146][ T5303] Bluetooth: hci3: command tx timeout [ 716.827832][T14640] hsr_slave_0: left promiscuous mode [ 716.833243][T14640] hsr_slave_1: left promiscuous mode [ 716.836352][T14640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.841535][T14640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.413849][T14640] team0 (unregistering): Port device team_slave_1 removed [ 717.493022][T14640] team0 (unregistering): Port device team_slave_0 removed [ 717.799235][T17740] veth0_macvtap: entered promiscuous mode [ 717.808445][ T6261] lo speed is unknown, defaulting to 1000 [ 717.820701][T17740] veth1_macvtap: entered promiscuous mode [ 717.823516][ T6261] infiniband syz2: ib_query_port failed (-19) [ 717.852595][T17740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.864133][T17740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.873088][ T4000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.877704][ T4000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.882304][ T4000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.885393][ T4000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.943070][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.945597][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.954997][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.958254][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.217074][T14640] IPVS: stop unused estimator thread 0... [ 718.759421][ T6100] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 718.859603][ T5303] Bluetooth: hci3: command tx timeout [ 718.930105][ T6100] usb 11-1: Using ep0 maxpacket: 8 [ 718.933549][ T6100] usb 11-1: unable to get BOS descriptor or descriptor too short [ 718.939343][ T6100] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 718.942635][ T6100] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 718.950754][ T6100] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 718.953637][ T6100] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.956151][ T6100] usb 11-1: Product: syz [ 718.965597][ T6100] usb 11-1: Manufacturer: syz [ 718.967183][ T6100] usb 11-1: SerialNumber: syz [ 719.034679][T17937] binder: Unknown parameter 'smackfshat' [ 719.468387][ T6100] cdc_ncm 11-1:1.0: CDC Union missing and no IAD found [ 719.782220][ T81] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 719.783164][ T6100] cdc_ncm 11-1:1.0: bind() failure [ 719.784835][ T81] Bluetooth: hci4: Frame reassembly failed (-84) [ 719.798740][ T6100] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 719.802464][ T6100] cdc_ncm 11-1:1.1: bind() failure [ 719.815584][ T6100] usb 11-1: USB disconnect, device number 12 [ 720.586626][ T81] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 720.606987][ T6186] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 720.609967][ T6186] Bluetooth: hci5: Frame reassembly failed (-84) [ 720.612165][ T6186] Bluetooth: hci5: Frame reassembly failed (-84) [ 720.949136][ T5948] Bluetooth: hci3: command tx timeout [ 721.829082][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 721.829113][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 722.619112][ T5957] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 723.267604][T18032] __nla_validate_parse: 6 callbacks suppressed [ 723.267623][T18032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3072'. [ 723.409781][T18041] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 723.412719][T18041] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 723.415447][T18041] vhci_hcd vhci_hcd.0: Device attached [ 723.679109][ T6011] usb 46-1: SetAddress Request (20) to port 0 [ 723.681620][ T6011] usb 46-1: new SuperSpeed USB device number 20 using vhci_hcd [ 723.984336][T18042] vhci_hcd: connection reset by peer [ 723.987112][ T103] vhci_hcd vhci_hcd.4: stop threads [ 723.989775][ T103] vhci_hcd vhci_hcd.4: release socket [ 723.994619][ T103] vhci_hcd vhci_hcd.4: disconnect device [ 724.183291][T18066] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 724.186019][T18066] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 724.199592][T18066] vhci_hcd vhci_hcd.0: Device attached [ 724.469106][T14625] usb 50-1: SetAddress Request (21) to port 0 [ 724.471714][T14625] usb 50-1: new SuperSpeed USB device number 21 using vhci_hcd [ 724.824035][T18074] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3080'. [ 724.874511][T18074] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3080'. [ 724.921275][T18067] vhci_hcd: connection reset by peer [ 724.924944][ T1145] vhci_hcd vhci_hcd.6: stop threads [ 724.927203][ T1145] vhci_hcd vhci_hcd.6: release socket [ 724.929701][ T1145] vhci_hcd vhci_hcd.6: disconnect device [ 724.931260][T18081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3082'. [ 725.006845][T18085] sp0: Synchronizing with TNC [ 725.405734][T18101] fuse: Unknown parameter 'group_iß?00000000000000000000' [ 726.076373][T18123] bridge0: left promiscuous mode [ 726.078922][T18123] bridge0: left allmulticast mode [ 726.546776][T18136] netlink: 'syz.5.3100': attribute type 33 has an invalid length. [ 726.549794][T18136] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3100'. [ 727.607456][ T6204] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.615095][ T6204] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.625066][ T6204] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 727.628606][ T6204] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.633681][ T6204] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.636631][ T6204] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 727.642387][ T6204] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.645478][ T6204] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.651616][ T6204] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 727.654811][ T6204] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.665220][ T6204] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.670854][ T6204] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 727.835792][ T5303] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 727.843844][ T5303] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 727.847117][ T5303] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 727.854240][ T5303] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 727.858055][ T5303] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 727.896150][T18172] lo speed is unknown, defaulting to 1000 [ 727.899699][T18172] wlan0 speed is unknown, defaulting to 1000 [ 728.102872][T18179] binder: 18178:18179 ioctl 4018620d 0 returned -22 [ 728.104030][T18172] chnl_net:caif_netlink_parms(): no params data found [ 728.180527][T18172] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.182859][T18172] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.185132][T18172] bridge_slave_0: entered allmulticast mode [ 728.187826][T18172] bridge_slave_0: entered promiscuous mode [ 728.204206][T18172] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.207747][T18172] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.212936][T18172] bridge_slave_1: entered allmulticast mode [ 728.217045][T18172] bridge_slave_1: entered promiscuous mode [ 728.246608][T18172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.253205][T18172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.283130][T18172] team0: Port device team_slave_0 added [ 728.288679][T18172] team0: Port device team_slave_1 added [ 728.321087][T18172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.323328][T18172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.331810][T18172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.338106][T18172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.341865][T18172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.356049][T18172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.410537][ T6204] veth3: left allmulticast mode [ 728.412654][ T6204] veth3: left promiscuous mode [ 728.416743][ T6204] bridge1: port 1(veth3) entered disabled state [ 728.677482][ T6204] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 728.753088][ T6204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.757034][ T6204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.761129][ T6204] bond0 (unregistering): Released all slaves [ 728.779205][ T6011] usb 46-1: device descriptor read/8, error -110 [ 728.889527][ T6204] bond1 (unregistering): Released all slaves [ 728.919531][T18172] hsr_slave_0: entered promiscuous mode [ 728.921936][T18172] hsr_slave_1: entered promiscuous mode [ 728.924099][T18172] debugfs: 'hsr0' already exists in 'hsr' [ 728.926037][T18172] Cannot create hsr debugfs directory [ 728.967414][T18189] team0 (unregistering): Port device team_slave_0 removed [ 728.982488][T18189] team0 (unregistering): Port device team_slave_1 removed [ 729.012320][ T6204] tipc: Left network mode [ 729.244303][ T6011] usb usb46-port1: attempt power cycle [ 729.302839][ T6031] wlan0 speed is unknown, defaulting to 1000 [ 729.304826][ T6031] infiniband syz1: ib_query_port failed (-19) [ 729.409758][ T6204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.426212][ T6204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.468354][ T6204] pim6reg (unregistering): left allmulticast mode [ 729.498547][ T6204] team0 (unregistering): Port device batadv3 removed [ 729.569594][ T6204] team0 (unregistering): Port device batadv2 removed [ 729.599417][T14625] usb 50-1: device descriptor read/8, error -110 [ 729.899211][ T5303] Bluetooth: hci4: command tx timeout [ 730.001420][T14625] usb usb50-port1: attempt power cycle [ 730.311715][T18197] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3115'. [ 730.413005][ T6204] team0 (unregistering): Port device team_slave_1 removed [ 730.480725][ T6204] team0 (unregistering): Port device team_slave_0 removed [ 730.496313][ T46] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 730.508422][ T81] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 730.525318][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3120'. [ 730.529989][ T81] Bluetooth: hci2: Frame reassembly failed (-84) [ 730.532947][ T46] Bluetooth: hci2: Frame reassembly failed (-84) [ 730.590623][T14625] usb usb50-port1: unable to enumerate USB device [ 730.845797][ T6011] usb usb46-port1: unable to enumerate USB device [ 731.150089][T14625] usb usb50-port6: attempt power cycle [ 731.510227][T18172] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 731.514744][T18172] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 731.518858][T18172] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 731.557661][T18172] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 731.623685][T18172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.635274][T18172] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.667587][T18172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 731.672118][T18172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 731.681490][T14683] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.684362][T14683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.691438][T14683] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.693801][T14683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.719506][T14625] usb usb50-port6: unable to enumerate USB device [ 731.944964][T18172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.989060][ T5957] Bluetooth: hci4: command tx timeout [ 732.026794][ T6204] IPVS: stop unused estimator thread 0... [ 732.179512][T18172] veth0_vlan: entered promiscuous mode [ 732.186792][T18172] veth1_vlan: entered promiscuous mode [ 732.217910][T18172] veth0_macvtap: entered promiscuous mode [ 732.222987][T18172] veth1_macvtap: entered promiscuous mode [ 732.233297][T18172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.241099][T18172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.248533][T17734] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.252456][T17734] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.256582][T17734] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.260821][T17734] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.311971][T17734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.314502][T17734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.335634][T17734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.338898][T17734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.539168][ T5957] Bluetooth: hci2: command 0x1003 tx timeout [ 732.541949][ T5303] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 733.365463][T18304] netlink: 'syz.6.3126': attribute type 4 has an invalid length. [ 734.059117][ T5303] Bluetooth: hci4: command tx timeout [ 734.428724][T18330] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3133'. [ 734.955901][ T1145] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 734.962987][ T6204] Bluetooth: hci2: Frame reassembly failed (-84) [ 735.141655][ T6186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.145792][ T6186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.258910][T18340] syzkaller1: entered promiscuous mode [ 735.261804][T18340] syzkaller1: entered allmulticast mode [ 736.168574][ T5957] Bluetooth: hci4: command tx timeout [ 736.290833][T18349] : renamed from bond_slave_0 (while UP) [ 736.540930][T18351] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3138'. [ 736.551392][T18351] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3138'. [ 736.579224][T18351] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3138'. [ 736.599831][T18353] tipc: Can't bind to reserved service type 1 [ 736.632676][T18355] usb 2-1: USB disconnect, device number 2 [ 736.686829][T18356] hub 2-0:1.0: USB hub found [ 736.688579][T18356] hub 2-0:1.0: 6 ports detected [ 736.779664][T18355] kAFS: unable to lookup cell '(,c¾ûL' [ 736.849707][T18149] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 737.029333][ T5303] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 737.048231][T18149] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 737.062289][T18149] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 737.065148][T18149] usb 2-1: Product: QEMU USB Tablet [ 737.066818][T18149] usb 2-1: Manufacturer: QEMU [ 737.068468][T18149] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 737.109931][T18149] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0005/input/input25 [ 737.202379][T18367] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 737.203932][T18149] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 737.208074][T18367] macvtap1: entered promiscuous mode [ 737.213623][T18367] mac80211_hwsim hwsim27 wlan1: left promiscuous mode [ 737.722724][T18386] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 737.725543][T18386] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 737.728130][T18386] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 737.734368][T18386] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 737.737980][T18386] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 737.740366][T18386] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 737.745072][T18386] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 737.779882][T18149] usb 12-1: new full-speed USB device number 9 using dummy_hcd [ 737.899202][ T40] audit: type=1326 audit(1765760319.846:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.6.3151" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d598 code=0x7ffc0000 [ 737.918255][ T40] audit: type=1326 audit(1765760319.846:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.6.3151" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d598 code=0x7ffc0000 [ 737.927014][ T40] audit: type=1326 audit(1765760319.846:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.6.3151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 737.934422][ T40] audit: type=1326 audit(1765760319.846:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.6.3151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 737.941423][ T40] audit: type=1326 audit(1765760319.846:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.6.3151" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d598 code=0x7ffc0000 [ 737.951423][ T40] audit: type=1326 audit(1765760319.846:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.6.3151" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d598 code=0x7ffc0000 [ 737.958405][ T40] audit: type=1326 audit(1765760319.846:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.6.3151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 737.965034][ T40] audit: type=1326 audit(1765760319.846:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.6.3151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 737.971289][ T40] audit: type=1326 audit(1765760319.846:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.6.3151" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709d598 code=0x7ffc0000 [ 737.977641][ T40] audit: type=1326 audit(1765760319.846:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18385 comm="syz.6.3151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 738.154411][ T6186] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 738.160698][ T6186] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 738.163225][T17734] Bluetooth: hci2: Frame reassembly failed (-84) [ 738.903933][T18425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3154'. [ 738.910547][T18425] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3154'. [ 738.913448][T18425] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3154'. [ 739.330127][T18440] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 739.332241][T18440] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 739.335716][T18440] vhci_hcd vhci_hcd.0: Device attached [ 739.569052][T14625] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 739.739299][ T5303] Bluetooth: hci4: command 0x0c1a tx timeout [ 739.739386][T14659] Bluetooth: hci1: command 0x0c1a tx timeout [ 739.744126][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 739.936201][T18444] vhci_hcd: connection reset by peer [ 739.939844][ T46] vhci_hcd vhci_hcd.4: stop threads [ 739.941911][ T46] vhci_hcd vhci_hcd.4: release socket [ 739.944241][ T46] vhci_hcd vhci_hcd.4: disconnect device [ 740.219102][ T5948] Bluetooth: hci2: command 0x1003 tx timeout [ 740.219929][ T5957] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 740.279727][T18149] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 740.287627][T18149] usb 12-1: can't read configurations, error -71 [ 740.717385][T18469] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 740.719527][T18469] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 740.722205][T18469] vhci_hcd vhci_hcd.0: Device attached [ 740.959131][ T6261] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 741.403947][T18470] vhci_hcd: connection reset by peer [ 741.407791][ T6186] vhci_hcd vhci_hcd.5: stop threads [ 741.419050][ T6186] vhci_hcd vhci_hcd.5: release socket [ 741.421564][ T6186] vhci_hcd vhci_hcd.5: disconnect device [ 741.673139][T18489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3166'. [ 741.699093][T18489] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3166'. [ 741.703926][T18489] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3166'. [ 741.819245][ T5948] Bluetooth: hci3: command 0x0c1a tx timeout [ 741.821345][ T5957] Bluetooth: hci4: command 0x0c1a tx timeout [ 742.530694][T18499] xt_CT: You must specify a L4 protocol and not use inversions on it [ 742.562728][ T46] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 742.569430][ T46] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 742.573546][ T46] Bluetooth: hci2: Frame reassembly failed (-84) [ 742.688151][T18503] netlink: 'syz.5.3172': attribute type 2 has an invalid length. [ 742.756057][T18511] netlink: 'syz.5.3174': attribute type 2 has an invalid length. [ 742.765334][T18511] netlink: 'syz.5.3174': attribute type 1 has an invalid length. [ 743.289349][T18538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3177'. [ 743.303974][T18538] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3177'. [ 743.308535][T18538] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3177'. [ 743.899093][T14659] Bluetooth: hci4: command 0x0c1a tx timeout [ 743.901178][ T5957] Bluetooth: hci3: command 0x0c1a tx timeout [ 744.254792][ T6100] libceph: connect (1)[c::]:6789 error -101 [ 744.257460][ T6100] libceph: mon0 (1)[c::]:6789 connect error [ 744.297266][T18548] ceph: No mds server is up or the cluster is laggy [ 744.377231][T18551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 744.539239][T14659] Bluetooth: hci2: command 0x1003 tx timeout [ 744.541417][ T5948] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 744.630652][T18563] ceph: Path missing in source [ 744.648243][T18563] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 744.709116][T14625] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 745.772295][T18583] FAULT_INJECTION: forcing a failure. [ 745.772295][T18583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.778464][T18583] CPU: 3 UID: 0 PID: 18583 Comm: syz.7.3188 Not tainted syzkaller #0 PREEMPT(full) [ 745.778489][T18583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 745.778501][T18583] Call Trace: [ 745.778509][T18583] [ 745.778518][T18583] dump_stack_lvl+0x16c/0x1f0 [ 745.778571][T18583] should_fail_ex+0x512/0x640 [ 745.778601][T18583] _copy_from_user+0x2e/0xd0 [ 745.778622][T18583] get_compat_msghdr+0xa7/0x170 [ 745.778651][T18583] ? __pfx_get_compat_msghdr+0x10/0x10 [ 745.778682][T18583] ___sys_sendmsg+0x1ae/0x1d0 [ 745.778706][T18583] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.778740][T18583] ? find_held_lock+0x2b/0x80 [ 745.778778][T18583] __sys_sendmsg+0x16d/0x220 [ 745.778801][T18583] ? __pfx___sys_sendmsg+0x10/0x10 [ 745.778834][T18583] ? do_user_addr_fault+0x843/0x1370 [ 745.778862][T18583] __do_fast_syscall_32+0xe8/0x680 [ 745.778892][T18583] do_fast_syscall_32+0x32/0x80 [ 745.778920][T18583] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 745.778960][T18583] RIP: 0023:0xf701d579 [ 745.778975][T18583] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 745.778993][T18583] RSP: 002b:00000000f53ec55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 745.779010][T18583] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 745.779023][T18583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 745.779033][T18583] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 745.779044][T18583] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 745.779055][T18583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 745.779080][T18583] [ 746.049258][ T6261] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 746.223207][T18592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3190'. [ 746.227042][T18592] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3190'. [ 746.231052][T18592] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3190'. [ 746.824259][ T61] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 746.827700][ T46] Bluetooth: hci2: Frame reassembly failed (-84) [ 746.948851][T18605] ceph: Path missing in source [ 746.967730][T18605] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 747.232730][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 747.234976][T14640] Bluetooth: hci5: Frame reassembly failed (-84) [ 747.869629][T14625] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 748.859099][ T5948] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 748.859117][ T5957] Bluetooth: hci2: command 0x1003 tx timeout [ 749.179100][T14659] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 749.415475][T18666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3199'. [ 749.470548][T18672] program syz.5.3199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 749.476873][T18673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3202'. [ 749.484778][T18673] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3202'. [ 749.488228][T18673] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3202'. [ 751.823250][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.826207][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.148115][ T4000] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 755.285691][ T6204] Bluetooth: hci2: Frame reassembly failed (-84) [ 755.543462][T18711] ubi: mtd0 is already attached to ubi31 [ 756.172047][T14640] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 756.173238][T18711] x_tables: duplicate underflow at hook 2 [ 756.178174][T14640] Bluetooth: hci5: Frame reassembly failed (-84) [ 756.925653][T18731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3213'. [ 756.992230][T18733] program syz.6.3213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 757.179111][ T5948] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 757.375117][T18730] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.378754][T18730] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.560132][T18741] bpf: Bad value for 'gid' [ 757.844638][T18744] FAULT_INJECTION: forcing a failure. [ 757.844638][T18744] name failslab, interval 1, probability 0, space 0, times 0 [ 757.848732][T18744] CPU: 1 UID: 0 PID: 18744 Comm: syz.4.3217 Not tainted syzkaller #0 PREEMPT(full) [ 757.848749][T18744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 757.848756][T18744] Call Trace: [ 757.848761][T18744] [ 757.848767][T18744] dump_stack_lvl+0x16c/0x1f0 [ 757.848788][T18744] should_fail_ex+0x512/0x640 [ 757.848801][T18744] ? __kmalloc_cache_noprof+0x5f/0x800 [ 757.848815][T18744] should_failslab+0xc2/0x120 [ 757.848833][T18744] __kmalloc_cache_noprof+0x80/0x800 [ 757.848846][T18744] ? ipv6_add_addr+0x4e3/0x2010 [ 757.848865][T18744] ? ipv6_add_addr+0x4e3/0x2010 [ 757.848879][T18744] ipv6_add_addr+0x4e3/0x2010 [ 757.848894][T18744] ? trace_contention_end+0xdd/0x110 [ 757.848907][T18744] ? __mutex_lock+0x27b/0x1ca0 [ 757.848924][T18744] ? preempt_count_sub+0x111/0x160 [ 757.848955][T18744] ? __pfx_ipv6_add_addr+0x10/0x10 [ 757.848976][T18744] ? add_addr+0xde/0x350 [ 757.848991][T18744] add_addr+0xde/0x350 [ 757.849007][T18744] ? __pfx_add_addr+0x10/0x10 [ 757.849030][T18744] addrconf_init_auto_addrs+0x414/0x790 [ 757.849049][T18744] addrconf_notify+0x6e2/0x19f0 [ 757.849061][T18744] ? ip6mr_device_event+0x1bc/0x230 [ 757.849076][T18744] notifier_call_chain+0xbc/0x3e0 [ 757.849094][T18744] ? __pfx_addrconf_notify+0x10/0x10 [ 757.849108][T18744] call_netdevice_notifiers_info+0xbe/0x110 [ 757.849129][T18744] netif_state_change+0x165/0x380 [ 757.849145][T18744] ? __pfx_netif_state_change+0x10/0x10 [ 757.849164][T18744] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 757.849185][T18744] do_setlink.constprop.0+0x3570/0x4380 [ 757.849205][T18744] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 757.849221][T18744] ? __lock_acquire+0x436/0x2890 [ 757.849232][T18744] ? __lock_acquire+0x436/0x2890 [ 757.849242][T18744] ? stack_depot_save_flags+0x29/0x9b0 [ 757.849254][T18744] ? arch_stack_walk+0xa6/0x100 [ 757.849271][T18744] ? lock_acquire+0x179/0x330 [ 757.849282][T18744] ? __pfx___might_resched+0x10/0x10 [ 757.849299][T18744] ? rcu_is_watching+0x12/0xc0 [ 757.849315][T18744] ? trace_contention_end+0xdd/0x110 [ 757.849326][T18744] ? __mutex_lock+0x27b/0x1ca0 [ 757.849343][T18744] ? rtnl_newlink+0x5f6/0x1f50 [ 757.849357][T18744] ? __nla_validate_parse+0x600/0x2880 [ 757.849374][T18744] ? __pfx___mutex_lock+0x10/0x10 [ 757.849392][T18744] ? apparmor_capable+0x1d7/0x4e0 [ 757.849411][T18744] rtnl_newlink+0x1807/0x1f50 [ 757.849430][T18744] ? __pfx_rtnl_newlink+0x10/0x10 [ 757.849450][T18744] ? lockdep_hardirqs_on+0x7c/0x110 [ 757.849468][T18744] ? kmem_cache_free+0x2d8/0x770 [ 757.849481][T18744] ? kfree_skbmem+0x1a4/0x1f0 [ 757.849503][T18744] ? __lock_acquire+0x436/0x2890 [ 757.849514][T18744] ? find_held_lock+0x2b/0x80 [ 757.849528][T18744] ? __dev_queue_xmit+0x782/0x4650 [ 757.849543][T18744] ? find_held_lock+0x2b/0x80 [ 757.849556][T18744] ? __pfx_rtnl_newlink+0x10/0x10 [ 757.849571][T18744] ? __pfx_rtnl_newlink+0x10/0x10 [ 757.849584][T18744] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 757.849600][T18744] ? __pfx_rtnl_newlink+0x10/0x10 [ 757.849615][T18744] rtnetlink_rcv_msg+0x95e/0xe90 [ 757.849631][T18744] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 757.849650][T18744] ? ref_tracker_free+0x37c/0x830 [ 757.849664][T18744] netlink_rcv_skb+0x158/0x420 [ 757.849681][T18744] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 757.849697][T18744] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 757.849718][T18744] ? netlink_deliver_tap+0x1ae/0xd30 [ 757.849735][T18744] netlink_unicast+0x5aa/0x870 [ 757.849753][T18744] ? __pfx_netlink_unicast+0x10/0x10 [ 757.849775][T18744] netlink_sendmsg+0x8c8/0xdd0 [ 757.849793][T18744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.849811][T18744] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 757.849831][T18744] ____sys_sendmsg+0xa5d/0xc30 [ 757.849850][T18744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 757.849866][T18744] ? get_compat_msghdr+0x11a/0x170 [ 757.849886][T18744] ___sys_sendmsg+0x134/0x1d0 [ 757.849901][T18744] ? __pfx____sys_sendmsg+0x10/0x10 [ 757.849921][T18744] ? find_held_lock+0x2b/0x80 [ 757.849944][T18744] __sys_sendmsg+0x16d/0x220 [ 757.849958][T18744] ? __pfx___sys_sendmsg+0x10/0x10 [ 757.849977][T18744] ? do_user_addr_fault+0x843/0x1370 [ 757.849993][T18744] __do_fast_syscall_32+0xe8/0x680 [ 757.850012][T18744] do_fast_syscall_32+0x32/0x80 [ 757.850028][T18744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 757.850043][T18744] RIP: 0023:0xf7f23579 [ 757.850052][T18744] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 757.850064][T18744] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 757.850075][T18744] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 757.850082][T18744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 757.850088][T18744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 757.850094][T18744] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 757.850100][T18744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 757.850114][T18744] [ 758.219427][ T5948] Bluetooth: hci5: command 0x1003 tx timeout [ 758.219641][T14659] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 758.285110][T18756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3216'. [ 758.290565][T18756] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3216'. [ 758.294134][T18756] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3216'. [ 758.966682][T18763] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 758.969161][T18763] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 758.972568][T18763] vhci_hcd vhci_hcd.0: Device attached [ 759.152614][T18763] binder: Binderfs stats mode cannot be changed during a remount [ 759.157454][T18764] vhci_hcd: connection closed [ 759.157744][T17734] vhci_hcd vhci_hcd.5: stop threads [ 759.162867][T17734] vhci_hcd vhci_hcd.5: release socket [ 759.168333][T17734] vhci_hcd vhci_hcd.5: disconnect device [ 759.253960][T18771] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 759.256623][T18771] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 759.266503][T18771] vhci_hcd vhci_hcd.0: Device attached [ 759.500351][T14625] usb 49-1: new low-speed USB device number 6 using vhci_hcd [ 759.799056][ T6036] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 759.964497][ T6036] usb 12-1: config index 0 descriptor too short (expected 23569, got 27) [ 759.968076][ T6036] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.978118][ T6036] usb 12-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 759.983722][ T6036] usb 12-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 759.990536][ T6036] usb 12-1: Manufacturer: syz [ 760.004837][ T6036] usb 12-1: config 0 descriptor?? [ 760.046718][T18772] vhci_hcd: connection reset by peer [ 760.051238][ T61] vhci_hcd vhci_hcd.6: stop threads [ 760.054865][ T61] vhci_hcd vhci_hcd.6: release socket [ 760.057078][ T61] vhci_hcd vhci_hcd.6: disconnect device [ 760.080269][ T6036] rc_core: IR keymap rc-hauppauge not found [ 760.082561][ T6036] Registered IR keymap rc-empty [ 760.088381][ T6036] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 760.095458][ T6036] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input26 [ 760.232965][T18784] syzkaller0: entered promiscuous mode [ 760.234844][T18784] syzkaller0: entered allmulticast mode [ 760.301572][T18800] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3227'. [ 760.391664][ T1020] usb 12-1: USB disconnect, device number 11 [ 760.994209][T18807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3236'. [ 760.998335][T18807] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3236'. [ 761.001113][T18807] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3236'. [ 761.149479][T18811] FAULT_INJECTION: forcing a failure. [ 761.149479][T18811] name failslab, interval 1, probability 0, space 0, times 0 [ 761.154024][T18811] CPU: 2 UID: 0 PID: 18811 Comm: syz.7.3229 Not tainted syzkaller #0 PREEMPT(full) [ 761.154048][T18811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 761.154059][T18811] Call Trace: [ 761.154067][T18811] [ 761.154076][T18811] dump_stack_lvl+0x16c/0x1f0 [ 761.154106][T18811] should_fail_ex+0x512/0x640 [ 761.154125][T18811] ? __kmalloc_noprof+0xca/0x910 [ 761.154146][T18811] should_failslab+0xc2/0x120 [ 761.154178][T18811] __kmalloc_noprof+0xeb/0x910 [ 761.154196][T18811] ? fib6_new_table+0x3f/0x5a0 [ 761.154220][T18811] ? fib6_info_alloc+0x40/0x160 [ 761.154247][T18811] ? fib6_info_alloc+0x40/0x160 [ 761.154268][T18811] fib6_info_alloc+0x40/0x160 [ 761.154292][T18811] ip6_route_info_create+0x14c/0xaa0 [ 761.154320][T18811] addrconf_f6i_alloc+0x2da/0x660 [ 761.154342][T18811] ? __pfx_addrconf_f6i_alloc+0x10/0x10 [ 761.154388][T18811] ipv6_add_addr+0x531/0x2010 [ 761.154413][T18811] ? trace_contention_end+0xdd/0x110 [ 761.154432][T18811] ? __mutex_lock+0x27b/0x1ca0 [ 761.154459][T18811] ? preempt_count_sub+0x111/0x160 [ 761.154486][T18811] ? __pfx_ipv6_add_addr+0x10/0x10 [ 761.154520][T18811] ? add_addr+0xde/0x350 [ 761.154543][T18811] add_addr+0xde/0x350 [ 761.154567][T18811] ? __pfx_add_addr+0x10/0x10 [ 761.154605][T18811] addrconf_init_auto_addrs+0x414/0x790 [ 761.154634][T18811] addrconf_notify+0x6e2/0x19f0 [ 761.154653][T18811] ? ip6mr_device_event+0x1bc/0x230 [ 761.154679][T18811] notifier_call_chain+0xbc/0x3e0 [ 761.154706][T18811] ? __pfx_addrconf_notify+0x10/0x10 [ 761.154730][T18811] call_netdevice_notifiers_info+0xbe/0x110 [ 761.154758][T18811] netif_state_change+0x165/0x380 [ 761.154782][T18811] ? __pfx_netif_state_change+0x10/0x10 [ 761.154801][T18811] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 761.154822][T18811] do_setlink.constprop.0+0x3570/0x4380 [ 761.154842][T18811] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 761.154859][T18811] ? __lock_acquire+0x436/0x2890 [ 761.154869][T18811] ? __lock_acquire+0x436/0x2890 [ 761.154879][T18811] ? stack_depot_save_flags+0x29/0x9b0 [ 761.154896][T18811] ? lock_acquire+0x179/0x330 [ 761.154907][T18811] ? __pfx___might_resched+0x10/0x10 [ 761.154922][T18811] ? rcu_is_watching+0x12/0xc0 [ 761.154939][T18811] ? trace_contention_end+0xdd/0x110 [ 761.154950][T18811] ? __mutex_lock+0x27b/0x1ca0 [ 761.154967][T18811] ? rtnl_newlink+0x5f6/0x1f50 [ 761.154981][T18811] ? __nla_validate_parse+0x600/0x2880 [ 761.154998][T18811] ? __pfx___mutex_lock+0x10/0x10 [ 761.155036][T18811] ? apparmor_capable+0x1d7/0x4e0 [ 761.155066][T18811] rtnl_newlink+0x1807/0x1f50 [ 761.155096][T18811] ? __pfx_rtnl_newlink+0x10/0x10 [ 761.155124][T18811] ? __kfence_free+0xb1/0x1d0 [ 761.155141][T18811] ? kmem_cache_free+0x6ca/0x770 [ 761.155155][T18811] ? kfree_skbmem+0x1a4/0x1f0 [ 761.155180][T18811] ? __lock_acquire+0x436/0x2890 [ 761.155191][T18811] ? find_held_lock+0x2b/0x80 [ 761.155206][T18811] ? __dev_queue_xmit+0x782/0x4650 [ 761.155221][T18811] ? find_held_lock+0x2b/0x80 [ 761.155234][T18811] ? __pfx_rtnl_newlink+0x10/0x10 [ 761.155249][T18811] ? __pfx_rtnl_newlink+0x10/0x10 [ 761.155262][T18811] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 761.155278][T18811] ? __pfx_rtnl_newlink+0x10/0x10 [ 761.155293][T18811] rtnetlink_rcv_msg+0x95e/0xe90 [ 761.155310][T18811] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 761.155329][T18811] ? ref_tracker_free+0x37c/0x830 [ 761.155343][T18811] netlink_rcv_skb+0x158/0x420 [ 761.155360][T18811] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 761.155376][T18811] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 761.155397][T18811] ? netlink_deliver_tap+0x1ae/0xd30 [ 761.155416][T18811] netlink_unicast+0x5aa/0x870 [ 761.155434][T18811] ? __pfx_netlink_unicast+0x10/0x10 [ 761.155455][T18811] netlink_sendmsg+0x8c8/0xdd0 [ 761.155473][T18811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 761.155490][T18811] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 761.155511][T18811] ____sys_sendmsg+0xa5d/0xc30 [ 761.155530][T18811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 761.155546][T18811] ? get_compat_msghdr+0x11a/0x170 [ 761.155567][T18811] ___sys_sendmsg+0x134/0x1d0 [ 761.155589][T18811] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.155620][T18811] ? find_held_lock+0x2b/0x80 [ 761.155655][T18811] __sys_sendmsg+0x16d/0x220 [ 761.155676][T18811] ? __pfx___sys_sendmsg+0x10/0x10 [ 761.155698][T18811] ? do_user_addr_fault+0x843/0x1370 [ 761.155715][T18811] __do_fast_syscall_32+0xe8/0x680 [ 761.155734][T18811] do_fast_syscall_32+0x32/0x80 [ 761.155752][T18811] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 761.155766][T18811] RIP: 0023:0xf701d579 [ 761.155775][T18811] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 761.155786][T18811] RSP: 002b:00000000f53ec55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 761.155798][T18811] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 761.155804][T18811] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 761.155811][T18811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 761.155817][T18811] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 761.155823][T18811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 761.155837][T18811] [ 762.150718][T18837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3234'. [ 762.154590][T18837] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3234'. [ 762.157483][T18837] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3234'. [ 762.412489][ T46] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 762.422690][ T46] Bluetooth: hci2: Frame reassembly failed (-84) [ 762.425053][T17734] Bluetooth: hci2: Frame reassembly failed (-84) [ 762.506869][T18840] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 762.509728][T18840] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 762.533770][T18840] vhci_hcd vhci_hcd.0: Device attached [ 762.951578][T18149] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 763.920665][T18867] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 764.004271][T18841] vhci_hcd: connection reset by peer [ 764.006704][T14640] vhci_hcd vhci_hcd.7: stop threads [ 764.009188][T14640] vhci_hcd vhci_hcd.7: release socket [ 764.014362][T14640] vhci_hcd vhci_hcd.7: disconnect device [ 764.459284][T14659] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 764.609082][T14625] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 765.175414][ T4000] Bluetooth: hci2: Frame reassembly failed (-84) [ 765.178107][ T4000] Bluetooth: hci2: Frame reassembly failed (-84) [ 765.548757][T18881] FAULT_INJECTION: forcing a failure. [ 765.548757][T18881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.554108][T18881] CPU: 3 UID: 0 PID: 18881 Comm: syz.4.3246 Not tainted syzkaller #0 PREEMPT(full) [ 765.554124][T18881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 765.554132][T18881] Call Trace: [ 765.554136][T18881] [ 765.554141][T18881] dump_stack_lvl+0x16c/0x1f0 [ 765.554164][T18881] should_fail_ex+0x512/0x640 [ 765.554178][T18881] _copy_to_user+0x32/0xd0 [ 765.554192][T18881] simple_read_from_buffer+0xcb/0x170 [ 765.554209][T18881] proc_fail_nth_read+0x197/0x240 [ 765.554229][T18881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.554248][T18881] ? rw_verify_area+0xcf/0x6c0 [ 765.554262][T18881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 765.554280][T18881] vfs_read+0x1e4/0xcf0 [ 765.554296][T18881] ? __pfx___mutex_lock+0x10/0x10 [ 765.554314][T18881] ? __pfx_vfs_read+0x10/0x10 [ 765.554328][T18881] ? find_held_lock+0x2b/0x80 [ 765.554346][T18881] ? __fget_files+0x20e/0x3c0 [ 765.554366][T18881] ksys_read+0x12a/0x250 [ 765.554381][T18881] ? __pfx_ksys_read+0x10/0x10 [ 765.554397][T18881] ? do_user_addr_fault+0x843/0x1370 [ 765.554413][T18881] __do_fast_syscall_32+0xe8/0x680 [ 765.554432][T18881] do_fast_syscall_32+0x32/0x80 [ 765.554449][T18881] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 765.554463][T18881] RIP: 0023:0xf7f23579 [ 765.554479][T18881] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 765.554490][T18881] RSP: 002b:00000000f5416590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 765.554501][T18881] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f5416620 [ 765.554508][T18881] RDX: 000000000000000f RSI: 00000000f73b6ff4 RDI: 0000000000000000 [ 765.554515][T18881] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 765.554521][T18881] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 765.554528][T18881] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 765.554542][T18881] [ 765.892748][ T1145] Bluetooth: hci5: Frame reassembly failed (-84) [ 766.187364][T18892] dlm: no local IP address has been set [ 766.191455][T18892] dlm: cannot start dlm midcomms -107 [ 766.285613][T18892] netlink: 'syz.6.3249': attribute type 12 has an invalid length. [ 767.179145][T14659] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 767.179741][ T5957] Bluetooth: hci2: command 0x1003 tx timeout [ 767.839018][ T6030] usb 11-1: new full-speed USB device number 13 using dummy_hcd [ 767.899079][T14659] Bluetooth: hci5: command 0x1003 tx timeout [ 767.899095][ T5948] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 767.979196][ T6030] usb 11-1: device descriptor read/64, error -71 [ 768.049489][T18149] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 768.219030][ T6030] usb 11-1: new full-speed USB device number 14 using dummy_hcd [ 768.272570][T18938] syz.4.3258 (18938): drop_caches: 2 [ 768.359193][ T6030] usb 11-1: device descriptor read/64, error -71 [ 768.471631][T18942] dlm: no local IP address has been set [ 768.473503][T18942] dlm: cannot start dlm midcomms -107 [ 768.479254][ T6030] usb usb11-port1: attempt power cycle [ 768.521512][T18942] netlink: 'syz.7.3259': attribute type 12 has an invalid length. [ 768.831222][ T6030] usb 11-1: new full-speed USB device number 15 using dummy_hcd [ 768.886493][ T6030] usb 11-1: device descriptor read/8, error -71 [ 769.129337][ T6030] usb 11-1: new full-speed USB device number 16 using dummy_hcd [ 769.149468][ T6030] usb 11-1: device descriptor read/8, error -71 [ 769.270867][ T6030] usb usb11-port1: unable to enumerate USB device [ 769.516774][T18950] netlink: 'syz.5.3262': attribute type 13 has an invalid length. [ 769.523193][T18950] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 769.611378][T18947] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 769.615422][T18947] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 769.619659][T18947] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 769.622639][T18947] UDF-fs: Scanning with blocksize 2048 failed [ 769.755096][T18947] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=256, location=256 [ 769.759162][T18947] UDF-fs: error (device sr0): udf_read_tagged: read failed, block=512, location=512 [ 769.762829][T18947] UDF-fs: warning (device sr0): udf_load_vrs: No anchor found [ 769.765817][T18947] UDF-fs: Scanning with blocksize 4096 failed [ 769.768333][T18947] UDF-fs: warning (device sr0): udf_fill_super: No partition found (1) [ 770.707020][T18988] kAFS: unable to lookup cell '\/' [ 770.792531][T18990] netlink: 'syz.4.3271': attribute type 1 has an invalid length. [ 770.822103][T18990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 770.836851][T18990] bond1: (slave geneve2): making interface the new active one [ 770.840306][T18990] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 771.451131][T19005] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 771.453213][T19005] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 771.455882][T19005] vhci_hcd vhci_hcd.0: Device attached [ 771.465867][T19009] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(8) [ 771.468226][T19009] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 771.479017][T19009] vhci_hcd vhci_hcd.0: Device attached [ 771.500045][T19015] batman_adv: batadv0: Adding interface: dummy0 [ 771.502082][T19015] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.510375][T19015] batman_adv: batadv0: Interface activated: dummy0 [ 771.515408][T19015] batadv0: mtu less than device minimum [ 771.517732][T19015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 771.521843][T19015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 771.525552][T19015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 771.529439][T19015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 771.533161][T19015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 771.536939][T19015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 771.540780][T19015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 771.544521][T19015] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 771.719240][T18149] usb 50-1: SetAddress Request (29) to port 0 [ 771.721237][T18149] usb 50-1: new SuperSpeed USB device number 29 using vhci_hcd [ 771.970350][T19011] vhci_hcd: connection closed [ 771.970463][T19010] vhci_hcd: connection reset by peer [ 771.974731][ T4000] vhci_hcd vhci_hcd.6: stop threads [ 771.976503][ T4000] vhci_hcd vhci_hcd.6: release socket [ 771.978377][ T4000] vhci_hcd vhci_hcd.6: disconnect device [ 771.980423][ T4000] vhci_hcd vhci_hcd.6: stop threads [ 771.982086][ T4000] vhci_hcd vhci_hcd.6: release socket [ 771.983894][ T4000] vhci_hcd vhci_hcd.6: disconnect device [ 772.762056][ T103] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 772.805831][ T4000] Bluetooth: hci2: Frame reassembly failed (-84) [ 773.339828][T15538] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 773.403079][ T4000] Bluetooth: hci5: Frame reassembly failed (-84) [ 774.257899][T19048] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 774.259926][T19048] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 774.262407][T19048] vhci_hcd vhci_hcd.0: Device attached [ 774.779283][ T5948] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 774.895890][T19049] vhci_hcd: connection closed [ 774.896493][T15538] vhci_hcd vhci_hcd.6: stop threads [ 774.899849][T15538] vhci_hcd vhci_hcd.6: release socket [ 774.901575][T15538] vhci_hcd vhci_hcd.6: disconnect device [ 775.349097][T14659] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 776.082651][ T6186] Bluetooth: hci2: Frame reassembly failed (-84) [ 776.184227][T19083] omfs: Unknown parameter 'barrier' [ 776.647000][T19093] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 776.649825][T19093] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 776.659324][T19093] vhci_hcd vhci_hcd.0: Device attached [ 776.779331][T18149] usb 50-1: device descriptor read/8, error -110 [ 776.899140][ T827] usb 45-1: new high-speed USB device number 5 using vhci_hcd [ 777.170522][T18149] usb usb50-port1: attempt power cycle [ 777.239527][ T6036] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 777.252578][T19094] vhci_hcd: connection reset by peer [ 777.255051][ T4000] vhci_hcd vhci_hcd.4: stop threads [ 777.257250][ T4000] vhci_hcd vhci_hcd.4: release socket [ 777.259796][ T4000] vhci_hcd vhci_hcd.4: disconnect device [ 777.466251][T19098] Bluetooth: MGMT ver 1.23 [ 777.472301][T19098] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.3302'. [ 777.979243][T14659] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 777.979299][ T5948] Bluetooth: hci2: command 0x1003 tx timeout [ 778.312617][ T4000] Bluetooth: hci2: Frame reassembly failed (-84) [ 778.432947][ T4000] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 778.709586][T18149] usb usb50-port1: unable to enumerate USB device [ 779.429655][T18149] usb usb50-port6: attempt power cycle [ 779.435272][T19151] infiniband syz1: set active [ 779.437012][T19151] infiniband syz1: added syz_tun [ 779.481102][T19151] RDS/IB: syz1: added [ 779.482594][T19151] smc: adding ib device syz1 with port count 1 [ 779.485170][T19151] smc: ib device syz1 port 1 has no pnetid [ 779.614709][T19169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3315'. [ 779.629972][T19169] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3315'. [ 779.633801][T19169] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3315'. [ 779.709124][T19161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3314'. [ 779.781060][T19170] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.902199][T19170] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.991789][T19170] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.009913][T18149] usb usb50-port6: unable to enumerate USB device [ 780.068078][T19170] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.174650][T15538] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.187239][ T1145] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.200043][ T1145] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.210775][ T1145] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.379157][T14659] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 780.379364][ T5948] Bluetooth: hci2: command 0x1003 tx timeout [ 780.436979][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 780.436990][ T40] audit: type=1326 audit(1765760362.446:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19173 comm="syz.5.3317" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x0 [ 780.493805][T19188] macvlan2: entered allmulticast mode [ 780.496208][T19188] macsec0: entered allmulticast mode [ 780.498415][T19188] veth1_macvtap: entered allmulticast mode [ 780.503253][T19188] macsec0: left allmulticast mode [ 780.505476][T19188] veth1_macvtap: left allmulticast mode [ 780.537751][T19187] macvlan2: entered allmulticast mode [ 780.541312][T19187] macsec0: entered allmulticast mode [ 780.543654][T19187] veth1_macvtap: entered allmulticast mode [ 780.549315][T19187] macsec0: left allmulticast mode [ 780.552132][T19187] veth1_macvtap: left allmulticast mode [ 780.673249][T18149] kernel read not supported for file 899/task/900/cmdline (pid: 18149 comm: kworker/2:7) [ 782.049137][ T827] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 782.169420][T19219] Invalid argument reading file caps for ./file0 [ 782.271002][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3326'. [ 782.274719][T19232] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3326'. [ 782.288667][T19232] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3326'. [ 783.332567][ T61] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 783.390773][T17734] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 783.392981][ T81] Bluetooth: hci2: Frame reassembly failed (-84) [ 783.416599][T19248] overlayfs: failed to resolve './file0': -2 [ 783.729944][T19262] lo speed is unknown, defaulting to 1000 [ 783.735543][T19262] lo speed is unknown, defaulting to 1000 [ 783.741341][T19262] lo speed is unknown, defaulting to 1000 [ 783.902531][T19262] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 783.978257][T19262] lo speed is unknown, defaulting to 1000 [ 783.982317][T19262] lo speed is unknown, defaulting to 1000 [ 783.986162][T19262] lo speed is unknown, defaulting to 1000 [ 783.990022][T19262] lo speed is unknown, defaulting to 1000 [ 784.637165][T19269] net_ratelimit: 11 callbacks suppressed [ 784.637201][T19269] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 785.055616][T19276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3344'. [ 785.060204][T19276] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3344'. [ 785.063719][T19276] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3344'. [ 785.349113][T14659] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 786.432921][T19320] siw: device registration error -23 [ 786.691840][ T40] audit: type=1326 audit(1765760368.696:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19321 comm="syz.5.3353" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 786.708663][T19325] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3353'. [ 786.708812][ T40] audit: type=1326 audit(1765760368.716:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19321 comm="syz.5.3353" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 786.735614][ T40] audit: type=1326 audit(1765760368.716:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19321 comm="syz.5.3353" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 786.743746][ T40] audit: type=1326 audit(1765760368.716:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19321 comm="syz.5.3353" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 786.751537][ T40] audit: type=1326 audit(1765760368.736:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19321 comm="syz.5.3353" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 786.758557][ T40] audit: type=1326 audit(1765760368.736:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19321 comm="syz.5.3353" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 786.766352][ T40] audit: type=1326 audit(1765760368.736:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19321 comm="syz.5.3353" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 786.774509][ T40] audit: type=1326 audit(1765760368.736:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19321 comm="syz.5.3353" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 786.881978][ T40] audit: type=1326 audit(1765760368.746:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19321 comm="syz.5.3353" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 786.889494][ T40] audit: type=1326 audit(1765760368.746:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19321 comm="syz.5.3353" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 787.146899][T19333] overlayfs: missing 'lowerdir' [ 787.743738][T19344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3358'. [ 787.747951][T19344] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3358'. [ 787.750882][T19344] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3358'. [ 788.590296][T19347] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3359'. [ 788.594480][T19347] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3359'. [ 789.207752][T19378] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3370'. [ 789.218662][T19378] vlan2: entered promiscuous mode [ 789.220834][T19378] gretap0: entered promiscuous mode [ 789.394174][T19379] overlayfs: failed to resolve './file0': -2 [ 789.461933][T19383] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 789.465166][T19383] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 791.603974][T19424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.691032][T17734] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.693888][T17734] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.696711][T17734] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.700167][T17734] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.702756][T17734] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.705314][T17734] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.708835][T17734] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.719136][T17734] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.939424][T19464] block nbd4: NBD_DISCONNECT [ 792.001876][T19464] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 792.382434][T19481] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3395'. [ 792.387469][T19481] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3395'. [ 792.391837][T19481] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3395'. [ 793.191658][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 793.195761][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 793.200908][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 793.204749][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 793.208910][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 793.330960][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.333439][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.651450][ T6519] bond1 (unregistering): (slave geneve2): Releasing active interface [ 793.671694][T19515] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 793.673781][T19515] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 793.676736][T19515] vhci_hcd vhci_hcd.0: Device attached [ 793.750260][ T6519] .` (unregistering): Released all slaves [ 793.755789][ T6519] bond1 (unregistering): Released all slaves [ 793.885801][ T6519] bond2 (unregistering): Released all slaves [ 793.896682][ T6519] bond3 (unregistering): Released all slaves [ 793.949083][ T6039] usb 46-1: SetAddress Request (24) to port 0 [ 793.951242][ T6039] usb 46-1: new SuperSpeed USB device number 24 using vhci_hcd [ 794.025088][T19516] vhci_hcd: connection reset by peer [ 794.027082][ T81] vhci_hcd vhci_hcd.4: stop threads [ 794.031218][ T81] vhci_hcd vhci_hcd.4: release socket [ 794.034126][ T81] vhci_hcd vhci_hcd.4: disconnect device [ 794.084335][ T6519] bond4 (unregistering): Released all slaves [ 794.090441][T19502] lo speed is unknown, defaulting to 1000 [ 794.185244][T19502] chnl_net:caif_netlink_parms(): no params data found [ 794.283314][T19502] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.293177][T19502] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.295474][T19502] bridge_slave_0: entered allmulticast mode [ 794.298621][T19502] bridge_slave_0: entered promiscuous mode [ 794.305518][T19502] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.307811][T19502] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.313421][T19502] bridge_slave_1: entered allmulticast mode [ 794.316113][T19502] bridge_slave_1: entered promiscuous mode [ 794.367683][T19502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.376007][T19502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.391443][T19502] team0: Port device team_slave_0 added [ 794.394659][T19502] team0: Port device team_slave_1 added [ 794.408207][T19502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.410443][T19502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.418274][T19502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.422608][T19502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.424779][T19502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.432763][T19502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.454467][T19502] hsr_slave_0: entered promiscuous mode [ 794.456753][T19502] hsr_slave_1: entered promiscuous mode [ 794.459146][T19502] debugfs: 'hsr0' already exists in 'hsr' [ 794.461039][T19502] Cannot create hsr debugfs directory [ 794.794832][T19557] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 794.796896][T19557] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 794.799613][T19557] vhci_hcd vhci_hcd.0: Device attached [ 794.804247][T19558] vhci_hcd: connection closed [ 794.805624][ T6186] vhci_hcd vhci_hcd.5: stop threads [ 794.812172][ T6186] vhci_hcd vhci_hcd.5: release socket [ 794.813871][ T6186] vhci_hcd vhci_hcd.5: disconnect device [ 794.982349][T19570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3411'. [ 794.992311][T19570] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3411'. [ 794.996811][T19570] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3411'. [ 795.067285][ T6519] hsr_slave_0: left promiscuous mode [ 795.069897][ T6519] hsr_slave_1: left promiscuous mode [ 795.259769][ T5948] Bluetooth: hci0: command tx timeout [ 795.417386][T19580] binder: BINDER_SET_CONTEXT_MGR already set [ 795.423457][T19580] binder: 19578:19580 ioctl 4018620d 800000c0 returned -16 [ 796.229508][ T6519] IPVS: stop unused estimator thread 0... [ 796.934544][T19502] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 796.942102][T19502] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 796.949582][T19602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 796.954248][T19502] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 796.962874][T19502] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 797.022351][T19502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.046798][T19502] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.053840][ T6519] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.056123][ T6519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.072027][ T6519] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.074415][ T6519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.288403][T19502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.349962][ T5948] Bluetooth: hci0: command 0x041b tx timeout [ 797.446218][ T6204] Bluetooth: hci2: Frame reassembly failed (-84) [ 797.646012][ T1062] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 797.675830][T19502] veth0_vlan: entered promiscuous mode [ 797.683402][T19502] veth1_vlan: entered promiscuous mode [ 797.704089][T19502] veth0_macvtap: entered promiscuous mode [ 797.708552][T19502] veth1_macvtap: entered promiscuous mode [ 797.720873][T19502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.728587][T19502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.736510][T14640] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.740532][T14640] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.745189][T14640] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.754947][T14640] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.984547][T14640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.987242][T14640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.021741][ T6186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.025071][ T6186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.907267][T19664] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3431'. [ 798.933770][T19664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.937996][T19664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.942464][T19664] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 798.946349][T19664] bond0 (unregistering): Released all slaves [ 799.019065][ T6039] usb 46-1: device descriptor read/8, error -110 [ 799.429197][ T5948] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 799.429575][ T6039] usb usb46-port1: attempt power cycle [ 799.433763][ T5948] Bluetooth: hci0: command 0x041b tx timeout [ 800.039310][ T6039] usb usb46-port1: unable to enumerate USB device [ 800.524024][ T46] Bluetooth: hci2: Frame reassembly failed (-84) [ 801.400864][T14659] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 801.419362][T14659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 801.424294][T14659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 801.436154][T14659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 801.441196][T14659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 801.483660][ T81] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.499097][T14659] Bluetooth: hci0: command 0x041b tx timeout [ 801.622743][ T81] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.730366][ T81] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.758008][T19724] lo speed is unknown, defaulting to 1000 [ 801.823327][ T81] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.016702][T19724] chnl_net:caif_netlink_parms(): no params data found [ 802.054907][ T81] bridge_slave_1: left allmulticast mode [ 802.056771][ T81] bridge_slave_1: left promiscuous mode [ 802.069126][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.080073][ T81] bridge_slave_0: left allmulticast mode [ 802.089050][ T81] bridge_slave_0: left promiscuous mode [ 802.090983][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.423881][ T81] bond0 (unregistering): (slave 30): Releasing backup interface [ 802.430005][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.435310][ T81] bond0 (unregistering): Released all slaves [ 802.540239][T19724] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.543250][T19724] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.546251][T19724] bridge_slave_0: entered allmulticast mode [ 802.549060][T14659] Bluetooth: hci2: command 0x1003 tx timeout [ 802.550342][T19724] bridge_slave_0: entered promiscuous mode [ 802.551864][ T5948] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 802.556302][T19724] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.560073][T19724] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.564296][T19724] bridge_slave_1: entered allmulticast mode [ 802.568416][T19724] bridge_slave_1: entered promiscuous mode [ 802.610917][T19724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.615445][T19724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.663920][T19724] team0: Port device team_slave_0 added [ 802.673724][T19724] team0: Port device team_slave_1 added [ 802.717660][T19724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.729134][T19724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.749080][T19724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.785036][T19724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.787278][T19724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.809919][T19724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.870286][T19724] hsr_slave_0: entered promiscuous mode [ 802.872601][T19724] hsr_slave_1: entered promiscuous mode [ 803.207837][ T81] hsr_slave_0: left promiscuous mode [ 803.267602][ T81] hsr_slave_1: left promiscuous mode [ 803.272043][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.274657][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.275405][T19767] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input28 [ 803.322466][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.327855][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.377314][ T81] veth1_macvtap: left promiscuous mode [ 803.384453][ T81] veth0_macvtap: left promiscuous mode [ 803.388022][ T81] veth1_vlan: left promiscuous mode [ 803.397006][ T81] veth0_vlan: left promiscuous mode [ 803.500753][ T5948] Bluetooth: hci4: command tx timeout [ 803.579156][ T5948] Bluetooth: hci0: command 0x041b tx timeout [ 804.165669][ T81] team0 (unregistering): Port device team_slave_1 removed [ 804.229050][ T81] team0 (unregistering): Port device team_slave_0 removed [ 804.603256][T19773] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.605958][T19773] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.612958][T19776] bridge_slave_1: left allmulticast mode [ 804.615421][T19776] bridge_slave_1: left promiscuous mode [ 804.618635][T19776] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.624066][T19776] bridge_slave_0: left allmulticast mode [ 804.626578][T19776] bridge_slave_0: left promiscuous mode [ 804.629500][T19776] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.807077][T19724] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 804.851102][T19724] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 804.855563][T19724] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 804.870941][T19724] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 804.957962][T19724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.010295][T19724] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.024843][ T4000] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.027676][ T4000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.037426][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.040435][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.148151][T19788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 805.153887][T18149] lo speed is unknown, defaulting to 1000 [ 805.169632][T19804] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 805.171826][T19804] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 805.175362][T19804] vhci_hcd vhci_hcd.0: Device attached [ 805.424342][T14659] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 805.439180][ T6036] usb 52-1: SetAddress Request (15) to port 0 [ 805.440477][T14659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 805.441407][ T6036] usb 52-1: new SuperSpeed USB device number 15 using vhci_hcd [ 805.447528][T14659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 805.451514][T14659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 805.455816][T14659] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 805.495724][ T81] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.555954][T19724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.579190][ T5948] Bluetooth: hci4: command tx timeout [ 805.615609][ T81] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.760291][ T81] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.770737][T19815] lo speed is unknown, defaulting to 1000 [ 805.878747][ T81] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.951996][T19724] veth0_vlan: entered promiscuous mode [ 805.991512][T19724] veth1_vlan: entered promiscuous mode [ 806.034952][T19815] chnl_net:caif_netlink_parms(): no params data found [ 806.070860][T19805] vhci_hcd: connection reset by peer [ 806.074941][ T4000] vhci_hcd vhci_hcd.7: stop threads [ 806.077248][ T4000] vhci_hcd vhci_hcd.7: release socket [ 806.079964][ T4000] vhci_hcd vhci_hcd.7: disconnect device [ 806.109459][ T81] bridge_slave_1: left allmulticast mode [ 806.111436][ T81] bridge_slave_1: left promiscuous mode [ 806.113330][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.122576][ T81] bridge_slave_0: left allmulticast mode [ 806.125030][ T81] bridge_slave_0: left promiscuous mode [ 806.127814][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.398228][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.404157][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.408680][ T81] bond0 (unregistering): Released all slaves [ 806.427040][T19815] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.429838][T19815] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.432875][T19815] bridge_slave_0: entered allmulticast mode [ 806.436268][T19815] bridge_slave_0: entered promiscuous mode [ 806.441667][T19815] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.444057][T19815] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.447033][T19815] bridge_slave_1: entered allmulticast mode [ 806.451740][T19815] bridge_slave_1: entered promiscuous mode [ 806.475375][T19815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.480517][T19724] veth0_macvtap: entered promiscuous mode [ 806.487273][T19815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.510778][T19724] veth1_macvtap: entered promiscuous mode [ 806.516085][T19815] team0: Port device team_slave_0 added [ 806.526239][T19815] team0: Port device team_slave_1 added [ 806.602029][T19815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.605067][T19815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.616993][T19815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.634212][T19815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.637741][T19815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 806.648993][T19815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.741564][T19724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.746237][T19724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.801383][T19815] hsr_slave_0: entered promiscuous mode [ 806.803733][T19815] hsr_slave_1: entered promiscuous mode [ 806.805902][T19815] debugfs: 'hsr0' already exists in 'hsr' [ 806.807753][T19815] Cannot create hsr debugfs directory [ 806.837509][ T46] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.840487][ T46] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.846069][ T46] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.856283][ T46] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.000015][ T81] hsr_slave_0: left promiscuous mode [ 807.002397][ T81] hsr_slave_1: left promiscuous mode [ 807.005213][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.008572][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.013462][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.016881][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.035377][ T81] veth1_macvtap: left promiscuous mode [ 807.037803][ T81] veth0_macvtap: left promiscuous mode [ 807.040576][ T81] veth1_vlan: left promiscuous mode [ 807.043011][ T81] veth0_vlan: left promiscuous mode [ 807.503235][ T5948] Bluetooth: hci0: command tx timeout [ 807.565476][ T81] team0 (unregistering): Port device team_slave_1 removed [ 807.615998][ T81] team0 (unregistering): Port device team_slave_0 removed [ 807.659209][ T5948] Bluetooth: hci4: command tx timeout [ 808.106959][T14640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.110830][T14640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.142989][ T6186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.145542][ T6186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.185362][T19815] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 808.190022][T19815] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 808.194607][T19815] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 808.199126][T19815] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 808.314957][T19815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.359425][T19815] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.372136][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.375375][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.386429][ T4000] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.388880][ T4000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.720982][T19851] netlink: 'syz.7.3472': attribute type 12 has an invalid length. [ 808.739966][T19815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.783057][ T6204] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 808.786620][ T46] Bluetooth: hci2: Frame reassembly failed (-84) [ 808.790447][ T46] Bluetooth: hci2: Frame reassembly failed (-84) [ 809.045996][T19815] veth0_vlan: entered promiscuous mode [ 809.055234][T19815] veth1_vlan: entered promiscuous mode [ 809.083544][T19815] veth0_macvtap: entered promiscuous mode [ 809.090515][T19815] veth1_macvtap: entered promiscuous mode [ 809.243704][T19815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.248356][T19815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 809.410525][ T46] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.422158][ T46] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.425688][ T46] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.430832][ T46] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.517385][ T4000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.529141][ T4000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.579269][T14659] Bluetooth: hci0: command tx timeout [ 809.739140][T14659] Bluetooth: hci4: command tx timeout [ 809.782913][ T4000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.786346][ T4000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.549119][ T6036] usb 52-1: device descriptor read/8, error -110 [ 810.776889][T19921] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.780509][T19921] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.859761][ T5948] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 810.979828][ T6036] usb usb52-port1: attempt power cycle [ 810.995349][T19933] FAULT_INJECTION: forcing a failure. [ 810.995349][T19933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.999889][T19933] CPU: 2 UID: 0 PID: 19933 Comm: syz.8.3477 Not tainted syzkaller #0 PREEMPT(full) [ 810.999907][T19933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 810.999915][T19933] Call Trace: [ 810.999919][T19933] [ 810.999924][T19933] dump_stack_lvl+0x16c/0x1f0 [ 810.999945][T19933] should_fail_ex+0x512/0x640 [ 810.999960][T19933] _copy_from_user+0x2e/0xd0 [ 810.999974][T19933] snd_seq_ioctl+0x1bf/0x430 [ 810.999991][T19933] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 811.000015][T19933] ? __fget_files+0x20e/0x3c0 [ 811.000032][T19933] ? __fput_deferred+0x470/0x480 [ 811.000045][T19933] snd_seq_ioctl_compat+0xea/0x310 [ 811.000061][T19933] ? __pfx_snd_seq_ioctl_compat+0x10/0x10 [ 811.000083][T19933] __ia32_compat_sys_ioctl+0x242/0x370 [ 811.000099][T19933] __do_fast_syscall_32+0xe8/0x680 [ 811.000118][T19933] do_fast_syscall_32+0x32/0x80 [ 811.000135][T19933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 811.000150][T19933] RIP: 0023:0xf7fa4579 [ 811.000159][T19933] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 811.000170][T19933] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 811.000181][T19933] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040505330 [ 811.000189][T19933] RDX: 0000000080000bc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 811.000195][T19933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 811.000201][T19933] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 811.000208][T19933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 811.000221][T19933] [ 811.026150][T19912] bridge_slave_1: left allmulticast mode [ 811.069371][T19912] bridge_slave_1: left promiscuous mode [ 811.071246][T19912] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.085774][T19912] bridge_slave_0: left allmulticast mode [ 811.088132][T19912] bridge_slave_0: left promiscuous mode [ 811.090411][T19912] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.325360][T19943] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3478'. [ 811.329487][T19943] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3478'. [ 811.332339][T19943] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3478'. [ 811.569626][ T6036] usb usb52-port1: unable to enumerate USB device [ 811.659222][ T5948] Bluetooth: hci0: command tx timeout [ 811.842286][T19953] usb 2-1: USB disconnect, device number 3 [ 811.937037][T19958] hub 2-0:1.0: USB hub found [ 811.938706][T19958] hub 2-0:1.0: 6 ports detected [ 812.099032][T14839] usb 2-1: new high-speed USB device number 4 using ehci-pci [ 812.145173][T19958] kAFS: unable to lookup cell '(,c¾ûL' [ 812.179323][T19966] FAULT_INJECTION: forcing a failure. [ 812.179323][T19966] name failslab, interval 1, probability 0, space 0, times 0 [ 812.184706][T19966] CPU: 3 UID: 0 PID: 19966 Comm: syz.8.3487 Not tainted syzkaller #0 PREEMPT(full) [ 812.184727][T19966] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 812.184738][T19966] Call Trace: [ 812.184746][T19966] [ 812.184753][T19966] dump_stack_lvl+0x16c/0x1f0 [ 812.184781][T19966] should_fail_ex+0x512/0x640 [ 812.184798][T19966] ? __kmalloc_cache_noprof+0x5f/0x800 [ 812.184817][T19966] should_failslab+0xc2/0x120 [ 812.184841][T19966] __kmalloc_cache_noprof+0x80/0x800 [ 812.184859][T19966] ? snd_seq_port_connect+0x61/0x580 [ 812.184885][T19966] ? snd_seq_port_connect+0x61/0x580 [ 812.184906][T19966] snd_seq_port_connect+0x61/0x580 [ 812.184925][T19966] ? _raw_read_unlock+0x28/0x50 [ 812.184944][T19966] ? check_subscription_permission.isra.0+0xf5/0x240 [ 812.184968][T19966] snd_seq_ioctl_subscribe_port+0x209/0x4b0 [ 812.184993][T19966] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 812.185023][T19966] snd_seq_ioctl+0x21e/0x430 [ 812.185048][T19966] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 812.185083][T19966] ? __fget_files+0x20e/0x3c0 [ 812.185103][T19966] ? __fput_deferred+0x470/0x480 [ 812.185121][T19966] snd_seq_ioctl_compat+0xea/0x310 [ 812.185144][T19966] ? __pfx_snd_seq_ioctl_compat+0x10/0x10 [ 812.185166][T19966] __ia32_compat_sys_ioctl+0x242/0x370 [ 812.185188][T19966] __do_fast_syscall_32+0xe8/0x680 [ 812.185214][T19966] do_fast_syscall_32+0x32/0x80 [ 812.185238][T19966] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 812.185259][T19966] RIP: 0023:0xf7fa4579 [ 812.185272][T19966] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 812.185291][T19966] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 812.185308][T19966] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040505330 [ 812.185320][T19966] RDX: 0000000080000bc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 812.185346][T19966] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 812.185357][T19966] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 812.185367][T19966] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 812.185388][T19966] [ 812.199187][T19956] netlink: 'syz.7.3480': attribute type 4 has an invalid length. [ 812.230218][T19968] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3488'. [ 812.311305][T14839] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 812.314317][T14839] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 812.324405][T14839] usb 2-1: Product: QEMU USB Tablet [ 812.331511][T14839] usb 2-1: Manufacturer: QEMU [ 812.333172][T14839] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 812.360804][T14839] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0006/input/input29 [ 812.433972][T14839] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 812.538896][T19977] syz.8.3489: vmalloc error: size 2147483264, exceeds total pages, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 812.579061][T19977] CPU: 3 UID: 0 PID: 19977 Comm: syz.8.3489 Not tainted syzkaller #0 PREEMPT(full) [ 812.579079][T19977] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 812.579086][T19977] Call Trace: [ 812.579090][T19977] [ 812.579095][T19977] dump_stack_lvl+0x16c/0x1f0 [ 812.579116][T19977] warn_alloc+0x248/0x3a0 [ 812.579131][T19977] ? __pfx_warn_alloc+0x10/0x10 [ 812.579145][T19977] ? find_held_lock+0x2b/0x80 [ 812.579161][T19977] ? finish_task_switch.isra.0+0x202/0xbd0 [ 812.579177][T19977] ? rcu_is_watching+0x12/0xc0 [ 812.579194][T19977] ? lockdep_hardirqs_on+0x7c/0x110 [ 812.579212][T19977] ? do_replace+0x21e/0x510 [ 812.579225][T19977] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 812.579237][T19977] ? __lock_acquire+0x436/0x2890 [ 812.579250][T19977] ? do_replace+0x21e/0x510 [ 812.579264][T19977] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 812.579276][T19977] ? __lock_acquire+0x436/0x2890 [ 812.579290][T19977] ? do_replace+0x21e/0x510 [ 812.579300][T19977] __vmalloc_node_noprof+0xad/0xf0 [ 812.579311][T19977] ? do_replace+0x21e/0x510 [ 812.579323][T19977] __vmalloc_noprof+0xa3/0x120 [ 812.579333][T19977] ? __pfx___vmalloc_noprof+0x10/0x10 [ 812.579348][T19977] do_replace+0x21e/0x510 [ 812.579360][T19977] ? __pfx_do_replace+0x10/0x10 [ 812.579371][T19977] ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10 [ 812.579388][T19977] ? __lock_acquire+0x436/0x2890 [ 812.579398][T19977] ? register_lock_class+0x41/0x4b0 [ 812.579411][T19977] compat_do_replace+0x585/0x7f0 [ 812.579424][T19977] ? __pfx_compat_do_replace+0x10/0x10 [ 812.579437][T19977] ? __pfx___might_resched+0x10/0x10 [ 812.579458][T19977] ? bpf_lsm_capable+0x9/0x10 [ 812.579473][T19977] ? security_capable+0x7e/0x260 [ 812.579493][T19977] do_ebt_set_ctl+0x362/0x460 [ 812.579503][T19977] ? sockopt_release_sock+0x52/0x60 [ 812.579520][T19977] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 812.579532][T19977] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 812.579551][T19977] ? smc_setsockopt+0x100/0xa00 [ 812.579567][T19977] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 812.579588][T19977] nf_setsockopt+0x8d/0xf0 [ 812.579606][T19977] ip_setsockopt+0xcb/0xf0 [ 812.579619][T19977] tcp_setsockopt+0xa7/0x100 [ 812.579635][T19977] smc_setsockopt+0x1b6/0xa00 [ 812.579647][T19977] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 812.579665][T19977] ? __pfx_smc_setsockopt+0x10/0x10 [ 812.579678][T19977] ? aa_sock_opt_perm+0xfd/0x1b0 [ 812.579696][T19977] ? __pfx_smc_setsockopt+0x10/0x10 [ 812.579738][T19977] do_sock_setsockopt+0xf3/0x1d0 [ 812.579756][T19977] __sys_setsockopt+0x120/0x1a0 [ 812.579777][T19977] __ia32_sys_setsockopt+0xbc/0x160 [ 812.579789][T19977] ? __do_fast_syscall_32+0x9a/0x680 [ 812.579806][T19977] ? lockdep_hardirqs_on+0x7c/0x110 [ 812.579822][T19977] __do_fast_syscall_32+0xe8/0x680 [ 812.579840][T19977] do_fast_syscall_32+0x32/0x80 [ 812.579857][T19977] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 812.579872][T19977] RIP: 0023:0xf7fa4579 [ 812.579881][T19977] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 812.579892][T19977] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 812.579904][T19977] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 812.579912][T19977] RDX: 0000000000000080 RSI: 0000000080001680 RDI: 0000000000000108 [ 812.579919][T19977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 812.579925][T19977] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 812.579932][T19977] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 812.579946][T19977] [ 812.581426][T19977] Mem-Info: [ 812.732800][T19978] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.3489'. [ 812.732808][T19981] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.3489'. [ 812.759334][T19977] active_anon:2836 inactive_anon:1581 isolated_anon:0 [ 812.759334][T19977] active_file:6726 inactive_file:12168 isolated_file:0 [ 812.759334][T19977] unevictable:12068 dirty:2291 writeback:0 [ 812.759334][T19977] slab_reclaimable:6535 slab_unreclaimable:61712 [ 812.759334][T19977] mapped:28257 shmem:1859 pagetables:1759 [ 812.759334][T19977] sec_pagetables:331 bounce:0 [ 812.759334][T19977] kernel_misc_reclaimable:0 [ 812.759334][T19977] free:46925 free_pcp:17357 free_cma:0 [ 812.777153][T19977] Node 0 active_anon:412kB inactive_anon:248kB active_file:384kB inactive_file:168kB unevictable:5212kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:4kB writeback:0kB shmem:3044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9920kB pagetables:1912kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB [ 812.789222][T19977] Node 1 active_anon:10932kB inactive_anon:6076kB active_file:26520kB inactive_file:48504kB unevictable:46360kB isolated(anon):0kB isolated(file):0kB mapped:116180kB dirty:9160kB writeback:0kB shmem:7592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5268kB pagetables:5024kB sec_pagetables:192kB all_unreclaimable? no Balloon:0kB [ 812.799766][T19977] Node 0 DMA free:2528kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:108kB local_pcp:0kB free_cma:0kB [ 812.809882][T19977] lowmem_reserve[]: 0 289 289 289 289 [ 812.819056][T19977] Node 0 DMA32 free:17280kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:2048KB free_highatomic:968KB active_anon:412kB inactive_anon:248kB active_file:384kB inactive_file:168kB unevictable:5212kB writepending:4kB zspages:508kB present:1032196kB managed:296820kB mlocked:0kB bounce:0kB free_pcp:12724kB local_pcp:3724kB free_cma:0kB [ 812.830372][T19977] lowmem_reserve[]: 0 0 0 0 0 [ 812.832443][T19977] Node 1 DMA32 free:168276kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:400KB active_anon:10932kB inactive_anon:6076kB active_file:26648kB inactive_file:48504kB unevictable:47060kB writepending:9160kB zspages:7312kB present:1048432kB managed:948212kB mlocked:4200kB bounce:0kB free_pcp:52752kB local_pcp:16428kB free_cma:0kB [ 812.843813][T19977] lowmem_reserve[]: 0 0 0 0 0 [ 812.845569][T19977] Node 0 DMA: 38*4kB (U) 19*8kB (U) 13*16kB (U) 7*32kB (U) 0*64kB 2*128kB (U) 0*256kB 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2528kB [ 812.850342][T19977] Node 0 DMA32: 530*4kB (UMEH) 501*8kB (UEH) 247*16kB (UMH) 45*32kB (UH) 38*64kB (UMEH) 16*128kB (UMH) 5*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17280kB [ 812.856048][T19977] Node 1 DMA32: 222*4kB (UMH) 504*8kB (UMEH) 1404*16kB (UMEH) 34*32kB (UMH) 44*64kB (UMEH) 39*128kB (UME) 180*256kB (UM) 75*512kB (UE) 30*1024kB (UM) 6*2048kB (M) 1*4096kB (U) = 167864kB [ 812.867249][T19977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 812.871760][T19977] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 812.875952][T19977] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 812.879085][T19977] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 812.882014][T19977] 33830 total pagecache pages [ 812.883563][T19977] 946 pages in swap cache [ 812.885290][T19977] Free swap = 56448kB [ 812.887085][T19977] Total swap = 124996kB [ 812.888586][T19977] 524155 pages RAM [ 812.890217][T19977] 0 pages HighMem/MovableOnly [ 812.891799][T19977] 209057 pages reserved [ 812.893298][T19977] 0 pages cma reserved [ 812.945566][T19984] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3491'. [ 812.950207][T19984] binder: 19983:19984 ioctl c00c620f 80000080 returned -22 [ 813.098108][T19995] FAULT_INJECTION: forcing a failure. [ 813.098108][T19995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.102466][T19995] CPU: 0 UID: 0 PID: 19995 Comm: syz.8.3496 Not tainted syzkaller #0 PREEMPT(full) [ 813.102482][T19995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 813.102490][T19995] Call Trace: [ 813.102494][T19995] [ 813.102499][T19995] dump_stack_lvl+0x16c/0x1f0 [ 813.102520][T19995] should_fail_ex+0x512/0x640 [ 813.102535][T19995] _copy_to_user+0x32/0xd0 [ 813.102548][T19995] simple_read_from_buffer+0xcb/0x170 [ 813.102565][T19995] proc_fail_nth_read+0x197/0x240 [ 813.102584][T19995] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 813.102603][T19995] ? rw_verify_area+0xcf/0x6c0 [ 813.102617][T19995] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 813.102635][T19995] vfs_read+0x1e4/0xcf0 [ 813.102651][T19995] ? __pfx___mutex_lock+0x10/0x10 [ 813.102670][T19995] ? __pfx_vfs_read+0x10/0x10 [ 813.102684][T19995] ? find_held_lock+0x2b/0x80 [ 813.102707][T19995] ? __fget_files+0x20e/0x3c0 [ 813.102726][T19995] ksys_read+0x12a/0x250 [ 813.102741][T19995] ? __pfx_ksys_read+0x10/0x10 [ 813.102757][T19995] ? fput+0x70/0xf0 [ 813.102769][T19995] __do_fast_syscall_32+0xe8/0x680 [ 813.102788][T19995] do_fast_syscall_32+0x32/0x80 [ 813.102805][T19995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 813.102819][T19995] RIP: 0023:0xf7fa4579 [ 813.102828][T19995] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 813.102840][T19995] RSP: 002b:00000000f5496590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 813.102851][T19995] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5496620 [ 813.102858][T19995] RDX: 000000000000000f RSI: 00000000f7436ff4 RDI: 0000000000000000 [ 813.102864][T19995] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 813.102870][T19995] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 813.102876][T19995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 813.102890][T19995] [ 813.263907][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.269168][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.325747][T20008] batman_adv: batadv0: Interface deactivated: dummy0 [ 813.471919][T20008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.483190][T20008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.739985][ T5948] Bluetooth: hci0: command tx timeout [ 813.838870][T19652] lo speed is unknown, defaulting to 1000 [ 813.841393][ T4000] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.843411][ T6011] syz1: Port: 1 Link DOWN [ 813.846659][ T4000] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.850179][ T4000] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.851957][T19652] syz0: Port: 1 Link DOWN [ 813.853631][ T4000] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.620530][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3517'. [ 814.626608][T20068] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3517'. [ 814.636220][T20068] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3517'. [ 814.663496][T16738] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 814.830786][T16738] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 14129, setting to 64 [ 814.839070][T16738] usb 9-1: config 0 interface 0 has no altsetting 0 [ 814.846417][T16738] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 814.850205][T16738] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 814.853443][T16738] usb 9-1: Product: syz [ 814.855258][T16738] usb 9-1: Manufacturer: syz [ 814.857288][T16738] usb 9-1: SerialNumber: syz [ 814.867950][T16738] usb 9-1: config 0 descriptor?? [ 814.874883][T16738] usb 9-1: selecting invalid altsetting 0 [ 815.076391][T20057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.080042][T20057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.303348][T20067] lo speed is unknown, defaulting to 1000 [ 815.706870][T20084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.709773][T20103] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 815.711923][T20103] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 815.720821][T20103] vhci_hcd vhci_hcd.0: Device attached [ 816.032689][T18150] usb 56-1: SetAddress Request (2) to port 0 [ 816.034644][T18150] usb 56-1: new SuperSpeed USB device number 2 using vhci_hcd [ 816.143635][T20104] vhci_hcd: connection reset by peer [ 816.165026][T15538] vhci_hcd vhci_hcd.9: stop threads [ 816.166783][T15538] vhci_hcd vhci_hcd.9: release socket [ 816.168578][T15538] vhci_hcd vhci_hcd.9: disconnect device [ 816.296274][T20120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 816.927292][T20141] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode [ 816.932779][T20141] macvtap1: entered promiscuous mode [ 816.941440][T20141] mac80211_hwsim hwsim38 wlan1: left promiscuous mode [ 817.250381][T20163] __nla_validate_parse: 1 callbacks suppressed [ 817.250398][T20163] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3534'. [ 817.276563][T20163] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3534'. [ 817.290352][T20163] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3534'. [ 817.822580][ T6039] usb 9-1: USB disconnect, device number 14 [ 818.173232][T20205] [ 818.174065][T20205] ===================================================== [ 818.177249][T20205] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 818.179846][T20205] syzkaller #0 Not tainted [ 818.181564][T20205] ----------------------------------------------------- [ 818.184284][T20205] syz.8.3544/20205 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 818.187045][T20205] ffffffff8e00c098 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0xb8/0x3e0 [ 818.189822][T20205] [ 818.189822][T20205] and this task is already holding: [ 818.192147][T20205] ffff888022117f20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x31/0x3e0 [ 818.194877][T20205] which would create a new lock dependency: [ 818.196766][T20205] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 818.199145][T20205] [ 818.199145][T20205] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 818.199153][T20205] (&dev->event_lock#2){..-.}-{3:3} [ 818.199169][T20205] [ 818.199169][T20205] ... which became SOFTIRQ-irq-safe at: [ 818.199175][T20205] lock_acquire+0x179/0x330 [ 818.199189][T20205] _raw_spin_lock_irqsave+0x3a/0x60 [ 818.199205][T20205] input_inject_event+0x9f/0x3b0 [ 818.199220][T20205] led_set_brightness+0x217/0x290 [ 818.199235][T20205] led_trigger_event+0xda/0x270 [ 818.199251][T20205] kbd_bh+0x247/0x330 [ 818.199267][T20205] tasklet_action_common+0x254/0x3f0 [ 818.199284][T20205] handle_softirqs+0x219/0x950 [ 818.199298][T20205] run_ksoftirqd+0x3a/0x60 [ 818.199312][T20205] smpboot_thread_fn+0x3f7/0xae0 [ 818.199327][T20205] kthread+0x3c5/0x780 [ 818.199337][T20205] ret_from_fork+0x983/0xb10 [ 818.224989][T20205] ret_from_fork_asm+0x1a/0x30 [ 818.226568][T20205] [ 818.226568][T20205] to a SOFTIRQ-irq-unsafe lock: [ 818.228709][T20205] (tasklist_lock){.+.+}-{3:3} [ 818.228725][T20205] [ 818.228725][T20205] ... which became SOFTIRQ-irq-unsafe at: [ 818.232704][T20205] ... [ 818.232709][T20205] lock_acquire+0x179/0x330 [ 818.235270][T20205] _raw_read_lock+0x5f/0x70 [ 818.236820][T20205] __do_wait+0x105/0x890 [ 818.238201][T20205] do_wait+0x21d/0x570 [ 818.239536][T20205] kernel_wait+0x9f/0x160 [ 818.240969][T20205] call_usermodehelper_exec_work+0xf1/0x170 [ 818.242801][T20205] process_one_work+0x9ba/0x1b20 [ 818.244528][T20205] worker_thread+0x6c8/0xf10 [ 818.246282][T20205] kthread+0x3c5/0x780 [ 818.247855][T20205] ret_from_fork+0x983/0xb10 [ 818.249610][T20205] ret_from_fork_asm+0x1a/0x30 [ 818.251392][T20205] [ 818.251392][T20205] other info that might help us debug this: [ 818.251392][T20205] [ 818.254974][T20205] Chain exists of: [ 818.254974][T20205] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 818.254974][T20205] [ 818.259124][T20205] Possible interrupt unsafe locking scenario: [ 818.259124][T20205] [ 818.261731][T20205] CPU0 CPU1 [ 818.263592][T20205] ---- ---- [ 818.265290][T20205] lock(tasklist_lock); [ 818.266657][T20205] local_irq_disable(); [ 818.268745][T20205] lock(&dev->event_lock#2); [ 818.271081][T20205] lock(&f_owner->lock); [ 818.273373][T20205] [ 818.274496][T20205] lock(&dev->event_lock#2); [ 818.276113][T20205] [ 818.276113][T20205] *** DEADLOCK *** [ 818.276113][T20205] [ 818.278664][T20205] 5 locks held by syz.8.3544/20205: [ 818.280331][T20205] #0: ffff888061552420 (sb_writers#5){.+.+}-{0:0}, at: path_openat+0x183a/0x3140 [ 818.283302][T20205] #1: ffff88805c839ca8 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0xa22/0x3140 [ 818.286505][T20205] #2: ffffffff9ac51198 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x5ed/0x1de0 [ 818.289464][T20205] #3: ffff8880753a9100 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x4b/0x2b0 [ 818.292530][T20205] #4: ffff888022117f20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x31/0x3e0 [ 818.295402][T20205] [ 818.295402][T20205] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 818.298654][T20205] -> (&dev->event_lock#2){..-.}-{3:3} { [ 818.300545][T20205] IN-SOFTIRQ-W at: [ 818.301886][T20205] lock_acquire+0x179/0x330 [ 818.304031][T20205] _raw_spin_lock_irqsave+0x3a/0x60 [ 818.306411][T20205] input_inject_event+0x9f/0x3b0 [ 818.308675][T20205] led_set_brightness+0x217/0x290 [ 818.310955][T20205] led_trigger_event+0xda/0x270 [ 818.313232][T20205] kbd_bh+0x247/0x330 [ 818.315193][T20205] tasklet_action_common+0x254/0x3f0 [ 818.317551][T20205] handle_softirqs+0x219/0x950 [ 818.319605][T20205] run_ksoftirqd+0x3a/0x60 [ 818.321635][T20205] smpboot_thread_fn+0x3f7/0xae0 [ 818.323889][T20205] kthread+0x3c5/0x780 [ 818.325871][T20205] ret_from_fork+0x983/0xb10 [ 818.327937][T20205] ret_from_fork_asm+0x1a/0x30 [ 818.330064][T20205] INITIAL USE at: [ 818.331379][T20205] lock_acquire+0x179/0x330 [ 818.333469][T20205] _raw_spin_lock_irqsave+0x3a/0x60 [ 818.335775][T20205] input_inject_event+0x9f/0x3b0 [ 818.337963][T20205] led_set_brightness+0x217/0x290 [ 818.340182][T20205] kbd_led_trigger_activate+0xcb/0x110 [ 818.342539][T20205] led_trigger_set+0x59a/0xc50 [ 818.344712][T20205] led_trigger_set_default+0x1e0/0x2e0 [ 818.347089][T20205] led_classdev_register_ext+0x71d/0xa30 [ 818.349508][T20205] input_leds_connect+0x552/0x8e0 [ 818.351731][T20205] input_attach_handler.isra.0+0x176/0x250 [ 818.354254][T20205] input_register_device+0xab9/0x11b0 [ 818.356627][T20205] atkbd_connect+0x5f8/0xa60 [ 818.358710][T20205] serio_driver_probe+0x7f/0xd0 [ 818.360901][T20205] really_probe+0x241/0xb20 [ 818.362992][T20205] __driver_probe_device+0x1de/0x470 [ 818.365312][T20205] driver_probe_device+0x4c/0x1b0 [ 818.367532][T20205] __driver_attach+0x283/0x5e0 [ 818.369622][T20205] bus_for_each_dev+0x13e/0x1d0 [ 818.371784][T20205] serio_handle_event+0x281/0xb30 [ 818.374042][T20205] process_one_work+0x9ba/0x1b20 [ 818.376283][T20205] worker_thread+0x6c8/0xf10 [ 818.378488][T20205] kthread+0x3c5/0x780 [ 818.380515][T20205] ret_from_fork+0x983/0xb10 [ 818.382606][T20205] ret_from_fork_asm+0x1a/0x30 [ 818.385033][T20205] } [ 818.386016][T20205] ... key at: [] __key.7+0x0/0x40 [ 818.388482][T20205] -> (&client->buffer_lock){....}-{3:3} { [ 818.390434][T20205] INITIAL USE at: [ 818.391750][T20205] lock_acquire+0x179/0x330 [ 818.393793][T20205] _raw_spin_lock+0x2e/0x40 [ 818.395964][T20205] evdev_pass_values+0x10e/0x9b0 [ 818.398126][T20205] evdev_events+0x1bb/0x390 [ 818.400160][T20205] input_pass_values+0x74e/0x880 [ 818.402310][T20205] input_handle_event+0xf00/0x14d0 [ 818.404690][T20205] input_inject_event+0x1e8/0x3b0 [ 818.406922][T20205] evdev_write+0x2e1/0x440 [ 818.408942][T20205] vfs_write+0x2a0/0x11d0 [ 818.410915][T20205] ksys_write+0x1f8/0x250 [ 818.412898][T20205] __do_fast_syscall_32+0xe8/0x680 [ 818.415136][T20205] do_fast_syscall_32+0x32/0x80 [ 818.417295][T20205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.419860][T20205] } [ 818.420828][T20205] ... key at: [] __key.88+0x0/0x40 [ 818.423273][T20205] ... acquired at: [ 818.425033][T20205] _raw_spin_lock+0x2e/0x40 [ 818.427113][T20205] evdev_pass_values+0x10e/0x9b0 [ 818.429263][T20205] evdev_events+0x1bb/0x390 [ 818.431214][T20205] input_pass_values+0x74e/0x880 [ 818.433322][T20205] input_handle_event+0xf00/0x14d0 [ 818.435481][T20205] input_inject_event+0x1e8/0x3b0 [ 818.437711][T20205] evdev_write+0x2e1/0x440 [ 818.439624][T20205] vfs_write+0x2a0/0x11d0 [ 818.441578][T20205] ksys_write+0x1f8/0x250 [ 818.443454][T20205] __do_fast_syscall_32+0xe8/0x680 [ 818.445669][T20205] do_fast_syscall_32+0x32/0x80 [ 818.447732][T20205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.450371][T20205] [ 818.451371][T20205] -> (&new->fa_lock){...-}-{3:3} { [ 818.453537][T20205] IN-SOFTIRQ-R at: [ 818.455221][T20205] lock_acquire+0x179/0x330 [ 818.457723][T20205] _raw_read_lock_irqsave+0x46/0x90 [ 818.460559][T20205] kill_fasync+0x138/0x510 [ 818.463259][T20205] sock_wake_async+0x132/0x160 [ 818.466045][T20205] sock_def_readable+0x4f7/0x5d0 [ 818.469016][T20205] tcp_data_ready+0x114/0x5a0 [ 818.471827][T20205] tcp_data_queue+0x1ac2/0x4ff0 [ 818.474621][T20205] tcp_rcv_established+0xa7f/0x36e0 [ 818.477546][T20205] tcp_v4_do_rcv+0xc65/0x10a0 [ 818.480207][T20205] tcp_v4_rcv+0x3077/0x4db0 [ 818.482824][T20205] ip_protocol_deliver_rcu+0xba/0x4c0 [ 818.485790][T20205] ip_local_deliver_finish+0x3f2/0x720 [ 818.488846][T20205] ip_local_deliver+0x18e/0x1f0 [ 818.491617][T20205] ip_rcv+0x2e0/0x600 [ 818.493545][T20205] __netif_receive_skb_one_core+0x197/0x1e0 [ 818.496350][T20205] __netif_receive_skb+0x1d/0x160 [ 818.498608][T20205] process_backlog+0x4a2/0x1650 [ 818.500759][T20205] __napi_poll.constprop.0+0xb3/0x540 [ 818.503036][T20205] net_rx_action+0x9f9/0xfa0 [ 818.505088][T20205] handle_softirqs+0x219/0x950 [ 818.507203][T20205] do_softirq+0xb2/0xf0 [ 818.509119][T20205] __local_bh_enable_ip+0x100/0x120 [ 818.511306][T20205] sk_stream_wait_memory+0x65c/0x10e0 [ 818.513580][T20205] tcp_sendmsg_locked+0x15d0/0x42a0 [ 818.515807][T20205] tcp_sendmsg+0x2e/0x50 [ 818.517722][T20205] inet_sendmsg+0xb9/0x140 [ 818.519635][T20205] __sys_sendto+0x43c/0x520 [ 818.521646][T20205] __ia32_sys_sendto+0xdd/0x1b0 [ 818.523749][T20205] __do_fast_syscall_32+0xe8/0x680 [ 818.525969][T20205] do_fast_syscall_32+0x32/0x80 [ 818.528097][T20205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.530635][T20205] INITIAL USE at: [ 818.531917][T20205] lock_acquire+0x179/0x330 [ 818.533876][T20205] _raw_write_lock_irq+0x36/0x50 [ 818.536084][T20205] fasync_remove_entry+0xb2/0x1e0 [ 818.538192][T20205] fasync_helper+0xaf/0xd0 [ 818.540134][T20205] vcs_fasync+0x53/0xa0 [ 818.541988][T20205] __fput+0x96b/0xb70 [ 818.543780][T20205] task_work_run+0x150/0x240 [ 818.545818][T20205] exit_to_user_mode_loop+0xfb/0x540 [ 818.548073][T20205] __do_fast_syscall_32+0x4a4/0x680 [ 818.550247][T20205] do_fast_syscall_32+0x32/0x80 [ 818.552327][T20205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.554831][T20205] INITIAL READ USE at: [ 818.556285][T20205] lock_acquire+0x179/0x330 [ 818.558366][T20205] _raw_read_lock_irqsave+0x74/0x90 [ 818.560686][T20205] kill_fasync+0x138/0x510 [ 818.562745][T20205] n_tty_receive_buf_common+0x5d1/0x19d0 [ 818.565197][T20205] tty_ioctl+0x583/0x1650 [ 818.567266][T20205] tty_compat_ioctl+0x24a/0x4d0 [ 818.569476][T20205] __ia32_compat_sys_ioctl+0x242/0x370 [ 818.571862][T20205] __do_fast_syscall_32+0xe8/0x680 [ 818.574137][T20205] do_fast_syscall_32+0x32/0x80 [ 818.576375][T20205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.578992][T20205] } [ 818.579841][T20205] ... key at: [] __key.0+0x0/0x40 [ 818.582106][T20205] ... acquired at: [ 818.583351][T20205] _raw_read_lock_irqsave+0x74/0x90 [ 818.585066][T20205] kill_fasync+0x138/0x510 [ 818.586561][T20205] evdev_pass_values+0x619/0x9b0 [ 818.588208][T20205] evdev_events+0x1bb/0x390 [ 818.589840][T20205] input_pass_values+0x74e/0x880 [ 818.591493][T20205] input_handle_event+0xf00/0x14d0 [ 818.593294][T20205] input_inject_event+0x1e8/0x3b0 [ 818.594953][T20205] evdev_write+0x2e1/0x440 [ 818.596552][T20205] vfs_write+0x2a0/0x11d0 [ 818.598024][T20205] ksys_write+0x1f8/0x250 [ 818.599518][T20205] __do_fast_syscall_32+0xe8/0x680 [ 818.601235][T20205] do_fast_syscall_32+0x32/0x80 [ 818.602847][T20205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.604915][T20205] [ 818.605734][T20205] -> (&f_owner->lock){....}-{3:3} { [ 818.607399][T20205] INITIAL USE at: [ 818.608630][T20205] lock_acquire+0x179/0x330 [ 818.610554][T20205] _raw_write_lock_irq+0x36/0x50 [ 818.612608][T20205] __f_setown+0x61/0x3c0 [ 818.614435][T20205] __tty_fasync+0x1bf/0x300 [ 818.616413][T20205] tty_fasync+0x9e/0xe0 [ 818.618220][T20205] do_vfs_ioctl+0xa08/0x14f0 [ 818.620212][T20205] __ia32_compat_sys_ioctl+0x1c0/0x370 [ 818.622412][T20205] __do_fast_syscall_32+0xe8/0x680 [ 818.624507][T20205] do_fast_syscall_32+0x32/0x80 [ 818.626522][T20205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.628993][T20205] INITIAL READ USE at: [ 818.630363][T20205] lock_acquire+0x179/0x330 [ 818.632401][T20205] _raw_read_lock_irqsave+0x74/0x90 [ 818.634648][T20205] send_sigio+0x31/0x3e0 [ 818.636642][T20205] kill_fasync+0x214/0x510 [ 818.638655][T20205] n_tty_receive_buf_common+0x5d1/0x19d0 [ 818.641037][T20205] tty_ioctl+0x583/0x1650 [ 818.643029][T20205] tty_compat_ioctl+0x24a/0x4d0 [ 818.645178][T20205] __ia32_compat_sys_ioctl+0x242/0x370 [ 818.647546][T20205] __do_fast_syscall_32+0xe8/0x680 [ 818.649867][T20205] do_fast_syscall_32+0x32/0x80 [ 818.652105][T20205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.654619][T20205] } [ 818.655443][T20205] ... key at: [] __key.1+0x0/0x40 [ 818.657682][T20205] ... acquired at: [ 818.658897][T20205] _raw_read_lock_irqsave+0x74/0x90 [ 818.660599][T20205] send_sigio+0x31/0x3e0 [ 818.662026][T20205] kill_fasync+0x214/0x510 [ 818.663498][T20205] n_tty_receive_buf_common+0x5d1/0x19d0 [ 818.665354][T20205] tty_ioctl+0x583/0x1650 [ 818.666844][T20205] tty_compat_ioctl+0x24a/0x4d0 [ 818.668470][T20205] __ia32_compat_sys_ioctl+0x242/0x370 [ 818.670251][T20205] __do_fast_syscall_32+0xe8/0x680 [ 818.671938][T20205] do_fast_syscall_32+0x32/0x80 [ 818.673542][T20205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.675627][T20205] [ 818.676411][T20205] [ 818.676411][T20205] the dependencies between the lock to be acquired [ 818.676418][T20205] and SOFTIRQ-irq-unsafe lock: [ 818.680717][T20205] -> (tasklist_lock){.+.+}-{3:3} { [ 818.682462][T20205] HARDIRQ-ON-R at: [ 818.683760][T20205] lock_acquire+0x179/0x330 [ 818.685743][T20205] _raw_read_lock+0x5f/0x70 [ 818.687722][T20205] __do_wait+0x105/0x890 [ 818.689600][T20205] do_wait+0x21d/0x570 [ 818.691384][T20205] kernel_wait+0x9f/0x160 [ 818.693303][T20205] call_usermodehelper_exec_work+0xf1/0x170 [ 818.695752][T20205] process_one_work+0x9ba/0x1b20 [ 818.697833][T20205] worker_thread+0x6c8/0xf10 [ 818.699825][T20205] kthread+0x3c5/0x780 [ 818.701627][T20205] ret_from_fork+0x983/0xb10 [ 818.703607][T20205] ret_from_fork_asm+0x1a/0x30 [ 818.705802][T20205] SOFTIRQ-ON-R at: [ 818.707078][T20205] lock_acquire+0x179/0x330 [ 818.709039][T20205] _raw_read_lock+0x5f/0x70 [ 818.711093][T20205] __do_wait+0x105/0x890 [ 818.713125][T20205] do_wait+0x21d/0x570 [ 818.714947][T20205] kernel_wait+0x9f/0x160 [ 818.716907][T20205] call_usermodehelper_exec_work+0xf1/0x170 [ 818.719280][T20205] process_one_work+0x9ba/0x1b20 [ 818.721371][T20205] worker_thread+0x6c8/0xf10 [ 818.723340][T20205] kthread+0x3c5/0x780 [ 818.725143][T20205] ret_from_fork+0x983/0xb10 [ 818.727124][T20205] ret_from_fork_asm+0x1a/0x30 [ 818.729156][T20205] INITIAL USE at: [ 818.730404][T20205] lock_acquire+0x179/0x330 [ 818.732310][T20205] _raw_write_lock_irq+0x36/0x50 [ 818.734308][T20205] copy_process+0x4668/0x7430 [ 818.736353][T20205] kernel_clone+0xfc/0x910 [ 818.738257][T20205] user_mode_thread+0xc8/0x110 [ 818.740268][T20205] rest_init+0x23/0x2b0 [ 818.742054][T20205] start_kernel+0x3ef/0x4d0 [ 818.744114][T20205] x86_64_start_reservations+0x18/0x30 [ 818.746345][T20205] x86_64_start_kernel+0x130/0x190 [ 818.748410][T20205] common_startup_64+0x13e/0x148 [ 818.750495][T20205] INITIAL READ USE at: [ 818.751903][T20205] lock_acquire+0x179/0x330 [ 818.753981][T20205] _raw_read_lock+0x5f/0x70 [ 818.756289][T20205] __do_wait+0x105/0x890 [ 818.758262][T20205] do_wait+0x21d/0x570 [ 818.760192][T20205] kernel_wait+0x9f/0x160 [ 818.762181][T20205] call_usermodehelper_exec_work+0xf1/0x170 [ 818.764809][T20205] process_one_work+0x9ba/0x1b20 [ 818.767022][T20205] worker_thread+0x6c8/0xf10 [ 818.769135][T20205] kthread+0x3c5/0x780 [ 818.771061][T20205] ret_from_fork+0x983/0xb10 [ 818.773238][T20205] ret_from_fork_asm+0x1a/0x30 [ 818.775363][T20205] } [ 818.776209][T20205] ... key at: [] tasklist_lock+0x18/0x40 [ 818.778622][T20205] ... acquired at: [ 818.779856][T20205] lock_acquire+0x179/0x330 [ 818.781355][T20205] _raw_read_lock+0x5f/0x70 [ 818.782863][T20205] send_sigio+0xb8/0x3e0 [ 818.784293][T20205] dnotify_handle_event+0x15e/0x2b0 [ 818.786014][T20205] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 818.788095][T20205] fsnotify+0x13fb/0x1de0 [ 818.789543][T20205] path_openat+0x1d67/0x3140 [ 818.791063][T20205] do_filp_open+0x20b/0x470 [ 818.792563][T20205] do_sys_openat2+0x121/0x290 [ 818.794107][T20205] __ia32_compat_sys_openat+0x16d/0x210 [ 818.795937][T20205] __do_fast_syscall_32+0xe8/0x680 [ 818.797607][T20205] do_fast_syscall_32+0x32/0x80 [ 818.799194][T20205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.801231][T20205] [ 818.802006][T20205] [ 818.802006][T20205] stack backtrace: [ 818.803886][T20205] CPU: 0 UID: 0 PID: 20205 Comm: syz.8.3544 Not tainted syzkaller #0 PREEMPT(full) [ 818.803901][T20205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 818.803908][T20205] Call Trace: [ 818.803915][T20205] [ 818.803920][T20205] dump_stack_lvl+0x116/0x1f0 [ 818.803938][T20205] check_irq_usage+0x8e6/0xbc0 [ 818.803956][T20205] ? lock_release+0x201/0x2d0 [ 818.803965][T20205] ? bpf_ksym_find+0x124/0x1c0 [ 818.803978][T20205] ? check_path.constprop.0+0x24/0x50 [ 818.803997][T20205] ? __lock_acquire+0x167f/0x2890 [ 818.804006][T20205] __lock_acquire+0x167f/0x2890 [ 818.804017][T20205] ? lockdep_unlock+0x64/0xd0 [ 818.804031][T20205] ? __lock_acquire+0x12c2/0x2890 [ 818.804042][T20205] lock_acquire+0x179/0x330 [ 818.804052][T20205] ? send_sigio+0xb8/0x3e0 [ 818.804065][T20205] _raw_read_lock+0x5f/0x70 [ 818.804080][T20205] ? send_sigio+0xb8/0x3e0 [ 818.804091][T20205] send_sigio+0xb8/0x3e0 [ 818.804104][T20205] dnotify_handle_event+0x15e/0x2b0 [ 818.804117][T20205] ? __pfx_dnotify_handle_event+0x10/0x10 [ 818.804129][T20205] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 818.804148][T20205] fsnotify+0x13fb/0x1de0 [ 818.804165][T20205] ? __pfx_fsnotify+0x10/0x10 [ 818.804182][T20205] ? __pfx_down_write+0x10/0x10 [ 818.804194][T20205] path_openat+0x1d67/0x3140 [ 818.804212][T20205] ? __pfx_path_openat+0x10/0x10 [ 818.804230][T20205] ? __lock_acquire+0x436/0x2890 [ 818.804240][T20205] do_filp_open+0x20b/0x470 [ 818.804257][T20205] ? __pfx_do_filp_open+0x10/0x10 [ 818.804277][T20205] ? _raw_spin_unlock+0x28/0x50 [ 818.804291][T20205] ? alloc_fd+0x471/0x7d0 [ 818.804309][T20205] do_sys_openat2+0x121/0x290 [ 818.804321][T20205] ? __pfx_do_sys_openat2+0x10/0x10 [ 818.804335][T20205] __ia32_compat_sys_openat+0x16d/0x210 [ 818.804349][T20205] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 818.804362][T20205] ? xfd_validate_state+0x61/0x180 [ 818.804375][T20205] __do_fast_syscall_32+0xe8/0x680 [ 818.804393][T20205] do_fast_syscall_32+0x32/0x80 [ 818.804410][T20205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 818.804424][T20205] RIP: 0023:0xf7fa4579 [ 818.804434][T20205] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 818.804446][T20205] RSP: 002b:00000000f549655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 818.804457][T20205] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 818.804465][T20205] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 818.804471][T20205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 818.804478][T20205] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 818.804485][T20205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 818.804495][T20205] [ 819.011064][T14640] smc: removing ib device syz1 [ 819.604687][ T46] bond1 (unregistering): (slave geneve2): Releasing active interface [ 819.644272][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.648032][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.651832][ T46] bond0 (unregistering): Released all slaves [ 819.737874][ T46] bond1 (unregistering): Released all slaves [ 820.013813][ T46] hsr_slave_0: left promiscuous mode [ 820.016126][ T46] hsr_slave_1: left promiscuous mode [ 820.018681][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.023572][ T46] batman_adv: batadv0: Removing interface: dummy0 [ 821.099091][T18150] usb 56-1: device descriptor read/8, error -110 [ 821.499434][T18150] usb usb56-port1: attempt power cycle [ 822.069324][T18150] usb usb56-port1: unable to enumerate USB device