last executing test programs: 33m57.107204985s ago: executing program 32 (id=317): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffcfe, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x18, 0x0, 0x1) chdir(&(0x7f0000000100)='./file0\x00') ioctl(r1, 0xffffffff, &(0x7f0000002080)) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x1f8, 0x0, 0x22a, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xcf26}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff0000}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0xb5, 0x3, "95bdb858fda82909cd3a4fd7829a60301ce44a94c9cc2adb53b94183762de0868f8648b51885b78f50c906b9fe218f970115506dc7667000189a00e6ec27a5ad7ed313732ad95b93efdec387f9fa9defc528661b74a544b9a6e4d95f64caa6c58aa12457b3f19d1e2d0d82ddf73f71757762864beb0c867a02a86cdc7d459c6813ee8fd9a509c253a0236ba5997d8727da2bc6fd41d8af15332d4aa80f1ec1d5ee6bfd2d745e111106810760a460cf8e92"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff2a}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20024800}, 0x20008010) bpf$MAP_CREATE(0x0, 0x0, 0x0) creat(0x0, 0x0) r4 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r5, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) 31m50.786033887s ago: executing program 33 (id=714): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="2a1302001a800b0001007e656e6576f33c5fef851566fdb226c7af5cd2809653d02c15f604441378abf0c02f35b0104b52629de115cfd52dd3fbc644e6ffbcc34fd015735a4e7cc3b58427f153edc2a9ff257445cafb00b826fd4cbf3582b0a149a678d71870695bc91fa6e555a671dfe9c7cb2de4321de878cc4cd30ca7de8b47ea378a023dc588dfa186864b04b0d49b7bf409357f8c6297e189cd20a0cc8c977e14f99c16e4558ea77933fb723a711e2c2c36024d4d417900fc3aab5fcf79c2d0"], 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r0, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, 0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x65ac, &(0x7f0000000740)={0x0, 0x1caa, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x0, 0x609}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004845}, 0x40014) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c8000000ed03000226bd7000fcdbdf253e5284d886cbf239d2149bd27f8ebd61cf6c868075c600afa48c022f9dc924b9b4d22ebe91035a614efdb76b237e67baadcbb3dfde088ca4a2ed35b95826b32090980f306fcc379b3b38a328c19c65bfe85c19762d2673cbd540fbf6cb07cd516a2e6b98ebdac937072344f7534b479b498623b53cb9c3a267d443862cfa9a6986a99d2e22700dd66a16fee5144ffa0698dbe3061dc9d0d1caead180c501dde8a9a9b20417b92dd1908823fa7d56d7018e7048c8c6713800"], 0xc8}, 0x1, 0x0, 0x0, 0x10880}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r8 = syz_open_dev$sndctrl(&(0x7f0000005a80), 0xce5, 0x2400) syz_open_dev$hiddev(0x0, 0x6, 0x48042) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) ppoll(&(0x7f00000005c0), 0x0, &(0x7f0000000940)={r9, r10+60000000}, &(0x7f0000000980)={[0x1]}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r8, 0x80045530, &(0x7f0000005ac0)=""/114) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000580)=0x91df) 31m38.409491372s ago: executing program 34 (id=757): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0xc0, 0x30, 0x1, 0x0, 0x0, {}, [{0xac, 0x1, [@m_ct={0x60, 0x2, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x8000, 0x20000000, 0x3, 0xf}}, @TCA_CT_LABELS={0x14, 0x7, "744657ee887ad2a0a7986c27445fb690"}, @TCA_CT_ACTION={0x6, 0x3, 0x28}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x804}, 0x20004061) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x10, 0x4) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000500)={0x3, 0x5, 0xd, 0x9}, 0x10) 30m25.435912113s ago: executing program 35 (id=1015): r0 = openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x20081, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x1, 0x4, 0x9, 0x5, 0xd, "4ece5d16b1c1b625"}) (async) r1 = openat$rfkill(0xffffff9c, &(0x7f0000000080), 0x42, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="e071fccd3c9972226987bb", 0xb}], 0x1) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000140)={0x6ab, 0xf298, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) r2 = openat$procfs(0xffffff9c, &(0x7f000000a180)='/proc/mdstat\x00', 0x0, 0x0) read$msr(r2, &(0x7f000000a1c0)=""/119, 0x77) (async) r3 = epoll_create1(0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f000000a500)={&(0x7f000000a240)="986f4a4a9420b3233fa899b361f44095ee4a3dc24b04405e5384e57cf890a2d70c46b148a3b25303ee426e76bc08f476861471444af131cd060ff680c3663c711cd20fd9b74f27bf3b9893e7b935226936f94c9e06b9df1075ba744be1197ff6e3db81418e73b8ce17485aea8fa9149952647a01c004b45ccaca6e126b4d5691a1883a49008c64ceba14b56fd2d0c9a369b4d14fe2a061250995e02ab63a6bf48bcba0a8319460510cedd3931e6aef2209ebdaff8ea17df4a1c38e98bb71a55abca8348823c3f6a5d32c1d602dd0d9ff03c9c86e4c72c5c2725a3bdee658787c1020ea6e7a830c994bfdb7ba010a1eebf70a9fe4e1", &(0x7f000000a340)=""/57, &(0x7f000000a380)="9c39427af95f97804a7cdadcf8c4ef797a20c1a9d28ef0a337d95c2d17cf7898d272b2a7595de53543ef40c77c24617e07696e15d2ee5177c5cbabace79a42eaa10346033f0006206310026c53d41cf29edffadbb713b4625b619edd62c9d1085101218a1295040b447f4b7366064f1f2168654fd50878389c488c315e701ef85e0a84ce6ac86b27efe1", &(0x7f000000a440)="0e9ec9bf55ef51b7b095995d6333e41e48f31eb16673f8fe1afa81acb72b8f6e6c119a2a8b188c7d3a1edca5f3908628c959cd09a306e76a966c29a326971465821f232bd00d083ce27c10808344bead52152fc433dd151406406c2c3829d6737ab6c4980e02bf5adf70f66575ca83cba1da56132cd6bca388a88b69ec90dda2d6e264fc4458149d877392d0f08b2f843069dcad4bd5013f82eb8d9dbfe03427eb21036c7297", 0x8001, r2}, 0x38) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f000000a640)={&(0x7f000000a540)=[0x0, 0x0], &(0x7f000000a580)=[0x0], &(0x7f000000a5c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f000000a600)=[0x0], 0x2, 0x1, 0x6, 0x1}) (async) mknod$loop(&(0x7f000000a680)='./file0\x00', 0x1000, 0x0) getresuid(&(0x7f000000a7c0), &(0x7f000000a800)=0x0, &(0x7f000000a840)) fstat(r2, &(0x7f000000a880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f000000a900)={0x10001, 0x2, {0xffffffffffffffff}, {0xee01}, 0x1, 0x7}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f000000a940)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f000000aa40)=0xe4) (async) fstat(r3, &(0x7f000000aa80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$dmmidi(&(0x7f000000ab00), 0x8, 0x280) (async) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f000000ab40)={'\x00', 0x3, 0x1, 0x18, 0x6, 0x4, 0x0}) fstat(r0, &(0x7f000000ab80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f000000ac00)={{0x1, 0x1, 0x18, r0, {0xee01, 0x0}}, './file0\x00'}) sendmsg$netlink(r2, &(0x7f000000acc0)={0x0, 0x0, &(0x7f000000a780)=[{&(0x7f000000a6c0)={0xb0, 0x26, 0x2, 0x70bd26, 0x25dfdbfd, "", [@nested={0x1c, 0xa1, 0x0, 0x1, [@typed={0x14, 0xa0, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0xf}]}, @nested={0x12, 0x3a, 0x0, 0x1, [@generic="6f58bb5f6b19ab5e9d7123445cb3"]}, @generic="e9a7daf4de30f0328f79279fa9c41cc6100de71278c108850295fc807ec9d7904fcd9a4ee0085be07ad379f74a257f1927f9d61b8fb8756d757d1cf8c68e62a81a0a6a857f66657b1f6deab2d146bcfbb594e73102b14eca097d25d504084b59da0f84a2a78227ffeac5eb14a46e"]}, 0xb0}], 0x1, &(0x7f000000ac40)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff, r4, r6}}}, @cred={{0x18, 0x1, 0x2, {r7, r9, r10}}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r3, r0, r0, r11]}}, @cred={{0x18, 0x1, 0x2, {r12, r13, r17}}}], 0x6c, 0x40000}, 0x800) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f000000ae00)={&(0x7f000000ad00)=[0x0, 0x0, 0x0], &(0x7f000000ad40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f000000ad80)=[0x0, 0x0, 0x0, 0x0], &(0x7f000000adc0)=[0x0], 0x3, 0x7, 0x4, 0x1}) (async) r18 = syz_open_dev$audion(&(0x7f000000ae40), 0x7, 0x100) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r18, 0x4068aea3, &(0x7f000000ae80)={0xc5, 0x0, r2}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r18, 0x4020ae46, &(0x7f000000af00)={0x10000, 0x1, 0xdddd0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) ioctl$SIOCAX25DELUID(r15, 0x89e2, &(0x7f000000af40)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r5}) (async) epoll_ctl$EPOLL_CTL_DEL(r11, 0x2, r1) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f000000afc0)={0x0, 0x0, 0x0}, &(0x7f000000b000)=0xc) fsetxattr$system_posix_acl(r18, &(0x7f000000af80)='system.posix_acl_default\x00', &(0x7f000000b040)={{}, {0x1, 0x4}, [{0x2, 0x1, r9}, {0x2, 0x3, r16}, {0x2, 0x2, r8}], {0x4, 0x6}, [{0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x0, r17}, {0x8, 0x3, r14}, {0x8, 0x1, r19}], {}, {0x20, 0x4}}, 0x5c, 0x2) openat$fuse(0xffffff9c, &(0x7f000000b0c0), 0x2, 0x0) 30m4.848377098s ago: executing program 36 (id=1119): r0 = syz_open_dev$evdev(0x0, 0x1bbc, 0x801) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000300)=0x44) 27m54.731456435s ago: executing program 37 (id=1617): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000012c0), 0x8000, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffcfe, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) r3 = socket(0x18, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') ioctl(r1, 0xffffffff, &(0x7f0000002080)) syz_open_dev$ptys(0xc, 0x3, 0x1) r4 = io_uring_setup(0x1d34, &(0x7f0000000300)={0x0, 0x5779, 0x2, 0x0, 0xd4}) syz_io_uring_setup(0x49e, &(0x7f0000000380)={0x0, 0xd74d, 0x20, 0x0, 0x19f, 0x0, r4}, 0x0, &(0x7f0000000280)) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x12c, 0x0, 0x22a, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xcf26}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff0000}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff2a}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20024800}, 0x20008010) r5 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03ff000004000000050000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x12, &(0x7f00000007c0)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @call={0x85, 0x0, 0x0, 0x18}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_val={0x18, 0x7, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r7, r7, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 27m31.712250974s ago: executing program 38 (id=1707): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0xc0, 0x30, 0x1, 0x0, 0x0, {}, [{0xac, 0x1, [@m_ct={0x60, 0x2, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x8000, 0x20000000, 0x3, 0xf}}, @TCA_CT_LABELS={0x14, 0x7, "744657ee887ad2a0a7986c27445fb690"}, @TCA_CT_ACTION={0x6, 0x3, 0x28}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x804}, 0x20004061) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x10, 0x4) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000002700)={0x1, 0x2, 0x0, 0xfffffff8}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000500)={0x3, 0x5, 0xd, 0x9}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x21, 0x7fff}, 0x9c) 27m9.260446801s ago: executing program 39 (id=1812): socket$kcm(0x2, 0x3, 0x2) 27m5.383037745s ago: executing program 40 (id=1825): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000002540)={0x2a, 0x1, 0x3fff}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000000000c8d05300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, r4, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) getsockopt$inet6_opts(r7, 0x29, 0x36, 0x0, &(0x7f0000000040)) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001814010000000000030000000800010000000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x8000) 26m4.535222976s ago: executing program 41 (id=2102): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x181800) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000006800010025bd7000feffffff0a0000000000000018000880140001000100000000000000870004001048080004000400080005"], 0x3c}}, 0x40040d0) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 25m51.163293037s ago: executing program 42 (id=2173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r1, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000001100)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x83) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0xc000) read$dsp(r3, &(0x7f00000001c0)=""/95, 0x5f) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x3, 0xe, 0x7588, 0x40, 0xfffffffc, 0x7}, &(0x7f0000000140)=0x9c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x7101}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 24m28.847156366s ago: executing program 43 (id=2801): readv(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x2, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x1}, 0x6) ioctl$sock_bt_hci(r3, 0x800448d7, &(0x7f0000000240)) syz_open_procfs(0x0, 0x0) 23m51.54649533s ago: executing program 44 (id=3114): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xf7fffffe}, 0x5c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000200)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}}}}}}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, "9fc819185147b3eff473b7d5db8325be5ab1a68684a1be781f041a11d2bb17445a4a690edea686b8d6727502a8d11c89ca18421bec0a8b1230491f0f7b2b96", 0x35}, 0x58, &(0x7f0000000640)=[{&(0x7f0000000400)="f6cc37d5fd52f0b5c1a5ef17acdd2dd16dadcab119d7c872984dea6cd9376cb12a2b196e7800c5dbff979ce464b40696d340beb68b013c1c5d65f570f244864078c8e2fc773bce298e4f13e4ab9c518b18126d89", 0x54}, {&(0x7f0000000480)="5a7fae8e63668f72f5e831aa073265cacc44d82f21ba71418d193e2f830815434bad7be7857fb89f15ad10bbffcdb502c2610d586e35c14e3a2f4126d638d2d1b08961ac5d4ec0f2d373d1ca8eac1015731a251530a00199b47026e7219d6de78b24c7", 0x63}, {&(0x7f0000000500)="40125c1f2dbff7463620c306adaccdd18713e6b0871bea03f52a06b24dfa11d3ac1b1690787ae106b9aa42ced27ea4d15b5d64d68b78c3d149ea38e744544cef87c8b26d585368ad9f1816ae06c4088900b028b6222fe3c5dbe2ea4d43992fa605ac58fe8e528d2c8c45e83431407080e605981072f8524509ae1ade1ebbd867c220541162060d69ab993da777e5df579402d61eafcc1911568ce8e503ee85e8457fd4197104f8f5e8c0be4383dfd6afe64d6e7208a2745c461724db4f1bcc4036", 0xc1}, {&(0x7f0000000140)='>v', 0x2}], 0x4, &(0x7f0000000680)={0x84, 0x0, 0xffff0001, "ed106fed592d79b17e704c075fa85fbc0917a9691797e806de128375da7eb5bfaae15739f1df9ed8eb441ac2fba928a2d68a8cf163cc279e7972d25c1f5d51dfc793ec3edc34ac2b3c7e809fa4385dfa279a3840a2029186590729c5d5ef25436a7c2d293953b8f0af3822748704c759141c512dc8b5384f"}, 0x84, 0x20004000}, 0x4000) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000300)={0x5, 0x0, [{0x80000014, 0x6, 0x2, 0x4, 0x8, 0x10001, 0x40000}, {0x80000008, 0x7f, 0x2, 0x3, 0x1, 0xffff, 0x7}, {0x80000008, 0x6, 0x0, 0x8, 0xfff7ffff, 0x6, 0x80000000}, {0x2, 0x4261, 0x4, 0xeeca, 0x6, 0x8, 0xac7a}, {0x80000000, 0xfff, 0x2, 0xfffffffa, 0x42, 0x6, 0x20000d37}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) mount$9p_xen(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x345065, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x800000000006, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi4\x00', 0x20000, 0x0) ioctl$COMEDI_BUFINFO(r6, 0xc02c640e, &(0x7f0000000080)={0x0, 0x6, 0x8000, 0xac9, 0x10001, 0x0, 0x8}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21m32.681906084s ago: executing program 8 (id=3755): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc03cbfd1ac8007f5b86dd", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x4c) 21m32.632585012s ago: executing program 8 (id=3756): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000fc0)=@newtfilter={0x3c, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfff1, 0x10}, {0x8, 0x4}, {0xa, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x3c}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 21m32.574632654s ago: executing program 8 (id=3757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xb4}}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f00000008c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0) recvmsg$unix(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x2140) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) recvfrom(r1, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f6fecf0", "53c272d8b763f690b35605dff8a4a8d2", "44000100", "72392a24199b5903"}, 0x28) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r6, 0x0, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x35) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0xa, 0x4, 0x0, 0x0, 0x4) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000080)='\t', 0x1}], 0x1) 21m31.733300432s ago: executing program 8 (id=3762): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7, 0x20000) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x3000480, &(0x7f0000001e40)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x2}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) prlimit64(0xffffffffffffffff, 0x17, 0x0, &(0x7f0000000400)) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/211, 0xd3}], 0x4, &(0x7f0000008b80)=""/219, 0xdb}, 0x6}, {{&(0x7f00000007c0)=@qipcrtr, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001900)=""/212, 0xd4}], 0x1}, 0x1472}, {{&(0x7f0000001b40)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/50, 0x32}, {&(0x7f0000001c00)=""/111, 0x6f}, {&(0x7f0000001c80)=""/30, 0x1e}], 0x3}, 0x5}, {{&(0x7f0000001d00)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000008d40)=[{&(0x7f0000001d80)=""/171, 0xab}, {&(0x7f0000000740)=""/114, 0x72}, {&(0x7f0000008c80)=""/144, 0x90}, {&(0x7f0000000280)=""/5, 0x5}], 0x4, &(0x7f0000001e80)=""/187, 0xbb}, 0x9}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/171, 0xab}], 0x1, &(0x7f0000004040)=""/4096, 0x1000}, 0xd45f}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000005040)=""/40, 0x28}, {&(0x7f0000005080)=""/230, 0xe6}, {&(0x7f0000005180)=""/197, 0xc5}, {&(0x7f0000005280)=""/164, 0xa4}, {&(0x7f0000005340)}], 0x5, &(0x7f00000053c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000063c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000007700)=[{&(0x7f0000006440)=""/235, 0xeb}, {&(0x7f0000006540)=""/185, 0xb9}, {&(0x7f0000006600)=""/195, 0xc3}, {&(0x7f0000006700)=""/4096, 0x1000}], 0x4, &(0x7f0000007740)=""/94, 0x5e}, 0x9}, {{&(0x7f00000077c0)=@can, 0x80, &(0x7f0000008980)=[{&(0x7f0000007840)=""/4096, 0x1000}, {&(0x7f0000008840)=""/202, 0xca}, {&(0x7f0000008940)=""/12, 0xc}], 0x3, &(0x7f00000089c0)=""/156, 0x9c}, 0x1000}], 0x8, 0x2, 0x0) ioperm(0x0, 0xd, 0x4000000000000020) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = syz_open_dev$loop(&(0x7f0000000100), 0xffffffff, 0x101002) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) write(r5, &(0x7f0000000040)='\'\x00\x00\x00', 0x4) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x6480, 0x0, 0x100, 0x30e}, &(0x7f0000005340)=0x0, &(0x7f0000000440)) creat(&(0x7f0000000700)='./file0\x00', 0x1c7) socket$inet6_sctp(0xa, 0x1, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 21m30.872669796s ago: executing program 6 (id=3770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0xe00, &(0x7f0000000740)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {}, {0x6, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7f, 0x60000000, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 21m30.703365131s ago: executing program 8 (id=3771): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000200)=@chain) r2 = epoll_create1(0x0) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000003c0)=@req3={0x88ca, 0x4, 0x3, 0xfc, 0x2000004}, 0x1c) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32314241}}) 21m30.670885967s ago: executing program 6 (id=3772): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1a}, 0x94) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x68000) syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socket$inet6_icmp(0xa, 0x2, 0x3a) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100003}) 21m30.382333348s ago: executing program 6 (id=3773): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b35, &(0x7f0000000140)={'wlan1\x00', @random="0300000000eb"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000000280)=0x3) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 21m29.861602729s ago: executing program 8 (id=3774): r0 = socket(0x400000000010, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000301010100000000000000000000008308000340ef000000f4f6ea38d282825d38efe6f20a9f08ed31f51624dc70e59db099c8a58bf10f0e1f4831572bf904d78aff04bcdfa1d66a478f6eebaf493c1f4cd19a267a4ff8a969d6479e5947"], 0x1c}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r5 = getuid() setuid(r5) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r4, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x60, 0x2c, 0xf3f, 0x4070bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x4d, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe8b4}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x1007, 0x4, 0x4}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x44080) 21m29.75291407s ago: executing program 45 (id=3774): r0 = socket(0x400000000010, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000301010100000000000000000000008308000340ef000000f4f6ea38d282825d38efe6f20a9f08ed31f51624dc70e59db099c8a58bf10f0e1f4831572bf904d78aff04bcdfa1d66a478f6eebaf493c1f4cd19a267a4ff8a969d6479e5947"], 0x1c}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r5 = getuid() setuid(r5) setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r4, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtfilter={0x60, 0x2c, 0xf3f, 0x4070bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x4d, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe8b4}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x1007, 0x4, 0x4}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x44080) 21m29.546946525s ago: executing program 6 (id=3779): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7, 0x20000) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x3000480, &(0x7f0000001e40)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x2}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) prlimit64(0xffffffffffffffff, 0x17, 0x0, &(0x7f0000000400)) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/211, 0xd3}], 0x4, &(0x7f0000008b80)=""/219, 0xdb}, 0x6}, {{&(0x7f00000007c0)=@qipcrtr, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001900)=""/212, 0xd4}], 0x1}, 0x1472}, {{&(0x7f0000001b40)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/50, 0x32}, {&(0x7f0000001c00)=""/111, 0x6f}, {&(0x7f0000001c80)=""/30, 0x1e}], 0x3}, 0x5}, {{&(0x7f0000001d00)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000008d40)=[{&(0x7f0000001d80)=""/171, 0xab}, {&(0x7f0000000740)=""/114, 0x72}, {&(0x7f0000008c80)=""/144, 0x90}, {&(0x7f0000000280)=""/5, 0x5}], 0x4, &(0x7f0000001e80)=""/187, 0xbb}, 0x9}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/171, 0xab}], 0x1, &(0x7f0000004040)=""/4096, 0x1000}, 0xd45f}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000005040)=""/40, 0x28}, {&(0x7f0000005080)=""/230, 0xe6}, {&(0x7f0000005180)=""/197, 0xc5}, {&(0x7f0000005280)=""/164, 0xa4}, {&(0x7f0000005340)}], 0x5, &(0x7f00000053c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000063c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000007700)=[{&(0x7f0000006440)=""/235, 0xeb}, {&(0x7f0000006540)=""/185, 0xb9}, {&(0x7f0000006600)=""/195, 0xc3}, {&(0x7f0000006700)=""/4096, 0x1000}], 0x4, &(0x7f0000007740)=""/94, 0x5e}, 0x9}, {{&(0x7f00000077c0)=@can, 0x80, &(0x7f0000008980)=[{&(0x7f0000007840)=""/4096, 0x1000}, {&(0x7f0000008840)=""/202, 0xca}, {&(0x7f0000008940)=""/12, 0xc}], 0x3, &(0x7f00000089c0)=""/156, 0x9c}, 0x1000}], 0x8, 0x2, 0x0) ioperm(0x0, 0xd, 0x4000000000000020) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = syz_open_dev$loop(&(0x7f0000000100), 0xffffffff, 0x101002) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) write(r5, &(0x7f0000000040)='\'\x00\x00\x00', 0x4) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x6480, 0x0, 0x100, 0x30e}, &(0x7f0000005340)=0x0, &(0x7f0000000440)) creat(&(0x7f0000000700)='./file0\x00', 0x1c7) socket$inet6_sctp(0xa, 0x1, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 21m28.622323093s ago: executing program 6 (id=3781): socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e80)=ANY=[@ANYBLOB="1c00000022000106050008001e000000b70000000000000000ea"], 0x1c}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000400070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021400000001c0a01030000000000000000070000080900020073797a31000000000900010073797a30"], 0xc4}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r8, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21m28.46071619s ago: executing program 6 (id=3783): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) socket$inet(0x2, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000004c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3010}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r6, 0x747}], 0x1, 0x0, 0x0, 0x0) unshare(0x2040400) signalfd4(r6, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfd, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0x2, 0xa}}}, 0x24}}, 0x800) 21m28.309712716s ago: executing program 46 (id=3783): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) socket$inet(0x2, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000004c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3010}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r6, 0x747}], 0x1, 0x0, 0x0, 0x0) unshare(0x2040400) signalfd4(r6, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfd, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0x2, 0xa}}}, 0x24}}, 0x800) 21m21.075065359s ago: executing program 9 (id=3801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0xe00, &(0x7f0000000740)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r6, {}, {0x6, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7f, 0x60000000, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 21m20.42972379s ago: executing program 9 (id=3803): open_tree(0xffffffffffffff9c, 0x0, 0x880) (fail_nth: 1) 21m20.271776091s ago: executing program 9 (id=3804): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) unshare(0x14070980) unshare(0xa00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x4000, 0x0, 0x44000}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 21m20.153885569s ago: executing program 9 (id=3805): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x1) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c03, r3) dup2(r2, r0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) open_tree(0xffffffffffffff9c, 0x0, 0x880) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 21m19.953816994s ago: executing program 9 (id=3806): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000fc0)=@newtfilter={0x3a8, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfff1, 0x10}, {0x8, 0x4}, {0xa, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x374, 0x2, [@TCA_BPF_ACT={0x370, 0x1, [@m_simple={0xec, 0x2, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfffffffa, 0x7fff, 0x8, 0xff, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0xca, 0x40000400, 0x1, 0x5, 0x95}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7dc, 0x10001, 0x7, 0xb, 0xb}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x3, 0x10000000, 0x3c}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x800, 0x2, 0x7}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x3e, 0x6, "66f824fe7ef0e8bd7c47fa6507fd9ef4e0e7c8fdebfd0296bd1a05b1a7c1274f5f343cbd93f2ac09290f109bafdfe476c0873785c2751ae23767"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x80, 0x14, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xaf53, 0xfffffe01, 0x4, 0xff, 0x760c}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x6, 0xfffffae9, 0x3}, 0x6}}]}, {0x17, 0x6, "11869a614d97fd705df9bac0d1916bd247b18c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x200, 0x18, 0x0, 0x0, {{0x7}, {0x100, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0xe3, 0x6, {0xfffb, 'raw\x00', 0x7, 0xb, "48c81ef138a4ab595382c5350324ef507eef70ff2fb25f34f7952a9e742a4349b11797c54a90dc121ba4d70e74b25df25398471c9eddfc537675483daeffb6729a818fd461012bc24e29ebbaba6f61034d405a118b67c9139c04caea838a5014816b32f10ce1fc8226bfb2930bceae7b5a7a8db59569bf2629c6261cecbb6394f0afa393cbb343d884fef301d7b99bc689df9daca21b8499160472a5d7568e977052955c4fc4b553ce2670b287765b362f354d4f9b259e0518"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffff9}]}, {0xdc, 0x6, "7e2d5dda25f1d971c30c526dbac217fe53a4d62cc105844ad4103aa01a9702e42cba65194058dec972c893a43a836ad2e8484e92e0c72d42441605080ed9a1cac88313da84245aead346659863dd4161f20ec8bdc74ad616c3563103d039fdb40c886466b1e7936a3ecf268b64ea38189f6f6b9e572cb4cdcb81839702fad2675e06baf6fa1b7a981f83b549ca29ae4b2b8278d57412ab0e68a970bfa486a78eb1d414929aebc36150a8b2931881449bd994ca72aa89bd6b026db0ad7f3e6bf485fe6441a9a6a9f035588ad4fcf3b15f69dbf0b0b335e112"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x3a8}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 21m19.752809266s ago: executing program 9 (id=3807): socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e80)=ANY=[@ANYBLOB="1c00000022000106050008001e000000b70000000000000000ea"], 0x1c}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000400070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021400000001c0a01030000000000000000070000080900020073797a31000000000900010073797a30"], 0xc4}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r9, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21m19.516372546s ago: executing program 47 (id=3807): socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e80)=ANY=[@ANYBLOB="1c00000022000106050008001e000000b70000000000000000ea"], 0x1c}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000400070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021400000001c0a01030000000000000000070000080900020073797a31000000000900010073797a30"], 0xc4}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r9, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 20m29.131316077s ago: executing program 7 (id=4030): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) fchmodat(0xffffffffffffff9c, 0x0, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 20m27.489117357s ago: executing program 7 (id=4037): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000380)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0xbc4, 0x0, &(0x7f0000000340), &(0x7f0000000280)) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000a11000/0x2000)=nil, 0x2000, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x77, 0x0, 0x0, 0x0, &(0x7f000083f000/0x3000)=nil, 0x3000, 0xc}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xced31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) read(r7, &(0x7f0000001140)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, 0x0, 0x0, 0x19080c2, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}9\xc6\x0e\xd9\v\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\x8b\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000280)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000000000c8d05300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r4, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) getsockopt$inet6_opts(r6, 0x29, 0x36, 0x0, &(0x7f0000000040)) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001814010000000000030000000800010000000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x8000) 20m22.721968295s ago: executing program 7 (id=4052): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7, 0x20000) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x3000480, &(0x7f0000001e40)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x2}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) prlimit64(0xffffffffffffffff, 0x17, 0x0, &(0x7f0000000400)) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000008b80)=""/219, 0xdb}, 0x6}, {{&(0x7f00000007c0)=@qipcrtr, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001900)=""/212, 0xd4}, {&(0x7f0000001a00)=""/225, 0xe1}], 0x2}, 0x1472}, {{&(0x7f0000001b40)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/50, 0x32}, {&(0x7f0000001c00)=""/111, 0x6f}, {&(0x7f0000001c80)=""/30, 0x1e}], 0x3}, 0x5}, {{&(0x7f0000001d00)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000008d40)=[{&(0x7f0000001d80)=""/171, 0xab}, {&(0x7f0000000740)=""/114, 0x72}, {&(0x7f0000008c80)=""/144, 0x90}, {&(0x7f0000000280)=""/5, 0x5}], 0x4, &(0x7f0000001e80)=""/187, 0xbb}, 0x9}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/171, 0xab}], 0x1, &(0x7f0000004040)=""/4096, 0x1000}, 0xd45f}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000005040)=""/40, 0x28}, {&(0x7f0000005080)=""/230, 0xe6}, {&(0x7f0000005180)=""/197, 0xc5}, {&(0x7f0000005280)=""/164, 0xa4}, {&(0x7f0000005340)}], 0x5, &(0x7f00000053c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000063c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000007700)=[{&(0x7f0000006440)=""/235, 0xeb}, {&(0x7f0000006540)=""/185, 0xb9}, {&(0x7f0000006600)=""/195, 0xc3}, {&(0x7f0000006700)=""/4096, 0x1000}], 0x4, &(0x7f0000007740)=""/94, 0x5e}, 0x9}, {{&(0x7f00000077c0)=@can, 0x80, &(0x7f0000008980)=[{&(0x7f0000007840)=""/4096, 0x1000}, {&(0x7f0000008840)=""/202, 0xca}, {&(0x7f0000008940)=""/12, 0xc}], 0x3, &(0x7f00000089c0)=""/156, 0x9c}, 0x1000}], 0x8, 0x2, 0x0) ioperm(0x0, 0xd, 0x4000000000000020) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = syz_open_dev$loop(&(0x7f0000000100), 0xffffffff, 0x101002) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) write(r5, &(0x7f0000000040)='\'\x00\x00\x00', 0x4) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x6480, 0x0, 0x100, 0x30e}, &(0x7f0000005340)=0x0, &(0x7f0000000440)) creat(&(0x7f0000000700)='./file0\x00', 0x1c7) socket$inet6_sctp(0xa, 0x1, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 20m21.665027154s ago: executing program 7 (id=4056): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = syz_open_dev$I2C(0x0, 0x1, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x2, 0x3, &(0x7f0000000000)={0x3, "7f4db02b9364453861def264ebcddff888df0437600c9212862e488cc2a19de8ee"}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x20000804) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0xc}}]}}]}, 0x3c}}, 0x24044094) 20m20.318928059s ago: executing program 7 (id=4059): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x285ec}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/179, 0xb3}], 0x3) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000f40)={0xcf, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000000)=""/105, &(0x7f0000000080)=0x69) 20m20.209542082s ago: executing program 48 (id=4059): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x285ec}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/179, 0xb3}], 0x3) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000f40)={0xcf, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000000)=""/105, &(0x7f0000000080)=0x69) 18m25.075152263s ago: executing program 5 (id=4599): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000014"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x239, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x7, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c6a0eb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x1010001, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd, 0x0, 0x0, 0x400000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000340)={'sit0\x00', 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r3 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) openat$khugepaged_scan(0xffffff9c, &(0x7f0000000500), 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}) io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 18m24.568807103s ago: executing program 5 (id=4600): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), r1, 0x0, 0x0, 0x1}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x801}], 0x3) 18m24.563103363s ago: executing program 5 (id=4601): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2000001, 0x20010, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x26, 0x7}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1, r7, 0x0}]) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100)=0x7ff, 0x4) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0x5b, 0x0}}], 0x800000000000214, 0x20000001) syz_open_dev$tty1(0xc, 0x4, 0x1) 18m23.48082637s ago: executing program 5 (id=4609): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), r1, 0x0, 0x0, 0x1}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}, {&(0x7f0000001480)="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", 0x801}], 0x3) 18m23.480319263s ago: executing program 5 (id=4610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xb4}}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r1, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f6fecf0", "53c272d8b763f690b35605dff8a4a8d2", "44000100", "72392a24199b5903"}, 0x28) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) lseek(r2, 0x0, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x35) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0xa, 0x4, 0x0, 0x0, 0x4) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000080)='\t', 0x1}], 0x1) 18m22.520502943s ago: executing program 5 (id=4616): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) (async) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff007f303030"], 0x41) sendmsg$alg(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000e00)="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", 0xfc}, {&(0x7f0000002300)="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", 0xf12}], 0x2, &(0x7f0000001240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x8801}, 0x4000001) 18m7.507842494s ago: executing program 49 (id=4616): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) (async) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff007f303030"], 0x41) sendmsg$alg(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000e00)="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", 0xfc}, {&(0x7f0000002300)="efc738a16cc28c4946440ccbad4a5f1d56d06c415fd74d3f7ae7fede9df25861ac370f6d867d6672f8e7024df494ac35bd04b35f68b11663b146746ef3f58b12cfd7cd648c12a75f123d9cf5f9c10bcb48f942b34db9fbddcea5e0c3999da708bc472cd687c8f27748d1839e219628ad9687678201b445a59e0da96ecd38c0ce8bca1acbc78f9a3335e5db0eb0cd454006b4e3a5988e038b05322dad026df32c378b20fd75460e1205020d105c5115d2893e413b8b80e36946d011863b5a21472f1bd0d48b0c58211aff50a91e31112d632b56886d75ee84f49ffe015e33237150d3a3c4d871d348fa8e16f94c9e9d1e08d37c8b58f05f1a7c7133aae433f4564b8120d926c8ed8945d774620ec50deb1b3de7e66655d52f397f1811a024d870a4be151a15908b871992af52db41a28cb43633e1f9727e5373e318da8155d3e00b5b5eb28da52e8d364ec5de7614d8fd52401a6367e32464752d7379aaee4b08445ab9ca96663e47584d7470acf0312c545ffcee66d1903bc965caf4d66faf0c8e82ce4bd9c769d3440aca255e97c95a9810f33244d3963ec5610d0dcf62394ba8241351909acab1c154d1796ab44f683a08b307cc1905573642f6b2ef46e764d7f6d692de0fdefe6363a586f50d385e14b5b4209fd4efd93668ef020eaa8e3a70e6511438f81a2e6236b90628ac919ba9eeb04a9fd736a2681489427fa2fbd7f9fe559db1070fe3876e3217626fa811af2b2e3efb3587b19460f885c277e81a94277bbd3f19d4427538a4d93185e6647c4b8ffba034fe43e288dbb2eaf46299255aa246eb720a58224fc8490ed19cc40edd59552ec36b4645edc4e72e4c0ec8c48be18626f32c6aa982f821c40a0ba2d9b19c18a2e3a6b82e562c11620551de6364cc836ccd438823cbb2be8883a46d1141e136fdef2b1b19b879bd1be9a9993265758044ec33a87c625607ceda2e8245ebd7610b8c779957a1186a1611bd0caf66de3bcfbe904e28bae0174818f47eec3e79d74624b57d0b0dd173bfb5dbc4292e817bb03a0725bf11769fcf53ea95ef538be9a33c841f618fe4bc731cd8c826caec2691aee93ca57624e693947484163b3ae01d947155b499f56d7283b7d82c8000ba4a5457a1b1e40a17b7d4a54b45ebb0e8322e9dc9e2743a030c54f637381f10676d747cf8d1f982285187126b6da1e6fb374a8d87c956f9ad7c0328e8452fb6801e1c4db11dba4fd3ac3c382a05ab7148dcfb2266eac19399469c7aaf60eecbb1a92d6abf4bdda90752059106149645c6f5ea20b66c3ca634145c64b0c86ff46edc2b7d6269df97efd2f3e6fcda4cc9dc636951a9d6f0dc01f51ae273dcfeb66ec749d3cfe7cb11c45a473e126cab55450c5ffa59b3f3afb686f8258200bb8a529faff7f988d632300b890f73d51c60c64f4679cd86cc1f4602089f93ba03a51c846eed467432084f71c38413d0d9d1b83f9605207e9b28142d7bf94c7aedcd19f0fc93d4b95a1fea7babe2cb8de1a1a08f3a2d8d0aa1e718c1460e15329700e9e14c5cffff9c7a62b09df0a025e96ab03fa316e50d5b3b01ca4c5e0c6ac23f9703462e14f5fb6d5c1c2514d714746db1b5a5cee1111640114a9556cc518168b161b13e989e8f9ac51e2c01f7fbefea6ce6a8714c47279093fbb59fb760b7dd3138004343063485b506b120728d22c422324871c34f2dc7c53ce0bbab87bcd3efcf8fd4fa2bce12a10b00bdbb24791758516d02012613dd74caac26a176392ec11250e81d2566b2373a2b6536c3e2f28742cbca11b201934d19b42241d94a9da5b282eff530ddd3ed20318be47e9264b0a8fb0745e78c9c1f612ed03479ae14a176cfe52edb5eb2712c21fae58bf4c4143da57a9ee28acede9f56700bfa0f5c51da975fec9f8141b76cacdbfe69be80a325666cbd8fe458ed7f8965166b120ffb5e28dfbb5b3141cf963fd07548a4a35d2c749ce3adea69e0e0d4fd4158142fb7050d477fc51b2ef7e6f0e09cb8016a9bdfff7a200cd992a71a156339160b5757e163a14246c94fe11a0e210c5946b3147bc6870c9900e102b82e9a66a243a2e23e7ff98f7d9f017301740ac157f804afebf2f5bebbbf68583d86b01daaf02bc086bc2c4ddecf1a30795cb23a37bcff24ac3307545acc9bc7949edb2ea5b851ceb3bf2d34f049f1664100b0fc8ea326000e032bc5e50cdec80803a468e334002cfa7ccbef11f951f7679f403ce0cff42101702999218a15396952a3faa0154764c4359f037414bad967afca45285bd5ab985364e6b8bec744c00b3f95010eda041112ace0f09833c9b1049c36f03cca4e9264485d5784466e4b908b4b6216bd935abf49553dcdd4e48bc39f8b22f9b4bef1339b5121ad34ef3df4051333b8ea4ce83cff7abc863c43440ab6892281bc96fbf848ae9e82cb1a2d791b8bcf98ddb65baada7c08075dfe27cd06aedb0ff458880d600ba5bdb14c0858415c43c0aa6660298a944d568487853e7dac0c955d1268f70874756f6316e6181313f215ed3724ef760d89df82a178b51169506ada831725827c62b80f2e47fdac38b86192f68fe2fe5794f7adeac9c5bfc9e1fa8d5199fd7df202ee6e1ba38d40b7750f900771ea8e4f00d4c25065cf8867dc929c892f8e4652040862d48e8af1a48fc500882e874995c48cace7754bf0be2765be83001958946c8cb794f8813816e505de401d789223bc0af5739045751640272afb39d45d2be00cac743bfbce9a9a7f4b8f55511f3ad26264a09c19f26ed1b45b0fb254f98e5e1473bbccaa21219b327d1bbedab4a4dfdf516259feef632f72f5092bf78d886772e73ed2250f5ec20ac6fa66cf8c2626d3b5973ce9f4f95ead5c8a65db49966de0fd9e9ce97894b764ec3f75093a4f3ec4507e2507256c59a52969fdabfc100e6ae23acf121bb3acf34d190211b4001b632b10a252be0430bd107ee884a0ba16fc50eb717ae36aba0dbb130dc64b5cc21d1fe87856c8787474333c3a793fe81c9b9b56ee41fd2e1f2d6150495dc3379bf66fa4d53f868047b6c50f8c5a4c2ea2a355b5eb1ab3d3f32791b9ffcb08698dbe841f3338be19e5d927dfb14711b4aed2435fc53340162c878bee30d9d7d2409be614240540f7f5702be3e2ba38d8f999a624acdcaef37dabb86d225f35e92691de25bf68e0115e6680107f07380b28254e9df2e54a5179ed064fc9744dcb553b56720171b0325876c9b82d0120add35ac3f38b41fc28b149f944c66555051ca92341a953739a1674fae837bdb8d8d10adf7ef74092f505375c8414d82805176b680908d5c0f6c2a14bd526631c5abeccaf3469e3ae01c4db2371a77219ee109a83d62aef26efff181f240a163bc0cb253405018b69ba8d62ac582cb186c8c89e3c140bffaa4d99fab17975ccd925efab24b6a181773fe1daac55f18ab1e0264f8d1f7aabe395ce80792bb77cbd0b58fcd928ad74f0342876e098c93f9611887022a92e4d9b1da9c911bb7d762bdcdba36f749e16aad0bcf6f8596b2b50fc65a6811b709d9ad6593c2eb9867af3a276de26d6a6f87ec5173ca79e88122bf5151e98dee268fc8a79a4e83f2427a02ed702b0926ecf0b4bb1a3051f0a4d3cf31038fb600c7eb0cedc0d59ac99bff3b31a9065efecca740fcd948fb9c2eb6197b8226c397de7a4c268fa41877ca1618f77ffa93b2e17348301899bb1a5b389422d7364eb1e5ddd0daf2065894cf10886ce0d3920c0a283de54ec57942d456579851ca3590c26f8c360b7cbaa0328c29532aad80b2627b25641e613b38a2accf5881bbbc7086085a8fcf25895da9244c7dd773bff995e159ea3899487f202d97f2977e4527f75ec64a85cb21b120828b2ac24c711ea2b7cba4b0a195a1840aec7d34a4745b42596f186820584b4b75af29fba5b6d3623718efeebf52e848fe48160fbfd5a0f6511649e3e1c58e599c6d9c7597e5e12227e281204921819fbf9e0c9bd16d598aec601bbdc87e8d94225368cb65da83cbb722d79957a7c0bcea91a45f9b52558ccdcd2754da40fc0fbf78abd06c05f1fc7381eb06e4a0afcca6db7cace72aaacdf498cf9ca42c9b3c6615d9df167ef2d1b868e56a9652beea2f72530f24fe373333d9a524ed48e52e51d3784649a9b9a9f1cfdfabd3cdf832b2dda019bb4e1e1e71e75f88cbc3a16a6848ac2385024abb76249841f630008f3805462604d65eebf4e14b6c2ad9f9e2dc2a5a55d7ce5dde8307ac655b4dfcc99d0f050e838d310957915b4fc838f26f2659d72f801e8c62c6477cc33d7f60e659881422ddad61819b93f0f7817acab429b3c7d3923abce00993ada7fd7e5987cab4f4aea02acabad3f27f223c0108f44d8d5833932b4eb427f83f7b336f214293f8adc0ed2cd45d792cc69a84e01f6fe7020f96cd05c1dd792f30f1dec2c21ecf00ca956e4a2c71b52b1c298ae6e319cf845b97b60e07ab82afa30ffe94c16efb971959951746edde9639bb055feebe25611b595e23cade8420a2ee207977ab47dd559f09d17823e6184f83c44b881e4baa5d9abd6e2f8156a1fff943e61eea0e9b2fe26236e8288c5116ae9a8b0f110794f629c800d08729ea2000d56dbe404a747c149b7890bd6ac91319200b7078e2e039a29f45ffac3ecbafbc8b00db9f2e8eeb92ebf0a494bd4616925c9b289522c76f87d2c73342db85cc9a3ff09ae84c2c4b3618ba220bb6442968d9ae9eec02e577412fbedd827678a320b7dd8503d0bab20ca7fe7d982330506fc38eaaa6f1cde45377b08f0b66590b75fd6d390da80d01bf6c6dfc12f3b31312b75d1c6e8c6b86527b4f7c5464465b655b1c76a2b7dc202cf50f88f41bae5d7b8e8c38f3b254628f2418e2fe00b63f8162c60cd95fc9b0b6bba3a0989bbb858d2f1c892713e3bdc1a50bddfbb5c11f242464183ee9b85734b5683c242a264ea415df1284ffd87a36516518a09171cbad0149753e836aa41b27ff441460cf0f0d59ca9c1023b2bac5be5512827d4a64e6d7283e335682f9f4e0ad5471839e447b803c6b43d7daa2709536bc2ab955880cd25d1a50aa78fd646e31b3382426e1e77429d37712968223046698b51362b974a6c6782bfb17f40ade50c82523c1c87b59ba4cab6db7ea321b345133ef90039ddf3465043f05e0c1f0d9322aaf67408cf0c81162c17fd0a3fa195df5b6916b008110e4d713810a268d360a4056d36887765410b420101fc35833c3b0ec5b1990eaafdedcec60154fbbf8665c2ad750b4717235f3eb5f508dbc8d8119b7ccad544ff12b4837de891c0bc17d8316d1faaa1b178de7c335501d42cd03cec3cd364d48d73e1e1c19320f5d9842f746cb3cc10ce0079a9faec3f23ee2cdc84503bd2f86c175d3fd7951c4a7267908aaccde39326f4689eda42da763103ebb2383878851af1679def7bd14a78d6f387bd004229", 0xf12}], 0x2, &(0x7f0000001240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x8801}, 0x4000001) 1m11.841233659s ago: executing program 2 (id=8536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, 0x0, 0x0) 1m10.625701936s ago: executing program 2 (id=8545): syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/hardlockup_count', 0x200000, 0x1c) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x10, 0x1, 0x80000001, 0x4, {{0x1b, 0x4, 0x1, 0x3e, 0x6c, 0x67, 0x0, 0x5b, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x2f, 0x1, 0xb, [{@multicast2, 0xfb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa9}, {@multicast1, 0x9cb8}, {@loopback, 0x8}, {@multicast2, 0x4}, {@remote, 0x5}, {@multicast1, 0x7}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x95, [@loopback, @private=0xa010102]}, @timestamp_prespec={0x44, 0xc, 0x38, 0x3, 0x3, [{@private=0xa010102, 0x1}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@dev, @multicast1, 0x0}, &(0x7f00000002c0)=0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) mq_timedsend(r0, &(0x7f0000000680)="931f090d9f9a7991b052e79a97fac0ad48eec18884e72b1cef6cfcea0e4ab084126bfe896df0410cb1873f7f2fb91c2ee01e44e0eb1a241b05c5e2f8818af215e19e9527cd9b3c779a13ae716a0733758c0508b3a5e0c08f94880961198fbce6c0cba1bf22ef7bde004335611325542b6ed1fa79bf6ebb8328edd00636cb55d4411bef0f76788b7b8599dafb5c0b4ed5a1c52220da5530513b486ea16fe04ebd42eeeac9303fbe59464600fdb4463a", 0xaf, 0x2, &(0x7f0000000740)={0x77359400}) sendto$packet(r5, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x10, 0x40, 0x8, 0x41316a56, {{0xe, 0x4, 0x1, 0x0, 0x38, 0x64, 0x0, 0xfb, 0xd043f89ec241485b, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x1c, 0xd4, 0x0, 0x6, [0xf5, 0x100, 0x8, 0x8, 0x2, 0x3]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000003c0)={@private, @multicast1, 0x0}, &(0x7f00000004c0)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x40, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r10, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r9, {0x2ee}}, './file1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r15 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB="cc010000", @ANYRES16=r1, @ANYBLOB="000425bc7000fedbdf25150000003800018008000100", @ANYRES32=r2, @ANYBLOB="0000020076657468305f6d61637674617000000008000100", @ANYRES32=r3, @ANYBLOB="1400020076657468305f746f5f6272696467650008000100", @ANYRES32=r2, @ANYBLOB="840001800800030002000000140002007465616d5f736c6176655f310000000008000300010000001400020076657468315f746f5f626f6e64000000080003000000000008000300030000001400020076657468305f746f5f68737200000000140002006d616373656330000000000000000000080003000300000008000300000000006000018008000100", @ANYRES32=r8, @ANYBLOB="1400020065727370616e30000000000000000000080003000100000008000300030000001400020065727370616e3000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="3000018000000100", @ANYRES32=r14, @ANYBLOB="080003000100000008000100", @ANYRES32=r14, @ANYBLOB="08000300020000006c00018008000100", @ANYRES32=r7, @ANYBLOB="080003000000000014000200697036746e6c3000000000000000000008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b4367a26", @ANYRES32=r3, @ANYBLOB="14000200687372300000000000000000000000000800030001000000"], 0x1cc}, 0x1, 0x0, 0x0, 0x40}, 0x24008080) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB="0000000002000000000000000000000000000000a4ec5065f20da9769be61002dc77643dc63123d504fa44d3ccdcfcf093674749493c9525c27dd1c27bb7ba491275c37090b904dd4a0bb678906134da3af937cd1a3fed79d5e01431d51c92765c144233a22c8bdd598838a812cd9a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r16}, 0x38) 1m10.51240057s ago: executing program 2 (id=8547): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000198500000071000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x5000000) 1m9.843471669s ago: executing program 2 (id=8551): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0xffffffffffffffff, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r2, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x90, 0x0, 0x9, {0x5, 0x0, 0x9, 0x8b, 0xf5, 0x1ff, {0x3, 0x2, 0x2, 0x7, 0x0, 0x80000001, 0x7, 0x641d4d1, 0x6, 0xc000, 0x6, r2, r4, 0x57c, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m9.396455019s ago: executing program 2 (id=8560): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) syslog(0x2, &(0x7f00000007c0)=""/4096, 0x1000) 1m8.314788986s ago: executing program 2 (id=8557): socket(0x40000000015, 0x5, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x6) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') readlinkat(r3, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240)=""/65, 0x41) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040ed5000410"], 0x11) 53.001441181s ago: executing program 50 (id=8557): socket(0x40000000015, 0x5, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x6) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') readlinkat(r3, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240)=""/65, 0x41) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040ed5000410"], 0x11) 43.960964347s ago: executing program 3 (id=8634): setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r2 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)={r1, 0x2}, 0x8) r5 = gettid() socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(r5, 0x0) unshare(0x2c060000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x3f00, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xfe}}]}}}]}, 0x5c}}, 0x0) 43.51566323s ago: executing program 3 (id=8635): prlimit64(0x0, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0x38}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$alg(0x26, 0x5, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000540)='keyring\x00', 0x0, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = openat$nvram(0xffffff9c, &(0x7f0000000000), 0x10000, 0x0) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffffff8}, {0xa, 0x4e21, 0x9, @remote, 0x7}, 0xffffffffffffffff, {[0xeba, 0x80000000, 0x9, 0x401, 0x8, 0xa, 0x0, 0x706]}}, 0x5c) r4 = accept4(r3, 0x0, 0x0, 0x0) write$P9_RLOCK(r4, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) openat$vmci(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) 42.129561252s ago: executing program 3 (id=8637): syz_emit_ethernet(0x884, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x84e, 0x0, 0x0, @private2, @local, {[], "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"}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000010"], 0x7c}}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x119) r1 = socket(0x18, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)="0000000000aa303e97380e90231bdbdaf6a4bd865726b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d0c", 0x5b}, {&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a8da494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c841d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99ad4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a000000007dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d455bae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a950000000000000000000000003e64c8a48ae215673b928d238ac07b631e793d2bda33a80dfaaf53e6c2dea09fc29a42d2495c4192860e2866615008f74ea070c55f", 0x426}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 41.654740616s ago: executing program 3 (id=8638): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001000200"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380), 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002a00)={0x1368, 0x35, 0x1, 0x0, 0x25dfdbfc, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r4}, @generic="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", @nested={0x121c, 0x9f, 0x0, 0x1, [@typed={0x8, 0x118, 0x0, 0x0, @u32=0xfffffffd}, @nested={0x20c, 0xde, 0x0, 0x1, [@typed={0x8, 0x12b, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0xc0}, @typed={0x8, 0xe, 0x0, 0x0, @fd=r4}, @generic="4d61f1efdb12202836000d1faf9491a26795eecd3991c2305aedaf79619356f15ed80c99d319715be8f17c00d23b84dcc5ce953b071382005fadc6fed75331fb4756664291387cbffaab012871e7ed72dd17c7b87aed935b27", @generic="9be06f3aa51435323078dc79779b9183bfafe154daebe3e57589941be55982d634519d99aa02beb5f746ad45fedd0644e0e67b09cc1059a13161f64309327d3fc59eed91e278a5a4f7e201a61983f3ecf79c49facbaea6926d97d0e807c7f6bbb5b58773fcf928cacadb4d9292e93559f41eca7603f6c9291f71217d2ab5a7a76b983a464bfcac49621887b86a251ae31f17974a8a7a84f16f22e49dc7edca42b997decde5ccc030c718df14804231d2e79c537b4393ab8311b256791428c3d5f6c4494aa8e91319", @generic="01b34f57c7cc79ebb2020e4e60f0bffafcb2ce2050f9d85e60695bcc5d590f2d5ddd8b63f92a327e4c7a064f8a5008d172108c4a4fba83036a50deab98d18fe1c8d8ab23a7b6e64204859af2d0aad08a4ba7204d52009694775895402275e0f0a71810913917bb957e0d5970fcb4b944bdaea2ece03c2abd9aff5423cfd035859e4e08de6e81fdbeac075438879f58966bbf2cb61f45fd5bd99f77a9fe7574be4db2288048006b5c1033df88f546830f4150f189a4c5ba9383dd9fcc6d7c6c42eae757ff25f8a7d6eb0d352ae57c68e36ff21d"]}, @typed={0x1004, 0x1f, 0x0, 0x0, @binary="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"}]}, @typed={0x8, 0x131, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0xb6, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xc9, 0x0, 0x0, @uid}]}, 0x1368}], 0x1, 0x0, 0x0, 0xc0}, 0x4040000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x11, 0xffffffffffffffff, 0x0) (async) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) (async) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) (async) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000008c0)) r10 = dup(r9) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000040)={0x0, r10}) (async) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000080)=0x4000000) (async) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r7, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './bus\x00'}, 0x6e) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 38.554180665s ago: executing program 3 (id=8646): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0xf6ff, &(0x7f0000000400)='usrquota') 38.265394562s ago: executing program 3 (id=8648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) eventfd(0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x5) accept4(r5, 0x0, 0x0, 0x80800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x4) listen(r2, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10, &(0x7f0000006680)) epoll_create(0x8000) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000480)={0x1, 0x0, 0x1000, 0x0, 0x0, 0xa7, 0x0, &(0x7f0000000080)="a0a79304091c2425653f09f844a698cb00ec45e0e27c1ebff3f5e894999ae73413b1284401243df4e04e96e2a71a6299f0a651d1ca5df847bc3250f4bb80dbbd5db72590ea9a00cda4e41ea14386a64f8b86e10e18c14e84c56400fbf85e2cecbe35bb5d9c708a56f55937020cff4708bba70d0348c46f8f3ebcb14427ae5cdabccc7146fa45aa2cab5406c140b28b2245a6b9944985b025726db60dc4875ade44a279cf0f2db0"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 35.019607717s ago: executing program 0 (id=8662): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x5) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x9, 0x9, 0x1000, 0x7, 0x5}, &(0x7f0000000240)=0x14) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000280)=r3, 0x4) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0684113, &(0x7f0000000140)={0x1, 0x401, 0x5, 0x80000001, 0x200, 0x12, 0x4, 0x3a, 0x9, 0x979a, 0x8, 0x5}) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x7) 34.08383025s ago: executing program 0 (id=8665): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000040)={0x9, 0x2, 0x5}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r8, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 33.71581952s ago: executing program 0 (id=8667): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) syz_open_dev$media(&(0x7f0000000100), 0xe, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0xf5, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f00000000c0)) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000300)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x2, [{{0x2, 0x4e03, @empty}}, {{0x2, 0x4e22, @remote}}]}, 0x18c) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000740)) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000400", @ANYRES32=0x1, @ANYBLOB="a54f15c5c9a6f931fdff830000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000400000000000000000000000181100", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002a80)={0x2020}, 0xfffffffe) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x101}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r11, 0x84, 0x78, &(0x7f0000000080)=r12, 0x4) 30.25882367s ago: executing program 0 (id=8675): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de8ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac5a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3f0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b251fb555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbce5e911453b9e35e5b2a0390ebeb084988880a7b07435188680ce166b8858f00876c191fd4df2c32440ddcce4410199080009ad86d35168a442cfb9d399172c436a744649c810ce30505348d6f7bc87f0c202ab626acfaf0c732a3536fd46796b1bb6a2217834db8066789735a67dc95c679d02e0eaf743911bde21ffe0b6ccda73dee5694020544392d0538a8075706b26b2680555bd5dd1b4e2f59275c02372ff99d5f1066d018016c43541c6374be429d483f513c84a7dc1aced670625a93082a9bfaa86b2aa73ada8945b088d9ec0aa549a8ec8e50060fcace5e89ee1ffc1dc0f8a87"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000480)="b9ff0303000d698cb89e40f086dd6000000e00003a00630677", 0x0, 0x100, 0x2000000, 0x1b, 0x9b, &(0x7f0000000300)="6a1e7f0d37117f112c27fb0d0016da982294f7ff5405320eb34590", &(0x7f0000000540)="006f3ca80567ae00f39ce606db143318f6fe95d622cea7ecdde41a713d8056b5fce801e4f7d29e97abe722d0ea71d378700fbb1ed677412d3c5bb8404e3c82421f02ca52123089a6b36ee6af96abfe7b411befdb4bcdf5d055db13e5f750f51577f75227b204cbde83d508723af76b6bd3ce71db6ddaedb741be8dd0f45bf75eca2f87e39fcf3ac47776355de70ceb5e8b6d7ea5219636157fc4b0"}, 0x4c) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, &(0x7f0000000040)=0x14) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYRES8=r3, @ANYRES32=r3, @ANYBLOB, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000180)=@multiplanar_userptr={0x6, 0x2, 0x4, 0x8, 0xf7a4, {0x0, 0x2710}, {0x5, 0x0, 0x1f, 0xd, 0x40, 0x5, "ff9403d8"}, 0x5, 0x2, {&(0x7f0000000400)=[{0x80000000, 0x6, {&(0x7f0000000100)}, 0x1e52a225}, {0x8, 0xff, {&(0x7f00000002c0)}, 0x1}]}, 0x4, 0x0, r3}) socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100003}) 29.500605765s ago: executing program 0 (id=8678): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000002009502000000000007ab2a2cc31a1dca8d7e"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$ptp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000040)={'\x00', 0x7fff, 0x2, 0xfffffff9}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb4}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x0, 0x400, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in=@initdev={0xac, 0x1e, 0x2, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xa8}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}, 0xfffffecc}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd22, 0x70bd25, 0x70bd29, 0x8, [0x9]}}]}, 0x154}}, 0x0) 29.156960721s ago: executing program 0 (id=8680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close(r0) 22.848665873s ago: executing program 51 (id=8648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) eventfd(0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x5) accept4(r5, 0x0, 0x0, 0x80800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x4) listen(r2, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10, &(0x7f0000006680)) epoll_create(0x8000) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000480)={0x1, 0x0, 0x1000, 0x0, 0x0, 0xa7, 0x0, &(0x7f0000000080)="a0a79304091c2425653f09f844a698cb00ec45e0e27c1ebff3f5e894999ae73413b1284401243df4e04e96e2a71a6299f0a651d1ca5df847bc3250f4bb80dbbd5db72590ea9a00cda4e41ea14386a64f8b86e10e18c14e84c56400fbf85e2cecbe35bb5d9c708a56f55937020cff4708bba70d0348c46f8f3ebcb14427ae5cdabccc7146fa45aa2cab5406c140b28b2245a6b9944985b025726db60dc4875ade44a279cf0f2db0"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 3.121981215s ago: executing program 1 (id=8720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0x11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 2.839459583s ago: executing program 1 (id=8722): sendmsg$unix(0xffffffffffffffff, 0x0, 0x984e45ff733bc95) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0xa0, &(0x7f0000000240)={0x0, 0x89b8, 0x8, 0x0, 0x133}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) ptrace(0x10, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.381297065s ago: executing program 1 (id=8723): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x102, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x20, 0x11, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x0, 0x10}}, 0x20}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0)) r1 = socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000280), 0x20000, 0x0) syz_usbip_server_init(0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x18) landlock_restrict_self(0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x10000a0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000d80)) 1.406223322s ago: executing program 4 (id=8724): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0xfce, &(0x7f0000000340)={0x0, 0x1003c93, 0x8000, 0x2, 0x3d8}, &(0x7f00000003c0), &(0x7f0000000400)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001240)={0x4, &(0x7f0000001200)=[{0x0, 0x8, 0x1, 0x2}, {0x81, 0x95, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x10001}, {0x119e, 0x9, 0x7, 0x3}]}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000004740)={0x1, 0x0, 0x0, &(0x7f00000046c0)=[{0x0}], &(0x7f0000004700)=[0x9]}, 0x20) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r4, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x70) read$snapshot(r4, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000140)) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0x2, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f0000000180)=0x4) mount$bind(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300), 0x2140000, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000000), &(0x7f0000001340)=@v2={0x2000000, [{0x2, 0xc}, {0x7, 0x100}]}, 0x14, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x3, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x40305828, 0x0) ioctl$KDENABIO(r0, 0x4b36) 800.186112ms ago: executing program 1 (id=8725): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x13, 0x4f, 0x1}, 0x14}}, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0xd, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20058000}, 0x400d0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r3, 0x4b46, &(0x7f00000000c0)) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x40) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000480), 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x1ff, 0x9ff, 0x18001, 0x5, 0xd, 0x3, 0x6b, 0x0, 0x0}, &(0x7f00000003c0)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000400)={r6, 0x4}, 0x8) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RSTATu(r7, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f01, {}, 0x0, 0x0, 0xc, 0x401, 0x1b, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x265) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f00000004c0)) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r8, r8, 0x0, 0x40000f63c) sendmmsg$inet6(r2, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 601.348686ms ago: executing program 1 (id=8726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) syz_emit_vhci(0x0, 0x7) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) 428.024001ms ago: executing program 4 (id=8727): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket(0x11, 0xa, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0) (async, rerun: 64) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xce05, 0x800) ioctl$EVIOCGABS0(r2, 0x80184520, &(0x7f0000000080)=""/177) (async) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000101000000000000", @ANYRES32, @ANYBLOB="00070000072bdf6406892d4fdcadb10000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xffffffffffffff2c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x19, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40f4, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0x50}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r4}, 0x10) (async) sendmmsg$sock(r0, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x71f2, @empty, 0x101}, 0x1c) 282.422862ms ago: executing program 4 (id=8728): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 265.875606ms ago: executing program 4 (id=8729): sendmsg$unix(0xffffffffffffffff, 0x0, 0x984e45ff733bc95) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0xa0, &(0x7f0000000240)={0x0, 0x89b8, 0x8, 0x0, 0x133}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) ptrace(0x10, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 81.116398ms ago: executing program 4 (id=8730): r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) read(r0, 0x0, 0x0) 59.023372ms ago: executing program 1 (id=8731): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pipe2(0x0, 0x10000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020000ff", @ANYRES32=r4, @ANYBLOB="080002007f56cd1c8b450001"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'veth1_to_bond\x00', @link_local}) syz_emit_ethernet(0xd2, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbfd137b07daa786dd65000000009c1100fe88000000000000000000f54e586251d57b2d000000000000000000000000014e204e22009c90780100000001000000627101eacc10ca6d093bd4577d5d2ae087978621d37488ae86b19d606fa27133f3d48c2a6ff47404661725fffb72fab0704cd53365f4a6bf682a93433a6db658c01fe85934b1ad810abc525a7d95d97c0cadc8c751ed7ef36e3db46bb501bc122f9983a006facab04d9fd416645c6bc6031b2570cdcd5f1d9c4c55ec153ce1c27a9aa07b66137c6249b87d42"], 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x6003) ioctl$BLKROGET(r6, 0x125e, &(0x7f0000000480)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c000035c7bbf60003e6ffff01000b00"/39], &(0x7f0000000300)=""/133, 0x27, 0x85, 0x1, 0x1}, 0x28) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800100b, r9, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r9, r10, 0x0, 0x4) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000280)=0x1, 0x4) r11 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) r12 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = syz_open_procfs(r12, &(0x7f0000000140)='personality\x00') preadv(r13, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/207, 0xcf}], 0x1, 0x10, 0x402) 0s ago: executing program 4 (id=8732): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000014c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf250100000008000100000000000400048008000c8004000b800800020001000000200108801c000780080005000000000008001c001c870a5c080005000000000024000780080005000000000008000500000000000800050029c8"], 0x150}}, 0x0) kernel console output (not intermixed with test programs): r after parsing attributes in process `syz.3.7665'. [ 1963.476843][ T9115] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1963.564370][ T9115] pim6reg: entered allmulticast mode [ 1964.311286][ T9110] pim6reg: left allmulticast mode [ 1965.332097][ T9141] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7687'. [ 1965.423825][ T9143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7687'. [ 1965.914143][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7691'. [ 1967.171852][ T9163] sctp: [Deprecated]: syz.0.7695 (pid 9163) Use of int in maxseg socket option. [ 1967.171852][ T9163] Use struct sctp_assoc_value instead [ 1970.343520][ T9234] batman_adv: batadv0: Adding interface: dummy0 [ 1970.380639][ T9234] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1970.475670][ T9234] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1971.129670][ T9264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7735'. [ 1971.139069][ T9264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7735'. [ 1971.994188][ T9275] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1972.245009][ T9279] program syz.0.7742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1974.413135][ T9315] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7753'. [ 1974.441135][ T9322] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7753'. [ 1976.573207][ T9353] sctp: [Deprecated]: syz.3.7769 (pid 9353) Use of int in maxseg socket option. [ 1976.573207][ T9353] Use struct sctp_assoc_value instead [ 1977.231403][ T9363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7772'. [ 1977.252793][ T9363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7772'. [ 1978.823995][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7782'. [ 1979.907776][ T40] audit: type=1800 audit(1767023045.872:20515): pid=9415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7787" name="nullb0" dev="tmpfs" ino=1315 res=0 errno=0 [ 1980.344576][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7795'. [ 1981.205993][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.209503][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 1983.450276][T29207] Bluetooth: hci1: command 0x0406 tx timeout [ 1984.642267][ T9465] siw: device registration error -23 [ 1984.851701][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7805'. [ 1985.401323][ T40] audit: type=1326 audit(1767023051.361:20516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.2.7807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1985.444108][ T40] audit: type=1326 audit(1767023051.391:20517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.2.7807" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1985.488297][ T40] audit: type=1326 audit(1767023051.391:20518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.2.7807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1985.522038][ T40] audit: type=1326 audit(1767023051.391:20519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.2.7807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1985.547468][ T40] audit: type=1326 audit(1767023051.391:20520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.2.7807" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1985.592492][ T40] audit: type=1326 audit(1767023051.391:20521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.2.7807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1985.650597][ T40] audit: type=1326 audit(1767023051.391:20522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.2.7807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1985.702543][ T40] audit: type=1326 audit(1767023051.391:20523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.2.7807" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1985.743644][ T40] audit: type=1326 audit(1767023051.391:20524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.2.7807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1985.802436][ T40] audit: type=1326 audit(1767023051.391:20525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.2.7807" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1988.661400][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7832'. [ 1990.752549][ T9583] siw: device registration error -23 [ 1990.997354][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7848'. [ 1991.571641][ T9597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7852'. [ 1991.990605][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 1991.990624][ T40] audit: type=1326 audit(1767023057.931:20583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1992.034770][ T40] audit: type=1326 audit(1767023057.931:20584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1992.049567][ T40] audit: type=1326 audit(1767023057.931:20585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1992.066854][ T40] audit: type=1326 audit(1767023057.931:20586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1992.081487][ T40] audit: type=1326 audit(1767023057.931:20587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1992.121231][ T40] audit: type=1326 audit(1767023057.931:20588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1992.177577][ T40] audit: type=1326 audit(1767023057.931:20589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1992.209364][ T40] audit: type=1326 audit(1767023057.931:20590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1992.221759][ T40] audit: type=1326 audit(1767023057.931:20591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1992.264890][ T40] audit: type=1326 audit(1767023057.931:20592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.2.7855" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 1993.199837][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7862'. [ 1994.303323][ T9639] siw: device registration error -23 [ 1995.898418][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7874'. [ 1996.176242][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7876'. [ 1997.064909][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7885'. [ 1997.711785][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7895'. [ 1998.100010][ T9724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7897'. [ 2001.184620][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7915'. [ 2001.257278][ T9773] fuse: Bad value for 'fd' [ 2001.744313][ T9789] siw: device registration error -23 [ 2002.151695][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7926'. [ 2002.217770][ T9801] fuse: Bad value for 'fd' [ 2002.858934][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7933'. [ 2004.623261][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7938'. [ 2004.744470][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7941'. [ 2004.813019][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7943'. [ 2005.078445][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7948'. [ 2005.232616][ T9867] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7951'. [ 2005.634073][ T9869] siw: device registration error -23 [ 2006.584508][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7954'. [ 2006.780163][ T9867] Set syz1 is full, maxelem 65536 reached [ 2006.784433][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7957'. [ 2010.540023][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7977'. [ 2013.253229][ T9883] Set syz1 is full, maxelem 65536 reached [ 2015.225068][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7996'. [ 2015.692463][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7999'. [ 2018.302234][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 2018.302253][ T40] audit: type=1326 audit(1767023084.258:20609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.2.8012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2018.358827][ T40] audit: type=1326 audit(1767023084.258:20610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.2.8012" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2018.373638][ T40] audit: type=1326 audit(1767023084.258:20611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.2.8012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2018.401708][ T40] audit: type=1326 audit(1767023084.258:20612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.2.8012" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2018.416428][ T40] audit: type=1326 audit(1767023084.258:20613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.2.8012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2018.448213][ T40] audit: type=1326 audit(1767023084.258:20614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.2.8012" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2018.502645][ T40] audit: type=1326 audit(1767023084.308:20615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.2.8012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2018.515428][ T40] audit: type=1326 audit(1767023084.308:20616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.2.8012" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2018.573552][ T40] audit: type=1326 audit(1767023084.308:20617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.2.8012" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2018.602017][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8015'. [ 2018.614582][ T40] audit: type=1326 audit(1767023084.308:20618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.2.8012" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2022.350714][T10132] siw: device registration error -23 [ 2024.897686][T10170] siw: device registration error -23 [ 2026.739535][T10185] siw: device registration error -23 [ 2027.417557][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8049'. [ 2027.576499][T10199] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8051'. [ 2027.694015][T10116] Set syz1 is full, maxelem 65536 reached [ 2028.640087][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8058'. [ 2028.947716][T10233] siw: device registration error -23 [ 2031.536503][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8071'. [ 2033.248031][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 2033.248053][ T40] audit: type=1800 audit(1767023099.156:20637): pid=10290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8076" name="nullb0" dev="tmpfs" ino=1315 res=0 errno=0 [ 2034.816113][ T40] audit: type=1326 audit(1767023100.746:20638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10315 comm="syz.3.8086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2034.845487][T10316] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2034.869162][ T40] audit: type=1326 audit(1767023100.766:20639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10315 comm="syz.3.8086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2034.911117][ T40] audit: type=1326 audit(1767023100.766:20640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10315 comm="syz.3.8086" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2034.927495][ T40] audit: type=1326 audit(1767023100.766:20641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10315 comm="syz.3.8086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2035.018633][ T40] audit: type=1326 audit(1767023100.766:20642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10315 comm="syz.3.8086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2035.035246][ T40] audit: type=1326 audit(1767023100.776:20643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10315 comm="syz.3.8086" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2035.076154][ T40] audit: type=1326 audit(1767023100.776:20644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10315 comm="syz.3.8086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2035.092102][ T40] audit: type=1326 audit(1767023100.776:20645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10315 comm="syz.3.8086" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2035.127855][ T40] audit: type=1326 audit(1767023100.776:20646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10315 comm="syz.3.8086" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2037.684825][T10347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8096'. [ 2038.456143][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8103'. [ 2039.035436][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 2039.035458][ T40] audit: type=1326 audit(1767023104.996:20669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.0.8108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2039.097496][ T40] audit: type=1326 audit(1767023104.996:20670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.0.8108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2039.141459][ T40] audit: type=1326 audit(1767023104.996:20671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.0.8108" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2039.160683][ T40] audit: type=1326 audit(1767023104.996:20672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.0.8108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2039.194058][ T40] audit: type=1326 audit(1767023104.996:20673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.0.8108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2039.220224][ T40] audit: type=1326 audit(1767023104.996:20674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.0.8108" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2039.265339][ T40] audit: type=1326 audit(1767023104.996:20675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.0.8108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2039.303277][ T40] audit: type=1326 audit(1767023104.996:20676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.0.8108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2039.325288][ T40] audit: type=1326 audit(1767023104.996:20677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.0.8108" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2039.352702][ T40] audit: type=1326 audit(1767023105.036:20678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10378 comm="syz.0.8108" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2039.359745][ T4255] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2039.613629][ T4255] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2039.666408][ T4255] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2039.727710][ T4255] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2039.737896][ T4255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.750212][ T4255] usb 5-1: Product: syz [ 2039.753128][ T4255] usb 5-1: Manufacturer: syz [ 2039.788273][ T4255] usb 5-1: SerialNumber: syz [ 2039.815738][ T4255] cdc_mbim 5-1:1.0: skipping garbage [ 2040.032951][T10379] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2040.796865][T10379] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2040.805800][ T4255] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 2040.812417][ T4255] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 2040.843243][ T4255] wwan wwan0: port wwan0mbim0 attached [ 2040.856766][ T4255] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, be:5f:63:90:91:69 [ 2041.047501][ T63] usb 5-1: USB disconnect, device number 4 [ 2041.084253][ T63] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 2041.204145][ T63] wwan wwan0: port wwan0mbim0 disconnected [ 2042.731885][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.754488][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 2048.951009][ T63] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2050.374851][T10590] siw: device registration error -23 [ 2051.742684][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8186'. [ 2051.754237][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8186'. [ 2053.018970][T10640] sg_write: data in/out 28/38 bytes for SCSI command 0x5d-- guessing data in; [ 2053.018970][T10640] program syz.3.8197 not setting count and/or reply_len properly [ 2053.098903][T10636] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2053.305835][T10647] netlink: 'syz.4.8199': attribute type 1 has an invalid length. [ 2053.519624][ T40] kauditd_printk_skb: 120 callbacks suppressed [ 2053.519641][ T40] audit: type=1800 audit(1767023119.474:20799): pid=10651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8200" name="nullb0" dev="tmpfs" ino=1315 res=0 errno=0 [ 2059.835158][ T40] audit: type=1326 audit(1767023125.784:20800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.4.8230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2059.899574][ T40] audit: type=1326 audit(1767023125.814:20801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.4.8230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2059.940129][ T40] audit: type=1326 audit(1767023125.834:20802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.4.8230" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2059.958143][ T40] audit: type=1326 audit(1767023125.834:20803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.4.8230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2060.011614][ T40] audit: type=1326 audit(1767023125.834:20804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.4.8230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2060.108248][ T40] audit: type=1326 audit(1767023125.834:20805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.4.8230" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2060.182056][ T40] audit: type=1326 audit(1767023125.834:20806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.4.8230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2060.199664][ T40] audit: type=1326 audit(1767023125.834:20807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.4.8230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2060.235807][ T40] audit: type=1326 audit(1767023125.834:20808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.4.8230" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2060.271479][ T40] audit: type=1326 audit(1767023125.834:20809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10740 comm="syz.4.8230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7ffc0000 [ 2060.456577][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8233'. [ 2060.479150][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8233'. [ 2060.508488][T10749] xt_SECMARK: invalid mode: 0 [ 2060.766457][T10747] siw: device registration error -23 [ 2061.568696][T10777] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2062.287623][T10797] siw: device registration error -23 [ 2064.394540][T10831] Set syz1 is full, maxelem 65536 reached [ 2065.753179][T10860] Set syz1 is full, maxelem 65536 reached [ 2067.937962][T10886] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2067.941346][T10886] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2067.944762][T10886] vhci_hcd vhci_hcd.0: Device attached [ 2068.214077][ T2755] usb 44-1: SetAddress Request (89) to port 0 [ 2068.218555][ T2755] usb 44-1: new SuperSpeed USB device number 89 using vhci_hcd [ 2068.228069][T10888] vhci_hcd: connection closed [ 2068.256464][ T6688] vhci_hcd vhci_hcd.3: stop threads [ 2068.267486][ T6688] vhci_hcd vhci_hcd.3: release socket [ 2068.292588][ T6688] vhci_hcd vhci_hcd.3: disconnect device [ 2069.049506][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8286'. [ 2071.651502][T10940] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2071.713575][T10940] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2073.233914][T10990] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2073.254517][T10990] overlayfs: overlapping lowerdir path [ 2073.303684][T10990] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 2073.343239][T10990] overlayfs: overlapping lowerdir path [ 2073.353903][ T2755] usb 44-1: device descriptor read/8, error -110 [ 2073.753859][ T2755] usb usb44-port1: attempt power cycle [ 2074.109963][T11023] siw: device registration error -23 [ 2074.318216][ T2755] usb usb44-port1: unable to enumerate USB device [ 2074.522061][T11032] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2074.900074][T11038] sp0: Synchronizing with TNC [ 2074.944179][T11040] sp0: Found TNC [ 2075.001375][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8326'. [ 2075.020283][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8326'. [ 2075.315410][T11053] program syz.2.8330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2077.668854][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8336'. [ 2077.881712][T11082] FAULT_INJECTION: forcing a failure. [ 2077.881712][T11082] name failslab, interval 1, probability 0, space 0, times 0 [ 2077.896876][T11082] CPU: 3 UID: 0 PID: 11082 Comm: syz.3.8337 Tainted: G L syzkaller #0 PREEMPT(full) [ 2077.896941][T11082] Tainted: [L]=SOFTLOCKUP [ 2077.896947][T11082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2077.896957][T11082] Call Trace: [ 2077.896963][T11082] [ 2077.896970][T11082] dump_stack_lvl+0x16c/0x1f0 [ 2077.897004][T11082] should_fail_ex+0x512/0x640 [ 2077.897024][T11082] ? __kmalloc_noprof+0xca/0x910 [ 2077.897045][T11082] should_failslab+0xc2/0x120 [ 2077.897071][T11082] __kmalloc_noprof+0xeb/0x910 [ 2077.897090][T11082] ? nla_strdup+0xc6/0x150 [ 2077.897115][T11082] ? nla_strdup+0xc6/0x150 [ 2077.897133][T11082] nla_strdup+0xc6/0x150 [ 2077.897155][T11082] nf_tables_addchain.constprop.0+0x483/0x1c90 [ 2077.897195][T11082] ? nft_chain_lookup+0x5be/0xaa0 [ 2077.897217][T11082] ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10 [ 2077.897242][T11082] ? __pfx_nft_chain_lookup+0x10/0x10 [ 2077.897259][T11082] ? __lock_acquire+0x436/0x2890 [ 2077.897296][T11082] ? nla_strcmp+0xff/0x130 [ 2077.897320][T11082] ? nft_table_lookup.part.0+0x1e3/0x230 [ 2077.897347][T11082] nf_tables_newchain+0x206d/0x2da0 [ 2077.897368][T11082] ? find_held_lock+0x11/0x80 [ 2077.897390][T11082] ? net_generic+0xea/0x2a0 [ 2077.897419][T11082] ? __nla_validate_parse+0x600/0x2880 [ 2077.897443][T11082] ? __pfx_nf_tables_newchain+0x10/0x10 [ 2077.897467][T11082] ? __pfx___nla_validate_parse+0x10/0x10 [ 2077.897500][T11082] ? __nla_parse+0x40/0x60 [ 2077.897526][T11082] nfnetlink_rcv_batch+0x190d/0x2350 [ 2077.897560][T11082] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 2077.897585][T11082] ? lockdep_hardirqs_on+0x7c/0x110 [ 2077.897609][T11082] ? __dev_queue_xmit+0x782/0x4650 [ 2077.897626][T11082] ? __local_bh_enable_ip+0xa4/0x120 [ 2077.897687][T11082] ? __nla_parse+0x40/0x60 [ 2077.897713][T11082] nfnetlink_rcv+0x3c1/0x430 [ 2077.897731][T11082] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2077.897757][T11082] netlink_unicast+0x5aa/0x870 [ 2077.897785][T11082] ? __pfx_netlink_unicast+0x10/0x10 [ 2077.897818][T11082] netlink_sendmsg+0x8c8/0xdd0 [ 2077.897844][T11082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2077.897869][T11082] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 2077.897901][T11082] ____sys_sendmsg+0xa5d/0xc30 [ 2077.897929][T11082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2077.897953][T11082] ? get_compat_msghdr+0x11a/0x170 [ 2077.897986][T11082] ___sys_sendmsg+0x134/0x1d0 [ 2077.898009][T11082] ? __pfx____sys_sendmsg+0x10/0x10 [ 2077.898042][T11082] ? find_held_lock+0x2b/0x80 [ 2077.898080][T11082] __sys_sendmsg+0x16d/0x220 [ 2077.898102][T11082] ? __pfx___sys_sendmsg+0x10/0x10 [ 2077.898133][T11082] ? do_user_addr_fault+0x843/0x1370 [ 2077.898159][T11082] __do_fast_syscall_32+0xe8/0x680 [ 2077.898194][T11082] do_fast_syscall_32+0x32/0x80 [ 2077.898218][T11082] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2077.898240][T11082] RIP: 0023:0xf702d579 [ 2077.898254][T11082] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2077.898270][T11082] RSP: 002b:00000000f541d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2077.898287][T11082] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 2077.898298][T11082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2077.898308][T11082] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2077.898318][T11082] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2077.898328][T11082] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2077.898354][T11082] [ 2078.850285][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 2078.850314][ T40] audit: type=1326 audit(1767023144.802:20876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.0.8340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2078.939253][ T40] audit: type=1326 audit(1767023144.802:20877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.0.8340" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2078.983694][ T40] audit: type=1326 audit(1767023144.802:20878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.0.8340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2079.046443][ T40] audit: type=1326 audit(1767023144.812:20879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.0.8340" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2079.105949][T11100] geneve1: left allmulticast mode [ 2079.108360][T11100] geneve1: left promiscuous mode [ 2079.111435][ T40] audit: type=1326 audit(1767023144.812:20880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.0.8340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2079.194107][ T40] audit: type=1326 audit(1767023144.812:20881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.0.8340" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2079.206208][T11095] netlink: 10408 bytes leftover after parsing attributes in process `syz.2.8341'. [ 2079.263950][T14456] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2079.303433][ T40] audit: type=1326 audit(1767023144.852:20882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.0.8340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2079.333650][ T40] audit: type=1326 audit(1767023144.852:20883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.0.8340" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2079.366632][ T40] audit: type=1326 audit(1767023144.852:20884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.0.8340" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2079.454487][T14456] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2079.483448][T14456] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2079.538791][ T40] audit: type=1326 audit(1767023144.852:20885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11089 comm="syz.0.8340" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2079.544914][T14456] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2079.563895][T14456] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.569507][T14456] usb 5-1: Product: syz [ 2079.572958][T14456] usb 5-1: Manufacturer: syz [ 2079.589814][T14456] usb 5-1: SerialNumber: syz [ 2079.667547][T14456] cdc_mbim 5-1:1.0: skipping garbage [ 2079.850594][T11090] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2080.867524][T11114] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2080.871002][T14456] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 2080.945212][T14456] kworker/1:7: page allocation failure: order:4, mode:0x40cc0(GFP_KERNEL|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2081.030859][T14456] CPU: 1 UID: 0 PID: 14456 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 2081.030899][T14456] Tainted: [L]=SOFTLOCKUP [ 2081.030907][T14456] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2081.030924][T14456] Workqueue: usb_hub_wq hub_event [ 2081.030953][T14456] Call Trace: [ 2081.030962][T14456] [ 2081.030972][T14456] dump_stack_lvl+0x16c/0x1f0 [ 2081.031006][T14456] warn_alloc+0x248/0x3a0 [ 2081.031035][T14456] ? __pfx_warn_alloc+0x10/0x10 [ 2081.031058][T14456] ? psi_memstall_leave+0x1e6/0x2d0 [ 2081.031091][T14456] ? __alloc_pages_direct_compact+0x1af/0x580 [ 2081.031118][T14456] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 2081.031155][T14456] ? psi_memstall_leave+0x1e6/0x2d0 [ 2081.031190][T14456] __alloc_frozen_pages_noprof+0xe9b/0x2430 [ 2081.031234][T14456] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2081.031260][T14456] ? kasan_save_stack+0x42/0x60 [ 2081.031289][T14456] ? kasan_save_track+0x14/0x30 [ 2081.031317][T14456] ? __kmalloc_noprof+0x33d/0x910 [ 2081.031341][T14456] ? wdm_create+0x7fa/0x1a00 [ 2081.031362][T14456] ? cdc_mbim_bind+0x299/0x740 [ 2081.031384][T14456] ? usbnet_probe+0xba8/0x28c0 [ 2081.031402][T14456] ? usb_probe_interface+0x303/0xa80 [ 2081.031425][T14456] ? __device_attach+0x1e4/0x4e0 [ 2081.031446][T14456] ? device_initial_probe+0xaa/0xc0 [ 2081.031468][T14456] ? bus_probe_device+0x64/0x150 [ 2081.031484][T14456] ? device_add+0x116e/0x1980 [ 2081.031508][T14456] ? usb_set_configuration+0x1187/0x1e50 [ 2081.031527][T14456] ? usb_generic_driver_probe+0xb1/0x110 [ 2081.031552][T14456] ? usb_probe_device+0xef/0x400 [ 2081.031571][T14456] ? really_probe+0x241/0xb20 [ 2081.031839][T14456] ? __driver_probe_device+0x1de/0x470 [ 2081.031862][T14456] ? driver_probe_device+0x4c/0x1b0 [ 2081.031886][T14456] ? __device_attach_driver+0x1df/0x350 [ 2081.031907][T14456] ? bus_for_each_drv+0x159/0x1e0 [ 2081.031931][T14456] ? __device_attach+0x1e4/0x4e0 [ 2081.031947][T14456] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2081.031980][T14456] ? policy_nodemask+0xea/0x4e0 [ 2081.032034][T14456] alloc_pages_mpol+0x1fb/0x550 [ 2081.032070][T14456] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2081.032113][T14456] ___kmalloc_large_node+0x10c/0x150 [ 2081.032142][T14456] __kmalloc_large_node_noprof+0x1c/0x70 [ 2081.032159][T14456] ? trace_kmalloc+0x2b/0xb0 [ 2081.032186][T14456] __kmalloc_noprof.cold+0xc/0x62 [ 2081.032214][T14456] ? wdm_create+0x870/0x1a00 [ 2081.032231][T14456] ? __asan_memset+0x23/0x50 [ 2081.032258][T14456] ? wdm_create+0x870/0x1a00 [ 2081.032277][T14456] wdm_create+0x870/0x1a00 [ 2081.032301][T14456] ? __pfx_cdc_mbim_wdm_manage_power+0x10/0x10 [ 2081.032343][T14456] ? __pfx_cdc_mbim_wdm_manage_power+0x10/0x10 [ 2081.032372][T14456] usb_cdc_wdm_register+0x3a/0x70 [ 2081.032397][T14456] cdc_mbim_bind+0x299/0x740 [ 2081.032423][T14456] usbnet_probe+0xba8/0x28c0 [ 2081.032449][T14456] ? __pfx_cdc_mbim_bind+0x10/0x10 [ 2081.032479][T14456] ? __pfx_usbnet_probe+0x10/0x10 [ 2081.032506][T14456] ? usb_disable_lpm+0x49a/0x610 [ 2081.032532][T14456] usb_probe_interface+0x303/0xa80 [ 2081.032563][T14456] ? __pfx_usb_probe_interface+0x10/0x10 [ 2081.032588][T14456] really_probe+0x241/0xb20 [ 2081.032613][T14456] __driver_probe_device+0x1de/0x470 [ 2081.032636][T14456] driver_probe_device+0x4c/0x1b0 [ 2081.032659][T14456] __device_attach_driver+0x1df/0x350 [ 2081.032684][T14456] ? __pfx___device_attach_driver+0x10/0x10 [ 2081.032703][T14456] bus_for_each_drv+0x159/0x1e0 [ 2081.032729][T14456] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2081.032753][T14456] ? lockdep_hardirqs_on+0x7c/0x110 [ 2081.032775][T14456] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2081.032800][T14456] __device_attach+0x1e4/0x4e0 [ 2081.032818][T14456] ? __pfx___device_attach+0x10/0x10 [ 2081.032837][T14456] ? do_raw_spin_unlock+0x172/0x230 [ 2081.032907][T14456] device_initial_probe+0xaa/0xc0 [ 2081.032933][T14456] bus_probe_device+0x64/0x150 [ 2081.032955][T14456] device_add+0x116e/0x1980 [ 2081.032984][T14456] ? __pfx_device_add+0x10/0x10 [ 2081.033005][T14456] ? preempt_schedule_thunk+0x16/0x30 [ 2081.033037][T14456] usb_set_configuration+0x1187/0x1e50 [ 2081.033077][T14456] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 2081.033102][T14456] usb_generic_driver_probe+0xb1/0x110 [ 2081.033128][T14456] usb_probe_device+0xef/0x400 [ 2081.033161][T14456] ? __pfx_usb_probe_device+0x10/0x10 [ 2081.033188][T14456] really_probe+0x241/0xb20 [ 2081.033216][T14456] __driver_probe_device+0x1de/0x470 [ 2081.033237][T14456] ? usb_driver_applicable+0x1c7/0x220 [ 2081.033266][T14456] driver_probe_device+0x4c/0x1b0 [ 2081.033288][T14456] __device_attach_driver+0x1df/0x350 [ 2081.033309][T14456] ? __pfx___device_attach_driver+0x10/0x10 [ 2081.033329][T14456] bus_for_each_drv+0x159/0x1e0 [ 2081.033360][T14456] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2081.033390][T14456] ? lockdep_hardirqs_on+0x7c/0x110 [ 2081.033440][T14456] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2081.033476][T14456] __device_attach+0x1e4/0x4e0 [ 2081.033503][T14456] ? __pfx___device_attach+0x10/0x10 [ 2081.033529][T14456] ? do_raw_spin_unlock+0x172/0x230 [ 2081.033564][T14456] device_initial_probe+0xaa/0xc0 [ 2081.033592][T14456] bus_probe_device+0x64/0x150 [ 2081.033617][T14456] device_add+0x116e/0x1980 [ 2081.033648][T14456] ? __pfx_device_add+0x10/0x10 [ 2081.033676][T14456] ? add_device_randomness+0xb7/0xf0 [ 2081.033721][T14456] usb_new_device+0xd07/0x1a90 [ 2081.033749][T14456] ? do_raw_spin_lock+0x12c/0x2b0 [ 2081.033773][T14456] ? __pfx_usb_new_device+0x10/0x10 [ 2081.033796][T14456] ? mark_held_locks+0x49/0x80 [ 2081.033821][T14456] hub_event+0x313a/0x52f0 [ 2081.033875][T14456] ? __pfx_hub_event+0x10/0x10 [ 2081.033895][T14456] ? interval_tree_iter_first+0x180/0x250 [ 2081.033920][T14456] ? finish_task_switch.isra.0+0x202/0xbd0 [ 2081.033961][T14456] ? rcu_is_watching+0x12/0xc0 [ 2081.033995][T14456] process_one_work+0x9ba/0x1b20 [ 2081.034030][T14456] ? __pfx_process_one_work+0x10/0x10 [ 2081.034061][T14456] ? assign_work+0x1a0/0x250 [ 2081.034086][T14456] worker_thread+0x6c8/0xf10 [ 2081.034120][T14456] ? __pfx_worker_thread+0x10/0x10 [ 2081.034148][T14456] kthread+0x3c5/0x780 [ 2081.034173][T14456] ? __pfx_kthread+0x10/0x10 [ 2081.034197][T14456] ? rcu_is_watching+0x12/0xc0 [ 2081.034226][T14456] ? __pfx_kthread+0x10/0x10 [ 2081.034249][T14456] ret_from_fork+0x983/0xb10 [ 2081.034273][T14456] ? __pfx_ret_from_fork+0x10/0x10 [ 2081.034299][T14456] ? __switch_to+0x7af/0x10d0 [ 2081.034328][T14456] ? __pfx_kthread+0x10/0x10 [ 2081.034349][T14456] ret_from_fork_asm+0x1a/0x30 [ 2081.034397][T14456] [ 2081.520133][T14456] Mem-Info: [ 2081.523168][T14456] active_anon:7567 inactive_anon:12081 isolated_anon:0 [ 2081.523168][T14456] active_file:6070 inactive_file:1052 isolated_file:0 [ 2081.523168][T14456] unevictable:1768 dirty:5 writeback:0 [ 2081.523168][T14456] slab_reclaimable:6906 slab_unreclaimable:73781 [ 2081.523168][T14456] mapped:29393 shmem:18114 pagetables:1938 [ 2081.523168][T14456] sec_pagetables:346 bounce:0 [ 2081.523168][T14456] kernel_misc_reclaimable:0 [ 2081.523168][T14456] free:41431 free_pcp:153 free_cma:0 [ 2081.699868][T14456] Node 0 active_anon:112kB inactive_anon:904kB active_file:136kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:4260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9488kB pagetables:2476kB sec_pagetables:1180kB all_unreclaimable? no Balloon:0kB [ 2081.739139][T14456] Node 1 active_anon:25816kB inactive_anon:52524kB active_file:7216kB inactive_file:21216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:117512kB dirty:20kB writeback:0kB shmem:68960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6980kB pagetables:5176kB sec_pagetables:204kB all_unreclaimable? no Balloon:0kB [ 2081.787134][T14456] Node 0 DMA free:1888kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:68kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:68kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2081.815371][T14456] lowmem_reserve[]: 0 289 289 289 289 [ 2081.817604][T14456] Node 0 DMA32 free:9696kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:2048KB free_highatomic:92KB active_anon:324kB inactive_anon:1036kB active_file:136kB inactive_file:0kB unevictable:3536kB writepending:0kB zspages:764kB present:1032196kB managed:296820kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2081.832254][T14456] lowmem_reserve[]: 0 0 0 0 0 [ 2081.834848][T14456] Node 1 DMA32 free:153396kB boost:106068kB min:153212kB low:164996kB high:176780kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28316kB inactive_anon:48824kB active_file:7216kB inactive_file:21216kB unevictable:3536kB writepending:20kB zspages:8256kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:404kB local_pcp:0kB free_cma:0kB [ 2081.849583][T14456] lowmem_reserve[]: 0 0 0 0 0 [ 2081.851512][T14456] Node 0 DMA: 5*4kB (UM) 5*8kB (UM) 9*16kB (UM) 5*32kB (U) 4*64kB (UM) 0*128kB 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 1900kB [ 2081.862074][T14456] Node 0 DMA32: 64*4kB (MEH) 82*8kB (UMEH) 157*16kB (UMH) 87*32kB (ME) 37*64kB (ME) 12*128kB (UM) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10368kB [ 2081.873544][T14456] Node 1 DMA32: 356*4kB (UME) 2666*8kB (UM) 3660*16kB (UME) 348*32kB (UME) 131*64kB (UME) 91*128kB (UME) 129*256kB (UM) 16*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 153696kB [ 2081.873712][T14456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2081.873725][T14456] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2081.873735][T14456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2081.873748][T14456] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2081.873762][T14456] 26628 total pagecache pages [ 2081.873770][T14456] 1816 pages in swap cache [ 2081.873777][T14456] Free swap = 228kB [ 2081.873784][T14456] Total swap = 124996kB [ 2081.873793][T14456] 524155 pages RAM [ 2081.873800][T14456] 0 pages HighMem/MovableOnly [ 2081.873807][T14456] 209057 pages reserved [ 2081.873814][T14456] 0 pages cma reserved [ 2081.880256][T14456] cdc_mbim 5-1:1.0: probe with driver cdc_mbim failed with error -12 [ 2081.884105][T14456] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2081.884664][T14456] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2081.885582][T14456] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 2081.947990][T14456] usb 5-1: USB disconnect, device number 6 [ 2082.790561][ T2585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2082.800920][ T2585] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2082.834468][ T2585] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2082.865837][ T2585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2082.887969][ T2585] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2083.081198][T11122] lo speed is unknown, defaulting to 1000 [ 2083.591484][T11136] netlink: 'syz.0.8348': attribute type 12 has an invalid length. [ 2083.666407][T11141] siw: device registration error -23 [ 2084.609921][T11122] chnl_net:caif_netlink_parms(): no params data found [ 2084.975951][T29207] Bluetooth: hci4: command tx timeout [ 2085.184861][T11024] syz.3.8319 (11024) used greatest stack depth: 18888 bytes left [ 2085.219777][T11122] bridge0: port 1(bridge_slave_0) entered blocking state [ 2085.234367][T11122] bridge0: port 1(bridge_slave_0) entered disabled state [ 2085.239325][T11122] bridge_slave_0: entered allmulticast mode [ 2085.259613][T11122] bridge_slave_0: entered promiscuous mode [ 2085.290398][T11122] bridge0: port 2(bridge_slave_1) entered blocking state [ 2085.295301][T11122] bridge0: port 2(bridge_slave_1) entered disabled state [ 2085.312017][T11122] bridge_slave_1: entered allmulticast mode [ 2085.336359][T11122] bridge_slave_1: entered promiscuous mode [ 2085.890581][T23436] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2086.384176][T11122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2086.490051][T11122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2087.018569][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8356'. [ 2087.028773][T11178] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8356'. [ 2087.045247][T29207] Bluetooth: hci4: command tx timeout [ 2087.058633][T23436] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2087.301317][T11122] team0: Port device team_slave_0 added [ 2087.374987][T11122] team0: Port device team_slave_1 added [ 2087.797110][T23436] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2087.871603][T11122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2087.881139][T11122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2087.913349][T11122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2087.990660][T11122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2088.029366][T11122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2088.100777][T11122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2088.245451][T23436] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2088.385794][T11122] hsr_slave_0: entered promiscuous mode [ 2088.393545][T11122] hsr_slave_1: entered promiscuous mode [ 2088.397648][T11122] debugfs: 'hsr0' already exists in 'hsr' [ 2088.431024][T11122] Cannot create hsr debugfs directory [ 2089.162824][T29207] Bluetooth: hci4: command tx timeout [ 2089.670390][T11213] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 2089.674997][T11213] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2089.680920][T11213] vhci_hcd vhci_hcd.0: Device attached [ 2089.989016][T14016] usb 38-1: SetAddress Request (78) to port 0 [ 2090.000895][T14016] usb 38-1: new SuperSpeed USB device number 78 using vhci_hcd [ 2090.137504][T23436] bond2 (unregistering): (slave ip6gretap2): Releasing backup interface [ 2090.256321][T23436] ip6gretap2 (unregistering): left promiscuous mode [ 2090.261472][T23436] ip6gretap2 (unregistering): left allmulticast mode [ 2090.662292][T23436] bond1 (unregistering): (slave gretap1): Releasing active interface [ 2090.721292][T11214] vhci_hcd: connection reset by peer [ 2090.728426][T24860] vhci_hcd vhci_hcd.0: stop threads [ 2090.730909][T24860] vhci_hcd vhci_hcd.0: release socket [ 2090.733321][T24860] vhci_hcd vhci_hcd.0: disconnect device [ 2091.209446][T29207] Bluetooth: hci4: command tx timeout [ 2091.432294][T23436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2091.473339][T23436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2091.492306][T23436] bond0 (unregistering): Released all slaves [ 2091.503358][T23436] bond1 (unregistering): Released all slaves [ 2092.327295][T23436] bond2 (unregistering): Released all slaves [ 2092.794601][T23436] tipc: Left network mode [ 2093.198331][T11237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8369'. [ 2094.149850][T11083] IPVS: starting estimator thread 0... [ 2094.291222][T11255] IPVS: using max 21 ests per chain, 50400 per kthread [ 2094.551467][T11122] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2094.733072][T11122] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2094.766175][T11122] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2095.104143][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8379'. [ 2095.108317][T11280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8379'. [ 2095.154143][T14016] usb 38-1: device descriptor read/8, error -110 [ 2095.556815][T14016] usb usb38-port1: attempt power cycle [ 2095.573892][T11122] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2096.006378][T23436] hsr_slave_0: left promiscuous mode [ 2096.129132][T23436] hsr_slave_1: left promiscuous mode [ 2096.133708][T23436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2096.156405][T14016] usb usb38-port1: unable to enumerate USB device [ 2096.179316][T23436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2096.351071][T23436] pim6reg (unregistering): left allmulticast mode [ 2098.518497][T23436] team0 (unregistering): Port device team_slave_1 removed [ 2098.694718][T23436] team0 (unregistering): Port device team_slave_0 removed [ 2100.579405][T11279] netlink: 'syz.2.8378': attribute type 12 has an invalid length. [ 2100.624937][T11301] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8382'. [ 2100.629734][ T2888] lo speed is unknown, defaulting to 1000 [ 2100.633753][ T2888] infiniband syz2: ib_query_port failed (-19) [ 2100.897695][T11122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2100.921738][T11122] 8021q: adding VLAN 0 to HW filter on device team0 [ 2100.932177][ T7680] bridge0: port 1(bridge_slave_0) entered blocking state [ 2100.935772][ T7680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2100.973195][ T7680] bridge0: port 2(bridge_slave_1) entered blocking state [ 2100.992190][ T7680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2101.079769][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8388'. [ 2101.093841][T11321] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8388'. [ 2101.831752][T11122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2102.277325][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8393'. [ 2102.420879][T11351] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8394'. [ 2102.449283][T11351] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8394'. [ 2102.727054][T11359] FAULT_INJECTION: forcing a failure. [ 2102.727054][T11359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2102.733974][T11359] CPU: 3 UID: 0 PID: 11359 Comm: syz.3.8395 Tainted: G L syzkaller #0 PREEMPT(full) [ 2102.734008][T11359] Tainted: [L]=SOFTLOCKUP [ 2102.734015][T11359] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2102.734026][T11359] Call Trace: [ 2102.734036][T11359] [ 2102.734047][T11359] dump_stack_lvl+0x16c/0x1f0 [ 2102.734082][T11359] should_fail_ex+0x512/0x640 [ 2102.734107][T11359] _copy_to_user+0x32/0xd0 [ 2102.734130][T11359] simple_read_from_buffer+0xcb/0x170 [ 2102.734158][T11359] proc_fail_nth_read+0x197/0x240 [ 2102.734188][T11359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2102.734220][T11359] ? rw_verify_area+0xcf/0x6c0 [ 2102.734243][T11359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2102.734270][T11359] vfs_read+0x1e4/0xcf0 [ 2102.734298][T11359] ? __pfx___mutex_lock+0x10/0x10 [ 2102.734327][T11359] ? __pfx_vfs_read+0x10/0x10 [ 2102.734349][T11359] ? find_held_lock+0x2b/0x80 [ 2102.734381][T11359] ? __fget_files+0x20e/0x3c0 [ 2102.734403][T11359] ? __fget_files+0x130/0x3c0 [ 2102.734435][T11359] ksys_read+0x12a/0x250 [ 2102.734460][T11359] ? __pfx_ksys_read+0x10/0x10 [ 2102.734484][T11359] ? fdget+0x187/0x210 [ 2102.734514][T11359] __do_fast_syscall_32+0xe8/0x680 [ 2102.734545][T11359] do_fast_syscall_32+0x32/0x80 [ 2102.734573][T11359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2102.734596][T11359] RIP: 0023:0xf702d579 [ 2102.734612][T11359] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2102.734629][T11359] RSP: 002b:00000000f53db590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2102.734648][T11359] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f53db620 [ 2102.734659][T11359] RDX: 000000000000000f RSI: 00000000f73c6ff4 RDI: 0000000000000000 [ 2102.734670][T11359] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2102.734681][T11359] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2102.734691][T11359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2102.734717][T11359] [ 2102.958668][T11122] veth0_vlan: entered promiscuous mode [ 2102.972575][T23436] IPVS: stop unused estimator thread 0... [ 2103.018908][T11122] veth1_vlan: entered promiscuous mode [ 2103.173185][T11122] veth0_macvtap: entered promiscuous mode [ 2103.362661][T11122] veth1_macvtap: entered promiscuous mode [ 2103.484416][T11122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2103.559109][T11122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2103.621939][ T1058] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2103.625926][ T1058] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2103.631385][ T1058] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2103.667764][ T1058] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2103.774389][T11371] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2103.810412][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8401'. [ 2103.941134][T26956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2103.988967][T26956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2104.061282][T11375] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8402'. [ 2104.078222][T11375] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8402'. [ 2104.083341][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2104.090620][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2104.095061][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.135703][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.366247][T11379] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8410'. [ 2104.431906][T11382] binder: 11381:11382 ioctl 40046205 0 returned -22 [ 2105.752521][T11409] __nla_validate_parse: 2 callbacks suppressed [ 2105.752543][T11409] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8413'. [ 2106.730098][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8419'. [ 2106.899567][T11420] lo speed is unknown, defaulting to 1000 [ 2106.903287][T11420] lo speed is unknown, defaulting to 1000 [ 2106.907007][T11420] lo speed is unknown, defaulting to 1000 [ 2106.965795][T11420] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 2107.194989][T11420] lo speed is unknown, defaulting to 1000 [ 2107.203712][T11420] lo speed is unknown, defaulting to 1000 [ 2107.217481][T11420] lo speed is unknown, defaulting to 1000 [ 2107.224464][T11420] lo speed is unknown, defaulting to 1000 [ 2107.231166][T11420] lo speed is unknown, defaulting to 1000 [ 2107.249418][T11420] lo speed is unknown, defaulting to 1000 [ 2107.261724][T11420] lo speed is unknown, defaulting to 1000 [ 2107.304485][T11438] overlayfs: failed to resolve './file0': -2 [ 2107.318727][T11438] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8421'. [ 2107.332795][T11438] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8421'. [ 2108.356521][T11453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8424'. [ 2109.399106][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 2109.399124][ T40] audit: type=1326 audit(1767023175.349:20949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.2.8428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2109.462428][ T5997] IPVS: starting estimator thread 0... [ 2109.506189][ T40] audit: type=1326 audit(1767023175.379:20950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.2.8428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2109.549687][ T40] audit: type=1326 audit(1767023175.389:20951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.2.8428" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2109.684209][ T40] audit: type=1326 audit(1767023175.389:20952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.2.8428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2109.708165][ T40] audit: type=1326 audit(1767023175.389:20953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.2.8428" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2109.722581][T11470] IPVS: using max 30 ests per chain, 72000 per kthread [ 2109.766292][ T40] audit: type=1326 audit(1767023175.389:20954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.2.8428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2109.801334][ T40] audit: type=1326 audit(1767023175.389:20955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.2.8428" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2109.825108][ T40] audit: type=1326 audit(1767023175.389:20956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.2.8428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2109.844436][ T40] audit: type=1326 audit(1767023175.389:20957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.2.8428" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2109.881290][ T40] audit: type=1326 audit(1767023175.389:20958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.2.8428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2112.367213][T11517] fuse: Bad value for 'user_id' [ 2112.371930][T11517] fuse: Bad value for 'user_id' [ 2112.728944][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8445'. [ 2112.958248][T11506] infiniband syz1: set active [ 2112.962470][T11506] infiniband syz1: added syz_tun [ 2113.247226][T11533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8439'. [ 2113.390182][T11520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.470442][T11506] RDS/IB: syz1: added [ 2113.474411][T11506] smc: adding ib device syz1 with port count 1 [ 2113.478352][T11506] smc: ib device syz1 port 1 has no pnetid [ 2113.851490][T11520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.987883][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8449'. [ 2114.050159][T11542] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 2114.219670][T11520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2114.444495][T11551] zonefs (nullb0) ERROR: Not a zoned block device [ 2114.579366][T11520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2114.734764][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8456'. [ 2115.108501][ T7875] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.249520][ T7680] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.432967][ T1206] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.700943][ T7680] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2116.651603][T11582] tun0: tun_chr_ioctl cmd 1074025675 [ 2116.659974][T11582] tun0: persist enabled [ 2116.697139][T11582] tun0: tun_chr_ioctl cmd 1074025675 [ 2116.700325][T11582] tun0: persist disabled [ 2118.580477][T11588] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2118.583516][T11588] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2118.696949][T11588] vhci_hcd vhci_hcd.0: Device attached [ 2118.977952][ T2888] usb 46-1: SetAddress Request (95) to port 0 [ 2118.981096][ T2888] usb 46-1: new SuperSpeed USB device number 95 using vhci_hcd [ 2119.030665][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8467'. [ 2119.183224][T11589] vhci_hcd: connection reset by peer [ 2119.189690][ T7875] vhci_hcd vhci_hcd.4: stop threads [ 2119.192279][ T7875] vhci_hcd vhci_hcd.4: release socket [ 2119.195379][ T7875] vhci_hcd vhci_hcd.4: disconnect device [ 2119.549661][T11612] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8471'. [ 2119.562320][T11612] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8471'. [ 2119.664329][T11614] fuse: Bad value for 'fd' [ 2119.708630][T11616] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8480'. [ 2119.716002][T11616] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8480'. [ 2119.772623][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8473'. [ 2120.300214][T11642] fuse: Bad value for 'fd' [ 2120.431668][T11648] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8484'. [ 2120.433580][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8481'. [ 2120.444732][T11648] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8484'. [ 2120.895363][T11656] syzkaller1: entered promiscuous mode [ 2120.899778][T11656] syzkaller1: entered allmulticast mode [ 2121.273115][T11672] fuse: Bad value for 'fd' [ 2121.521095][T11678] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8494'. [ 2121.586473][T11681] batman_adv: batadv0: Adding interface: dummy0 [ 2121.603907][T11681] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2121.645440][T11681] batman_adv: batadv0: Interface activated: dummy0 [ 2121.737636][T11684] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 2121.741055][T11684] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2121.767401][T11684] vhci_hcd vhci_hcd.0: Device attached [ 2122.007557][T11083] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 2123.122337][ T2585] Bluetooth: hci5: sending frame failed (-49) [ 2123.131462][T29207] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 2123.260416][T11713] fuse: Bad value for 'fd' [ 2123.764878][T11725] siw: device registration error -23 [ 2124.094513][ T2888] usb 46-1: device descriptor read/8, error -110 [ 2124.310660][T11685] vhci_hcd: connection reset by peer [ 2124.314291][T11734] __nla_validate_parse: 2 callbacks suppressed [ 2124.314311][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8509'. [ 2124.338435][T23681] vhci_hcd vhci_hcd.2: stop threads [ 2124.340970][T23681] vhci_hcd vhci_hcd.2: release socket [ 2124.344923][T23681] vhci_hcd vhci_hcd.2: disconnect device [ 2124.528651][ T2888] usb usb46-port1: attempt power cycle [ 2124.632956][T11738] fuse: Bad value for 'fd' [ 2125.161836][ T2888] usb usb46-port1: unable to enumerate USB device [ 2125.773862][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8516'. [ 2125.784741][T11758] gre1: entered allmulticast mode [ 2126.030408][T11764] fuse: Invalid rootmode [ 2126.114290][T11762] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8518'. [ 2126.120067][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8520'. [ 2127.247728][T11083] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 2127.316928][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 2127.316951][ T40] audit: type=1326 audit(1767023193.258:20964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.8524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2127.335791][T11779] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2127.345469][ T40] audit: type=1326 audit(1767023193.258:20965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.8524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2127.397745][ T40] audit: type=1326 audit(1767023193.268:20966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.8524" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2127.415418][ T40] audit: type=1326 audit(1767023193.268:20967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.8524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2127.450356][ T40] audit: type=1326 audit(1767023193.268:20968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.8524" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2127.471149][ T40] audit: type=1326 audit(1767023193.268:20969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.8524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2127.510620][ T40] audit: type=1326 audit(1767023193.268:20970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.8524" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2127.533527][ T40] audit: type=1326 audit(1767023193.288:20971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.8524" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2127.552238][ T40] audit: type=1326 audit(1767023193.288:20972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.8524" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2127.615358][ T40] audit: type=1326 audit(1767023193.288:20973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.3.8524" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2128.571594][T11794] siw: device registration error -23 [ 2128.644159][T11785] comedi comedi2: reset error (fatal) [ 2128.983870][T11803] binder: 11798:11803 ioctl c0306201 800004c0 returned -14 [ 2129.019425][T11803] binder: 11798:11803 ioctl c0306201 80000c40 returned -14 [ 2129.042716][T11803] binder: 11798:11803 ioctl c0306201 800001c0 returned -14 [ 2130.009777][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8536'. [ 2131.579359][T11848] siw: device registration error -23 [ 2131.750007][T11854] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2131.755126][T11854] block device autoloading is deprecated and will be removed. [ 2131.931052][T11854] loop0: detected capacity change from 0 to 2560 [ 2131.965591][T11857] fuse: Invalid rootmode [ 2132.148181][T11854] buffer_io_error: 27 callbacks suppressed [ 2132.148203][T11854] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 2132.180142][T11854] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 2132.239370][T11854] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 2132.243728][T11854] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 2132.253402][T11854] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 2132.288488][T11854] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 2132.292156][T11854] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 2132.295800][T11854] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 2132.311445][T11854] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 2132.317107][T11854] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 2133.004877][T11865] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 2133.008364][T11865] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2133.032875][T11865] vhci_hcd vhci_hcd.0: Device attached [ 2133.348069][T29902] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 2133.463010][T14016] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 2133.550212][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 2133.550232][ T40] audit: type=1326 audit(1767023199.497:20990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.2.8557" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2133.581778][ T40] audit: type=1326 audit(1767023199.497:20991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.2.8557" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2133.594496][T11709] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 2133.623235][ T40] audit: type=1326 audit(1767023199.497:20992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.2.8557" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2133.647291][ T40] audit: type=1326 audit(1767023199.537:20993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.2.8557" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2133.708366][ T40] audit: type=1326 audit(1767023199.537:20994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.2.8557" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2133.723244][T14016] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2133.779319][ T40] audit: type=1326 audit(1767023199.537:20995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.2.8557" exe="/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2133.819024][ T40] audit: type=1326 audit(1767023199.537:20996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.2.8557" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2133.835001][ T40] audit: type=1326 audit(1767023199.537:20997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.2.8557" exe="/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2133.851333][ T40] audit: type=1326 audit(1767023199.537:20998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.2.8557" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2133.853702][T14016] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2133.874695][ T40] audit: type=1326 audit(1767023199.537:20999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11874 comm="syz.2.8557" exe="/syz-executor" sig=0 arch=40000003 syscall=305 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 2133.907159][T14016] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2133.914293][T14016] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2133.924330][T14016] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2133.975388][T14016] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2134.003750][T14016] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2134.039414][T14016] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2134.071128][T14016] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2134.112035][T14016] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2134.126381][T14016] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 2134.136926][T11886] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8559'. [ 2134.160812][T14016] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2134.172245][T14016] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2134.180436][T14016] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2134.186047][T14016] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2134.321837][T14016] usb 5-1: string descriptor 0 read error: -22 [ 2134.325507][T14016] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2134.347787][T14016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.368902][T14016] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2134.577219][T11893] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8562'. [ 2134.816606][T11585] usb 5-1: USB disconnect, device number 7 [ 2134.919980][T11901] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2135.056417][T11862] adutux: No device or device unplugged -19 [ 2136.184924][T11866] vhci_hcd: connection reset by peer [ 2136.187557][ T1058] vhci_hcd vhci_hcd.0: stop threads [ 2136.191831][ T1058] vhci_hcd vhci_hcd.0: release socket [ 2136.218461][ T1058] vhci_hcd vhci_hcd.0: disconnect device [ 2137.381835][T11935] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8575'. [ 2137.638903][T11709] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2137.643779][T11709] Bluetooth: hci1: Injecting HCI hardware error event [ 2137.656418][T29207] Bluetooth: hci1: hardware error 0x00 [ 2139.919033][T29207] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2139.934531][T29902] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 2143.945009][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8584'. [ 2144.676243][T11978] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8588'. [ 2145.653236][T11994] fuse: Unknown parameter 'use00000000000000000000' [ 2145.970658][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8595'. [ 2147.681082][T12010] siw: device registration error -23 [ 2149.059004][T12020] fuse: Unknown parameter 'use00000000000000000000' [ 2149.308851][T12021] loop0: detected capacity change from 0 to 2560 [ 2149.323423][T11964] buffer_io_error: 310 callbacks suppressed [ 2149.323442][T11964] Buffer I/O error on dev loop0, logical block 0, async page read [ 2149.394013][T12021] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 2149.407539][T12021] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 2149.413338][T12021] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 2149.420643][T12025] lo speed is unknown, defaulting to 1000 [ 2149.447043][T12021] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 2149.560826][T12021] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 2149.564497][T12021] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 2149.598564][T12021] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 2149.604859][T12021] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 2149.619777][T12021] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 2149.838278][T11709] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2149.850330][T11709] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2149.857034][T11709] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2149.877369][T11709] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2149.881240][T11709] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2149.995962][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8605'. [ 2150.017310][T12030] lo speed is unknown, defaulting to 1000 [ 2150.359218][T12035] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2151.955235][T11709] Bluetooth: hci5: command tx timeout [ 2152.219901][T12055] siw: device registration error -23 [ 2152.293450][T12030] chnl_net:caif_netlink_parms(): no params data found [ 2152.469332][T12060] fuse: Unknown parameter 'user_i00000000000000000000' [ 2152.590983][T12030] bridge0: port 1(bridge_slave_0) entered blocking state [ 2152.598438][T12030] bridge0: port 1(bridge_slave_0) entered disabled state [ 2152.610056][T12030] bridge_slave_0: entered allmulticast mode [ 2152.640355][T12030] bridge_slave_0: entered promiscuous mode [ 2152.645854][T12030] bridge0: port 2(bridge_slave_1) entered blocking state [ 2152.698597][T12030] bridge0: port 2(bridge_slave_1) entered disabled state [ 2152.716558][T12030] bridge_slave_1: entered allmulticast mode [ 2152.748886][T12030] bridge_slave_1: entered promiscuous mode [ 2152.854057][T12030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2152.970694][T12030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2153.055753][T12030] team0: Port device team_slave_0 added [ 2153.063425][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8613'. [ 2153.080283][T12030] team0: Port device team_slave_1 added [ 2153.114671][T12030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2153.120835][T12030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2153.136915][T12030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2153.145289][T12030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2153.152339][T12030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2153.168618][T12030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2153.352949][T12030] hsr_slave_0: entered promiscuous mode [ 2153.369024][T12030] hsr_slave_1: entered promiscuous mode [ 2153.373020][T12030] debugfs: 'hsr0' already exists in 'hsr' [ 2153.373318][T12073] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2153.394597][T12030] Cannot create hsr debugfs directory [ 2154.005456][T11709] Bluetooth: hci5: command tx timeout [ 2154.492753][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 2154.492772][ T40] audit: type=1326 audit(1767023220.426:21006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.3.8619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2154.527995][T12088] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2154.555709][ T40] audit: type=1326 audit(1767023220.426:21007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.3.8619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2154.614169][ T40] audit: type=1326 audit(1767023220.426:21008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.3.8619" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2154.702590][ T40] audit: type=1326 audit(1767023220.506:21009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.3.8619" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2154.828042][ T40] audit: type=1326 audit(1767023220.506:21010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.3.8619" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2154.849871][ T40] audit: type=1326 audit(1767023220.506:21011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.3.8619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2154.924124][ T40] audit: type=1326 audit(1767023220.506:21012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.3.8619" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d579 code=0x7ffc0000 [ 2155.195213][T12102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8623'. [ 2156.091930][T12113] FAULT_INJECTION: forcing a failure. [ 2156.091930][T12113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2156.098862][T12113] CPU: 0 UID: 0 PID: 12113 Comm: syz.4.8626 Tainted: G L syzkaller #0 PREEMPT(full) [ 2156.098893][T12113] Tainted: [L]=SOFTLOCKUP [ 2156.098898][T12113] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2156.098908][T12113] Call Trace: [ 2156.098917][T12113] [ 2156.098926][T12113] dump_stack_lvl+0x16c/0x1f0 [ 2156.098959][T12113] should_fail_ex+0x512/0x640 [ 2156.098981][T12113] _copy_to_user+0x32/0xd0 [ 2156.098999][T12113] simple_read_from_buffer+0xcb/0x170 [ 2156.099024][T12113] proc_fail_nth_read+0x197/0x240 [ 2156.099048][T12113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2156.099071][T12113] ? rw_verify_area+0xcf/0x6c0 [ 2156.099089][T12113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2156.099110][T12113] vfs_read+0x1e4/0xcf0 [ 2156.099130][T12113] ? __pfx___mutex_lock+0x10/0x10 [ 2156.099154][T12113] ? __pfx_vfs_read+0x10/0x10 [ 2156.099170][T12113] ? find_held_lock+0x2b/0x80 [ 2156.099218][T12113] ? __fget_files+0x20e/0x3c0 [ 2156.099245][T12113] ksys_read+0x12a/0x250 [ 2156.099263][T12113] ? __pfx_ksys_read+0x10/0x10 [ 2156.099288][T12113] __do_fast_syscall_32+0xe8/0x680 [ 2156.099311][T12113] do_fast_syscall_32+0x32/0x80 [ 2156.099336][T12113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2156.099354][T12113] RIP: 0023:0xf7fe7579 [ 2156.099368][T12113] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2156.099383][T12113] RSP: 002b:00000000f54d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2156.099399][T12113] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54d6620 [ 2156.099408][T12113] RDX: 000000000000000f RSI: 00000000f7476ff4 RDI: 0000000000000000 [ 2156.099416][T12113] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2156.099424][T12113] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2156.099432][T12113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2156.099455][T12113] [ 2156.102124][T11709] Bluetooth: hci5: command tx timeout [ 2156.687888][T12030] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2156.732669][T12030] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2156.746036][T12030] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2156.790896][T12030] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2157.161571][T12030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2157.208549][T12030] 8021q: adding VLAN 0 to HW filter on device team0 [ 2157.339925][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 2157.355144][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2157.497350][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 2157.500919][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2157.684366][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8631'. [ 2157.685134][T12151] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8632'. [ 2158.192338][T12030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2158.245548][T11709] Bluetooth: hci5: command tx timeout [ 2158.473837][T12030] veth0_vlan: entered promiscuous mode [ 2158.494055][T12030] veth1_vlan: entered promiscuous mode [ 2158.647768][T12030] veth0_macvtap: entered promiscuous mode [ 2158.674992][T12030] veth1_macvtap: entered promiscuous mode [ 2158.695461][T12176] netlink: 'syz.0.8636': attribute type 1 has an invalid length. [ 2158.950340][T12178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8636'. [ 2159.032894][T12176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2159.404391][T12178] bond2: entered promiscuous mode [ 2159.407378][T12178] bond2: entered allmulticast mode [ 2159.560992][T12181] bond0: (slave dummy0): Releasing active interface [ 2159.702669][ T2888] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2159.718869][T12181] bond2: (slave dummy0): making interface the new active one [ 2159.730193][ T2888] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2159.753298][T12181] dummy0: entered promiscuous mode [ 2159.840890][ T2888] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2159.841078][T12181] dummy0: entered allmulticast mode [ 2159.858803][T12181] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 2159.860826][ T2888] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2159.887299][ T2888] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2159.894593][T12030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2159.902803][ T2888] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2159.902837][ T2888] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2159.902859][ T2888] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2159.902881][ T2888] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2159.902905][ T2888] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2159.904987][ T2888] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [Zw[ba|\rn)A#6oү?aIs5hV3(; [ 2159.904987][ T2888] ѝP$zɷX$w[SRezxuSrl[5l'ZCz2] on tDKY縣Ϫ򞿹,UOp{"ixA[ewÒ}ZXA [ 2159.940856][T12030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2159.957567][ T1206] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2160.250668][ T1206] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2160.254077][T12189] fido_id[12189]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2160.279738][ T1206] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2160.454434][ T1206] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2160.567792][ T5102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2160.581019][ T5102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2160.708670][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2160.714321][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2161.295553][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8640'. [ 2162.722199][T12237] siw: device registration error -23 [ 2164.965961][T12277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8653'. [ 2164.981196][T12277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8653'. [ 2165.319627][T12285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8654'. [ 2165.552839][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.556413][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.925597][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8656'. [ 2166.409615][T12299] 9p: Bad value for 'wfdno' [ 2166.577175][T12295] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2166.581308][T12295] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2166.587350][T12295] vhci_hcd vhci_hcd.0: Device attached [ 2166.742957][T12295] random: crng reseeded on system resumption [ 2166.931674][ T7641] usb 46-1: SetAddress Request (99) to port 0 [ 2166.934231][ T7641] usb 46-1: new SuperSpeed USB device number 99 using vhci_hcd [ 2167.055451][T12315] FAULT_INJECTION: forcing a failure. [ 2167.055451][T12315] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2167.069369][T12315] CPU: 1 UID: 0 PID: 12315 Comm: syz.1.8664 Tainted: G L syzkaller #0 PREEMPT(full) [ 2167.069419][T12315] Tainted: [L]=SOFTLOCKUP [ 2167.069425][T12315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2167.069435][T12315] Call Trace: [ 2167.069441][T12315] [ 2167.069451][T12315] dump_stack_lvl+0x16c/0x1f0 [ 2167.069480][T12315] should_fail_ex+0x512/0x640 [ 2167.069502][T12315] should_fail_alloc_page+0xe7/0x130 [ 2167.069527][T12315] prepare_alloc_pages+0x401/0x670 [ 2167.069550][T12315] ? __page_table_check_zero+0x2e8/0x4a0 [ 2167.069576][T12315] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 2167.069594][T12315] ? __page_table_check_zero+0x2f2/0x4a0 [ 2167.069617][T12315] ? __pfx___page_table_check_zero+0x10/0x10 [ 2167.069641][T12315] ? lockdep_hardirqs_on+0x7c/0x110 [ 2167.069674][T12315] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2167.069697][T12315] ? get_page_from_freelist+0xd0b/0x31a0 [ 2167.069722][T12315] ? __pfx___might_resched+0x10/0x10 [ 2167.069745][T12315] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2167.069771][T12315] ? policy_nodemask+0xea/0x4e0 [ 2167.069796][T12315] alloc_pages_mpol+0x1fb/0x550 [ 2167.069820][T12315] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2167.069849][T12315] alloc_pages_noprof+0x131/0x390 [ 2167.069872][T12315] __pmd_alloc+0x3b/0x9c0 [ 2167.069898][T12315] __handle_mm_fault+0xbeb/0x2bb0 [ 2167.069922][T12315] ? __pfx___handle_mm_fault+0x10/0x10 [ 2167.069953][T12315] ? find_vma+0xbf/0x140 [ 2167.069974][T12315] ? __pfx_find_vma+0x10/0x10 [ 2167.069997][T12315] handle_mm_fault+0x3fe/0xad0 [ 2167.070019][T12315] do_user_addr_fault+0x7a6/0x1370 [ 2167.070041][T12315] ? rcu_is_watching+0x12/0xc0 [ 2167.070066][T12315] exc_page_fault+0x64/0xc0 [ 2167.070089][T12315] asm_exc_page_fault+0x26/0x30 [ 2167.070105][T12315] RIP: 0010:_copy_from_user+0x93/0xd0 [ 2167.070149][T12315] Code: dc 13 fd 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 d9 c6 7c fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 65 d7 [ 2167.070165][T12315] RSP: 0018:ffffc90007367cb0 EFLAGS: 00050246 [ 2167.070179][T12315] RAX: 0000000000000001 RBX: 0000000080000000 RCX: 0000000000000010 [ 2167.070190][T12315] RDX: fffff52000e6cfbc RSI: 0000000080000000 RDI: ffffc90007367dd0 [ 2167.070200][T12315] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff52000e6cfbb [ 2167.070209][T12315] R10: ffffc90007367ddf R11: ffff888027542ff0 R12: 0000000000000000 [ 2167.070220][T12315] R13: ffffc90007367dd0 R14: ffff88802808da40 R15: ffffc90007367d40 [ 2167.070246][T12315] move_addr_to_kernel+0x65/0x170 [ 2167.070264][T12315] __sys_sendto+0x1be/0x520 [ 2167.070283][T12315] ? __pfx___sys_sendto+0x10/0x10 [ 2167.070321][T12315] ? ksys_write+0x1ac/0x250 [ 2167.070343][T12315] ? __pfx_ksys_write+0x10/0x10 [ 2167.070367][T12315] __ia32_sys_sendto+0xdd/0x1b0 [ 2167.070384][T12315] ? __do_fast_syscall_32+0x9a/0x680 [ 2167.070406][T12315] ? lockdep_hardirqs_on+0x7c/0x110 [ 2167.070439][T12315] __do_fast_syscall_32+0xe8/0x680 [ 2167.070466][T12315] do_fast_syscall_32+0x32/0x80 [ 2167.070489][T12315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2167.070506][T12315] RIP: 0023:0xf707d579 [ 2167.070520][T12315] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2167.070534][T12315] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 2167.070550][T12315] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2167.070560][T12315] RDX: 0000000000000000 RSI: 0000000000048800 RDI: 0000000080000000 [ 2167.070589][T12315] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 2167.070600][T12315] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2167.070609][T12315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2167.070634][T12315] [ 2167.924987][T12319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8665'. [ 2167.991792][T12295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2168.230534][T12303] vhci_hcd: connection reset by peer [ 2168.324968][T12325] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8668'. [ 2168.326161][ T5102] vhci_hcd vhci_hcd.4: stop threads [ 2168.334762][ T5102] vhci_hcd vhci_hcd.4: release socket [ 2168.337094][ T5102] vhci_hcd vhci_hcd.4: disconnect device [ 2168.339977][T12325] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8668'. [ 2170.211897][T12348] siw: device registration error -23 [ 2170.947287][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8674'. [ 2171.323358][T12356] syz.4.8674: vmalloc error: size 1379004416, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2171.415739][T12356] CPU: 3 UID: 0 PID: 12356 Comm: syz.4.8674 Tainted: G L syzkaller #0 PREEMPT(full) [ 2171.415785][T12356] Tainted: [L]=SOFTLOCKUP [ 2171.415793][T12356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2171.415806][T12356] Call Trace: [ 2171.415814][T12356] [ 2171.415822][T12356] dump_stack_lvl+0x16c/0x1f0 [ 2171.415858][T12356] warn_alloc+0x248/0x3a0 [ 2171.415878][T12356] ? __pfx_warn_alloc+0x10/0x10 [ 2171.415907][T12356] ? kasan_save_stack+0x42/0x60 [ 2171.415929][T12356] ? kasan_save_stack+0x33/0x60 [ 2171.415944][T12356] ? kasan_save_track+0x14/0x30 [ 2171.415962][T12356] ? vb2_vmalloc_alloc+0x135/0x410 [ 2171.415981][T12356] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 2171.415994][T12356] ? __do_fast_syscall_32+0xe8/0x680 [ 2171.416015][T12356] ? do_fast_syscall_32+0x32/0x80 [ 2171.416034][T12356] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2171.416092][T12356] ? vb2_vmalloc_alloc+0x135/0x410 [ 2171.416116][T12356] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2171.416143][T12356] ? vb2_vmalloc_alloc+0x135/0x410 [ 2171.416161][T12356] vmalloc_user_noprof+0x9e/0xe0 [ 2171.416183][T12356] ? vb2_vmalloc_alloc+0x135/0x410 [ 2171.416198][T12356] vb2_vmalloc_alloc+0x135/0x410 [ 2171.416214][T12356] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 2171.416228][T12356] __vb2_queue_alloc+0x8c9/0x1280 [ 2171.416259][T12356] vb2_core_create_bufs+0x559/0xab0 [ 2171.416281][T12356] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 2171.416299][T12356] ? __pfx___might_resched+0x10/0x10 [ 2171.416330][T12356] ? __mutex_lock+0x27b/0x1ca0 [ 2171.416350][T12356] ? __pfx_get_v4l2_format32+0x10/0x10 [ 2171.416370][T12356] vb2_create_bufs+0x5e8/0x840 [ 2171.416395][T12356] ? __pfx_vb2_create_bufs+0x10/0x10 [ 2171.416418][T12356] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2171.416445][T12356] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2171.416475][T12356] v4l_create_bufs+0x151/0x260 [ 2171.416499][T12356] __video_do_ioctl+0xb77/0xf00 [ 2171.416528][T12356] ? __pfx___video_do_ioctl+0x10/0x10 [ 2171.416554][T12356] ? video_usercopy+0x139/0x13e0 [ 2171.416584][T12356] video_usercopy+0x47f/0x13e0 [ 2171.416611][T12356] ? __pfx___video_do_ioctl+0x10/0x10 [ 2171.416634][T12356] ? __pfx_video_usercopy+0x10/0x10 [ 2171.416665][T12356] ? hook_file_ioctl_common+0x144/0x410 [ 2171.416686][T12356] v4l2_ioctl+0x1bd/0x250 [ 2171.416703][T12356] ? __ia32_compat_sys_openat+0xf1/0x210 [ 2171.416722][T12356] v4l2_compat_ioctl32+0x217/0x2e0 [ 2171.416754][T12356] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 2171.416775][T12356] __ia32_compat_sys_ioctl+0x242/0x370 [ 2171.416800][T12356] __do_fast_syscall_32+0xe8/0x680 [ 2171.416830][T12356] do_fast_syscall_32+0x32/0x80 [ 2171.416857][T12356] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2171.416881][T12356] RIP: 0023:0xf7fe7579 [ 2171.416897][T12356] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2171.416911][T12356] RSP: 002b:00000000f4c4e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 2171.416927][T12356] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c0f8565c [ 2171.416936][T12356] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 2171.416943][T12356] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2171.416951][T12356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2171.416958][T12356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2171.416977][T12356] [ 2171.418197][T12356] Mem-Info: [ 2171.864703][T12362] fuse: Unknown parameter '0x0000000000000003' [ 2172.026224][ T7641] usb 46-1: device descriptor read/8, error -110 [ 2172.097060][T12356] active_anon:441 inactive_anon:2243 isolated_anon:20 [ 2172.097060][T12356] active_file:855 inactive_file:2778 isolated_file:0 [ 2172.097060][T12356] unevictable:1749 dirty:44 writeback:0 [ 2172.097060][T12356] slab_reclaimable:7053 slab_unreclaimable:78785 [ 2172.097060][T12356] mapped:31602 shmem:1771 pagetables:1882 [ 2172.097060][T12356] sec_pagetables:346 bounce:0 [ 2172.097060][T12356] kernel_misc_reclaimable:0 [ 2172.097060][T12356] free:50248 free_pcp:4971 free_cma:0 [ 2172.131527][T12364] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8677'. [ 2172.294953][T12365] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8677'. [ 2172.377029][T12356] Node 0 active_anon:176kB inactive_anon:348kB active_file:404kB inactive_file:168kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1776kB dirty:8kB writeback:0kB shmem:3540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9248kB pagetables:2248kB sec_pagetables:1180kB all_unreclaimable? yes Balloon:0kB [ 2172.427987][ T7641] usb usb46-port1: attempt power cycle [ 2172.448436][T12356] Node 1 active_anon:2488kB inactive_anon:7924kB active_file:3016kB inactive_file:10944kB unevictable:3460kB isolated(anon):80kB isolated(file):0kB mapped:124632kB dirty:168kB writeback:0kB shmem:3544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7288kB pagetables:5380kB sec_pagetables:204kB all_unreclaimable? no Balloon:0kB [ 2172.547889][T12356] Node 0 DMA free:2008kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:44kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2172.637059][T12356] lowmem_reserve[]: 0 289 289 289 289 [ 2172.702635][T12373] siw: device registration error -23 [ 2172.758564][T12356] Node 0 DMA32 free:22832kB boost:8192kB min:21524kB low:24856kB high:28188kB reserved_highatomic:2048KB free_highatomic:468KB active_anon:164kB inactive_anon:348kB active_file:376kB inactive_file:168kB unevictable:3536kB writepending:8kB zspages:520kB present:1032196kB managed:296820kB mlocked:0kB bounce:0kB free_pcp:344kB local_pcp:0kB free_cma:0kB [ 2172.812530][T12356] lowmem_reserve[]: 0 0 0 0 0 [ 2172.815924][T12356] Node 1 DMA32 free:173124kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2712kB inactive_anon:7924kB active_file:3016kB inactive_file:10944kB unevictable:3460kB writepending:196kB zspages:7296kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:23816kB local_pcp:11028kB free_cma:0kB [ 2172.837098][T12356] lowmem_reserve[]: 0 0 0 0 0 [ 2172.840205][T12356] Node 0 DMA: 12*4kB (U) 9*8kB (U) 16*16kB (U) 7*32kB (U) 4*64kB (U) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2008kB [ 2172.853428][T12356] Node 0 DMA32: 442*4kB (UMEH) 259*8kB (UMEH) 239*16kB (UMH) 248*32kB (UMEH) 67*64kB (UME) 19*128kB (U) 2*256kB (UE) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22832kB [ 2172.888729][T12356] Node 1 DMA32: 1703*4kB (UME) 3641*8kB (UME) 4763*16kB (UME) 216*32kB (UME) 138*64kB (UME) 196*128kB (UM) 68*256kB (UM) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 172948kB [ 2172.912354][T12356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2172.916791][T12356] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2172.939611][T12356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2172.976192][T12356] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2172.980739][T12356] 6855 total pagecache pages [ 2173.002912][ T7641] usb usb46-port1: unable to enumerate USB device [ 2173.008145][T12356] 1455 pages in swap cache [ 2173.010092][T12356] Free swap = 49432kB [ 2173.019610][T12356] Total swap = 124996kB [ 2173.072409][T12356] 524155 pages RAM [ 2173.075637][T12356] 0 pages HighMem/MovableOnly [ 2173.203578][T12356] 209057 pages reserved [ 2173.206717][T12356] 0 pages cma reserved [ 2173.592448][T29207] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2173.651691][T29207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2173.674468][T29207] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2173.752804][T29207] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2173.879101][T29207] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2173.890872][ T40] audit: type=1326 audit(1767023239.834:21013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.4.8683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 2173.966175][ T40] audit: type=1326 audit(1767023239.884:21014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.4.8683" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 2174.055330][ T40] audit: type=1326 audit(1767023239.884:21015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.4.8683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 2174.128154][ T40] audit: type=1326 audit(1767023239.884:21016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.4.8683" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 2174.150656][T12377] lo speed is unknown, defaulting to 1000 [ 2174.153005][ T40] audit: type=1326 audit(1767023239.884:21017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.4.8683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 2174.204604][ T40] audit: type=1326 audit(1767023239.884:21018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.4.8683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 2174.248351][ T40] audit: type=1326 audit(1767023239.884:21019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.4.8683" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 2174.271998][ T40] audit: type=1326 audit(1767023239.884:21020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.4.8683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 2174.300576][ T40] audit: type=1326 audit(1767023239.884:21021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.4.8683" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 2174.301356][ T6687] usb 9-1: new high-speed USB device number 97 using dummy_hcd [ 2174.342565][ T40] audit: type=1326 audit(1767023239.884:21022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12381 comm="syz.4.8683" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 2174.747569][ T6687] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2174.753738][ T6687] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2174.909776][ T6687] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2174.937691][ T6687] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2174.945545][ T6687] usb 9-1: Product: syz [ 2174.948497][ T6687] usb 9-1: Manufacturer: syz [ 2174.950695][ T6687] usb 9-1: SerialNumber: syz [ 2175.001860][ T6687] cdc_mbim 9-1:1.0: skipping garbage [ 2175.245355][T12382] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2175.867307][T12382] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2175.875250][ T6687] cdc_mbim 9-1:1.0: setting tx_max = 16384 [ 2175.889983][ T6687] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 2175.911905][ T6687] wwan wwan0: port wwan0mbim0 attached [ 2176.018666][T11709] Bluetooth: hci1: command tx timeout [ 2176.021575][ T6687] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 0e:69:77:a7:45:3e [ 2176.391952][ T6687] usb 9-1: USB disconnect, device number 97 [ 2176.395327][ T6687] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 2176.959187][T12377] chnl_net:caif_netlink_parms(): no params data found [ 2177.438293][ T6687] wwan wwan0: port wwan0mbim0 disconnected [ 2177.549970][T12394] tipc: Started in network mode [ 2177.552942][T12394] tipc: Node identity f6d6c11442d, cluster identity 4711 [ 2177.577549][T12394] tipc: Enabled bearer , priority 0 [ 2177.907769][T12396] syzkaller0: entered promiscuous mode [ 2177.952307][T12396] syzkaller0: entered allmulticast mode [ 2177.981027][T12377] bridge0: port 1(bridge_slave_0) entered blocking state [ 2178.022118][T12377] bridge0: port 1(bridge_slave_0) entered disabled state [ 2178.032680][T12377] bridge_slave_0: entered allmulticast mode [ 2178.059354][T12377] bridge_slave_0: entered promiscuous mode [ 2178.093064][T11709] Bluetooth: hci1: command tx timeout [ 2178.235391][T12377] bridge0: port 2(bridge_slave_1) entered blocking state [ 2178.239607][T12377] bridge0: port 2(bridge_slave_1) entered disabled state [ 2178.269982][T12377] bridge_slave_1: entered allmulticast mode [ 2178.275328][T12377] bridge_slave_1: entered promiscuous mode [ 2178.343912][T12390] tipc: Resetting bearer [ 2178.466551][T12390] tipc: Disabling bearer [ 2178.730449][T12254] Set syz1 is full, maxelem 65536 reached [ 2178.758572][T23681] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2178.975499][T12377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2179.064284][T12409] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8688'. [ 2179.078598][T12377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2179.167173][T12411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8688'. [ 2179.251767][T12377] team0: Port device team_slave_0 added [ 2179.355580][T29207] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2179.372920][T29207] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2179.408267][T29207] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2179.474548][T29207] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2179.484649][T29207] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2180.003833][T23681] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2180.091926][T12377] team0: Port device team_slave_1 added [ 2180.164780][T29207] Bluetooth: hci1: command tx timeout [ 2180.518616][T23681] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2180.674735][T12412] lo speed is unknown, defaulting to 1000 [ 2180.694394][T12377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2180.699539][T12377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2180.757350][T12377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2180.823386][T12377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2180.844650][T12377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2180.858834][T12425] usb usb5: usbfs: process 12425 (syz.4.8693) did not claim interface 0 before use [ 2180.873262][T12377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2181.070571][T23681] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.257750][T12431] fuse: Unknown parameter '0xffffffffffffffff' [ 2181.327839][T12430] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 2181.691378][T12377] hsr_slave_0: entered promiscuous mode [ 2181.696366][T29207] Bluetooth: hci3: command tx timeout [ 2181.717477][T12377] hsr_slave_1: entered promiscuous mode [ 2181.723123][T12377] debugfs: 'hsr0' already exists in 'hsr' [ 2181.727377][T12377] Cannot create hsr debugfs directory [ 2182.292658][T29207] Bluetooth: hci1: command tx timeout [ 2182.627194][T23681] bridge_slave_1: left allmulticast mode [ 2182.629555][T23681] bridge_slave_1: left promiscuous mode [ 2182.632900][T23681] bridge0: port 2(bridge_slave_1) entered disabled state [ 2182.792163][T23681] bridge_slave_0: left allmulticast mode [ 2182.794298][T23681] bridge_slave_0: left promiscuous mode [ 2182.826011][T23681] bridge0: port 1(bridge_slave_0) entered disabled state [ 2183.772244][T29207] Bluetooth: hci3: command tx timeout [ 2185.852414][T29207] Bluetooth: hci3: command tx timeout [ 2186.201290][T23681] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 2186.208618][T23681] bond_slave_0: left promiscuous mode [ 2186.219039][T23681] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 2186.230850][T23681] bond_slave_1: left promiscuous mode [ 2186.235733][T23681] $H (unregistering): Released all slaves [ 2186.821389][T12467] siw: device registration error -23 [ 2186.967517][T23681] bond0 (unregistering): (slave veth3): Releasing active interface [ 2186.985037][T23681] bond0 (unregistering): Released all slaves [ 2187.009657][T23681] bond1 (unregistering): Released all slaves [ 2187.944501][T29207] Bluetooth: hci3: command tx timeout [ 2188.128506][T23681] bond2 (unregistering): (slave dummy0): Releasing active interface [ 2188.131572][T23681] dummy0: left promiscuous mode [ 2188.134252][T23681] dummy0: left allmulticast mode [ 2188.199315][T23681] bond2 (unregistering): Released all slaves [ 2188.269834][T12447] bridge1: entered promiscuous mode [ 2188.272556][T12447] bridge1: entered allmulticast mode [ 2188.278579][T12447] team0: Port device bridge1 added [ 2188.294605][T12449] bridge0: port 3(team0) entered blocking state [ 2188.297618][T12449] bridge0: port 3(team0) entered disabled state [ 2188.319579][T12449] team0: entered allmulticast mode [ 2188.321958][T12449] team_slave_0: entered allmulticast mode [ 2188.324643][T12449] team_slave_1: entered allmulticast mode [ 2188.335175][T12449] team0: entered promiscuous mode [ 2188.341197][T12449] team_slave_0: entered promiscuous mode [ 2188.360367][T12449] team_slave_1: entered promiscuous mode [ 2188.376809][T12449] bridge0: port 3(team0) entered blocking state [ 2188.379875][T12449] bridge0: port 3(team0) entered forwarding state [ 2188.584775][T12253] bridge0: port 3(syz_tun) entered disabled state [ 2188.855583][T12253] syz_tun (unregistering): left allmulticast mode [ 2188.895760][T12253] syz_tun (unregistering): left promiscuous mode [ 2188.899357][T12253] bridge0: port 3(syz_tun) entered disabled state [ 2189.031203][T23568] smc: removing ib device syz1 [ 2189.176595][T12469] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8703'. [ 2189.222673][ T6687] syz1: Port: 1 Link DOWN [ 2189.225386][T23681] tipc: Left network mode [ 2189.427508][T12412] chnl_net:caif_netlink_parms(): no params data found [ 2190.535787][T12497] fuse: Unknown parameter 'fd0x0000000000000003' [ 2191.191744][T12502] siw: device registration error -23 [ 2191.468512][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 2191.468533][ T40] audit: type=1326 audit(1767023257.403:21096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12511 comm="syz.1.8711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2191.523585][ T40] audit: type=1326 audit(1767023257.403:21097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12511 comm="syz.1.8711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2191.588415][ T40] audit: type=1326 audit(1767023257.403:21098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12511 comm="syz.1.8711" exe="/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2191.623323][ T40] audit: type=1326 audit(1767023257.403:21099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12511 comm="syz.1.8711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2191.665253][ T40] audit: type=1326 audit(1767023257.403:21100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12511 comm="syz.1.8711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2191.686541][ T40] audit: type=1326 audit(1767023257.403:21101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12511 comm="syz.1.8711" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2191.719360][ T40] audit: type=1326 audit(1767023257.403:21102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12511 comm="syz.1.8711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2191.754250][ T40] audit: type=1326 audit(1767023257.403:21103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12511 comm="syz.1.8711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2191.785449][T11584] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2191.790739][ T40] audit: type=1326 audit(1767023257.403:21104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12511 comm="syz.1.8711" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2191.809109][ T40] audit: type=1326 audit(1767023257.403:21105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12511 comm="syz.1.8711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 2191.947592][T11584] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2191.965077][T11584] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2192.017587][T11584] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2192.022404][T11584] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.037026][T11584] usb 6-1: Product: syz [ 2192.039464][T11584] usb 6-1: Manufacturer: syz [ 2192.041765][T11584] usb 6-1: SerialNumber: syz [ 2192.136422][T11584] cdc_mbim 6-1:1.0: skipping garbage [ 2192.225544][T12412] bridge0: port 1(bridge_slave_0) entered blocking state [ 2192.235927][T12412] bridge0: port 1(bridge_slave_0) entered disabled state [ 2192.257153][T12412] bridge_slave_0: entered allmulticast mode [ 2192.268132][T12412] bridge_slave_0: entered promiscuous mode [ 2192.383236][T12512] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2192.482192][T12412] bridge0: port 2(bridge_slave_1) entered blocking state [ 2192.544692][T12412] bridge0: port 2(bridge_slave_1) entered disabled state [ 2192.596322][T12412] bridge_slave_1: entered allmulticast mode [ 2192.653688][T12412] bridge_slave_1: entered promiscuous mode [ 2192.657693][T12514] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8712'. [ 2192.750364][T12516] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8712'. [ 2192.807175][T12412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2192.821233][T12412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2193.015223][T12512] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2193.024713][T11584] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 2193.085745][T11584] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 2193.128177][T11584] wwan wwan0: port wwan0mbim0 attached [ 2193.138421][T12412] team0: Port device team_slave_0 added [ 2193.176473][T11584] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 9e:1c:b9:af:87:c6 [ 2193.233226][T12412] team0: Port device team_slave_1 added [ 2193.262710][T11584] usb 6-1: USB disconnect, device number 14 [ 2193.278803][T11584] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 2193.394777][T23681] hsr_slave_0: left promiscuous mode [ 2193.398196][T23681] hsr_slave_1: left promiscuous mode [ 2193.401926][T23681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2193.406287][T23681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2193.420034][T23681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2193.424359][T23681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2193.494050][T23681] veth1_macvtap: left promiscuous mode [ 2193.497181][T23681] veth0_macvtap: left promiscuous mode [ 2193.499834][T23681] veth1_vlan: left promiscuous mode [ 2193.522305][T23681] veth0_vlan: left promiscuous mode [ 2194.376851][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8717'. [ 2194.575049][T12542] FAULT_INJECTION: forcing a failure. [ 2194.575049][T12542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2194.581552][T12542] CPU: 2 UID: 0 PID: 12542 Comm: syz.1.8718 Tainted: G L syzkaller #0 PREEMPT(full) [ 2194.581581][T12542] Tainted: [L]=SOFTLOCKUP [ 2194.581587][T12542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2194.581597][T12542] Call Trace: [ 2194.581607][T12542] [ 2194.581619][T12542] dump_stack_lvl+0x16c/0x1f0 [ 2194.581651][T12542] should_fail_ex+0x512/0x640 [ 2194.581672][T12542] _copy_from_user+0x2e/0xd0 [ 2194.581690][T12542] get_compat_msghdr+0xa7/0x170 [ 2194.581722][T12542] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2194.581746][T12542] ___sys_sendmsg+0x1ae/0x1d0 [ 2194.581767][T12542] ? __pfx____sys_sendmsg+0x10/0x10 [ 2194.581792][T12542] ? find_held_lock+0x2b/0x80 [ 2194.581827][T12542] __sys_sendmsg+0x16d/0x220 [ 2194.581846][T12542] ? __pfx___sys_sendmsg+0x10/0x10 [ 2194.581870][T12542] ? do_user_addr_fault+0x843/0x1370 [ 2194.581892][T12542] __do_fast_syscall_32+0xe8/0x680 [ 2194.581918][T12542] do_fast_syscall_32+0x32/0x80 [ 2194.581939][T12542] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2194.581958][T12542] RIP: 0023:0xf707d579 [ 2194.581972][T12542] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2194.581988][T12542] RSP: 002b:00000000f544c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2194.582008][T12542] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 2194.582018][T12542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2194.582027][T12542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2194.582036][T12542] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2194.582045][T12542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2194.582071][T12542] [ 2194.852445][T12538] netlink: 'syz.4.8717': attribute type 10 has an invalid length. [ 2194.857181][T12538] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8717'. [ 2196.523555][T23681] team0 (unregistering): Port device team_slave_1 removed [ 2196.761293][T23681] team0 (unregistering): Port device team_slave_0 removed [ 2198.606874][T12412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2198.645395][T11584] wwan wwan0: port wwan0mbim0 disconnected [ 2198.675363][T12412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2198.723848][T12412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2198.797688][T12412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2198.801860][T12412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2198.831586][T12412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2198.995862][T12377] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2199.105692][T12377] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2199.176725][T12377] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2199.297940][T12377] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2199.428189][T12412] hsr_slave_0: entered promiscuous mode [ 2199.441648][T12412] hsr_slave_1: entered promiscuous mode [ 2199.462624][T12412] debugfs: 'hsr0' already exists in 'hsr' [ 2199.471666][T12412] Cannot create hsr debugfs directory [ 2199.487245][T12563] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 2199.515875][T12563] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2199.530244][T12563] vhci_hcd vhci_hcd.0: Device attached [ 2199.823242][T11079] usb 40-1: SetAddress Request (70) to port 0 [ 2199.828134][T11079] usb 40-1: new SuperSpeed USB device number 70 using vhci_hcd [ 2200.039613][T23681] IPVS: stop unused estimator thread 0... [ 2200.255020][T12564] vhci_hcd: connection reset by peer [ 2200.262131][T23568] vhci_hcd vhci_hcd.1: stop threads [ 2200.270652][T23568] vhci_hcd vhci_hcd.1: release socket [ 2200.352508][T23568] vhci_hcd vhci_hcd.1: disconnect device [ 2200.664058][T12377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2200.701407][T12377] 8021q: adding VLAN 0 to HW filter on device team0 [ 2200.727465][T24937] bridge0: port 1(bridge_slave_0) entered blocking state [ 2200.732208][T24937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2200.768203][T24937] bridge0: port 2(bridge_slave_1) entered blocking state [ 2200.772161][T24937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2201.177283][T23681] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.417442][T23681] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.512195][T12377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2201.584754][T12377] veth0_vlan: entered promiscuous mode [ 2201.614843][T12377] veth1_vlan: entered promiscuous mode [ 2201.646749][T23681] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.742941][T12377] veth0_macvtap: entered promiscuous mode [ 2201.767643][T23681] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2201.767652][T12618] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8732'. [ 2201.771817][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8732'. [ 2201.796388][T12412] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2201.809811][T12377] veth1_macvtap: entered promiscuous mode [ 2201.814238][T12412] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2201.821804][T12412] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2201.841073][T12412] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2201.851029][T12616] [ 2201.852322][T12616] ====================================================== [ 2201.855501][T12616] WARNING: possible circular locking dependency detected [ 2201.859719][T12616] syzkaller #0 Tainted: G L [ 2201.863464][T12616] ------------------------------------------------------ [ 2201.875783][T12616] syz.1.8731/12616 is trying to acquire lock: [ 2201.878315][T12616] ffff888024be31f8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 2201.881777][T12616] [ 2201.881777][T12616] but task is already holding lock: [ 2201.884992][T12616] ffff88805826bc68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 2201.888591][T12616] [ 2201.888591][T12616] which lock already depends on the new lock. [ 2201.888591][T12616] [ 2201.893116][T12616] [ 2201.893116][T12616] the existing dependency chain (in reverse order) is: [ 2201.898256][T12616] [ 2201.898256][T12616] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 2201.901467][T12616] __mutex_lock+0x1aa/0x1ca0 [ 2201.903394][T12616] anon_pipe_write+0x15d/0x1bd0 [ 2201.905502][T12616] __kernel_write_iter+0x720/0xb10 [ 2201.908018][T12616] __kernel_write+0xf5/0x140 [ 2201.909831][T12616] autofs_notify_daemon+0x4db/0xd60 [ 2201.911726][T12616] autofs_wait+0x10f3/0x1ac0 [ 2201.913999][T12616] autofs_mount_wait+0x132/0x3c0 [ 2201.916369][T12616] autofs_d_automount+0x4b2/0x960 [ 2201.918721][T12616] __traverse_mounts+0x1b9/0x830 [ 2201.921277][T12616] step_into_slowpath+0x772/0xf50 [ 2201.923657][T12616] path_lookupat+0x627/0xc40 [ 2201.925919][T12616] filename_lookup+0x224/0x5f0 [ 2201.928137][T12616] kern_path+0x35/0x50 [ 2201.929780][T12616] lookup_bdev+0xd8/0x280 [ 2201.931356][T12616] resume_store+0x1d6/0x490 [ 2201.933777][T12616] kobj_attr_store+0x58/0x80 [ 2201.936595][T12616] sysfs_kf_write+0xf2/0x150 [ 2201.938782][T12616] kernfs_fop_write_iter+0x3af/0x570 [ 2201.941258][T12616] vfs_write+0x7d3/0x11d0 [ 2201.943216][T12616] ksys_write+0x12a/0x250 [ 2201.945180][T12616] __do_fast_syscall_32+0xe8/0x680 [ 2201.947384][T12616] do_fast_syscall_32+0x32/0x80 [ 2201.949721][T12616] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2201.953246][T12616] [ 2201.953246][T12616] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 2201.957091][T12616] __mutex_lock+0x1aa/0x1ca0 [ 2201.959825][T12616] autofs_notify_daemon+0x4a6/0xd60 [ 2201.962817][T12616] autofs_wait+0x10f3/0x1ac0 [ 2201.965345][T12616] autofs_mount_wait+0x132/0x3c0 [ 2201.967700][T12616] autofs_d_automount+0x4b2/0x960 [ 2201.970112][T12616] __traverse_mounts+0x1b9/0x830 [ 2201.972387][T12616] step_into_slowpath+0x772/0xf50 [ 2201.974666][T12616] path_lookupat+0x627/0xc40 [ 2201.976791][T12616] filename_lookup+0x224/0x5f0 [ 2201.979118][T12616] kern_path+0x35/0x50 [ 2201.981198][T12616] lookup_bdev+0xd8/0x280 [ 2201.983362][T12616] resume_store+0x1d6/0x490 [ 2201.985081][T12616] kobj_attr_store+0x58/0x80 [ 2201.986917][T12616] sysfs_kf_write+0xf2/0x150 [ 2201.989244][T12616] kernfs_fop_write_iter+0x3af/0x570 [ 2201.991655][T12616] vfs_write+0x7d3/0x11d0 [ 2201.993466][T12616] ksys_write+0x12a/0x250 [ 2201.995421][T12616] __do_fast_syscall_32+0xe8/0x680 [ 2201.997422][T12616] do_fast_syscall_32+0x32/0x80 [ 2201.999174][T12616] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2202.001463][T12616] [ 2202.001463][T12616] -> #1 (&of->mutex){+.+.}-{4:4}: [ 2202.004096][T12616] __mutex_lock+0x1aa/0x1ca0 [ 2202.005743][T12616] kernfs_seq_start+0x4f/0x2a0 [ 2202.007542][T12616] traverse.part.0.constprop.0+0xaf/0x650 [ 2202.010145][T12616] seq_read_iter+0x93c/0x12d0 [ 2202.012325][T12616] kernfs_fop_read_iter+0x46c/0x610 [ 2202.014468][T12616] do_iter_readv_writev+0x743/0x9e0 [ 2202.016525][T12616] vfs_readv+0x4cb/0x8b0 [ 2202.018207][T12616] do_preadv+0x1a6/0x270 [ 2202.020412][T12616] __do_fast_syscall_32+0xe8/0x680 [ 2202.022571][T12616] do_fast_syscall_32+0x32/0x80 [ 2202.024435][T12616] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2202.026810][T12616] [ 2202.026810][T12616] -> #0 (&p->lock){+.+.}-{4:4}: [ 2202.029378][T12616] __lock_acquire+0x1669/0x2890 [ 2202.031193][T12616] lock_acquire+0x179/0x330 [ 2202.033222][T12616] __mutex_lock+0x1aa/0x1ca0 [ 2202.035547][T12616] seq_read_iter+0xe1/0x12d0 [ 2202.038047][T12616] kernfs_fop_read_iter+0x46c/0x610 [ 2202.040942][T12616] copy_splice_read+0x618/0xc20 [ 2202.042844][T12616] do_splice_read+0x285/0x370 [ 2202.044971][T12616] splice_file_to_pipe+0x109/0x120 [ 2202.047702][T12616] do_sendfile+0x400/0xe50 [ 2202.050116][T12616] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 2202.052906][T12616] __do_fast_syscall_32+0xe8/0x680 [ 2202.055456][T12616] do_fast_syscall_32+0x32/0x80 [ 2202.058335][T12616] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2202.061453][T12616] [ 2202.061453][T12616] other info that might help us debug this: [ 2202.061453][T12616] [ 2202.065747][T12616] Chain exists of: [ 2202.065747][T12616] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 2202.065747][T12616] [ 2202.071102][T12616] Possible unsafe locking scenario: [ 2202.071102][T12616] [ 2202.074329][T12616] CPU0 CPU1 [ 2202.076751][T12616] ---- ---- [ 2202.079392][T12616] lock(&pipe->mutex); [ 2202.081088][T12616] lock(&sbi->pipe_mutex); [ 2202.084167][T12616] lock(&pipe->mutex); [ 2202.086790][T12616] lock(&p->lock); [ 2202.088280][T12616] [ 2202.088280][T12616] *** DEADLOCK *** [ 2202.088280][T12616] [ 2202.092008][T12616] 1 lock held by syz.1.8731/12616: [ 2202.093934][T12616] #0: ffff88805826bc68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 2202.097019][T12616] [ 2202.097019][T12616] stack backtrace: [ 2202.098981][T12616] CPU: 0 UID: 0 PID: 12616 Comm: syz.1.8731 Tainted: G L syzkaller #0 PREEMPT(full) [ 2202.098996][T12616] Tainted: [L]=SOFTLOCKUP [ 2202.099000][T12616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2202.099007][T12616] Call Trace: [ 2202.099014][T12616] [ 2202.099020][T12616] dump_stack_lvl+0x116/0x1f0 [ 2202.099039][T12616] print_circular_bug+0x275/0x340 [ 2202.099060][T12616] check_noncircular+0x146/0x160 [ 2202.099079][T12616] __lock_acquire+0x1669/0x2890 [ 2202.099091][T12616] ? mark_held_locks+0x49/0x80 [ 2202.099102][T12616] lock_acquire+0x179/0x330 [ 2202.099110][T12616] ? seq_read_iter+0xe1/0x12d0 [ 2202.099124][T12616] ? __pfx___might_resched+0x10/0x10 [ 2202.099140][T12616] __mutex_lock+0x1aa/0x1ca0 [ 2202.099161][T12616] ? seq_read_iter+0xe1/0x12d0 [ 2202.099177][T12616] ? do_sendfile+0x400/0xe50 [ 2202.099196][T12616] ? __do_fast_syscall_32+0xe8/0x680 [ 2202.099217][T12616] ? do_fast_syscall_32+0x32/0x80 [ 2202.099236][T12616] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2202.099253][T12616] ? seq_read_iter+0xe1/0x12d0 [ 2202.099274][T12616] ? __pfx___mutex_lock+0x10/0x10 [ 2202.099298][T12616] ? alloc_pages_bulk_noprof+0xac5/0x1410 [ 2202.099320][T12616] ? seq_read_iter+0xe1/0x12d0 [ 2202.099336][T12616] seq_read_iter+0xe1/0x12d0 [ 2202.099357][T12616] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 2202.099377][T12616] kernfs_fop_read_iter+0x46c/0x610 [ 2202.099399][T12616] copy_splice_read+0x618/0xc20 [ 2202.099420][T12616] ? __pfx_aa_file_perm+0x10/0x10 [ 2202.099442][T12616] ? __pfx_copy_splice_read+0x10/0x10 [ 2202.099469][T12616] ? __fget_files+0x204/0x3c0 [ 2202.099489][T12616] ? __pfx_copy_splice_read+0x10/0x10 [ 2202.099503][T12616] do_splice_read+0x285/0x370 [ 2202.099518][T12616] splice_file_to_pipe+0x109/0x120 [ 2202.099534][T12616] do_sendfile+0x400/0xe50 [ 2202.099548][T12616] ? __pfx_do_sendfile+0x10/0x10 [ 2202.099561][T12616] ? __pfx___seccomp_filter+0x10/0x10 [ 2202.099575][T12616] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 2202.099585][T12616] ? xfd_validate_state+0x61/0x180 [ 2202.099596][T12616] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 2202.099606][T12616] ? __secure_computing+0x21c/0x320 [ 2202.099638][T12616] __do_fast_syscall_32+0xe8/0x680 [ 2202.099653][T12616] do_fast_syscall_32+0x32/0x80 [ 2202.099670][T12616] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2202.099683][T12616] RIP: 0023:0xf707d579 [ 2202.099693][T12616] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2202.099703][T12616] RSP: 002b:00000000f546d55c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 2202.099713][T12616] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000009 [ 2202.099719][T12616] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 2202.099725][T12616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2202.099730][T12616] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2202.099736][T12616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2202.099747][T12616] [ 2202.398760][T23681] bridge_slave_1: left allmulticast mode [ 2202.401514][T23681] bridge_slave_1: left promiscuous mode [ 2202.413747][T23681] bridge0: port 2(bridge_slave_1) entered disabled state [ 2202.420900][T23681] bridge_slave_0: left allmulticast mode [ 2202.422929][T23681] bridge_slave_0: left promiscuous mode [ 2202.433384][T23681] bridge0: port 1(bridge_slave_0) entered disabled state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2202.690579][T23681] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 2202.695047][T23681] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 2202.698904][T23681] .` (unregistering): Released all slaves [ 2202.761648][T23681] tipc: Left network mode [ 2202.776782][T23681] IPVS: stopping backup sync thread 7832 ... [ 2203.157682][T23681] hsr_slave_0: left promiscuous mode [ 2203.160369][T23681] hsr_slave_1: left promiscuous mode [ 2203.162914][T23681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2203.167742][T23681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2203.171085][T23681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2203.174997][T23681] batman_adv: batadv0: Interface deactivated: dummy0 [ 2203.177820][T23681] batman_adv: batadv0: Removing interface: dummy0 [ 2203.184137][T23681] veth1_macvtap: left promiscuous mode [ 2203.186527][T23681] veth0_macvtap: left promiscuous mode [ 2203.188901][T23681] veth1_vlan: left promiscuous mode [ 2203.191304][T23681] veth0_vlan: left promiscuous mode [ 2203.338646][T23681] team0 (unregistering): Port device team_slave_1 removed [ 2203.360329][T23681] team0 (unregistering): Port device team_slave_0 removed [ 2203.485626][T11584] lo speed is unknown, defaulting to 1000 [ 2203.487552][T11584] syz2: Port: 1 Link DOWN [ 2204.267065][T23681] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2204.317707][T23681] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2204.385798][T23681] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2204.449427][T23681] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2204.808790][T23681] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2204.884461][T11079] usb 40-1: device descriptor read/8, error -110 [ 2204.898552][T23681] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2204.957821][T23681] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2205.025734][T23681] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2205.099979][T23681] bridge_slave_1: left allmulticast mode [ 2205.101770][T23681] bridge_slave_1: left promiscuous mode [ 2205.104337][T23681] bridge0: port 2(bridge_slave_1) entered disabled state [ 2205.108314][T23681] bridge_slave_0: left allmulticast mode [ 2205.110230][T23681] bridge_slave_0: left promiscuous mode [ 2205.112110][T23681] bridge0: port 1(bridge_slave_0) entered disabled state [ 2205.116160][T23681] bridge_slave_1: left allmulticast mode [ 2205.118025][T23681] bridge_slave_1: left promiscuous mode [ 2205.120176][T23681] bridge0: port 2(bridge_slave_1) entered disabled state [ 2205.123691][T23681] bridge_slave_0: left allmulticast mode [ 2205.125680][T23681] bridge_slave_0: left promiscuous mode [ 2205.127503][T23681] bridge0: port 1(bridge_slave_0) entered disabled state [ 2205.131638][T23681] bridge_slave_1: left allmulticast mode [ 2205.134336][T23681] bridge_slave_1: left promiscuous mode [ 2205.136265][T23681] bridge0: port 2(bridge_slave_1) entered disabled state [ 2205.139515][T23681] bridge_slave_0: left allmulticast mode [ 2205.141526][T23681] bridge_slave_0: left promiscuous mode [ 2205.143478][T23681] bridge0: port 1(bridge_slave_0) entered disabled state [ 2205.147305][T23681] team0: left allmulticast mode [ 2205.148861][T23681] team_slave_0: left allmulticast mode [ 2205.150775][T23681] team_slave_1: left allmulticast mode [ 2205.152654][T23681] team0: left promiscuous mode [ 2205.155681][T23681] team_slave_0: left promiscuous mode [ 2205.157880][T23681] team_slave_1: left promiscuous mode [ 2205.159738][T23681] bridge0: port 3(team0) entered disabled state [ 2205.164177][T23681] bridge_slave_1: left allmulticast mode [ 2205.166003][T23681] bridge_slave_1: left promiscuous mode [ 2205.167847][T23681] bridge0: port 2(bridge_slave_1) entered disabled state [ 2205.171066][T23681] bridge_slave_0: left allmulticast mode [ 2205.172793][T23681] bridge_slave_0: left promiscuous mode [ 2205.175488][T23681] bridge0: port 1(bridge_slave_0) entered disabled state [ 2205.274282][T11079] usb usb40-port1: attempt power cycle [ 2205.308160][T23681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2205.312330][T23681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2205.316344][T23681] bond0 (unregistering): Released all slaves [ 2205.410582][T23681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2205.416476][T23681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2205.421407][T23681] bond0 (unregistering): Released all slaves [ 2205.504679][T23681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2205.510227][T23681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2205.515162][T23681] bond0 (unregistering): Released all slaves [ 2205.624897][T23681] team0: Port device bridge1 removed [ 2205.685992][T23681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2205.690244][T23681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2205.694060][T23681] bond0 (unregistering): Released all slaves [ 2205.792176][T23681] tipc: Left network mode [ 2205.864191][T11079] usb usb40-port1: unable to enumerate USB device [ 2206.161871][T23681] hsr_slave_0: left promiscuous mode [ 2206.164661][T23681] hsr_slave_1: left promiscuous mode [ 2206.167174][T23681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2206.169934][T23681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2206.175961][T23681] hsr_slave_0: left promiscuous mode [ 2206.178853][T23681] hsr_slave_1: left promiscuous mode [ 2206.181427][T23681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2206.184057][T23681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2206.186915][T23681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2206.189570][T23681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2206.196945][T23681] hsr_slave_0: left promiscuous mode [ 2206.199209][T23681] hsr_slave_1: left promiscuous mode [ 2206.201331][T23681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2206.204215][T23681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2206.209101][T23681] hsr_slave_0: left promiscuous mode [ 2206.211999][T23681] hsr_slave_1: left promiscuous mode [ 2206.215489][T23681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2206.218793][T23681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2206.222673][T23681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2206.226364][T23681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2206.241390][T23681] veth1_macvtap: left promiscuous mode [ 2206.244513][T23681] veth0_macvtap: left promiscuous mode [ 2206.246959][T23681] veth1_vlan: left promiscuous mode [ 2206.249282][T23681] veth0_vlan: left promiscuous mode [ 2206.252012][T23681] veth1_macvtap: left promiscuous mode [ 2206.255228][T23681] veth0_macvtap: left promiscuous mode [ 2206.257724][T23681] veth1_vlan: left promiscuous mode [ 2206.260085][T23681] veth0_vlan: left promiscuous mode [ 2206.265664][T23681] veth1_macvtap: left promiscuous mode [ 2206.268155][T23681] veth0_macvtap: left promiscuous mode [ 2206.270701][T23681] veth1_vlan: left promiscuous mode [ 2206.273073][T23681] veth0_vlan: left promiscuous mode [ 2206.448686][T23681] team0 (unregistering): Port device team_slave_1 removed [ 2206.471074][T23681] team0 (unregistering): Port device team_slave_0 removed [ 2206.633635][T23681] team0 (unregistering): Port device team_slave_1 removed [ 2206.656984][T23681] team0 (unregistering): Port device team_slave_0 removed [ 2206.764983][T23681] team0 (unregistering): Port device team_slave_1 removed [ 2206.788883][T23681] team0 (unregistering): Port device team_slave_0 removed [ 2206.951375][T23681] team0 (unregistering): Port device team_slave_1 removed [ 2206.974656][T23681] team0 (unregistering): Port device team_slave_0 removed