last executing test programs: 4m15.554261753s ago: executing program 1 (id=267): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x7, 0x1ff, &(0x7f00000001c0)=0x2}) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000280)={0x2, r0}) close(r5) 4m14.064112628s ago: executing program 1 (id=273): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}]}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000140)=""/204, &(0x7f0000000040)=0xcc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r3}) 4m14.01386907s ago: executing program 1 (id=274): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10, 0x80000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x3a, @multicast2, 0x4e23, 0x4, 'wlc\x00', 0x2, 0x0, 0x48}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x3a, @multicast2, 0x4e23, 0x4, 'wlc\x00', 0x2, 0x0, 0x48}, 0x2c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0x113}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0x113}, 0x8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x7, 'wlan1\x00', {0x100}, 0x5}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000001c0)={r2, 0x6}, &(0x7f0000000200)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000001c0)={r2, 0x6}, &(0x7f0000000200)=0x8) openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x40, 0x10, 0x20}, 0x18) (async) r4 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x40, 0x10, 0x20}, 0x18) write$apparmor_current(r4, &(0x7f00000002c0)=@hat={'permhat ', 0x4, 0x5e, ['wlc\x00', 'wlc\x00', 'wlc\x00', '\x00']}, 0x28) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) r5 = openat2(r4, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)={0x4000, 0x23}, 0x18) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000380)={'HL\x00'}, &(0x7f00000003c0)=0x1e) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000400)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) (async) bind$inet6(r6, &(0x7f0000000400)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) getsockname$packet(r5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000001640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f0000000500)=@delchain={0x10f0, 0x65, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x3, 0x8}, {0xe, 0xfff1}, {0xb, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10b4, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x10a8, 0x2, [@m_nat={0x10a4, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xffff8001, 0x8, 0x3, 0x1}, @multicast1, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0x3, 0x2, 0xb9}, @remote, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x5, 0x7, 0x3000, 0x3}, @broadcast, @multicast1, 0xff000000}}]}, {0x1004, 0x6, "22a15b100bcb58178a218b91c30669c482d1e6eac18a0161aef5f8902503be8e97d4807e976249aa90768bacdca99ed850496e2395db82da49856e48cef27a5759f65b3f0807221a6148534d790c63590c640826e48a645503f7aee7bf0c70aecf2eb66e1bee02965e7239d87dac9ccb7b78a7953abc7fb572994f4e1a7f633c25d6c67edb36c8008319dd764702355b1e4fc58dae5fedc863210bb8d5105c4ad9d3566f4b90355bc951b3aa1cb7e7cfac02262c04f759ac8ec34d603e47ba92dd60f79dcf8b98e2806c9c041ba13ea71ba0b88deebc20a4124f3497b2568940e8cb0c026a51c6fee87ce180d912a0fa8d81df51262e5be5d3a0d45a432ee3c034500d00b4433950c40aebd4c2f27828f27cf61cf28704516e1c9c7e43bbdfcc7860026107eed67342da7cf3faf5935a975b85539f73d96377bc39ef1e7c29b973839edc95f49bc450ec336ef34cf44f4a7c519ff1fbb242b600f74656489d662ab546ddde44adc46c4068374675e6e337bc54c643211e929c568388b70bb693ecdf4f9b6e693de63301789788e9d808e369c3b11ae610307bb54fae6e7734b262049702f5aaffaec1bbf783b03d2c1b30f40883fb861ce2b0d201ad32e4ea91fc0eb2218adfad626a52098a26b213cce7ec7d47e6194cf5ee64a7c080143c09f6d0cf27b2b8d68341e3cbfcd86df6f127529bc29a1944c2413e9a96f4776dfe3303cfa5ff5c4c1a0f2f3b2d12b2d53e8d6bb668235296260d639f2788a67fcef3370e799b098b6921a834321003869c2520ad81de5d8046b1438c8bc75d4c6dcbcd9a1229ed9d9f8f8ad0a70707a0976fdeff5649d95b2a1b26fb9648b03316f0a58c5c6a4a123c634291ba4cc00d203811a00767dfa55bba64d18d3a05037eb7b73bec288dcbaf092802603255e306dc5b02e476f144876ba24a4789034132fe3ea8ccb83d017279cf02c8bad2d040166b2a7b8c59ff03a670a2b78f21ecfc49e7632471fe1d7b54eaaa7f5acfb0650aa3a4ecdd0a941ffcb9a124098aef38a2ad6b587dae19cf0fcbdaefc3b6705a58bc5e7d86a0813aa44d9ca10c34b8cfc57dc1e652d0740d13f5e8b64edb471a005a30d49c5908dadd5d8f7974cd44b39f850886f3bc351792aa68bbc8c74e9b6eacc4fc36bbae9eb9553fe7899a446f68312317d3a45b69c292c3669e6758daeeab1fc14085d3713f64e414d5eac7d4e77ddfb39a832a203507fbbe89c0d92693e7c27ee46f9c815900c0d5752b8c85803b73a7f63d53e8363658cc82cd5f9bda3d0bda5f02f1436c421720dc5c0f578a7b3797d812b695739f113e947e528baf50de9ac76a7fb872701558115838fbf65c4809bf3a1e6c430fa7e82c760423b99eada7459090b9d1d872628b10629c44593f12561af1c72174512a0ee292d2a1665e853f8edf95855e7a4967f768d25ff0bf5327864e42f59cd04cdf394fe9c3cd01bd6d6eb225df15a21b9b386d4328b37bbbb349bb732ce7e7b62c879a2ca01cccef9f40b2237c3a6ae8d005d0456b3dd377b50d3fef82845217547f8b6bc103f3bd3117679da85c29b7de0b658cdebe511f1d8c9fe3a07a91f7c6ab28553f9ee6020630a93783d42f8465088fcd5da1605d8870d9be298e32d0d8fcc8b2a52ebd51057683042bc2c21f29cf3a2b69744f34c8fda181ce3ce91e287cf47f3589d28171343cd2bb6e3659efc79443313bad48e5daa7e3fa042b62181e79710c9663b0e96596d8d0159ce1ed30f4bbdbf48ad534114099e2d338a5b86f173ff8473db5049ba15c696bbbdb2d4f1591114a3217c3400059648726351b37387e3e896b4bad2789f5b29853606ecc3599d027f172bb8aea060f8a95fceb4b9e77e7cca059c54768b72dce0bf1401cc03dd90b754a9eb810c1ef562a2d9e405f2901cabb5a173747e33c1e265e4b0d4e50e883ea468da5257b9291127793252565e60e92ed7826677c4030f406c50b5fc8da4824d9bf3b483ce2ec90f84bb3a4fd79229e9619360e92136975bc6b1d6b30e3c84690f660e04597ef29608681aa29d689358fba9b6ee0e5b350bf09ef50dbfc143d6d049b5471d9b72cbf1ac9ed282af4ba91b8815b01e3badaa08ea5a3f9ac7f3e59ed3c4dcc0f28e11faf4dcccef8e7cfead72555acdcf9f41401c7c6a2bb30df16c8bb3015fc7aaa505980dbc4e1efe4f98143f873ca7ae0388d53332edb86932b85cb93cd0459817fd772f0ee377ece37034b44bbdf81ed200d4de8e3d026dff674b60e892c7ef81ad4d3ee62a33891b4d97d4d951f699f92250613be19c01de2e0667a3d800d6b06989bf7121eea4058b440ca049135acadb000694d1862c945373399946428e6208d6037ffe4a737c31a715fc4774cd460fd1cf8103b4c9954a3582590176681ca3bf7882d33d78677a85efe88a2c0a7076bec0d88e727a8531c597e0f5b76ab176b3145907ae217439daed3d846083b92c8a9964bc98a514201913f858f168bb39d5657492869d143d07141788fd1480befea783543471c98e879a623e8c6181c91f546fb2b8db1514a058dec8332d49917eec40d008e38cad42926f278f5ddf85607c43fc43e367c911ca464e2a13b6fb0cc2dcce2c254024843e5268f1727a58f258de02b0edce492151378f5e85a2569e96400acd64f55f4dad7b21c469fbbca5d855148850ccb0a695b2dd5d36ed9d2cd34c839105cfce39f47da8f263297f84f77511ab8bb8f8ca0ebc6626f1a273c4e9d110b59f2d57c2a324e1ba27a72a05c46fadaf6a7b18bea3c62af3dc5ccd88a4871b01d1d141dcdd99119b4383a2d9151f4977915207983d6bf3f507c7022cbfa20d99fbcd67fe6ebb5c4d60187456ca70f6d68206b790f2353ee05d2f6d009863b126ef9c8a4b0b7d968b832ce8c99144fbf79d7d634565a8cd63986210ce2d1430f68fbb6ed9e7667a3b0f2ef620416ee01ba20f04b2f2a0aad52966b9efa0170bf039824b9dee8b38dc4c0eabc7c9b26b3b2ad2c289eefc120842c286d56c748100b25a49fc32b0ff3a038b3a645ae46ef91cfd198ed4da12dfd7e2d0efd8b60d8dbb192979e3760865653454bc3bb6c4608476048275b265c7c4740e5e0334878faaf2f469b2a17455a89eefb2bb0414a9d0dcb53c9c052b8bb359f79b41b5fbbf8d987170527bc6f1a445d68d09c665bf076d254e8d26bc7c662e93a96df6a5661bf4c5412173ae826700ad05acbdec71163d747dfaa63029837fea33e7ce25c07bcc4c39ea03aba6fd00eed5836ba1299e6a126a23859990fbf9ebb9a22fc7767cdf32fb366b5028150f15351724c2626ac9965c077bd70de43ba98f94fe07953fd22818bb5ba21380634c2f54429da90466895fb577785d5cfafd535b2de6dcf4a95a5cfc1d88739a0bd1db451f3d6c25c70a92cafaf42c7394fa26a53aed5285ba3fabfdfc6970af5d534d33c509e0f5842ae3b021901c2c50311798f9e2f9a0a90a32d4eea3d8322d76673c15e5654de42455a1320009f80f3d8602b5c179af302a52a7cdd995776fffdfe0563e5c7c3e3f17332fd90def4162a9c98d676b8ed59719bc26192f95e5b38b1e8f92312f04bed3fd979aa034ead586e6cd638b9e7df017a2ec5067d0bd85be93856d803b848afff014f787f3ca99835cae7d82fad036f0034520dd249ec2f0c8fba768d8746770672a6057ff273bc4d714cebe2fd2b7f50763b94716588274009bd4999be7631a5dfa3bff32fd63d49305798d458eb184cd4bf2fb8a45c49e984715845a57eecff5b97120d5aad9feff7615bd178490f2094526034b69c54b9595469f518a7d324c98d182e7694cf3544fb533633112197ef8fddc1ad817fad9f4250dcc6332e93ee6f6e6aab8f2d2dbcd2697cf97d05706a06c03853263987a61bede76b8beff3cca9da188485fc885ede3f975a5a8228d3b953e3233fdae508dfdebe193581ccc11eded93a443c6bfa60f4d24237e617571ed334f149d809b0b67446853aa9c2cde6813b1d858c7649f44fb18ad04ed7bc716abcdca479359c26d84e0201eb416cfb1870bb83830e77e51b35dadc598e405bcc768ac3ce872c395d4eba450b29b478d3cb6f09c6a32265c4055e8215d2df9a1390021c2f740343f07e757f8d51a56dceef565ff76be5fcd82539d53152b55e1963ffaeff123b1d88086ade0a86de0431a3ee4f96a49ad2a866189a3388dfebc51e623989145e1e8c9a9fc80c780f7565ad7182b7318c0d119b716c03f06c75a80f27c9447f209395c6eca3aab41faccefa88f5918c367b43498b664bcfb963b4d0edb85838d9fded97da08968541d47c19e735b869833879e94fbc62cfb7ffa100b1a0b7fdca51b4d2158891fa3758be5427caa90465c75067482a65269f663ef73a1a8392da2fbc12957c4481d44c4f5ed30741110c13dec5a7739dada2fef577cbf3356b089af80c80c71c3208eb5e1a23e2313a5e65f3442ebbc039efbaf6dfa3cbf2fffafa697d4e0d82162158194f399b52f95bdb739d81e580c2a3b34018dc856b86255b89606cb0dba4f8bade0bd6bbfc705e26008534ea2e80c17275972b158f9f61e36c67dc4940132c9fdff5f59f82ba6bf7f2e585b815e0383f2d0909ba6b3ba3e452b71a5e6b5e887f8303bcc7b83be07c640e10fbc43e0780e18597dcafeae19f715cf05f8b145cd2912b64bdee9d342c3420a9fba086151f96299b67e258abd414401d7e50503f26694d90dece73d034cdae501af9fb01f790117b6151502053afbbf3381e32cf797ec37c36a3e27019c6166c17a4173b2730739eadec4af0ebd1f7fa28405fcc81d82fbb075f2fcbfc6d3b4367de7451dc1f5064fcebe2f0d3ab787fd87e8d1f70f613642f413cf449acf44e9ce43e878b14f6f4b3d0ee20332a759f6d26ecbdbc24fb9b5f94e36c4190633cc53f1c00c53168cfa44328aabc75baca3f13e3f9943ee5a0f2b9b20426e9cae9f21c20ad3f2fe111241485fd5b7568641309bb4e062e8368002651387b0a8b8c4bb020bda1e282b1bbd9f3586885cfec1b81a2423823cfd52d8149bd890589f723e76a0022f1f464edd14dbcc0c6d4e9b673affb7acd07ab52996e65bd6f86ac206ebdc6e7359116d45dee0665fbb951fbce19a8d0f119070ced88cc639c3a223e07d79684496c7cd56f7ce05db1a01f039ce6ecb74118a9571670826ad521b45cf8f85e6d8289cf7305298080cf82c3d56216cc1030471b0d0051aa413bf4a3e4fe1df45e68302de8c21c6bb05c4170921db88bd7eae8fd36c4dd01fff8d1e93d1ac9eab233efefd1cb9c7d644d112b59f848085fe0544b01dfa28d9e00a4768a78039def74e2b092f2b4ac6ea438d76b083e78c68f697c641e6f6170f8f74de5d5ad6e8f1e0a09d4864badc2db773c68f0a9db9cadb83eae2c381a59edb9b91a9b4215b8cf4fe565cce22d29f0e2d337371409df17e693e6a83c44afa54b8cff96abee2983d7c2178e3c53b77489e4187ff73c49eaf258cf103d6b6b730bb4163ad599895588f5b6f7ce273dc08d99ad5364a928afad296a72a4a9157e5a9bbf89b10582e0dc7f8cafc24597abf2a005ad371ec8ba13679de7d65e4d2e209cbcd1630e5c22aca86d5d20a559fd2f2cc117ce967321e467d1ca323631c6c95914aa58e0bb4a8895ea80b5c8d3f7f2fa2a9ce74ac2e1eff74e009699eb9f91790acd4a2427b0445137e3d0763916807cf41898749303d812f2cfe6fe5862f2d4bca990c98dbd841c4d523ea38be6986474d19269938aba6a9db7f38d3e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xf5}}]}, 0x10f0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000001680)=0x13) getsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f00000016c0), &(0x7f0000001700)=0x4) getpeername$packet(r5, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001880)=0x14) (async) getpeername$packet(r5, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001880)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000018c0), 0x4) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000018c0), 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x70797ec7d27d52b6, 0x4, &(0x7f0000001740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@generic={0x1, 0x7, 0x2, 0x0, 0x200}]}, &(0x7f0000001780)='GPL\x00', 0x7, 0x59, &(0x7f00000017c0)=""/89, 0x41100, 0x11, '\x00', r8, @fallback=0xd, r9, 0x8, &(0x7f0000001900)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001940)={0x5, 0xf, 0x2, 0x874b}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001980)=[{0x3, 0x1, 0x7, 0x5}], 0x10, 0x401}, 0x94) r11 = openat$binderfs(0xffffff9c, &(0x7f0000001a80)='./binderfs2/binder1\x00', 0x800, 0x0) fstat64(r11, &(0x7f0000001ac0)) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000001b40)={0x3b, @remote, 0x4e24, 0x3, 'rr\x00', 0xb, 0x1, 0x47}, 0x2c) open(&(0x7f0000001b80)='./file0\x00', 0x100, 0x18) (async) r12 = open(&(0x7f0000001b80)='./file0\x00', 0x100, 0x18) poll(&(0x7f0000001bc0)=[{r10, 0x2000}, {r1}, {r6, 0x1732}, {r4, 0x294}, {r5, 0x3142}, {r9, 0x4202}, {r4, 0x1000}, {r0, 0x6}, {r12, 0x1420}, {r0, 0x8000}], 0xa, 0x9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001c40)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001c80)=0x24) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001c40)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001c80)=0x24) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) 4m13.963869406s ago: executing program 1 (id=275): prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x7b9c, 0x1, 0x1, 0x1e}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000000c0)={0xa, 0x0, 0x4}) r4 = gettid() capset(&(0x7f0000000580)={0x20071026, r4}, &(0x7f0000000b00)={0x4, 0xff, 0x7, 0x40, 0x27d, 0x5}) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="00507e5bb208ae78de7c01018bc15cdb00f98601bb3f1670f44cb6959c5d3f75cfe5aa9b3ebd309e49740585ee2570ea50be990956f0a6100a2d838c34fe5ff6e2c5281fc9f7e90ac7fdfc32352a49a6e359b912496a22027d48c4cb16b5d7c5ada8bda9e6fcdc1398c7fd5a0926f859e3b2aa30a3fb1ab1f11ea44a246100", 0x7f, 0x24010045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic', 0x5a) shutdown(r0, 0x1) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (rerun: 64) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x800}, 0x8) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000000400)={r2, 0xfffffffffffffff7, 0x1000}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async, rerun: 32) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (rerun: 32) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) dup(r1) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0xcf, "ea165983682922c17a88753d1363ed64f830c8913f249ae58986f160284c80972f332435f9f75bd3282552f1c2b6c2971187e22f3d8f0750512877406aa2d60ae8513c16282175c4dec03f1107158a79291edb31ea2515351b534d45dfee9105ca3726541d25d5ebfbc66e465f656466978193b7302544a407e51124a81e69069212bf23bf4c40d930b5ca4c0289e4118137f7e178531995797ab382970a15fbc50f93c17e6eebf130f225b8205f22163b37847e880c4b1ac035baf0a828e3f95dffb1124396214a0050afdb74c61f"}, &(0x7f0000000100)=0xd7) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000140)={r8, 0x3}, &(0x7f0000000180)=0xc) recvfrom$inet6(r0, &(0x7f0000000040)=""/64, 0x40, 0x40002020, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}, 0x2}, 0x1c) 4m13.792993718s ago: executing program 1 (id=279): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe4) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000000180)) r1 = syz_io_uring_setup(0x4d80, &(0x7f0000000200)={0x0, 0xb8a2, 0x1, 0x2, 0x3bc}, &(0x7f0000000280), &(0x7f00000002c0)) syz_io_uring_setup(0x24a6, &(0x7f0000000300)={0x0, 0xe6d2, 0x20, 0x1, 0x23b, 0x0, r1}, &(0x7f0000000380), &(0x7f00000003c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x400, @rand_addr=' \x01\x00', 0x9}}, 0x800, 0x4d1, 0x3f, 0x1, 0x1}, &(0x7f00000004c0)=0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000500)={r2, 0x100, 0x8a, 0x6, 0x9, 0xe}, 0x14) mq_open(&(0x7f0000000540)='\x00', 0x40, 0x105, &(0x7f0000000580)={0x3, 0x0, 0x9, 0xf}) io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f0000000680)={&(0x7f0000000640)={&(0x7f00000005c0)="ee89392cba59106e88c7717b0deafa6c4e172b7ca939a5ea3e3abfd1e6e2e32c04e3a1463bb9437f7677cc06505e3aed0904dc92dcfce99a7e3aca125383c620b490654ad9aecb3f00a8c3aed768cdfc320b07facb3f2830f9c8c5d8752c0defd053f7989fbaae5c87addbc0889a", 0x6e, 0x1, 0x2, 0xf6}}, 0x1) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, &(0x7f00000006c0)) write$input_event(r3, &(0x7f0000000700)={{0x77359400}, 0x14, 0x1, 0x4}, 0x10) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000740)="2e08699ee4a0f6b95ee2fb132b5168ace097cdddd9bad68a02d5ca700f100f100fc10b68aa4e083116c21a3dcafd9f39bcbfd6362bd15a8a371329326543794dbad3f51d53284b9da35403bbd7ddaab8ee789535a8fd80c7d85b1a6dd1f384581b9050817ee2bd2d1317f27ebe3584980bd43af08967bd1010ca71d2db523256aaa7c4bbd35cffc603ae7404b9edaed68f650e00e91fae4f118ab67e28cfe95e", 0xa0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000008c0)={0x60, 0x2, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x6485, &(0x7f0000000800)=[{0x7, 0x96ef, 0x9}, {0x2, 0xbe0b, 0xff}, {0x3, 0x9, 0xd}, {0x5, 0x8, 0x100000000}, {0x3, 0x5, 0x401}, {0x4, 0x1, 0x8}, {0x7ff, 0x7252, 0xffffffff7fffffff}], 0x7, 0x2, 0x42, 0x22, 0x53, 0x2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) shutdown(r5, 0x1) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-arm64\x00'}, 0x58) r6 = syz_create_resource$binfmt(&(0x7f00000009c0)='./file0\x00') execveat$binfmt(r3, r6, &(0x7f0000000bc0)={[&(0x7f0000000a00)='\x00', &(0x7f0000000a40)=')\x00', &(0x7f0000000a80)='/dev/loop', &(0x7f0000000ac0)='#\x00', &(0x7f0000000b00)='sha256-arm64\x00', &(0x7f0000000b40)='\x00', &(0x7f0000000b80)='@:-/\x0e\x00']}, &(0x7f0000000c40)={[&(0x7f0000000c00)=',\'\x00']}, 0x100) accept4(r5, &(0x7f0000000c80)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000d00)=0x80, 0x80000) r7 = accept4(r3, &(0x7f0000000d40)=@in={0x2, 0x0, @empty}, &(0x7f0000000dc0)=0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r1, {0x9}}, './file1\x00'}) syz_open_dev$sndmidi(&(0x7f0000000e40), 0x100, 0x200000) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000000e80)=0x5) bind$qrtr(r7, &(0x7f0000000ec0)={0x2a, 0xffffffff, 0x8000}, 0xc) socket(0x2b, 0x2, 0xff) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001040)={&(0x7f0000000f40)={0xcc, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_MARK_MASK={0x8}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}}}]}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xa}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xb5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xac}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8014}, 0x4000044) write$FUSE_NOTIFY_POLL(r4, &(0x7f00000010c0)={0x18, 0x1, 0x0, {0x4}}, 0x18) setsockopt(r4, 0x3, 0x0, &(0x7f0000001100)="545c525af4d61d35bf90867e330fb2d2ecfc94668540a9e1d67d3ec87bc8ec90e3087bb88acd5887974360e011976de5b6afc4f9bc008bc8ae557608fa05148893568f52874b7e3ff2d256850b7d9216b9f368854968f4e51a069fa5c38b5e8f3ed895c6fe80078eadaa8ddbf3d4facb30d52e41ea46ef", 0x77) 4m13.662863535s ago: executing program 1 (id=281): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0xffffffffffffffff, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r2, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) r3 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) io_uring_setup(0x1021, &(0x7f0000000180)={0x0, 0x200b, 0x0, 0x3, 0xc1, 0x0, r3}) 4m13.634877966s ago: executing program 32 (id=281): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0xffffffffffffffff, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r2, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) r3 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) io_uring_setup(0x1021, &(0x7f0000000180)={0x0, 0x200b, 0x0, 0x3, 0xc1, 0x0, r3}) 3m55.794444386s ago: executing program 0 (id=387): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 3m55.793748094s ago: executing program 0 (id=388): syz_open_dev$video(0x0, 0x7efffffe, 0x101302) socket(0x2a, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701ffd0f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m54.304004502s ago: executing program 0 (id=395): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40, 0x1c8) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r1, 0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) (async) write(r3, &(0x7f0000000100)='^', 0x1) (async) write(r3, &(0x7f0000000400)="224df6", 0x3) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r6, @ANYRES16=r6, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000024010380040001001c01038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7917707fe9bce142b8971a5f2be0a4b037a87c58f573ded724070800010002"], 0x150}}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, 0x0, 0x40010) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, &(0x7f0000002580)={0x2020}, 0x2020) r7 = userfaultfd(0x80001) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) (async) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f00000002c0)={{&(0x7f000074f000/0x3000)=nil, 0x3000}, 0x1}) 3m54.303537337s ago: executing program 0 (id=396): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000001c0), 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x4) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r5, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r7 = creat(&(0x7f0000000040)='./file0\x00', 0x40) fadvise64(r7, 0xfff, 0x8, 0x2) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 3m54.11619196s ago: executing program 0 (id=398): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x1, 0x3, 0x5, &(0x7f0000000140)={0x21, "925aa8dac7e1b89d67d3c56c7f51a46081a3cfa1fc5c965efd90694e22f8e24d9a"}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f00000011c0)={0xfc, {"a483885aed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f073063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801118c20b8f16bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399ea4727d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a040200b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a64002bebc2407aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef64ab253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bf068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827475e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcb32b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba36b37767b6b45a44957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b94025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b03512629f46366e7205dd8d6f37525c1a0e94210dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9154f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d603994732d6b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21396532713e5b69cf767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285e6a89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeaf1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b627cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e46a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5c92441918145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed608000000a006e39336d07c2b80817a28ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030f81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c00004f5d374755534d7f68f679c4ff516e9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00", 0x1000}}, 0xffbc) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRES16=r1], 0x48) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty, 0x0}, &(0x7f0000000240)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000050000000000000094e139307a6a74b7e6225d05a2e2c40ec065c5f7d80a9a332c653fcdd3d78da5bf213aa3d7c1ec6d2c56fc31a0b0d5af877e4e9bf7a6ec4aed6431586e974d621e572ebe0f168270aceb984d029345e0a99ef718dbed93f964bed26b1de8ca06e967a2bd9f3be9f9a0f1600720e5142188382f763b0e4ccc7dcea748607a6f3703343ccc86ff115acfabf31b468ff0508b33ab937848879f0d69ae3cf3d9005f3ce0c6b9d51f8597d84fcb089649d60f4fdab14397beac07e3ff2ead33440e6fd8b003e6f342d9", @ANYRES32, @ANYBLOB="79db00"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="04000000050000000300"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4002, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0xb, 0xfffffffa}) sendfile(r5, r5, 0x0, 0x8) r6 = syz_io_uring_setup(0x26d8, &(0x7f00000003c0)={0x0, 0x0, 0x400, 0x1, 0x4000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r10, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x66}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4041}, 0x40084) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x10, 0x4, r3, &(0x7f0000000180)=0x80, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0, 0x80800, 0x1, {0x0, r9}}) io_uring_enter(r6, 0xa3d, 0x0, 0x0, 0x0, 0xff39) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1c8, 0x12) 3m53.753110245s ago: executing program 0 (id=403): syz_open_dev$video(0x0, 0x7efffffe, 0x101302) socket(0x2a, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa1000000000000070180fff8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m53.648708613s ago: executing program 33 (id=403): syz_open_dev$video(0x0, 0x7efffffe, 0x101302) socket(0x2a, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa1000000000000070180fff8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m41.142660557s ago: executing program 3 (id=458): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3d, 0x8, 0x2}, 0x48) fgetxattr(r2, &(0x7f0000000380)=@known='system.posix_acl_access\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYRES64=r3, @ANYRES64=r3, @ANYRES32=r4], 0x44}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) 3m41.073304539s ago: executing program 3 (id=459): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, &(0x7f0000000780)=""/185, 0xb9, 0x3c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x0) r3 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fcdbdf25890000000c000600000005ee74804000000005000800080000001a90c6dc3f133446ff4bcc0519d4536a1b6a0abf2763cec82402ed67ddf9060edd6351cf3b1adcde784d12ce2436d78c82ea0dc94acf6cb1b5ab2049688fbf7c1e868e02967d8ad05138b92e3bd23c87d75d483d9f5af976eb5c4f3c48cfdfdf3e65340fe3068ca98875a2b8231cc16b5a0d708f6bb57e3d2f56c34fbce8ad27ad9da67fa912396ba021f9a22d000f5686e5582451bcd69db259ccafe633d97a0c9ef9ff4199bc1ec665b1e61ac3f727f423016d5296ca500a57dc5d6a"], 0x30}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}) io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a) r8 = socket$key(0xf, 0x3, 0x2) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000240)={0x38, 0x4, 0x57, 0xbf, "c5ec13cab624c5412daae936f88b92ffe0c1210ec53a61bd1e5c7dca408451ba"}) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) r9 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) readv(r9, &(0x7f00000025c0)=[{&(0x7f0000000100)=""/62, 0x3e}], 0x1) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="02120000f7feff1cd9df73"], 0x10}}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x2, 0xdddd1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) close_range(r2, 0xffffffffffffffff, 0x0) 3m41.023776528s ago: executing program 3 (id=460): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wlan0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x46, 0x7fffffff, 0x8000, 0x0, 0x6, "f7f8cb", 0xa0c}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="e80000003f00070100000000fddbdf25027c0000d100378013000300717472283414d6bb"], 0xe8}, 0x1, 0x0, 0x0, 0xc880}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x10000020, 0xd3c, 0x0, 0x9, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffee}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000300)='./bus/file0\x00', &(0x7f00000002c0)='iso9660\x00', 0x0, 0x0) cachestat(r6, &(0x7f0000000040), &(0x7f000009de80), 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./bus\x00', 0x125) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000240)) munlockall() setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000080)=0x80000000) setns(r6, 0x20000) 3m40.091413263s ago: executing program 3 (id=465): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x150, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000040)=""/4072, 0x100000000, 0xfe8}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000001080)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x8000, 0x700, 0x7, 0x4, {{0x7, 0x4, 0x2, 0x1a, 0x1c, 0x67, 0x0, 0x55, 0x4, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0x7, 0x74, [@loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0x1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000780)={'syztnl0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x10, 0x700, 0x5, 0x7, {{0x21, 0x4, 0x1, 0x2c, 0x84, 0x67, 0x0, 0x6, 0x4, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x13, 0x91, [@remote, @local, @broadcast, @local]}, @ra={0x94, 0x4}, @end, @rr={0x7, 0x17, 0xf3, [@dev={0xac, 0x14, 0x14, 0xe}, @remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @timestamp_prespec={0x44, 0x34, 0xb6, 0x3, 0x1, [{@broadcast, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf0}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x85}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x3}, {@local, 0x7fff}]}, @generic={0x7, 0xa, "fce464179005a692"}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa02200}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x114, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x8a, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x114}}, 0x44880) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000000c40)) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000001040)={'vxcan0\x00'}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) 3m39.833259678s ago: executing program 3 (id=466): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="ec000000210001002abd7000fedbdf25fc020000000000000000000000000001e00000020000000000000000000000004e240001000700000a0020803b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f000009e0ff086dd1fffffe100004000632177fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d01, 0xec000000, 0xcd}]}) syz_clone3(&(0x7f00000004c0)={0x5000000, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f00000002c0)={0xe, 0xfff, 0x7, 0xb, 0xde, 0xfc, 0x3}, 0xc) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m39.74423777s ago: executing program 3 (id=467): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005001900"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b7000014110059f0ef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf2512", 0x11}, {&(0x7f0000000040)="4d0f", 0x2}], 0x4) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3m39.698138133s ago: executing program 34 (id=467): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005001900"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b7000014110059f0ef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf2512", 0x11}, {&(0x7f0000000040)="4d0f", 0x2}], 0x4) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m54.852207927s ago: executing program 5 (id=885): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x42080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) (async) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r2 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) timer_settime(r3, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) (async, rerun: 64) r4 = gettid() (rerun: 64) tkill(r4, 0x12) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r5, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00'}, 0x94) (async, rerun: 32) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) (rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r9, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 1m51.133144204s ago: executing program 5 (id=888): r0 = socket(0x39, 0x3, 0x3a) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = msgget$private(0x0, 0x3ac) msgsnd(r1, &(0x7f0000000040)={0x1}, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) select(0x0, 0x0, &(0x7f0000000080)={0x3}, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYRESHEX=r1]) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) getdents64(r4, 0x0, 0x20000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_getaddr={0x5c, 0x16, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @IFA_RT_PRIORITY={0x8}, @IFA_ADDRESS={0x14, 0x1, @private1}, @IFA_CACHEINFO={0x14, 0x6, {0x1000000, 0x7, 0x1, 0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x24044810) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r7, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x40400c1) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x121000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000080)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 1m49.864709319s ago: executing program 5 (id=892): r0 = socket(0x39, 0x3, 0x3a) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = msgget$private(0x0, 0x3ac) msgsnd(r1, &(0x7f0000000040)={0x1}, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) select(0x0, 0x0, &(0x7f0000000080)={0x3}, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYRESHEX=r1]) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) getdents64(r4, 0x0, 0x20000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_getaddr={0x5c, 0x16, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @IFA_RT_PRIORITY={0x8}, @IFA_ADDRESS={0x14, 0x1, @private1}, @IFA_CACHEINFO={0x14, 0x6, {0x1000000, 0x7, 0x1, 0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x24044810) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r7, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x40400c1) r8 = syz_open_dev$sndctrl(0x0, 0x0, 0x121000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000080)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 1m48.562450371s ago: executing program 5 (id=903): r0 = socket(0x39, 0x3, 0x3a) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = msgget$private(0x0, 0x3ac) msgsnd(r1, &(0x7f0000000040)={0x1}, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) select(0x0, 0x0, &(0x7f0000000080)={0x3}, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYRESHEX=r1]) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) getdents64(r4, 0x0, 0x20000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_getaddr={0x5c, 0x16, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @IFA_RT_PRIORITY={0x8}, @IFA_ADDRESS={0x14, 0x1, @private1}, @IFA_CACHEINFO={0x14, 0x6, {0x1000000, 0x7, 0x1, 0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x24044810) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r7, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x40400c1) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x121000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000080)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 1m47.506639464s ago: executing program 5 (id=910): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt(r0, 0x416, 0x10, 0x0, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x3}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc871fd5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fstatat64(0xffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4800) r6 = socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002e00010026bdf000fcdbdf250400000002732d"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x80) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) r8 = socket$inet6(0xa, 0x6, 0x6) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) 1m46.523071633s ago: executing program 5 (id=921): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/pm_freeze_timeout', 0x42, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mq_timedsend(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x6, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) (async) mq_timedreceive(0xffffffffffffffff, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) (async) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ptrace$poke(0x4, r2, 0x0, 0x7) (async) ptrace$poke(0x4, r2, 0x0, 0x7) mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) (async) r3 = mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) (async) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) fcntl$setlease(r3, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x2, 0x136, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m31.520622485s ago: executing program 35 (id=921): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/pm_freeze_timeout', 0x42, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mq_timedsend(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x6, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) (async) mq_timedreceive(0xffffffffffffffff, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) (async) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ptrace$poke(0x4, r2, 0x0, 0x7) (async) ptrace$poke(0x4, r2, 0x0, 0x7) mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) (async) r3 = mq_open(&(0x7f0000001600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\aXg\xbb\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x8a=\x0f\n*\x8a\x99\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5\x00\x00\x00\x00\x00\x00\x00\x01\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbbV\x1a\x8a\x03#T\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8', 0x40, 0xb, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) (async) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) fcntl$setlease(r3, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x2, 0x136, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.78169915s ago: executing program 4 (id=1414): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000080)=ANY=[@ANYRES64], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=r3, @ANYBLOB="00022bbd7000020000000200000008006100000000000800610000000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010014000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x14, 0x0, &(0x7f0000000000)=""/20, 0x51f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7}, 0x4c) r5 = syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f00000001c0)={0x6e98, 0x0, 0x3013, 0x5, 0x80000001, 0x9, 0x1, 0x1}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chroot(&(0x7f0000000000)='./bus\x00') write$char_usb(r6, &(0x7f0000006800)="10", 0x1) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(r0) 6.970082858s ago: executing program 6 (id=1420): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, r0, 0x1, 0x70bd2d, 0x25dfdc02, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x48, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x210}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c011}, 0x800) (fail_nth: 1) 6.747130347s ago: executing program 6 (id=1422): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f0000000500)='O', 0xfe6a, 0x80, &(0x7f0000000280)={0xa, 0x0, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) shutdown(r0, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000580)={0x8000000002000, 0x1000000}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000640), 0x80000001, 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x19, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r4]) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 6.590179942s ago: executing program 6 (id=1423): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYRES16], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r5, 0x1) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x6, &(0x7f0000000140)={0x11, "ffffff7f071f7023564173756e51947ab434da43930000f79cb80dc57a403a65f9"}}) 6.092818956s ago: executing program 7 (id=1424): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r4}, 0x3d) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x2}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x20000054) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x4000) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) dup3(r7, r0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 6.092485047s ago: executing program 7 (id=1425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = dup(r5) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r7 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(r7, 0x200004) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000005a97627b6e88eb44e3474d41f41c00"/34, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r9, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {}], 0x3, 0x1c000) shutdown(r9, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000280)) 5.628458079s ago: executing program 6 (id=1426): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="00000000007b8af80200000000000000000000000007020000f8ffffffb703000008000000b70400000000000085000000e3ff00009500000000000001012403dd6f1722d1d3ae34000000000000000000000066"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r4, 0x40045108, &(0x7f00000000c0)=0x400) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2467, &(0x7f00000004c0)=ANY=[], 0x0) 5.627999981s ago: executing program 6 (id=1427): openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000300)={0xfc, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0xc0, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @queue={{}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_SREG={0xfffffffffffffe0d}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xfa}]}}}, {0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2c}]}}}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0xfc}, 0x1, 0x0, 0x0, 0x448d4}, 0x10000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000300)={0xfc, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0xc0, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @queue={{}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_SREG={0xfffffffffffffe0d}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xfa}]}}}, {0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2c}]}}}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0xfc}, 0x1, 0x0, 0x0, 0x448d4}, 0x10000000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) 5.357223579s ago: executing program 6 (id=1428): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r0, 0x0, 0x20008885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x0, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = open$dir(&(0x7f0000000340)='./file0\x00', 0x10080, 0x3f1) linkat(r5, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) prlimit64(r1, 0xe, &(0x7f0000000300)={0x9e8, 0x9}, &(0x7f00000003c0)) timer_create(0x1, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r7, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = epoll_create1(0x0) epoll_wait(r8, &(0x7f0000000040)=[{}], 0x1, 0x400) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) accept4(r6, 0x0, 0x0, 0x800) 5.356571757s ago: executing program 7 (id=1429): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x124, 0x30, 0x1, 0x0, 0x0, {}, [{0x110, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x80, 0x8, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xd}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x80}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xc}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xa, 0x6, "a64a6cefe904"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x18) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xffffffffffffffb6) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r9 = dup(r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) move_pages(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000/0x3000)=nil], 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r9, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendfile(r9, r4, 0x0, 0x40008) 5.259039508s ago: executing program 36 (id=1428): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r0, 0x0, 0x20008885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x0, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = open$dir(&(0x7f0000000340)='./file0\x00', 0x10080, 0x3f1) linkat(r5, &(0x7f0000000400)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) prlimit64(r1, 0xe, &(0x7f0000000300)={0x9e8, 0x9}, &(0x7f00000003c0)) timer_create(0x1, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r7, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = epoll_create1(0x0) epoll_wait(r8, &(0x7f0000000040)=[{}], 0x1, 0x400) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) accept4(r6, 0x0, 0x0, 0x800) 5.224316104s ago: executing program 2 (id=1431): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x8008af83, &(0x7f0000000000)={0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000500)={0x0, 0x0, "da8c21bc0181978660c86e696dce8bb286885a790ded20a6b4d97ce7bac3366c6d8aea08716504ffbae1f73f65e15349466ddfee4911d4336d8c433691b579d0d7806ff6c72962b2671bb8ef5a4851c23a90ebb46b9a5383a9fbadcac0c8bb42175e64e2bd64f13ed1a43d151a5e3a40eb159a4948ae4d92cc4d266efdb4e0cab2e400562d9844787fbb90fd50c338999f7dc507fb23afb49bd07b95d19b1e57b93f063c22ae716e3d10193146b6d2f97699407076a0cb7a3e41ff3c465aa660acbbeb078450729cad205c06d95cebc22b9493c399395f0e7a8887a6c90eeb5b6d5c870fe51e4aee7ae9708bc7314cefa19f63bd79b90ec8e40318038411a0bb", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001500)={{0x0, 0x35b, 0x7ff, 0x2, 0xdd62, 0x5, 0x1, 0x10000, 0x1, 0xacdc, 0x5c, 0x9f2c, 0x2, 0x8001, 0x3}}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000004c0)) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000340)={0x2, 0x2, 0x5, 0x3, 0xffff910e}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002500)={r4, r5, "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", "87e13a7753729997ffb3164513e4de4f78f3dc13619d50328eab0c99f81c97e5d102e674aaf92b24efb9575cc6b22314b1337d19dcd86b93054e58d6b68d4abf7d8788093ee4dc6447104a32c37ea20d538a973882cb4da2dae9f952829aa0c6e843dc87e062d67e63df564eafef380b8717f4631d9334adab3e2a37de6bac93bde18e431356fa414b0de3b8696c9ff6585175ff3b2a0d895f398145062952ae753c941684f9734f82c040ae836a568cbaeda0da72096592139b586122d8bc5e5cbc9e2edffc2394b4fb0b9aee7f43a13a20f4d436da2b2f76be90220f7a06e892a76fd94b0c335d93e36f52757e41cc152000e02a5b6d03c917cb09c46b81c7851924e447b9609728c6bcfcae28514ed86d66dd42f1ede92d1551eeb837d60e146e4cf395f71fcd8817ce3837d276027f03b59a83779461923f1fd1a4f88823646cbf44c8add2d1b460643a4978f5451b4f3903a008a8611280b1a05ecdf20203e18834ba130fbcd8dc4cc24e174f1369bf212874d83d0e2f73b124bcf6c9acdbe38de621adc25ffc3d329de0ac3fe90748a38c75fc5bbaacb085da8feff17c10a8ff4d15cc5b1b989a18b96e7ed925c7642cbc3d5748379a0a86ee2f52fbabfd0c4842e990746b81975c49a6270dff345e0e092943f7fa531dde8e8bc56d4bb6a8db49c24a265605409f55e992c0e84c98f2f17b99180017fd18adbaec657c6e2de75f2c500b794217921e4e12c3be693edb2b31bf7bc47b830e20d9fd993a9d30184576299bcbb6b7cb3156b97c73377e6e484a5612b0f56622ea4cd07ef72e76eacbfea2efdf9fa65160997fcd688331da1b2f87a56bf9483a45c2755f7c2755c68d763a9fa71428c6c5853d1c6af6dff5ead20a469d67e47645dfe5fc20165033cb21a0fc2cc786d077d7e00b7bdf59fd69bf8c40c7ae5513e82a2b6cbd708f52e1705160a3cbf7e3485832fc4407a7e18219636e350592ed9a530f44c269a4ec0c1f14d6ac17f05835dd685d83c3f16f65d61d3d20aaabce3ab452bacae0c3a2225f2485430836d648fb2bbbc69c2ba71773d0d385908786a67f3b413624e1ae77eaeee99bc158ab9b1811791f690f08596991e21e159b78b5f60b711f7b076dba2855542fc0871efd9f1d9ed45a92054f20a259118a46dadbac5ca10f1ba757b9547db4a69465b997688d9d94172f5715276ca5b9f66ab015cb1b465382a71622d48f1fcd31b544e86e14c337ea8d32087f6323cdbd66177efd5b4c31d842d38ae2f1d8ceb5361dae1755e77b24cceab742b6018f6be65874705f0470e89f9dc617915ef527138f5c602071870caa93f2e918b372237d9741154b35002690dc9b96281f461251553bb2a223ae818acc61e45c22051fc914152ca714396751d79012987d3a5ddc49afe7f43cc213834f181ebadf31f38d106537eca8cb6f9c79bde3ceeb6c20a840f5245861099b509deccf332683a54747dbee13bd762bb251f1e9defd63b571e41fdc040aa57e891196fe2050a74d9e15aac30d68547c36dbc89a46f85f52299cc36e6d45eda80d99d2536d7ecba3ac127384ce0a0bc2ff8f846532e6e8d08988ff288fdaaf925dd348e150549a5140d61de6084e616803d3a8321a2fd98489986d3779cf84af478b1ee0f4a2cd34d821697f964d16f10f97e95a3295a036bc47f2f33ec787a1c3bbcc4ebcfd573d615952d2bf9c98dcd2370a2c89c0c89bea421c7f32b52be01b7aaea5dcc6872b89963421aec339feb556ee01e088ea8cf040ebf53823f49264ba971d53602b8f71c573da53b2ac526565c06a7e5eaa28d7d569983431af73501f92205104f0ff0d439404691acaae875dbc01a5e03d74fe7d24434c9780679b17270e27ffa70f83ac997297ceeb6821ac70ba836359dd24e710d57ed30580244d4f986ecc89e7d8cf1bffafa369ce568583c13c083f244e482b84feee741bca58f9164750fb83493e7f0a99af55b7ff17fb9e357f14226f3d753a85dda9f36e53f34b8b2cb9205f6444cad989ea2b0601e09c959b3633ed708af71d2a65464924be5600eb8c0be6d2130d3a91492fb8e5905c6d8a2e0d814ac86695f787250edbb76e50567e2fb3683f78cb638e6db3a65ca07daa7cbe4938ae890929e806e96d98a4026ff4d1e464b14bfaa80b932f2bd1287b48883f1fce26934bdabe56e5574fd81df18127c018ebb4cd3557404fecb5bb409816425448f53727179c557ae8411924aa00078913aacb5785fed13f2c2ac08b615c845933938dae59e16fb83aca2b99b557e6ee891efd7d4a43a2fae2311e84dbec3127cdf47360b93eba6c4354b7e7bfad876b2a373e42741a266cbc41d713ab066d68691b83143f2edfc895151beedccdb338190082a3da59dfcf36ed3a44eb7ee3bc22d2b10fc631f8c4d9544d1a613ee34661f4580229ec64d6cd89f13ce8bc1594e5fba2e8e923a60200c7e0b108db6fe39f31d0b5f7608af8b70dd19d29db07c720a0b9484f12d6f8d28751434bdf54dfb3b744d71f1bf79dd3c7cb3aa3a6b118d658ef12814ace4ffc798e26d385ea9871a0e530e3b7918eef84d899e68c6b6add971d6af81573bafe929281c8c49fd98869a3fa611652ab69ea22a10e37f0487509e3ef4b17638cd7497d20b7f1ce49cd0ee73f5bab46d478a4488943de2ebc5721532e2dbe94c18c03832275daf975bcd15d8e2b67c6172844f9972534ac05906d83d5c2dcb53e94ca69d6bbba8a1901dcb351ffa8508b3850987f47baf19a48ee7f56a95b7e2d1ecf5c07cdd256b3d72182547995887d489a90555a858d2b71e6f2467644b7bccfe3d041376b055414ef94513da023befe9efc60c52a4bad58dab6ad5eebceddeb0399fd57493a6c0bea7943327b19d7d86e1ced797ecdc469aad46f3c66641b5c29c7b7c6af8c832be492805cb003b4df58e61855e0073560d836ddb709c66c455dd42f17153fd4a9566380f966c919179e103dfd870dd7871272cde267ffbf440eed9296e01b54f9c0048bfadf468e5d00c5c5a9f7109c6f6159c1feb2919e2451c2390b6b9e47a80cee89866d0e807747441b38b82e426af3f9752a80e2af594168a4972cbdbfb05bc508d4941ce1685456ca333f14bdad8e8a0c336e608a5564e94ed72ea87bb9466cca994b55605e3d5437f3fffa24a74b823c933301cbd100825003e1f0b762b02867609db173fea6f77b47a4d36f6f9703d47f1d69b9d3198dd92d796264aedb7e90073eba05cb2647857c3a065d3ebcf940742b40f22c26887d2c5dc52eb9c1adfd5ba03c32a44d65b073db44717ececc7ba403b3047bbf09eef3c4c3a766318d2d3d42017d7a17fbfe0a1fdc6075639eb293cf5f9ba169e15b1c5266c18fcbe992e9d905d3870f48913847f8f2ace8d285d6c92e4307ec26984b938f813d55913d798f418122fceaa9c676d67cdfc576e79ffa280c1209c90ce0d891b7ab0eee5a8b7c2b4c997be377dc877432c9934a111f3720f32be5750ebc0189e1cb94cee6b87a43d82f9eee2d2c06eb009c0d7599892d0ce263e15fc912ed74b6f605d9ada35a4b290fcb97a884afe78025e685ea4415db453d677db236d1bed54b22e9037ccfa8a2096c99d5931f14ab532e3127eb856bd9d5282d1457d3edde7ec11173d5fca8888dbc7be303ba893615ac082341125d0c15758f9d1c782f5860131f0a1cc8c1b1a3781fcf183f711c821cdeeb190c20ed8114155247458be74beea6d12daca73809bd565bdaea16d06c633b26f94df561fc4fc60f40c4cb24d63f692f36d97d0d9bee047b7852c8f059733349463ffc86dff72c02be064b7fd34246704e68133fab2246c793eeb018ca1edbd0c18b3c705a860d7957f7dc6ef3cd1e45f066c67ef4f0ab1f05cc9ef9422556cc984a186729f2d8f999cb4d930d8b96fb0697ae842aa7fd98814130dfa9ef7b032e8609a56b77702fd5426f97dceaee5a7f60f7439a9432b0f24a8f6b63d62f1d71dc5afe06f2ba70033c9acdf1c0f8cb7241e6c916295f211451f7952901fda5a6d6c87a88100d7ec4f472ece63d1368c1f3855bb20cf0d741f0e79fef64e89f27858195cb30514d497ba320f700ace629d311ec13c899918d4ea2caa4452e1bfc6e9fd35e923b83b9a019d092196196c7357f9aaf62ff39ea843549f2a3bb0e32eadef9cda5ddf8403cfa2e22e7a1708c47bd779edbf536229b67c0e371f5d940ad04b4a98d7e6319faaf3fe4b4b0c5aac75ec37fa31745c14fea8956c653f50e1fa9ce6a1a89f6b2954edb4ed362d05cd9cb3b63149b9e706f472d59847335f52ea4c08df3b4dd7113f8dced984906805ad2a3204fee4cb74975392a27fb0e929f54222910a2eeb27c2b5a0032bce897b4b4899cf420e777ef3d37db665982f87f2349aa76f3710f8808ee9b02afa1fff200d74620b8922eac7597d26c28577e9c39c3c32fbf27a9ffc533c2d967646fd0288a026505e56c5d26f74e2828986c95ade61441dcf1657b2c218bb6b80418a5f62d90da753e3d42d62e7c9a3da3a92441950f3fff1bb21adc965d12aed7d6f39c8171ed74f637b2587c4b01d3ba7dac353e8cb32d3d7cad83b2af89432386e8e60e7200e9594d30ca1ba31fdaa912a0295b1246b258098c74c1c8c0f58acf8c2d45bd6e9601497b85a84e821da80f5960ab3390165aa5bbef1b709ff4c19e096e4fe3d3bb48cb212cc3fac9690b92bcca2c2a2ec9454494b86806496dec74581d4813d42fa8ba50756d8057ff5433b01bde7c74eeb9b2c4824ac372616019a7034df1a70e74b33f68b2dd1606dd2709986c4fb6508ed49d435181c0c6a7b875e0d358f5e0b171396b2909f2f6d940c9cf2e7dbcd60922072b17b746f39ad9525ec3107462f0425d105622895b5fdae0207f3d9e593a32af2ebc6c9002fe962f80f4a20017410b9abaccfb45b2d65d578967b2c33bbd71dbd24f7cf8e7fd8e8e9848062545bb8c1e7827f8dea4409125bb45a1ad83a2f967005c3405b6a1df923ad8be12809cdd3fd6676483cf2775ad85fbea9a67d73e43aaa88ff0f3a9f0ccd0fe8628c738f50c7cd28d6579346fa3be18dd6237d4427b611077ab8e14d3f17f4acf42738a952e1d0e2f5a3e7c0c1e2788639ccbe23d092cc441e2275c2effeb7ff218135e28faf2dbce36a8578fbe689141a5847f88ab1b564a271d8638f9acb8bb3e0308d749d66e797dcf58470c9809e4fae4932e9c946c5bc5db8d8df5536c239da44df85f3e067e11c9ec1afd9c083903e572794a4bac59d22a5a52dbb766a0f63087e6a746012994e7819bcff243246127c041d1cd7da662a921a685e28bccb7a8a71b97d32078a59053923b75ad8ae317aa36b83f03ddb0e2bce588524c1f16ebc1e4cf957cf672a960c621"}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 5.11430838s ago: executing program 2 (id=1432): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYRES16], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="100000006404000828bd7000ff0020252f7b11165d8cd17778fb6e02695d8e17802763041813e117daf2f5f5c56873feefd38810c2755df4c3f85cd223ed58efe33976a49d9b5e09ca1c8ba0b198866ae3570debc1d70b09228c879e9a3bb87253313cf234c317d8bf9a0650f22d1099d2c5cdfe5125aaf8ba7d521500a0372a7e1dd4e3000ca39be294a500780a5f47a550bd587237e9d0aec9127d1070c23260ed3c5b412b3905c8885fcdb5ea6f0e1e86611c8a9241f8f6e0"], 0x10}, 0x1, 0x0, 0x0, 0xc010}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r4, 0x1) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x6, &(0x7f0000000140)={0x11, "fa972e52071f7023564174756e51947ab434da43938439f79cb80dc57a333a65f9"}}) 4.689570687s ago: executing program 4 (id=1433): signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x7af2, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000700)=0x31) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f0000000240)={[{'noacl'}]}) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'some', 0x20, 0x0, 0x20, 0x5}, 0x2f) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x40100, 0x0) unshare(0x40020080) 3.430244302s ago: executing program 4 (id=1434): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x20058, @mcast1, 0xb}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r2, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff0000f8ffbea20000002903467d38fdeb5bffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000000085000000b7000000000000009500"/104], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 2.736297836s ago: executing program 2 (id=1435): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x20058, @mcast1, 0xb}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r2, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff0000f8ffbea20000002903467d38fdeb5bffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000000085000000b7000000000000009500"/104], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 2.149819145s ago: executing program 7 (id=1436): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x40, 0x8000, 0x8, 0xfffffbff, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x66, 0x0, 0x7, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e0c0f"], 0xf) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, &(0x7f0000000340)={0x73}) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_channels={0x3d, 0x9, 0x8, 0x6, 0xe5, 0x0, 0xe, 0x3, 0x4}}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x10000000, 0xffffffff00772d46, 0x0, 0x400, 0x200, 0x0, 0x0, 0x0, 0x12}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x1}, [], {0x4, 0x6}, [], {0x10, 0x2}}, 0x24, 0x2) syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f00000003c0)={&(0x7f0000000740)={0x50, 0x0, 0x0, {0x7, 0x29, 0x25c17c22, 0x0, 0x2, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6838}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x28}}], 0x1, 0x854) ioctl$KVM_GET_DEVICE_ATTR_vm(r4, 0x4018aee2, &(0x7f0000000300)=@attr_other={0x0, 0xccb, 0x6, &(0x7f00000000c0)=0x5}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.189991444s ago: executing program 4 (id=1437): openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) fcntl$getown(r0, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000007334f61dfda9a2120f16549960108b78905a95a7bb418bfd3735f4901b623d9344d66d143b7ab2753b9900e1330af19da4a50e8667dcc34f115dc9b4cfb014a9259c6f2bcda8bf1156768e4a2b3334aee770e5231d1aabb638c2835c6ed7beff65a7297e84b190b46d7a491b6eee81f3238bac840c4f16e637db95409ecdf4813857403dd920157dbabf000000000000000000000000005970ef732039bda6f8dbab37973c45734e4818aacbb444dd5535df6e0500cfc3af7571aa0af0fa4c40d0358f0000", @ANYRES16=0x0, @ANYBLOB="01000000000000000000010000000500040001000000"], 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES64=r1], 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r6, 0x8b23, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') getdents64(r7, &(0x7f0000000080)=""/36, 0x24) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000e40), r8) sendmsg$GTP_CMD_ECHOREQ(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="060006000200000008000400ac1414bb080005000a01010208000700", @ANYRES32, @ANYBLOB="48cd637f02c73bfc88bed8f74baaaa22dc4775ba691d64184d52a6493fe56f540d8be1eccb97389d86bccac711a05e6c369b0cf1ed74a4321c654347f0078fdb63a9a80f58c553f6c03bb05bf444e1c6080410d02a28901e319415f669f76941f9f9cba1b044ffb6581b5a3bcc59234ad0e82fb2e921fd6d0e3bac"], 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x4c000) getdents64(r7, &(0x7f0000001f80)=""/4095, 0xfff) 886.91466ms ago: executing program 7 (id=1438): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000010000800018000000180000000200000000005c000100000004002000000000b6038fad40b20002"], 0x0, 0x32, 0x0, 0x1}, 0x28) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) sendmsg$AUDIT_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x3e9, 0x10, 0x70bd26, 0x25dfdbff, {0x40, 0x0, 0x0, r1, 0x5, 0x7fffffff, 0x10, 0x7, 0x0, 0x6, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x55}, 0x2c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xd}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000140)={r3, 0x58, "6aa0b1684e7d31558cfcdb0060c73cfb88f96f2462ee7cd6a94ba2e740b694eac1192648d23b64566bd8d801da767b74d2b5d3a43a06e825a693b2838c31e9f995d5aa733dd1d049d1383f996ab333cc69e6bd3362aa7c9c"}, &(0x7f00000001c0)=0x60) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a80100005800c00068008"], 0x34}}, 0x0) 750.081998ms ago: executing program 7 (id=1439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) syslog(0x2, &(0x7f0000000380)=""/152, 0x98) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) bind$can_raw(r3, &(0x7f00000000c0)={0x1d, r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000205000100070000000801063ffffa000300000000000000000000080000000000"], 0x24}}, 0x48810) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) writev(r1, &(0x7f0000000640)=[{&(0x7f00000004c0)="a51d", 0x2}], 0x1) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x40000000788, 0x7fffffffffc, 0x2000183, 0x40004, 0x0, 0xee, 0x1000010000000003, 0x4, 0x1000045, 0x6, 0x3b9, 0x80, 0xfffffffffffffffc, 0x15855810, 0x8], 0x40000, 0x384210}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 514.582323ms ago: executing program 2 (id=1440): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x158, r6, 0x800, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0xffffffffffffffdb, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x87, 0x3, "99c48810064d475d2f3f378957d166d62e48d69872fcceba63cf3cd5a30334f32ba3e0555a6ceed2e48d2ac4e02ff9c5be964872b4ed9c80c4847484d3ea8c51e8f2007e32af0cbb6bea0e871e8b1775dd5c13a96380807b061f5149d3a728370598ba8b97340c72ef66a9bf9b585925c5c2ea389fff666a98016ea113bf503897e1ae"}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x38804127}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6606ac3e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1b4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}]}, 0x158}}, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) capset(0x0, &(0x7f0000000140)={0x0, 0xfffffffe}) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) dup(0xffffffffffffffff) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r8, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x4048043) dup(0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'comedi_bond\x00', [0x2f, 0x80, 0x10006, 0x4, 0x1, 0xcc7, 0x8, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x4, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x89, 0x6, 0x0, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x8, 0x6, 0x401, 0xfffffffd]}) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 191.29523ms ago: executing program 2 (id=1441): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@restrict={0x2, 0x0, 0x0, 0xb, 0x5}, @const={0xe, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x5f, 0x0, 0x61, 0xcdaaa7da0f9bd5e8, 0x2e, 0x6f]}}, &(0x7f0000000040)=""/29, 0x38, 0x1d, 0x1, 0x1}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x6, [@enum={0xe, 0x3, 0x0, 0x6, 0x4, [{0x5, 0x1}, {0x7, 0x8}, {0x6, 0xb13d}]}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0x9, 0x80000000}]}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x47, 0x0, 0x29, 0x2}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x4, 0x2}, {0x5}, {0x8, 0x3}, {0x2, 0x5}, {0x5, 0x5}, {0xe}, {0xb, 0x3}]}, @struct={0xd, 0x5, 0x0, 0x4, 0x1, 0xeee, [{0xe, 0x5, 0x6}, {0x1, 0x1, 0x80}, {0x8, 0x2, 0x1000}, {0xd, 0x4, 0x7fff}, {0x1, 0x0, 0x3}]}, @volatile={0x7, 0x0, 0x0, 0x9, 0x3}, @var={0xb, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/205, 0x10e, 0xcd, 0x1, 0x6}, 0x28) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0xd, 0x7, 0x2, 0x1c15a, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x5, 0x5, 0x2, 0x0, @value=r1, @void, @value=r2}, 0x50) r3 = syz_open_dev$evdev(&(0x7f0000000400), 0x4, 0x4eef757373abb7d4) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000440)=""/251) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000540)=""/4096) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001540)) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000001580), 0x5, 0x800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000015c0)={@mcast1, 0x0}, &(0x7f0000001600)=0x14) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r7, 0x4068aea3, &(0x7f0000001640)={0xdb, 0x0, 0xfffffffffffff000}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x60, r9, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xfffffff8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x24004004) getpeername$netlink(r8, &(0x7f0000001840), &(0x7f0000001880)=0xc) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r11, &(0x7f00000019c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3a, 0x0, 0x7, 0x3, &(0x7f00000018c0)="18e52c26770296dbd3b346b9525e75a0c7e2fe87be39eff116bc0850e9ad6f67b668a633461a250cc7248603dff96bbdf290a2dfdf67e325cf61f4c881dd4b3a56bd0f27e82549407c072827f956499cb84c4507ea64ee2a36c8d85fa58c5fecdc91d945ab1cfd62792a3c90b6399e48d0ceb3b04bccc9dcfdd4e2ddee5d3992a08416f6ad9b710ed7fc4356f1556595362d3f6750882a8f6c9fc827f0eb807dcec6abd22d74ac6f1747c645f9e19ae0b3155dda3e95800b5d0eeddbf26bf3301a6c8f5840b9ff0de52f9302909cc1bdfea5b901802b30dd406ce52f8eb1", 0x38, 0x0, 0x0, {0x2}}) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000001a00)={@remote, @initdev}, &(0x7f0000001a40)=0xc) syz_emit_ethernet(0x8c, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@generic={0x19, "0c66e33e4b90a0161d39b13bbd4a27fe8ebb25ecefd32d2c9480a939a3ddda4d733eaac957652a6ad0afb55ce68a98bba4e0912daa71a53f79d325aef29c215f38cf5eaaf746a2862003eca68862b25be8f423e21204443886cf3b188ab9f648c11c74d56b7a2bb0f8397b054ad7d73f6f71647212e750ed6d936a4f6b9d"}}}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f0000001b40), &(0x7f0000001b80)=0x4) ioctl$KVM_GET_IRQCHIP(r7, 0xc208ae62, &(0x7f0000001bc0)={0x2, 0x0, @pic={0x5, 0x5, 0x3, 0x9, 0xf, 0x4f, 0x6, 0x22, 0x81, 0x0, 0x2, 0xf7, 0x8, 0x2, 0x80, 0x7}}) read$msr(r5, &(0x7f0000001e00)=""/70, 0x46) ioctl$FS_IOC_GETVERSION(r7, 0x80047601, &(0x7f0000001e80)) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000001ec0)={'wlan1\x00'}) 184.678458ms ago: executing program 4 (id=1442): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, r0, 0x1, 0x70bd2d, 0x25dfdc02, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x48, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x210}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c011}, 0x800) (fail_nth: 5) 178.996638ms ago: executing program 2 (id=1443): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@newtaction={0xfc, 0x30, 0x400, 0x70bd29, 0x0, {}, [{0xe8, 0x1, [@m_ct={0x40, 0x2, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "acf9b93006fa9d0aece141b5356c0ffa"}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xa4, 0xa, 0x0, 0x0, {{0xf}, {0x58, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x7, 0x5, @loopback}]}, {0x1e, 0x6, "28e84cbbdab0e9920fe6f8f716df501e04a2d5365b736fa4aaaa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x240480d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="55b99b552b598344191be46e6fad39b4aa37069459fb5bb003e32e8866fa0df4f2117ff138291655471c7bf071a1e62ee3bb5df2abc457c95db6864ecefc23637f777d61d605389b3143cc509a1b8373f494480bdbc6f329b3410ef208b10b297b0f25a9354793379f7d4a43f8751c0fe26449bd57a7204f0592fafb9652da0660a749ef19bb800d53e2b3b670e055fd35cc892f856009dbfb1b72520225857cfb83739ea63bc31630360dd6a40b7a83d087733e9d4742c5c397558467843cc2f75d9ffd794556164e42022600979c3abd1eb5f25c0f02993c6ff9753dc5d06176369e4392"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fcfff4ff2000000000000000953c000000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = open$dir(&(0x7f0000000340)='./file0\x00', 0x10080, 0x3f1) r7 = signalfd(0xffffffffffffffff, &(0x7f00000005c0)={[0xffffff57, 0x40]}, 0x8) linkat(r6, &(0x7f0000000400)='./file0\x00', r7, &(0x7f0000000680)='./file0\x00', 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90", 0x22) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000240)={0x84, @empty, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x4d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wrr\x00', 0xd, 0x7d, 0x2e}, {@private=0xa018102, 0x4e21, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) 0s ago: executing program 4 (id=1444): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x20058, @mcast1, 0xb}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r2, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff0000f8ffbea20000002903467d38fdeb5bffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000000085000000b7000000000000009500"/104], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x200a00, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0xffffffff}}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) kernel console output (not intermixed with test programs): 1000 [ 231.336325][ T9519] lo speed is unknown, defaulting to 1000 [ 231.343230][ T9519] lo speed is unknown, defaulting to 1000 [ 231.380604][ T9518] 9p: Bad value for 'rfdno' [ 231.385162][ T9518] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 231.388046][ T9518] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 231.391653][ T9518] vhci_hcd vhci_hcd.0: Device attached [ 232.073427][ T9520] vhci_hcd: connection closed [ 232.077179][ T8011] vhci_hcd vhci_hcd.6: stop threads [ 232.079530][ T8011] vhci_hcd vhci_hcd.6: release socket [ 232.081994][ T8011] vhci_hcd vhci_hcd.6: disconnect device [ 232.295624][ T9532] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 232.297788][ T9532] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 232.300420][ T9532] vhci_hcd vhci_hcd.0: Device attached [ 232.341939][ T9532] netlink: 'syz.2.782': attribute type 1 has an invalid length. [ 232.451358][ T9532] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.542756][ T5991] usb 41-1: new low-speed USB device number 7 using vhci_hcd [ 232.928602][ T9533] vhci_hcd: connection reset by peer [ 232.935734][ T6764] vhci_hcd vhci_hcd.2: stop threads [ 232.938222][ T6764] vhci_hcd vhci_hcd.2: release socket [ 232.941153][ T6764] vhci_hcd vhci_hcd.2: disconnect device [ 233.093545][ T9558] netlink: 'syz.4.786': attribute type 10 has an invalid length. [ 233.097207][ T9558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.786'. [ 233.147542][ T9558] team0: Port device geneve0 added [ 234.533102][ T9580] netlink: 'syz.6.794': attribute type 10 has an invalid length. [ 234.601043][ T9580] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 235.108093][ T6827] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 235.137401][ T9578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.185299][ T9583] sp0: Synchronizing with TNC [ 235.672979][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 235.793811][ T9595] ntfs3(nullb0): Primary boot signature is not NTFS. [ 235.796324][ T9595] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 236.547851][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 236.547865][ T40] audit: type=1326 audit(1766741446.267:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9600 comm="syz.2.800" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x0 [ 236.873257][ T53] usb usb50-port1: attempt power cycle [ 237.465318][ T53] usb usb50-port1: unable to enumerate USB device [ 237.662776][ T5991] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 238.347401][ T9648] 9pnet_virtio: no channels available for device syz [ 238.658890][ T9656] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 238.661190][ T9656] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 238.668819][ T9656] vhci_hcd vhci_hcd.0: Device attached [ 238.757903][ T9661] random: crng reseeded on system resumption [ 238.953021][ T53] usb 42-1: SetAddress Request (18) to port 0 [ 238.955263][ T53] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 239.424954][ T9657] vhci_hcd: connection reset by peer [ 239.427701][ T8011] vhci_hcd vhci_hcd.2: stop threads [ 239.429682][ T8011] vhci_hcd vhci_hcd.2: release socket [ 239.431715][ T8011] vhci_hcd vhci_hcd.2: disconnect device [ 239.942247][ T9684] 9pnet_virtio: no channels available for device syz [ 240.011712][ T9685] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 240.014627][ T9685] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 240.018235][ T9685] vhci_hcd vhci_hcd.0: Device attached [ 240.096091][ T9685] netlink: 'syz.6.818': attribute type 1 has an invalid length. [ 240.140334][ T9685] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.263465][ T5991] usb 49-1: new low-speed USB device number 6 using vhci_hcd [ 240.517779][ T9691] netlink: 104 bytes leftover after parsing attributes in process `syz.2.820'. [ 240.521480][ T9691] netlink: 168 bytes leftover after parsing attributes in process `syz.2.820'. [ 240.654484][ T9692] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 240.656704][ T9692] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 240.659640][ T9692] vhci_hcd vhci_hcd.0: Device attached [ 240.781018][ T9686] vhci_hcd: connection reset by peer [ 240.783344][ T8031] vhci_hcd vhci_hcd.6: stop threads [ 240.788972][ T8031] vhci_hcd vhci_hcd.6: release socket [ 240.791243][ T8031] vhci_hcd vhci_hcd.6: disconnect device [ 241.143318][ T9693] vhci_hcd: connection closed [ 241.145045][ T8031] vhci_hcd vhci_hcd.2: stop threads [ 241.152789][ T8031] vhci_hcd vhci_hcd.2: release socket [ 241.155994][ T8031] vhci_hcd vhci_hcd.2: disconnect device [ 241.426176][ T9722] netlink: 'syz.6.827': attribute type 10 has an invalid length. [ 241.435370][ T9722] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 241.576851][ T9724] trusted_key: encrypted_key: insufficient parameters specified [ 241.751398][ T9729] comedi comedi1: pcl812: I/O port conflict (0x4f27,16) [ 241.755764][ T9728] netlink: 24 bytes leftover after parsing attributes in process `syz.5.829'. [ 242.581572][ T9748] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 242.583801][ T9748] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 242.595665][ T9748] vhci_hcd vhci_hcd.0: Device attached [ 242.617994][ T9744] netlink: 'syz.6.834': attribute type 1 has an invalid length. [ 242.624124][ T40] audit: type=1326 audit(1766741452.347:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9752 comm="syz.2.836" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f63579 code=0x0 [ 242.631276][ T9744] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.696711][ T9755] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 242.842757][ T9750] vhci_hcd: connection closed [ 242.842963][ T6764] vhci_hcd vhci_hcd.6: stop threads [ 242.846694][ T6764] vhci_hcd vhci_hcd.6: release socket [ 242.848625][ T6764] vhci_hcd vhci_hcd.6: disconnect device [ 243.481827][ T9760] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.838'. [ 243.696833][ T9769] netlink: 'syz.2.841': attribute type 10 has an invalid length. [ 243.709540][ T9769] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 243.992824][ T53] usb 42-1: device descriptor read/8, error -110 [ 244.162735][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 244.166197][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 244.393349][ T53] usb usb42-port1: attempt power cycle [ 244.409484][ T9765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.467720][ T40] audit: type=1326 audit(1766741454.187:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm=77DEA305FF07 exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 244.478588][ T40] audit: type=1326 audit(1766741454.187:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm=77DEA305FF07 exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 244.488080][ T40] audit: type=1326 audit(1766741454.187:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm=77DEA305FF07 exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 244.494930][ T40] audit: type=1326 audit(1766741454.187:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm=77DEA305FF07 exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 244.502409][ T40] audit: type=1326 audit(1766741454.187:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm=77DEA305FF07 exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 244.510159][ T40] audit: type=1326 audit(1766741454.187:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm=77DEA305FF07 exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 244.517350][ T40] audit: type=1326 audit(1766741454.187:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm=77DEA305FF07 exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 244.529466][ T40] audit: type=1326 audit(1766741454.187:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm=77DEA305FF07 exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 244.542869][ T40] audit: type=1326 audit(1766741454.187:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm=77DEA305FF07 exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 244.812959][ T9792] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 244.816343][ T9792] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 244.820853][ T9792] vhci_hcd vhci_hcd.0: Device attached [ 244.927065][ T9792] netlink: 'syz.6.845': attribute type 1 has an invalid length. [ 245.021365][ T9792] 8021q: adding VLAN 0 to HW filter on device bond7 [ 245.042063][ T53] usb usb42-port1: unable to enumerate USB device [ 245.394784][ T9793] vhci_hcd: connection reset by peer [ 245.397302][ T8011] vhci_hcd vhci_hcd.6: stop threads [ 245.402808][ T8011] vhci_hcd vhci_hcd.6: release socket [ 245.407962][ T8011] vhci_hcd vhci_hcd.6: disconnect device [ 245.473440][ T5991] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 246.056792][ T9825] netlink: 'syz.6.855': attribute type 38 has an invalid length. [ 246.282876][ T9827] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 246.285231][ T9827] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 246.288204][ T9827] vhci_hcd vhci_hcd.0: Device attached [ 246.572759][ T5991] usb 50-1: SetAddress Request (6) to port 0 [ 246.575113][ T5991] usb 50-1: new SuperSpeed USB device number 6 using vhci_hcd [ 246.785023][ T9835] tipc: Enabled bearer , priority 0 [ 246.788331][ T9835] syzkaller0: entered promiscuous mode [ 246.790107][ T9835] syzkaller0: entered allmulticast mode [ 246.880217][ T9833] dlm: plock device version mismatch: kernel (1.2.0), user (458753.0.0) [ 246.928264][ T9828] vhci_hcd: connection reset by peer [ 246.930721][ T8034] vhci_hcd vhci_hcd.6: stop threads [ 246.932500][ T8034] vhci_hcd vhci_hcd.6: release socket [ 246.937240][ T8034] vhci_hcd vhci_hcd.6: disconnect device [ 247.592755][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 247.593124][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 247.614443][ T9834] tipc: Resetting bearer [ 247.639320][ T9834] tipc: Disabling bearer [ 247.945246][ T9843] netlink: 'syz.5.859': attribute type 10 has an invalid length. [ 248.050098][ T9843] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 248.581184][ T9841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.723251][ T60] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 248.872752][ T60] usb 9-1: Using ep0 maxpacket: 8 [ 248.875720][ T60] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.878984][ T60] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 248.882179][ T60] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 248.886299][ T60] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.890462][ T60] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 248.893353][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.101440][ T60] usb 9-1: GET_CAPABILITIES returned 0 [ 249.104292][ T60] usbtmc 9-1:16.0: can't read capabilities [ 249.179557][ T9860] /dev/nullb0: Can't open blockdev [ 249.246648][ T9860] lo speed is unknown, defaulting to 1000 [ 249.272815][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 249.272835][ T40] audit: type=1326 audit(1766741458.887:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9857 comm="syz.6.863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 249.291214][ T40] audit: type=1326 audit(1766741458.887:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9857 comm="syz.6.863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 249.301163][ T40] audit: type=1326 audit(1766741458.887:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9857 comm="syz.6.863" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 249.310742][ T40] audit: type=1326 audit(1766741458.897:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9857 comm="syz.6.863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 249.320544][ T40] audit: type=1326 audit(1766741458.897:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9857 comm="syz.6.863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 249.330101][ T40] audit: type=1326 audit(1766741458.897:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9857 comm="syz.6.863" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 249.366641][ T40] audit: type=1326 audit(1766741458.897:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9857 comm="syz.6.863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 249.377926][ T40] audit: type=1326 audit(1766741458.897:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9857 comm="syz.6.863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 249.378299][ T60] usb 9-1: USB disconnect, device number 8 [ 249.388245][ T40] audit: type=1326 audit(1766741458.897:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9857 comm="syz.6.863" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 249.401676][ T40] audit: type=1326 audit(1766741458.897:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9857 comm="syz.6.863" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 250.242982][ T8172] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 250.383209][ T8172] usb 10-1: device descriptor read/64, error -71 [ 250.623058][ T8172] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 250.793041][ T8172] usb 10-1: device descriptor read/64, error -71 [ 250.903624][ T8172] usb usb10-port1: attempt power cycle [ 251.243668][ T8172] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 251.264446][ T8172] usb 10-1: device descriptor read/8, error -71 [ 251.502801][ T8172] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 251.543412][ T8172] usb 10-1: device descriptor read/8, error -71 [ 251.653288][ T8172] usb usb10-port1: unable to enumerate USB device [ 251.683240][ T5991] usb 50-1: device descriptor read/8, error -110 [ 251.805820][ T9893] fusectl: Unknown parameter 'grpquota' [ 252.072724][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 252.072750][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 252.093828][ T5991] usb usb50-port1: attempt power cycle [ 252.665030][ T5991] usb usb50-port1: unable to enumerate USB device [ 253.529915][ T7988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.532557][ T7988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.610460][ T9932] netlink: 'syz.5.880': attribute type 15 has an invalid length. [ 253.613447][ T9932] netlink: 24 bytes leftover after parsing attributes in process `syz.5.880'. [ 253.785047][ T8172] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 253.967280][ T8172] usb 9-1: config 150 has an invalid interface number: 204 but max is 2 [ 253.970552][ T8172] usb 9-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 253.974507][ T8172] usb 9-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 253.977673][ T8172] usb 9-1: config 150 has no interface number 0 [ 253.979887][ T8172] usb 9-1: config 150 interface 204 has no altsetting 0 [ 253.987477][ T8172] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 253.990544][ T8172] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.993914][ T8172] usb 9-1: Product: syz [ 253.995694][ T8172] usb 9-1: Manufacturer: syz [ 253.997584][ T8172] usb 9-1: SerialNumber: syz [ 254.426982][ T8172] xr_serial 9-1:150.204: skipping garbage [ 254.430051][ T8172] usb 9-1: USB disconnect, device number 9 [ 255.000631][ T9948] Invalid source name [ 255.002262][ T9948] UBIFS error (pid: 9948): cannot open "./file0", error -22 [ 256.472821][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 258.413610][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 258.413622][ T40] audit: type=1326 audit(1766741468.127:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.890" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f63598 code=0x7ffc0000 [ 258.425075][ T9963] 9pnet_virtio: no channels available for device syz [ 258.430796][ T40] audit: type=1326 audit(1766741468.147:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.890" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f63598 code=0x7ffc0000 [ 258.440051][ T40] audit: type=1326 audit(1766741468.147:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.890" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f63598 code=0x7ffc0000 [ 258.447529][ T40] audit: type=1326 audit(1766741468.147:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.890" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f63598 code=0x7ffc0000 [ 258.455032][ T40] audit: type=1326 audit(1766741468.147:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.890" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f63598 code=0x7ffc0000 [ 258.462520][ T40] audit: type=1326 audit(1766741468.147:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.890" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f63598 code=0x7ffc0000 [ 258.470384][ T40] audit: type=1326 audit(1766741468.147:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.890" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f63598 code=0x7ffc0000 [ 258.478808][ T40] audit: type=1326 audit(1766741468.147:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.890" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f63598 code=0x7ffc0000 [ 258.486453][ T40] audit: type=1326 audit(1766741468.147:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.890" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f63598 code=0x7ffc0000 [ 258.493867][ T40] audit: type=1326 audit(1766741468.147:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9960 comm="syz.2.890" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f63598 code=0x7ffc0000 [ 259.263927][ T9961] netlink: 60 bytes leftover after parsing attributes in process `syz.2.890'. [ 259.646858][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.895'. [ 259.771547][ T9980] 8021q: adding VLAN 0 to HW filter on device bond8 [ 259.777527][ T9980] bond0: (slave bond8): Enslaving as an active interface with an up link [ 259.784067][ T9980] netlink: 14 bytes leftover after parsing attributes in process `syz.6.895'. [ 259.805070][ T9980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.837267][ T9980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.861767][ T9980] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 259.877851][ T9980] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 259.883369][ T9979] netlink: 52 bytes leftover after parsing attributes in process `syz.6.895'. [ 259.887268][ T9980] bond0 (unregistering): (slave bond8): Releasing backup interface [ 259.901386][ T9980] bond0 (unregistering): Released all slaves [ 259.914854][ T9979] netlink: 20 bytes leftover after parsing attributes in process `syz.6.895'. [ 260.457013][T10007] 9pnet_virtio: no channels available for device syz [ 260.659651][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.904'. [ 260.859581][T10032] syzkaller0: entered promiscuous mode [ 260.861777][T10032] syzkaller0: entered allmulticast mode [ 260.867654][T10032] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 260.984400][ T53] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 261.055149][T10032] netlink: 'syz.6.908': attribute type 1 has an invalid length. [ 261.135508][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.139618][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.143511][ T53] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 261.146656][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.150939][ T53] usb 9-1: config 0 descriptor?? [ 261.159226][ T53] usbhid 9-1:0.0: can't add hid device: -22 [ 261.161409][ T53] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 261.362419][ T29] usb 9-1: USB disconnect, device number 10 [ 261.380895][T10039] 9pnet_virtio: no channels available for device syz [ 261.933434][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 262.045666][T10060] FAULT_INJECTION: forcing a failure. [ 262.045666][T10060] name failslab, interval 1, probability 0, space 0, times 0 [ 262.051608][T10060] CPU: 1 UID: 0 PID: 10060 Comm: syz.4.915 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.051636][T10060] Tainted: [L]=SOFTLOCKUP [ 262.051643][T10060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 262.051653][T10060] Call Trace: [ 262.051660][T10060] [ 262.051667][T10060] dump_stack_lvl+0x16c/0x1f0 [ 262.051723][T10060] should_fail_ex+0x512/0x640 [ 262.051751][T10060] ? kmem_cache_alloc_noprof+0x62/0x770 [ 262.051777][T10060] should_failslab+0xc2/0x120 [ 262.051805][T10060] kmem_cache_alloc_noprof+0x83/0x770 [ 262.051827][T10060] ? __pmd_alloc+0xbf/0x9c0 [ 262.051857][T10060] ? __pmd_alloc+0xbf/0x9c0 [ 262.051883][T10060] __pmd_alloc+0xbf/0x9c0 [ 262.051913][T10060] __handle_mm_fault+0xbeb/0x2bb0 [ 262.051940][T10060] ? __pfx___handle_mm_fault+0x10/0x10 [ 262.051975][T10060] ? find_vma+0xbf/0x140 [ 262.051998][T10060] ? __pfx_find_vma+0x10/0x10 [ 262.052026][T10060] handle_mm_fault+0x3fe/0xad0 [ 262.052050][T10060] do_user_addr_fault+0x7a6/0x1370 [ 262.052074][T10060] ? rcu_is_watching+0x12/0xc0 [ 262.052103][T10060] exc_page_fault+0x64/0xc0 [ 262.052131][T10060] asm_exc_page_fault+0x26/0x30 [ 262.052149][T10060] RIP: 0010:__get_user_4+0x14/0x20 [ 262.052171][T10060] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 c0 79 04 00 90 90 90 90 90 90 90 90 90 90 [ 262.052189][T10060] RSP: 0018:ffffc900060bfa70 EFLAGS: 00050287 [ 262.052205][T10060] RAX: 00000000800000c0 RBX: 0000000000000084 RCX: ffffc900060bfa14 [ 262.052217][T10060] RDX: 00007ffffffff000 RSI: ffffffff8ab56f5b RDI: ffffffff8bf2b580 [ 262.052229][T10060] RBP: ffffc900060bfe58 R08: 00000000ffffffff R09: 00000000ffffffff [ 262.052240][T10060] R10: 0000000000000001 R11: ffff888025398b30 R12: ffff88801260e1c0 [ 262.052259][T10060] R13: 000000000000000b R14: ffffffff8939b030 R15: 1ffff92000c17f5c [ 262.052272][T10060] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 262.052306][T10060] ? sctp_getsockopt+0x28b/0x7050 [ 262.052330][T10060] sctp_getsockopt+0x295/0x7050 [ 262.052353][T10060] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 262.052380][T10060] ? __pfx_sctp_getsockopt+0x10/0x10 [ 262.052399][T10060] ? __lock_acquire+0x436/0x2890 [ 262.052432][T10060] ? __pfx___might_resched+0x10/0x10 [ 262.052457][T10060] ? get_pid_task+0xfc/0x250 [ 262.052477][T10060] ? aa_sk_perm+0x2f2/0xae0 [ 262.052500][T10060] ? __pfx_aa_sk_perm+0x10/0x10 [ 262.052521][T10060] ? __lock_acquire+0x436/0x2890 [ 262.052538][T10060] ? aa_sock_opt_perm+0xfd/0x1b0 [ 262.052557][T10060] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 262.052573][T10060] do_sock_getsockopt+0x324/0x410 [ 262.052591][T10060] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 262.052621][T10060] ? __fget_files+0x204/0x3c0 [ 262.052645][T10060] __sys_getsockopt+0x123/0x1b0 [ 262.052662][T10060] __ia32_sys_getsockopt+0xbc/0x160 [ 262.052674][T10060] ? __do_fast_syscall_32+0x9a/0x680 [ 262.052691][T10060] ? lockdep_hardirqs_on+0x7c/0x110 [ 262.052707][T10060] __do_fast_syscall_32+0xe8/0x680 [ 262.052725][T10060] do_fast_syscall_32+0x32/0x80 [ 262.052735][T10060] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 262.052748][T10060] RIP: 0023:0xf70ad579 [ 262.052758][T10060] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 262.052768][T10060] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 262.052778][T10060] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 262.052785][T10060] RDX: 000000000000000b RSI: 0000000000000000 RDI: 00000000800000c0 [ 262.052791][T10060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.052797][T10060] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 262.052803][T10060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.052817][T10060] [ 262.253321][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.6.917'. [ 262.265481][T10072] overlayfs: missing 'lowerdir' [ 262.278080][T10074] lo speed is unknown, defaulting to 1000 [ 262.498739][T10074] lo speed is unknown, defaulting to 1000 [ 262.552732][ T5943] Bluetooth: hci2: command 0x0406 tx timeout [ 263.623449][T10104] netlink: 48 bytes leftover after parsing attributes in process `syz.4.928'. [ 264.061928][T10124] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 264.064368][T10124] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 264.068514][T10124] vhci_hcd vhci_hcd.0: Device attached [ 264.074112][T10124] binder: Unknown parameter '' [ 264.079040][T10125] vhci_hcd: connection closed [ 264.079745][ T8032] vhci_hcd vhci_hcd.4: stop threads [ 264.083233][ T8032] vhci_hcd vhci_hcd.4: release socket [ 264.084997][ T8032] vhci_hcd vhci_hcd.4: disconnect device [ 264.579757][ T5943] Bluetooth: hci0: unexpected event for opcode 0x0c24 [ 264.838171][T10139] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 264.841261][T10139] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 264.845093][T10139] vhci_hcd vhci_hcd.0: Device attached [ 264.903439][T10140] vhci_hcd: connection closed [ 264.903729][ T6703] vhci_hcd vhci_hcd.4: stop threads [ 264.907149][ T6703] vhci_hcd vhci_hcd.4: release socket [ 264.908931][ T6703] vhci_hcd vhci_hcd.4: disconnect device [ 264.966368][T10144] FAULT_INJECTION: forcing a failure. [ 264.966368][T10144] name failslab, interval 1, probability 0, space 0, times 0 [ 264.970974][T10144] CPU: 3 UID: 0 PID: 10144 Comm: syz.4.938 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.970993][T10144] Tainted: [L]=SOFTLOCKUP [ 264.970997][T10144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 264.971004][T10144] Call Trace: [ 264.971008][T10144] [ 264.971013][T10144] dump_stack_lvl+0x16c/0x1f0 [ 264.971035][T10144] should_fail_ex+0x512/0x640 [ 264.971049][T10144] ? kmem_cache_alloc_noprof+0x62/0x770 [ 264.971064][T10144] should_failslab+0xc2/0x120 [ 264.971082][T10144] kmem_cache_alloc_noprof+0x83/0x770 [ 264.971095][T10144] ? ptlock_alloc+0x1f/0x70 [ 264.971109][T10144] ? ptlock_alloc+0x1f/0x70 [ 264.971119][T10144] ptlock_alloc+0x1f/0x70 [ 264.971153][T10144] pte_alloc_one+0x84/0x3d0 [ 264.971171][T10144] __pte_alloc+0x6d/0x3f0 [ 264.971192][T10144] ? __pfx___pte_alloc+0x10/0x10 [ 264.971208][T10144] ? do_raw_spin_lock+0x12c/0x2b0 [ 264.971221][T10144] ? find_held_lock+0x2b/0x80 [ 264.971235][T10144] do_anonymous_page+0x1092/0x2190 [ 264.971248][T10144] ? do_raw_spin_unlock+0x172/0x230 [ 264.971260][T10144] ? _raw_spin_unlock+0x28/0x50 [ 264.971275][T10144] ? __pmd_alloc+0x6aa/0x9c0 [ 264.971292][T10144] __handle_mm_fault+0x1ecf/0x2bb0 [ 264.971307][T10144] ? __pfx___handle_mm_fault+0x10/0x10 [ 264.971326][T10144] ? find_vma+0xbf/0x140 [ 264.971341][T10144] ? __pfx_find_vma+0x10/0x10 [ 264.971357][T10144] handle_mm_fault+0x3fe/0xad0 [ 264.971371][T10144] do_user_addr_fault+0x7a6/0x1370 [ 264.971386][T10144] ? rcu_is_watching+0x12/0xc0 [ 264.971404][T10144] exc_page_fault+0x64/0xc0 [ 264.971421][T10144] asm_exc_page_fault+0x26/0x30 [ 264.971432][T10144] RIP: 0010:__get_user_4+0x14/0x20 [ 264.971446][T10144] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 c0 79 04 00 90 90 90 90 90 90 90 90 90 90 [ 264.971456][T10144] RSP: 0018:ffffc900071d7a70 EFLAGS: 00050287 [ 264.971467][T10144] RAX: 00000000800000c0 RBX: 0000000000000084 RCX: ffffc900071d7a14 [ 264.971475][T10144] RDX: 00007ffffffff000 RSI: ffffffff8ab56f5b RDI: ffffffff8bf2b580 [ 264.971483][T10144] RBP: ffffc900071d7e58 R08: 00000000ffffffff R09: 00000000ffffffff [ 264.971491][T10144] R10: 0000000000000001 R11: ffff88802161aff0 R12: ffff88801263e1c0 [ 264.971497][T10144] R13: 000000000000000b R14: ffffffff8939b030 R15: 1ffff92000e3af5c [ 264.971505][T10144] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 264.971527][T10144] ? sctp_getsockopt+0x28b/0x7050 [ 264.971542][T10144] sctp_getsockopt+0x295/0x7050 [ 264.971555][T10144] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 264.971571][T10144] ? __pfx_sctp_getsockopt+0x10/0x10 [ 264.971582][T10144] ? __lock_acquire+0x436/0x2890 [ 264.971599][T10144] ? __pfx___might_resched+0x10/0x10 [ 264.971615][T10144] ? get_pid_task+0xfc/0x250 [ 264.971627][T10144] ? aa_sk_perm+0x2f2/0xae0 [ 264.971641][T10144] ? __pfx_aa_sk_perm+0x10/0x10 [ 264.971654][T10144] ? __lock_acquire+0x436/0x2890 [ 264.971666][T10144] ? aa_sock_opt_perm+0xfd/0x1b0 [ 264.971685][T10144] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 264.971701][T10144] do_sock_getsockopt+0x324/0x410 [ 264.971719][T10144] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 264.971735][T10144] ? __fget_files+0x204/0x3c0 [ 264.971756][T10144] __sys_getsockopt+0x123/0x1b0 [ 264.971772][T10144] __ia32_sys_getsockopt+0xbc/0x160 [ 264.971785][T10144] ? __do_fast_syscall_32+0x9a/0x680 [ 264.971802][T10144] ? lockdep_hardirqs_on+0x7c/0x110 [ 264.971818][T10144] __do_fast_syscall_32+0xe8/0x680 [ 264.971837][T10144] do_fast_syscall_32+0x32/0x80 [ 264.971847][T10144] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.971860][T10144] RIP: 0023:0xf70ad579 [ 264.971868][T10144] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 264.971878][T10144] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 000000000000016d [ 264.971888][T10144] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 264.971894][T10144] RDX: 000000000000000b RSI: 0000000000000000 RDI: 00000000800000c0 [ 264.971901][T10144] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 264.971907][T10144] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 264.971913][T10144] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.971926][T10144] [ 265.151185][ T40] kauditd_printk_skb: 1853 callbacks suppressed [ 265.151202][ T40] audit: type=1326 audit(1766741474.867:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10145 comm="syz.4.939" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 265.163152][ T40] audit: type=1326 audit(1766741474.867:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10145 comm="syz.4.939" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 265.171837][ T40] audit: type=1326 audit(1766741474.867:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10145 comm="syz.4.939" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 265.182430][ T40] audit: type=1326 audit(1766741474.867:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10145 comm="syz.4.939" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 265.191064][ T40] audit: type=1326 audit(1766741474.867:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10145 comm="syz.4.939" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 265.200673][ T40] audit: type=1326 audit(1766741474.867:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10145 comm="syz.4.939" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 265.209677][ T40] audit: type=1326 audit(1766741474.867:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10145 comm="syz.4.939" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 265.218456][ T40] audit: type=1326 audit(1766741474.877:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10145 comm="syz.4.939" exe="/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 265.227177][ T40] audit: type=1326 audit(1766741474.877:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10145 comm="syz.4.939" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 265.235291][ T40] audit: type=1326 audit(1766741474.877:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10145 comm="syz.4.939" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 265.432766][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 265.432969][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 265.567712][ T5947] Bluetooth: hci0: unexpected event for opcode 0x2019 [ 265.595507][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.618898][T10156] netlink: 100 bytes leftover after parsing attributes in process `syz.6.942'. [ 265.623760][T10156] netlink: 164 bytes leftover after parsing attributes in process `syz.6.942'. [ 265.952870][ T6110] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 266.114942][ T6110] usb 11-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 266.121694][ T6110] usb 11-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 266.126452][ T6110] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.130266][ T6110] usb 11-1: Product: syz [ 266.132174][ T6110] usb 11-1: Manufacturer: syz [ 266.134499][ T6110] usb 11-1: SerialNumber: syz [ 266.342979][ T5947] Bluetooth: hci0: Unknown advertising packet type: 0x1e [ 266.343019][ T5947] Bluetooth: hci0: Malformed LE Event: 0x0d [ 266.370748][T10161] binder: 10160:10161 unknown command 0 [ 266.372875][T10161] binder: 10160:10161 ioctl c0306201 80004a40 returned -22 [ 266.379459][ T6110] as10x_usb: device has been detected [ 266.381664][ T6110] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 266.387980][ T6110] usb 11-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 266.396158][ T6110] as10x_usb: error during firmware upload part1 [ 266.398502][ T6110] Registered device Elgato EyeTV DTT Deluxe [ 266.399675][ T6110] usb 11-1: USB disconnect, device number 2 [ 266.410361][ T6110] Unregistered device Elgato EyeTV DTT Deluxe [ 266.411174][ T6110] as10x_usb: device has been disconnected [ 266.461322][T10172] FAULT_INJECTION: forcing a failure. [ 266.461322][T10172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.468060][T10172] CPU: 2 UID: 0 PID: 10172 Comm: syz.2.947 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.468088][T10172] Tainted: [L]=SOFTLOCKUP [ 266.468094][T10172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 266.468104][T10172] Call Trace: [ 266.468111][T10172] [ 266.468119][T10172] dump_stack_lvl+0x16c/0x1f0 [ 266.468177][T10172] should_fail_ex+0x512/0x640 [ 266.468206][T10172] _copy_to_user+0x32/0xd0 [ 266.468227][T10172] simple_read_from_buffer+0xcb/0x170 [ 266.468252][T10172] proc_fail_nth_read+0x197/0x240 [ 266.468279][T10172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.468307][T10172] ? rw_verify_area+0xcf/0x6c0 [ 266.468328][T10172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.468354][T10172] vfs_read+0x1e4/0xcf0 [ 266.468379][T10172] ? __pfx___mutex_lock+0x10/0x10 [ 266.468405][T10172] ? __pfx_vfs_read+0x10/0x10 [ 266.468425][T10172] ? find_held_lock+0x2b/0x80 [ 266.468454][T10172] ? __fget_files+0x20e/0x3c0 [ 266.468483][T10172] ksys_read+0x12a/0x250 [ 266.468505][T10172] ? __pfx_ksys_read+0x10/0x10 [ 266.468534][T10172] __do_fast_syscall_32+0xe8/0x680 [ 266.468562][T10172] do_fast_syscall_32+0x32/0x80 [ 266.468577][T10172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.468597][T10172] RIP: 0023:0xf7f63579 [ 266.468610][T10172] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 266.468626][T10172] RSP: 002b:00000000f5456590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 266.468643][T10172] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5456620 [ 266.468653][T10172] RDX: 000000000000000f RSI: 00000000f73f6ff4 RDI: 0000000000000000 [ 266.468663][T10172] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 266.468672][T10172] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 266.468682][T10172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.468704][T10172] [ 267.443438][ T6110] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 267.488695][T10185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.951'. [ 267.592834][ T6110] usb 9-1: Using ep0 maxpacket: 32 [ 267.596693][ T6110] usb 9-1: unable to get BOS descriptor or descriptor too short [ 267.600017][ T6110] usb 9-1: config 255 has an invalid interface number: 81 but max is 0 [ 267.602969][ T6110] usb 9-1: config 255 has an invalid descriptor of length 48, skipping remainder of the config [ 267.606870][ T6110] usb 9-1: config 255 has no interface number 0 [ 267.608946][ T6110] usb 9-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 267.612876][ T6110] usb 9-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 267.616613][ T6110] usb 9-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid maxpacket 8347, setting to 1024 [ 267.620310][ T6110] usb 9-1: config 255 interface 81 has no altsetting 0 [ 267.625293][ T6110] usb 9-1: string descriptor 0 read error: -22 [ 267.627524][ T6110] usb 9-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 267.630475][ T6110] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.636888][ T6110] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:255.81/input/input12 [ 267.847617][ T6827] usb 9-1: USB disconnect, device number 11 [ 268.920014][T10202] fuse: Bad value for 'fd' [ 269.192792][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 269.527145][T10208] geneve4: entered promiscuous mode [ 270.301359][T10235] fuse: Bad value for 'fd' [ 271.258234][T10264] overlayfs: failed to resolve './file1': -2 [ 271.644440][T10267] FAT-fs (sr0): bogus number of reserved sectors [ 271.646740][T10267] FAT-fs (sr0): Can't find a valid FAT filesystem [ 272.232874][ T5937] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 272.232884][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 274.324565][T10285] sch_tbf: burst 0 is lower than device lo mtu (76) ! [ 274.620945][T10289] fuse: Bad value for 'fd' [ 274.704381][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.6.981'. [ 275.772693][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 275.772705][ T40] audit: type=1326 audit(1766741485.487:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.984" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 275.795170][ T40] audit: type=1326 audit(1766741485.487:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.984" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 275.803298][ T40] audit: type=1326 audit(1766741485.487:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.984" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 275.810688][ T40] audit: type=1326 audit(1766741485.487:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.984" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 275.818055][ T40] audit: type=1326 audit(1766741485.487:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.984" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 275.825460][ T40] audit: type=1326 audit(1766741485.487:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.984" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 275.832597][ T40] audit: type=1326 audit(1766741485.497:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.984" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 275.840998][ T40] audit: type=1326 audit(1766741485.497:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.984" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 275.849098][ T40] audit: type=1326 audit(1766741485.497:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.984" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 275.855795][ T40] audit: type=1326 audit(1766741485.527:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10302 comm="syz.2.984" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 275.889207][T10308] lo speed is unknown, defaulting to 1000 [ 276.202337][T10322] netlink: 'syz.4.987': attribute type 1 has an invalid length. [ 276.526899][T10327] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 276.529145][T10327] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 276.536326][T10327] vhci_hcd vhci_hcd.0: Device attached [ 276.559215][T10327] netlink: 'syz.4.988': attribute type 1 has an invalid length. [ 276.619110][T10327] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.804164][ T143] usb 45-1: new low-speed USB device number 8 using vhci_hcd [ 276.854066][T10335] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 276.857073][T10335] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 276.869141][T10335] vhci_hcd vhci_hcd.0: Device attached [ 276.909709][ T7997] Bluetooth: hci4: Frame reassembly failed (-84) [ 276.914427][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 277.136707][T10328] vhci_hcd: connection reset by peer [ 277.138767][ T6703] vhci_hcd vhci_hcd.4: stop threads [ 277.140931][ T6703] vhci_hcd vhci_hcd.4: release socket [ 277.143549][ T6703] vhci_hcd vhci_hcd.4: disconnect device [ 277.153000][ T5991] usb 42-1: SetAddress Request (22) to port 0 [ 277.155665][ T5991] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd [ 277.395398][T10336] vhci_hcd: connection reset by peer [ 277.402725][ T7997] vhci_hcd vhci_hcd.2: stop threads [ 277.403630][ T24] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 277.405087][ T7997] vhci_hcd vhci_hcd.2: release socket [ 277.405170][ T7997] vhci_hcd vhci_hcd.2: disconnect device [ 277.552746][ T24] usb 11-1: Using ep0 maxpacket: 8 [ 277.555844][ T24] usb 11-1: config 0 interface 0 has no altsetting 0 [ 277.558372][ T24] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 277.563115][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.568464][ T24] usb 11-1: config 0 descriptor?? [ 277.784690][ T5943] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.791364][ T5943] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.795036][ T5943] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.800756][ T5943] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.803536][ T5943] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.822624][T10346] lo speed is unknown, defaulting to 1000 [ 277.848489][T10349] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 277.874437][T10349] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 277.878161][T10349] overlayfs: failed to look up (tracing) for ino (-66) [ 277.909496][T10346] chnl_net:caif_netlink_parms(): no params data found [ 277.961342][T10346] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.963842][T10346] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.966952][T10346] bridge_slave_0: entered allmulticast mode [ 277.970024][T10346] bridge_slave_0: entered promiscuous mode [ 277.974470][T10346] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.977032][T10346] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.979622][T10346] bridge_slave_1: entered allmulticast mode [ 277.982858][T10349] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 277.983588][T10346] bridge_slave_1: entered promiscuous mode [ 277.986408][T10349] overlayfs: maximum fs stacking depth exceeded [ 277.986699][ T24] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 278.002326][T10346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.007076][T10346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.022499][T10346] team0: Port device team_slave_0 added [ 278.025746][T10346] team0: Port device team_slave_1 added [ 278.039236][T10346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.041492][T10346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.049851][T10346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.054352][T10346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.057594][T10346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.066143][T10346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.089613][T10346] hsr_slave_0: entered promiscuous mode [ 278.092000][T10346] hsr_slave_1: entered promiscuous mode [ 278.094282][T10346] debugfs: 'hsr0' already exists in 'hsr' [ 278.096200][T10346] Cannot create hsr debugfs directory [ 278.185642][T10346] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 278.248860][ T24] usb 11-1: USB disconnect, device number 3 [ 278.493378][T10346] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 278.501653][T10346] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 278.508374][T10346] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 278.571160][T10346] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.574064][T10346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.577604][T10346] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.580008][T10346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.609880][T10346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.704904][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.716689][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.738559][T10346] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.745118][ T8015] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.748837][ T8015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.765382][ T8015] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.768502][ T8015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.932290][T10346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.952742][ T5947] Bluetooth: hci4: command 0x1003 tx timeout [ 278.954982][ T5937] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 278.981259][T10376] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 278.983656][T10376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 278.987114][T10376] vhci_hcd vhci_hcd.0: Device attached [ 279.093391][T10346] veth0_vlan: entered promiscuous mode [ 279.101717][T10346] veth1_vlan: entered promiscuous mode [ 279.126336][T10346] veth0_macvtap: entered promiscuous mode [ 279.134238][T10346] veth1_macvtap: entered promiscuous mode [ 279.150058][T10346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.160674][T10346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.172774][ T7987] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.175609][ T7987] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.179209][ T7987] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.182044][ T7987] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.222755][ T53] usb 49-1: new low-speed USB device number 7 using vhci_hcd [ 279.228880][ T7997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.231935][ T7997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.244643][ T8011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.247434][ T8011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.365311][T10395] netlink: 32 bytes leftover after parsing attributes in process `syz.7.998'. [ 279.368615][T10395] netlink: 32 bytes leftover after parsing attributes in process `syz.7.998'. [ 279.612035][ T6004] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 279.616160][ T6004] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 279.619828][ T6004] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 279.623491][ T6004] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 279.627339][ T6004] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 279.630172][ T6004] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 279.631958][T10378] vhci_hcd: connection reset by peer [ 279.632589][ T6004] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 279.637139][ T6004] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 279.639604][ T6004] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 279.641997][ T6004] hid-generic 0006:0004:0009.0005: unknown main item tag 0x0 [ 279.642417][ T8011] vhci_hcd vhci_hcd.6: stop threads [ 279.646359][ T8011] vhci_hcd vhci_hcd.6: release socket [ 279.648485][ T8011] vhci_hcd vhci_hcd.6: disconnect device [ 279.648582][ T6004] hid-generic 0006:0004:0009.0005: hidraw1: VIRTUAL HID v800.04 Device [syz1] on syz0 [ 279.832767][ T5943] Bluetooth: hci5: command tx timeout [ 281.752857][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 281.752867][ T5937] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 281.755710][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 281.861255][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1015'. [ 281.902858][ T143] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 281.922698][ T5947] Bluetooth: hci5: command tx timeout [ 282.706035][ T5991] usb 42-1: device descriptor read/8, error -110 [ 283.093839][ T5991] usb usb42-port1: attempt power cycle [ 283.229297][T10486] No control pipe specified [ 283.273111][T10490] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1025'. [ 283.654006][T10503] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1030'. [ 283.664391][ T5991] usb usb42-port1: unable to enumerate USB device [ 283.790000][T10503] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 283.792190][T10503] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 283.795068][T10503] vhci_hcd vhci_hcd.0: Device attached [ 283.808892][T10516] vhci_hcd: connection closed [ 283.809086][ T8007] vhci_hcd vhci_hcd.7: stop threads [ 283.820363][ T8007] vhci_hcd vhci_hcd.7: release socket [ 283.826478][ T8007] vhci_hcd vhci_hcd.7: disconnect device [ 283.848817][T10519] fuse: Bad value for 'fd' [ 284.302861][ T53] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 284.476449][T10531] binder: 10530:10531 ioctl c0306201 80000480 returned -22 [ 284.484447][ T5943] Bluetooth: hci5: command tx timeout [ 284.898908][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 284.898969][ T40] audit: type=1326 audit(1766741494.617:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.7.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 284.908760][ T40] audit: type=1326 audit(1766741494.617:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.7.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 284.915845][ T40] audit: type=1326 audit(1766741494.617:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.7.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 284.924734][ T40] audit: type=1326 audit(1766741494.617:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.7.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 284.941133][ T40] audit: type=1326 audit(1766741494.617:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.7.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 284.948720][ T40] audit: type=1326 audit(1766741494.617:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.7.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 284.959767][ T40] audit: type=1326 audit(1766741494.617:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.7.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 284.968228][ T40] audit: type=1326 audit(1766741494.617:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.7.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 284.978295][ T40] audit: type=1326 audit(1766741494.617:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.7.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 284.987188][ T40] audit: type=1326 audit(1766741494.617:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10530 comm="syz.7.1036" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 285.164156][ T29] libceph: connect (1)[c::]:6789 error -22 [ 285.166362][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 285.248537][T10544] ceph: No mds server is up or the cluster is laggy [ 285.352757][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 285.645243][T10568] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 285.647367][T10568] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 285.650079][T10568] vhci_hcd vhci_hcd.0: Device attached [ 285.681743][T10568] netlink: 'syz.4.1040': attribute type 1 has an invalid length. [ 285.745615][T10568] 8021q: adding VLAN 0 to HW filter on device bond8 [ 285.933198][ T53] usb 45-1: new low-speed USB device number 9 using vhci_hcd [ 286.015352][T10597] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 286.422820][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1049'. [ 286.430812][T10604] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1049'. [ 286.525959][T10571] vhci_hcd: connection reset by peer [ 286.529880][ T8000] vhci_hcd vhci_hcd.4: stop threads [ 286.534019][ T8000] vhci_hcd vhci_hcd.4: release socket [ 286.536617][ T8000] vhci_hcd vhci_hcd.4: disconnect device [ 286.563345][ T5947] Bluetooth: hci5: command tx timeout [ 287.656388][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1054'. [ 288.152777][ T5937] Bluetooth: hci1: command 0x0406 tx timeout [ 288.788030][T10629] kAFS: unparsable volume name [ 288.789842][T10629] kAFS: No cell specified [ 288.792851][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 288.792871][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 288.842497][T10634] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1056'. [ 288.846696][T10629] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1056'. [ 288.848415][T10633] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1057'. [ 288.850543][T10629] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1056'. [ 289.142801][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1061'. [ 289.146666][T10650] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1061'. [ 289.827160][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1068'. [ 289.835383][T10668] batman_adv: batadv0: Adding interface: vlan2 [ 289.837496][T10668] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.846703][T10668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.850099][T10668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.855312][T10668] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 290.018642][T10677] dummy0: entered promiscuous mode [ 290.020425][T10677] dummy0: entered allmulticast mode [ 290.708006][T10684] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 290.710203][T10684] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 290.724780][T10684] vhci_hcd vhci_hcd.0: Device attached [ 291.002920][ T143] usb 50-1: SetAddress Request (10) to port 0 [ 291.005960][ T143] usb 50-1: new SuperSpeed USB device number 10 using vhci_hcd [ 291.171843][ T53] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 291.352987][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 291.355817][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 291.413273][T10695] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 291.415488][T10695] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 291.418000][T10695] vhci_hcd vhci_hcd.0: Device attached [ 291.439382][T10698] vhci_hcd: connection closed [ 291.439636][ T8033] vhci_hcd vhci_hcd.4: stop threads [ 291.444863][ T8033] vhci_hcd vhci_hcd.4: release socket [ 291.447060][ T8033] vhci_hcd vhci_hcd.4: disconnect device [ 291.514551][T10707] nft_compat: unsupported protocol 0 [ 291.741184][T10722] bridge1: entered promiscuous mode [ 291.896074][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 291.899777][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 292.018710][T10732] lo speed is unknown, defaulting to 1000 [ 293.196276][T10685] vhci_hcd: connection reset by peer [ 293.294633][ T8003] vhci_hcd vhci_hcd.6: stop threads [ 293.296356][ T8003] vhci_hcd vhci_hcd.6: release socket [ 293.298100][ T8003] vhci_hcd vhci_hcd.6: disconnect device [ 293.433854][ T24] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 293.702929][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 293.706023][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 293.710757][ T24] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 293.714596][ T24] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 293.717660][ T24] usb 9-1: Product: syz [ 293.719025][ T24] usb 9-1: Manufacturer: syz [ 293.720534][ T24] usb 9-1: SerialNumber: syz [ 293.723476][ T24] usb 9-1: config 0 descriptor?? [ 293.725626][T10754] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 294.317424][T10794] fuse: Unknown parameter 'rootmodO' [ 294.602947][ T6827] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 294.773113][ T6827] usb 11-1: Using ep0 maxpacket: 32 [ 294.783871][ T6827] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 294.791022][ T6827] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 294.795353][ T6827] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 294.799184][ T6827] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 294.803489][ T6827] usb 11-1: config 0 interface 0 has no altsetting 0 [ 294.807603][ T6827] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 294.811749][ T6827] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 294.844329][ T6827] usb 11-1: Product: syz [ 294.846097][ T6827] usb 11-1: Manufacturer: syz [ 294.847851][ T6827] usb 11-1: SerialNumber: syz [ 294.852801][ T6827] usb 11-1: config 0 descriptor?? [ 294.856475][ T6827] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 294.863485][ T6827] ldusb 11-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 295.207298][ T5991] usb 11-1: USB disconnect, device number 4 [ 295.772570][ T6827] usb 9-1: USB disconnect, device number 12 [ 295.871583][ T5991] ldusb 11-1:0.0: LD USB Device #1 now disconnected [ 295.958560][T10808] netlink: 'syz.4.1104': attribute type 1 has an invalid length. [ 296.043030][T10808] 8021q: adding VLAN 0 to HW filter on device bond10 [ 296.053306][T10808] bond9: (slave bond10): making interface the new active one [ 296.058036][T10808] bond9: (slave bond10): Enslaving as an active interface with an up link [ 296.063410][T10808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1104'. [ 296.067454][T10809] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1104'. [ 296.072805][ T143] usb 50-1: device descriptor read/8, error -110 [ 296.113572][T10808] ubi0: attaching mtd0 [ 296.141385][T10808] ubi0: scanning is finished [ 296.143304][T10808] ubi0: empty MTD device detected [ 296.347154][T10808] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 296.349689][T10808] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 296.352105][T10808] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 296.354621][T10808] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 296.358494][T10808] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 296.360806][T10808] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 296.363536][T10808] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2032434364 [ 296.366821][T10808] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 296.371653][T10815] ubi0: background thread "ubi_bgt0d" started, PID 10815 [ 296.374778][T10809] ubi: mtd0 is already attached to ubi0 [ 296.473181][ T143] usb usb50-port1: attempt power cycle [ 296.913860][T10846] netlink: 'syz.4.1112': attribute type 4 has an invalid length. [ 297.123485][ T143] usb usb50-port1: unable to enumerate USB device [ 297.689733][ T143] hid_parser_main: 7 callbacks suppressed [ 297.689747][ T143] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 297.701866][ T143] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 297.722395][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 297.722412][ T40] audit: type=1326 audit(1766741507.437:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.2.1118" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f63579 code=0x0 [ 298.117693][T10877] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 298.121001][T10877] overlayfs: failed to set xattr on upper [ 298.123373][T10877] overlayfs: ...falling back to redirect_dir=nofollow. [ 298.125491][T10877] overlayfs: ...falling back to index=off. [ 298.127363][T10877] overlayfs: ...falling back to uuid=null. [ 298.148199][T10876] netlink: 'syz.7.1119': attribute type 1 has an invalid length. [ 298.168999][ T40] audit: type=1804 audit(1766741507.877:3528): pid=10877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1120" name="bus" dev="ramfs" ino=38262 res=1 errno=0 [ 298.181938][T10876] bond1: (slave geneve2): making interface the new active one [ 298.185463][T10876] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 298.188489][ T1142] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 298.191409][ T1142] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 298.194562][ T1142] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 298.197401][ T1142] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 298.922789][ T6827] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 298.967340][T10890] sp0: Synchronizing with TNC [ 298.970138][T10890] sp0: Found TNC [ 298.972743][T10889] [U] è` [ 298.985910][T10891] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 298.988096][T10891] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 298.991179][T10891] vhci_hcd vhci_hcd.0: Device attached [ 299.014601][T10891] netlink: 'syz.7.1123': attribute type 1 has an invalid length. [ 299.052472][T10891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 299.086403][ T6827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.091197][ T6827] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 299.098218][ T6827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.106618][T10891] bond2: (slave geneve3): making interface the new active one [ 299.110612][ T6827] usb 7-1: config 0 descriptor?? [ 299.120404][T10891] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 299.227945][T10904] netlink: 'syz.6.1127': attribute type 21 has an invalid length. [ 299.252751][ T143] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 299.309055][T10904] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1127'. [ 299.316523][ T6827] usbhid 7-1:0.0: can't add hid device: -71 [ 299.318538][ T6827] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 299.323011][ T6827] usb 7-1: USB disconnect, device number 12 [ 299.576682][T10892] vhci_hcd: connection reset by peer [ 299.578897][ T12] vhci_hcd vhci_hcd.7: stop threads [ 299.580918][ T12] vhci_hcd vhci_hcd.7: release socket [ 299.583374][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 299.805387][T10925] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1130'. [ 300.032425][T10931] 9pnet_virtio: no channels available for device syz [ 300.516770][T10935] netlink: 'syz.2.1134': attribute type 1 has an invalid length. [ 300.520362][ T40] audit: type=1326 audit(1766741510.237:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.2.1134" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f63579 code=0x0 [ 301.001552][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 301.005080][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 301.008133][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 303.912741][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 304.843878][ T5943] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 305.592947][ T143] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 306.838143][T11010] nbd: must specify a device to reconfigure [ 306.914828][T11004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.002598][T11004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.014635][T11004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.174638][T11001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.167336][T11027] lo speed is unknown, defaulting to 1000 [ 309.765793][T11070] netlink: 280 bytes leftover after parsing attributes in process `syz.6.1166'. [ 310.393121][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 310.396599][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 310.717676][T11085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.724992][T11085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.801504][T11090] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 310.952754][ T6827] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 311.108918][ T6827] usb 11-1: unable to get BOS descriptor or descriptor too short [ 311.114908][ T6827] usb 11-1: config 129 has an invalid interface number: 135 but max is 0 [ 311.118798][ T6827] usb 11-1: config 129 has an invalid interface number: 5 but max is 0 [ 311.123002][ T6827] usb 11-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 311.127421][ T6827] usb 11-1: config 129 has no interface number 0 [ 311.130669][ T6827] usb 11-1: config 129 has no interface number 1 [ 311.134321][ T6827] usb 11-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 311.139964][T11094] __vm_enough_memory: pid: 11094, comm: syz.2.1173, bytes: 4294963200 not enough memory for the allocation [ 311.140502][ T6827] usb 11-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 311.149875][ T6827] usb 11-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 311.156496][ T6827] usb 11-1: config 129 interface 135 has no altsetting 0 [ 311.159931][ T6827] usb 11-1: config 129 interface 5 has no altsetting 0 [ 311.171212][ T6827] usb 11-1: string descriptor 0 read error: -22 [ 311.174891][ T6827] usb 11-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 311.179075][ T6827] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.196702][ T6827] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 311.200232][ T6827] usb 11-1: MIDIStreaming interface descriptor not found [ 311.446075][ T143] usb 11-1: USB disconnect, device number 5 [ 312.140775][T11109] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1174'. [ 314.363087][T11144] ceph: No mds server is up or the cluster is laggy [ 314.366564][ T53] libceph: connect (1)[c::]:6789 error -101 [ 314.376114][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 314.973419][T11172] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 314.976049][T11172] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 314.994266][T11172] vhci_hcd vhci_hcd.0: Device attached [ 315.040469][T11173] vhci_hcd: connection closed [ 315.040680][ T61] vhci_hcd vhci_hcd.6: stop threads [ 315.044299][ T61] vhci_hcd vhci_hcd.6: release socket [ 315.046121][ T61] vhci_hcd vhci_hcd.6: disconnect device [ 316.952746][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 316.953043][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 316.977115][T11206] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 316.979496][T11206] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 316.982296][T11206] vhci_hcd vhci_hcd.0: Device attached [ 317.333813][T11213] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 317.336130][T11213] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 317.339764][T11213] vhci_hcd vhci_hcd.0: Device attached [ 317.364878][T11213] netlink: 'syz.7.1199': attribute type 1 has an invalid length. [ 317.387691][T11213] 8021q: adding VLAN 0 to HW filter on device bond3 [ 317.391793][ T8172] usb 50-1: SetAddress Request (14) to port 0 [ 317.394198][ T8172] usb 50-1: new SuperSpeed USB device number 14 using vhci_hcd [ 317.403296][T11211] vhci_hcd: connection closed [ 317.403556][ T7987] vhci_hcd vhci_hcd.6: stop threads [ 317.406908][ T7987] vhci_hcd vhci_hcd.6: release socket [ 317.408777][ T7987] vhci_hcd vhci_hcd.6: disconnect device [ 317.412878][ T8172] usb 50-1: enqueue for inactive port 0 [ 317.593375][ T143] usb 51-1: new low-speed USB device number 3 using vhci_hcd [ 317.689922][T11223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1201'. [ 317.796817][T11215] vhci_hcd: connection reset by peer [ 317.799091][ T8007] vhci_hcd vhci_hcd.7: stop threads [ 317.801002][ T8007] vhci_hcd vhci_hcd.7: release socket [ 317.803436][ T8007] vhci_hcd vhci_hcd.7: disconnect device [ 317.804021][ T8172] usb usb50-port1: attempt power cycle [ 317.834730][ T8007] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.844592][ T8007] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.847817][ T8007] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.850510][ T8007] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.877940][T11226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1202'. [ 317.949449][T11226] netlink: 30 bytes leftover after parsing attributes in process `syz.4.1202'. [ 318.374774][ T8172] usb usb50-port1: unable to enumerate USB device [ 320.191734][T11264] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1212'. [ 320.304791][T11269] comedi comedi1: dt2814: I/O port conflict (0x9,2) [ 320.307448][T11270] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1214'. [ 320.310919][T11269] netlink: 'syz.7.1214': attribute type 17 has an invalid length. [ 320.313560][T11269] netlink: 5 bytes leftover after parsing attributes in process `syz.7.1214'. [ 321.546864][T11277] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 321.549420][T11277] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 321.561348][T11277] vhci_hcd vhci_hcd.0: Device attached [ 321.700522][T11269] macvtap0: entered allmulticast mode [ 321.703191][T11269] veth0_macvtap: entered allmulticast mode [ 321.707188][T11269] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 321.711779][T11277] netlink: 'syz.4.1215': attribute type 1 has an invalid length. [ 321.814790][ T6039] usb 45-1: new low-speed USB device number 10 using vhci_hcd [ 321.882360][T11277] 8021q: adding VLAN 0 to HW filter on device bond11 [ 322.165103][T11278] vhci_hcd: connection reset by peer [ 322.168076][ T8016] vhci_hcd vhci_hcd.4: stop threads [ 322.170789][ T8016] vhci_hcd vhci_hcd.4: release socket [ 322.172711][ T8016] vhci_hcd vhci_hcd.4: disconnect device [ 322.320062][T11307] can: request_module (can-proto-3) failed. [ 322.651132][T11318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'. [ 322.663703][T11319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.679928][T11319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.724727][ T143] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 322.857645][T11328] 8021q: adding VLAN 0 to HW filter on device bond12 [ 323.196594][T11331] bridge2: entered allmulticast mode [ 323.215370][T11331] ªªªªª»: renamed from hsr0 [ 323.240762][T11331] ªªªªª»: failed to rename [ 323.500524][T11345] bond0: (slave rose0): Error: Device can not be enslaved while up [ 324.906709][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1238'. [ 325.274708][T11368] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 325.276940][T11368] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 325.294907][T11368] vhci_hcd vhci_hcd.0: Device attached [ 325.344796][T11374] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 325.347556][T11374] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 325.364768][T11374] vhci_hcd vhci_hcd.0: Device attached [ 325.554789][ T1021] usb 41-1: new low-speed USB device number 8 using vhci_hcd [ 325.598696][T11370] vhci_hcd: connection reset by peer [ 325.602450][ T8022] vhci_hcd vhci_hcd.2: stop threads [ 325.607211][ T8022] vhci_hcd vhci_hcd.2: release socket [ 325.610540][ T8022] vhci_hcd vhci_hcd.2: disconnect device [ 325.672292][T11374] netlink: 'syz.4.1237': attribute type 1 has an invalid length. [ 325.804844][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1241'. [ 326.495320][T11375] vhci_hcd: connection closed [ 326.496251][ T6703] vhci_hcd vhci_hcd.4: stop threads [ 326.500616][ T6703] vhci_hcd vhci_hcd.4: release socket [ 326.503016][ T6703] vhci_hcd vhci_hcd.4: disconnect device [ 326.575588][T11374] 8021q: adding VLAN 0 to HW filter on device bond13 [ 326.594214][ C3] vcan0: j1939_session_tx_dat: 0xffff88802a317000: queue data error: -100 [ 326.945047][ T6039] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 327.040084][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.538050][T11404] fuse: Unknown parameter ' Áú0x0000000000000008' [ 327.845084][T11420] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 327.847563][T11420] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 327.851260][T11420] vhci_hcd vhci_hcd.0: Device attached [ 328.494670][T11421] vhci_hcd: connection closed [ 328.495474][ T5133] vhci_hcd vhci_hcd.2: stop threads [ 328.499571][ T5133] vhci_hcd vhci_hcd.2: release socket [ 328.515046][ T5133] vhci_hcd vhci_hcd.2: disconnect device [ 329.103468][T11446] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 329.105909][T11446] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 329.111676][T11446] vhci_hcd vhci_hcd.0: Device attached [ 329.196568][T11446] netlink: 'syz.6.1256': attribute type 1 has an invalid length. [ 329.295546][T11446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.344665][ T60] usb 49-1: new low-speed USB device number 8 using vhci_hcd [ 329.514665][T11447] vhci_hcd: connection reset by peer [ 329.516715][T11459] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 329.517287][ T8022] vhci_hcd vhci_hcd.6: stop threads [ 329.520307][T11459] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1258'. [ 329.522062][ T8022] vhci_hcd vhci_hcd.6: release socket [ 329.522122][ T8022] vhci_hcd vhci_hcd.6: disconnect device [ 329.535057][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1258'. [ 330.025054][T11468] syzkaller0: entered promiscuous mode [ 330.028118][T11468] syzkaller0: entered allmulticast mode [ 330.132450][T11470] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1262'. [ 330.440614][T11499] comedi comedi4: bad chanlist[0]=0x007ffffe chan=65534 range length=2 [ 330.468641][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1268'. [ 330.786436][ T1021] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 330.852576][T11509] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 330.855675][T11509] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 330.885824][T11509] vhci_hcd vhci_hcd.0: Device attached [ 330.938316][T11512] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 330.940696][T11512] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 330.976049][T11512] vhci_hcd vhci_hcd.0: Device attached [ 330.990942][T11519] hfsplus: unable to find HFS+ superblock [ 331.148669][T11512] netlink: 'syz.2.1270': attribute type 1 has an invalid length. [ 331.275068][T11512] 8021q: adding VLAN 0 to HW filter on device bond5 [ 331.374913][ T1021] usb 41-1: device descriptor read/64, error -110 [ 331.572374][T11513] vhci_hcd: connection closed [ 331.572645][ T7986] vhci_hcd vhci_hcd.2: stop threads [ 331.577146][ T7986] vhci_hcd vhci_hcd.2: release socket [ 331.579776][ T7986] vhci_hcd vhci_hcd.2: disconnect device [ 331.777973][T11510] vhci_hcd: connection closed [ 331.778223][ T6764] vhci_hcd vhci_hcd.6: stop threads [ 331.782993][ T6764] vhci_hcd vhci_hcd.6: release socket [ 331.785667][ T6764] vhci_hcd vhci_hcd.6: disconnect device [ 331.844721][ T1021] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 331.873047][ T53] IPVS: starting estimator thread 0... [ 331.974695][T11535] IPVS: using max 45 ests per chain, 108000 per kthread [ 332.681306][T11557] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 332.683511][T11557] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 332.716400][T11557] vhci_hcd vhci_hcd.0: Device attached [ 332.803243][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1279'. [ 332.865144][ T6827] usb usb42-port1: attempt power cycle [ 332.939031][T11562] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 332.941455][T11562] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 332.962292][T11562] vhci_hcd vhci_hcd.0: Device attached [ 332.984709][ T6039] usb 52-1: SetAddress Request (2) to port 0 [ 332.987418][ T6039] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 333.341803][T11560] vhci_hcd: connection reset by peer [ 333.344007][ T8011] vhci_hcd vhci_hcd.7: stop threads [ 333.345949][ T8011] vhci_hcd vhci_hcd.7: release socket [ 333.347867][ T8011] vhci_hcd vhci_hcd.7: disconnect device [ 333.437693][ T6827] usb usb42-port1: unable to enumerate USB device [ 333.824955][T11564] vhci_hcd: connection closed [ 333.825218][ T8007] vhci_hcd vhci_hcd.6: stop threads [ 333.829592][ T8007] vhci_hcd vhci_hcd.6: release socket [ 333.832158][ T8007] vhci_hcd vhci_hcd.6: disconnect device [ 334.227633][ T5991] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 334.240769][T11573] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 334.354097][T11584] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 334.356552][T11584] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 334.376185][ T5991] usb 12-1: config 0 has no interfaces? [ 334.380781][ T5991] usb 12-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 334.383898][ T5991] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.384169][T11584] vhci_hcd vhci_hcd.0: Device attached [ 334.386873][ T5991] usb 12-1: Product: syz [ 334.390207][ T5991] usb 12-1: Manufacturer: syz [ 334.391810][ T5991] usb 12-1: SerialNumber: syz [ 334.395208][ T5991] usb 12-1: config 0 descriptor?? [ 334.448375][T11584] netlink: 'syz.4.1285': attribute type 1 has an invalid length. [ 334.474941][ T60] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 334.595594][T11584] 8021q: adding VLAN 0 to HW filter on device bond14 [ 334.624662][ T143] usb 45-1: new low-speed USB device number 11 using vhci_hcd [ 334.633259][ T6827] usb 12-1: USB disconnect, device number 2 [ 334.775232][T11595] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 334.778222][T11595] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 334.790244][T11595] vhci_hcd vhci_hcd.0: Device attached [ 334.887843][T11585] vhci_hcd: connection reset by peer [ 334.889914][ T7997] vhci_hcd vhci_hcd.4: stop threads [ 334.891777][ T7997] vhci_hcd vhci_hcd.4: release socket [ 334.893725][ T7997] vhci_hcd vhci_hcd.4: disconnect device [ 334.957017][T11599] vhci_hcd: connection closed [ 334.957393][ T5133] vhci_hcd vhci_hcd.2: stop threads [ 334.961935][ T5133] vhci_hcd vhci_hcd.2: release socket [ 334.967965][ T5133] vhci_hcd vhci_hcd.2: disconnect device [ 335.188528][T11614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1290'. [ 335.619574][T11623] 9pnet_virtio: no channels available for device syz [ 335.720713][T11625] overlayfs: failed to verify upper (210/file0, ino=1120, err=-116) [ 335.724543][T11625] overlayfs: failed to verify index dir 'upper' xattr [ 335.728238][T11625] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 335.755593][ T6004] usb usb50-port1: attempt power cycle [ 336.082853][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1297'. [ 336.082864][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1297'. [ 336.085987][T11636] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1297'. [ 336.092435][T11637] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1297'. [ 336.099400][T11636] tmpfs: Unknown parameter 'usrquotaÀ' [ 336.133175][T11641] afs: Unknown parameter 'measure' [ 336.526424][ T6004] usb usb50-port1: unable to enumerate USB device [ 337.243535][T11666] tmpfs: Bad value for 'mpol' [ 337.421897][T11672] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 337.481721][T11672] vlan2: entered promiscuous mode [ 337.483456][T11672] bridge0: entered promiscuous mode [ 337.486728][T11672] vlan2: entered allmulticast mode [ 337.488877][T11672] bridge0: entered allmulticast mode [ 337.512786][T11673] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 337.515251][T11673] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 337.518576][T11673] vhci_hcd vhci_hcd.0: Device attached [ 337.543718][T11673] netlink: 'syz.2.1304': attribute type 1 has an invalid length. [ 337.666408][T11673] 8021q: adding VLAN 0 to HW filter on device bond6 [ 337.743982][T11679] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 337.754874][ T6110] usb 41-1: new low-speed USB device number 10 using vhci_hcd [ 338.075758][T11688] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 338.081798][T11688] bond4 (unregistering): Released all slaves [ 338.111147][T11690] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 338.133518][T11674] vhci_hcd: connection reset by peer [ 338.136651][ T8022] vhci_hcd vhci_hcd.2: stop threads [ 338.139069][ T8022] vhci_hcd vhci_hcd.2: release socket [ 338.141614][ T8022] vhci_hcd vhci_hcd.2: disconnect device [ 338.175522][ T6039] usb 52-1: device descriptor read/8, error -110 [ 338.586665][ T6039] usb usb52-port1: attempt power cycle [ 338.837910][T11700] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 338.840560][T11700] overlayfs: failed to set xattr on upper [ 338.849184][T11700] overlayfs: ...falling back to redirect_dir=nofollow. [ 338.853143][T11700] overlayfs: ...falling back to index=off. [ 338.864665][T11700] overlayfs: ...falling back to uuid=null. [ 338.988979][ T40] audit: type=1804 audit(1766741804.703:3530): pid=11700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1319" name="bus" dev="ramfs" ino=40782 res=1 errno=0 [ 339.194915][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 339.201689][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 339.219935][ T6039] usb usb52-port1: unable to enumerate USB device [ 339.526750][T11711] 9pnet_virtio: no channels available for device syz [ 339.746186][ T143] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 340.124408][T11721] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1317'. [ 340.375925][T11725] binder: 11724:11725 ioctl c0306201 80000480 returned -22 [ 340.865486][ T40] audit: type=1326 audit(1766741806.593:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.2.1327" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 340.891106][ T40] audit: type=1326 audit(1766741806.603:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.2.1327" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 340.930650][ T40] audit: type=1326 audit(1766741806.603:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.2.1327" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 340.950607][ T40] audit: type=1326 audit(1766741806.603:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.2.1327" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 340.964220][ T40] audit: type=1326 audit(1766741806.603:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.2.1327" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 340.972983][ T40] audit: type=1326 audit(1766741806.613:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.2.1327" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 340.984911][ T40] audit: type=1326 audit(1766741806.643:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.2.1327" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 340.992429][T11735] lo speed is unknown, defaulting to 1000 [ 340.997379][ T40] audit: type=1326 audit(1766741806.643:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.2.1327" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 341.007480][ T40] audit: type=1326 audit(1766741806.643:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11724 comm="syz.2.1327" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 341.620302][T11749] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 341.622471][T11749] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 341.665399][T11749] vhci_hcd vhci_hcd.0: Device attached [ 341.717467][T11749] netlink: 'syz.6.1321': attribute type 1 has an invalid length. [ 341.769744][T11749] 8021q: adding VLAN 0 to HW filter on device bond9 [ 341.904834][ T143] usb 49-1: new low-speed USB device number 9 using vhci_hcd [ 341.983552][T11764] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 341.986843][T11764] overlayfs: failed to set xattr on upper [ 341.989321][T11764] overlayfs: ...falling back to redirect_dir=nofollow. [ 341.992279][T11764] overlayfs: ...falling back to index=off. [ 341.995571][T11764] overlayfs: ...falling back to uuid=null. [ 342.207808][T11750] vhci_hcd: connection reset by peer [ 342.211502][ T8023] vhci_hcd vhci_hcd.6: stop threads [ 342.229719][ T8023] vhci_hcd vhci_hcd.6: release socket [ 342.232485][ T8023] vhci_hcd vhci_hcd.6: disconnect device [ 342.521759][T11778] ocfs2: Unknown parameter 'acl€@' [ 342.864729][ T6110] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 342.918073][T11784] overlayfs: missing 'lowerdir' [ 342.922764][T11784] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 342.962685][T11784] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 342.966365][T11784] overlayfs: failed to look up (tracing) for ino (-66) [ 343.001482][T11786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 343.004756][T11786] IPv6: NLM_F_CREATE should be set when creating new route [ 343.474943][T11801] 9pnet_virtio: no channels available for device syz [ 343.701883][T11804] tmpfs: Unknown parameter 'hash' [ 345.834761][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 345.838354][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 346.794761][ C2] hpet_rtc_timer_reinit: 25 callbacks suppressed [ 346.794774][ C2] hpet: Lost 1 RTC interrupts [ 346.824783][ C2] hpet: Lost 1 RTC interrupts [ 347.045142][ T143] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 347.105844][ T5947] Bluetooth: hci6: command 0x1003 tx timeout [ 347.108811][ T5943] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 347.744182][T11853] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1348'. [ 347.748061][T11853] netlink: 'syz.6.1348': attribute type 7 has an invalid length. [ 347.750812][T11853] netlink: 'syz.6.1348': attribute type 8 has an invalid length. [ 347.753529][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1348'. [ 350.634676][T11865] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 350.644690][ T5943] Bluetooth: hci1: command 0x0406 tx timeout [ 350.646926][T11865] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 350.897237][T11865] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 350.901902][T11865] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 350.906989][T11865] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 350.909769][T11865] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 350.912258][T11865] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 350.917578][T11865] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 350.970952][T11865] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 351.045130][ T1021] libceph: connect (1)[c::]:6789 error -101 [ 351.047941][ T1021] libceph: mon0 (1)[c::]:6789 connect error [ 351.053952][T11881] ceph: No mds server is up or the cluster is laggy [ 351.211644][T11897] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1357'. [ 351.340224][T11890] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 351.343109][T11890] UDF-fs: Scanning with blocksize 2048 failed [ 351.439018][T11890] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 351.445542][T11890] UDF-fs: Scanning with blocksize 4096 failed [ 351.642017][ T40] audit: type=1326 audit(1766741817.363:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11932 comm="syz.7.1366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d579 code=0x7ffc0000 [ 351.701520][T11941] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1368'. [ 351.710281][T11941] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.715887][T11941] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.797974][T11941] input: syz0 as /devices/virtual/input/input15 [ 351.920404][T11951] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1370'. [ 352.084807][ T6110] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 352.314935][ T6110] usb 7-1: device descriptor read/64, error -71 [ 352.508922][T11941] syz.7.1368: page allocation failure: order:0, mode:0x10cc0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 352.514187][T11941] CPU: 2 UID: 0 PID: 11941 Comm: syz.7.1368 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.514208][T11941] Tainted: [L]=SOFTLOCKUP [ 352.514212][T11941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 352.514220][T11941] Call Trace: [ 352.514225][T11941] [ 352.514230][T11941] dump_stack_lvl+0x16c/0x1f0 [ 352.514325][T11941] warn_alloc+0x248/0x3a0 [ 352.514363][T11941] ? __pfx_warn_alloc+0x10/0x10 [ 352.514390][T11941] ? psi_memstall_leave+0x19f/0x2d0 [ 352.514409][T11941] ? __pfx___alloc_pages_direct_compact+0x10/0x10 [ 352.514422][T11941] ? psi_memstall_leave+0x1e1/0x2d0 [ 352.514439][T11941] ? psi_memstall_leave+0x1e6/0x2d0 [ 352.514457][T11941] __alloc_frozen_pages_noprof+0xe9b/0x2430 [ 352.514474][T11941] ? __schedule+0x10b9/0x6150 [ 352.514493][T11941] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 352.514511][T11941] ? __pfx___schedule+0x10/0x10 [ 352.514526][T11941] ? __pfx___schedule+0x10/0x10 [ 352.514556][T11941] ? rcu_is_watching+0x12/0xc0 [ 352.514572][T11941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 352.514590][T11941] ? policy_nodemask+0xea/0x4e0 [ 352.514631][T11941] alloc_pages_mpol+0x1fb/0x550 [ 352.514648][T11941] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 352.514669][T11941] alloc_pages_noprof+0x131/0x390 [ 352.514686][T11941] kimage_alloc_pages+0x74/0x350 [ 352.514705][T11941] kimage_alloc_control_pages+0x153/0xa00 [ 352.514734][T11941] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 352.514766][T11941] do_kexec_load+0x439/0x860 [ 352.514782][T11941] ? __pfx_do_kexec_load+0x10/0x10 [ 352.514805][T11941] __ia32_compat_sys_kexec_load+0x37f/0x400 [ 352.514825][T11941] ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10 [ 352.514844][T11941] __do_fast_syscall_32+0xe8/0x680 [ 352.514863][T11941] do_fast_syscall_32+0x32/0x80 [ 352.514873][T11941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 352.514887][T11941] RIP: 0023:0xf703d579 [ 352.514897][T11941] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 352.514908][T11941] RSP: 002b:00000000f542d55c EFLAGS: 00000296 ORIG_RAX: 000000000000011b [ 352.514919][T11941] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 352.514926][T11941] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 352.514933][T11941] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 352.514939][T11941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.514945][T11941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 352.514959][T11941] [ 352.602516][ C2] hpet: Lost 4 RTC interrupts [ 352.674768][T11941] Mem-Info: [ 352.675841][T11941] active_anon:116 inactive_anon:891 isolated_anon:0 [ 352.675841][T11941] active_file:478 inactive_file:625 isolated_file:0 [ 352.675841][T11941] unevictable:1768 dirty:5 writeback:0 [ 352.675841][T11941] slab_reclaimable:6626 slab_unreclaimable:74705 [ 352.675841][T11941] mapped:29507 shmem:1769 pagetables:997 [ 352.675841][T11941] sec_pagetables:326 bounce:0 [ 352.675841][T11941] kernel_misc_reclaimable:0 [ 352.675841][T11941] free:23000 free_pcp:374 free_cma:0 [ 352.718992][ T5943] Bluetooth: hci2: command 0x0406 tx timeout [ 352.719014][ T5947] Bluetooth: hci1: command 0x0406 tx timeout [ 352.734698][ T6110] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 352.757749][T11941] Node 0 active_anon:0kB inactive_anon:360kB active_file:0kB inactive_file:188kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:4544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9696kB pagetables:1436kB sec_pagetables:1160kB all_unreclaimable? no Balloon:0kB [ 352.830420][T11941] Node 1 active_anon:188kB inactive_anon:2504kB active_file:1952kB inactive_file:2848kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:117640kB dirty:20kB writeback:0kB shmem:2532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6628kB pagetables:2552kB sec_pagetables:148kB all_unreclaimable? no Balloon:0kB [ 352.868973][T11941] Node 0 DMA free:1880kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:32kB active_file:0kB inactive_file:52kB unevictable:0kB writepending:0kB zspages:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 352.879950][T11941] lowmem_reserve[]: 0 289 289 289 289 [ 352.881844][T11941] Node 0 DMA32 free:12976kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:2048KB free_highatomic:408KB active_anon:208kB inactive_anon:20kB active_file:0kB inactive_file:176kB unevictable:3536kB writepending:0kB zspages:692kB present:1032196kB managed:296812kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 352.894793][T11941] lowmem_reserve[]: 0 0 0 0 0 [ 352.896980][T11941] Node 1 DMA32 free:70648kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:952kB inactive_anon:2424kB active_file:5720kB inactive_file:3148kB unevictable:3536kB writepending:20kB zspages:4044kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:2480kB local_pcp:800kB free_cma:0kB [ 352.910703][T11941] lowmem_reserve[]: 0 0 0 0 0 [ 352.912809][T11941] Node 0 DMA: 3*4kB (UM) 7*8kB (U) 10*16kB (UM) 13*32kB (UM) 4*64kB (UM) 2*128kB (UM) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1924kB [ 352.918672][T11941] Node 0 DMA32: 104*4kB (UME) 111*8kB (UMEH) 69*16kB (UMH) 83*32kB (MEH) 56*64kB (UMEH) 23*128kB (UMEH) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13384kB [ 352.921719][T11963] fuse: Bad value for 'rootmode' [ 352.924453][T11941] Node 1 DMA32: 26*4kB (ME) 67*8kB (ME) 554*16kB (ME) 382*32kB (UME) 220*64kB (UME) 118*128kB (ME) 55*256kB (ME) 8*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 70112kB [ 352.932399][T11941] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.937439][T11941] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 352.941098][T11941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.945152][T11941] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 352.949249][T11941] 5003 total pagecache pages [ 352.951133][T11941] 684 pages in swap cache [ 352.954209][T11941] Free swap = 82212kB [ 352.956181][ T5947] Bluetooth: hci5: command 0x0c1a tx timeout [ 352.958235][T11941] Total swap = 124996kB [ 352.958245][T11941] 524155 pages RAM [ 352.958250][T11941] 0 pages HighMem/MovableOnly [ 352.958254][T11941] 209059 pages reserved [ 352.958259][T11941] 0 pages cma reserved [ 352.966475][ T6110] usb 7-1: device descriptor read/64, error -71 [ 353.074875][ T6110] usb usb7-port1: attempt power cycle [ 353.223319][T11941] kexec: Could not allocate control_code_buffer [ 353.230234][ T40] audit: type=1326 audit(1766741818.953:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.6.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 353.237334][ T40] audit: type=1326 audit(1766741818.953:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.6.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 353.244420][ T40] audit: type=1326 audit(1766741818.953:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.6.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 353.252000][ T40] audit: type=1326 audit(1766741818.953:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.6.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 353.259647][ T40] audit: type=1326 audit(1766741818.953:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.6.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 353.266784][ T40] audit: type=1326 audit(1766741818.953:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.6.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 353.274844][ T40] audit: type=1326 audit(1766741818.953:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.6.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 353.281926][ T40] audit: type=1326 audit(1766741818.953:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.6.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 353.288981][ T40] audit: type=1326 audit(1766741818.953:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11960 comm="syz.6.1373" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 353.424676][ T6110] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 353.445163][ T6110] usb 7-1: device descriptor read/8, error -71 [ 353.684725][ T6110] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 353.705052][ T6110] usb 7-1: device descriptor read/8, error -71 [ 353.814879][ T6110] usb usb7-port1: unable to enumerate USB device [ 354.122926][T11980] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 354.490559][T11985] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1379'. [ 354.788431][ T5943] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 354.794775][ T5943] Bluetooth: hci2: command 0x0406 tx timeout [ 355.247197][T12001] fuse: Bad value for 'group_id' [ 355.248995][T12001] fuse: Bad value for 'group_id' [ 355.374690][ T1021] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 355.526085][ T1021] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.530109][ T1021] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.533259][ T1021] usb 11-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 355.537922][ T1021] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.542608][ T1021] usb 11-1: config 0 descriptor?? [ 355.935220][T12004] qnx6: unable to read the first superblock [ 355.963949][T12000] sp0: Synchronizing with TNC [ 356.191399][T12009] Invalid source name [ 356.192992][T12009] UBIFS error (pid: 12009): cannot open "./file0", error -22 [ 356.387431][T12017] syzkaller1: entered promiscuous mode [ 356.391781][T12017] syzkaller1: entered allmulticast mode [ 356.406687][T12015] ipt_REJECT: TCP_RESET invalid for non-tcp [ 356.634721][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 356.634788][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 356.731231][T12024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.733849][T12024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.737266][T12024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.739922][T12024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.275575][T12022] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 357.277877][T12022] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 357.280778][T12022] vhci_hcd vhci_hcd.0: Device attached [ 357.296742][T12026] vhci_hcd: connection closed [ 357.297155][ T8000] vhci_hcd vhci_hcd.4: stop threads [ 357.301773][ T8000] vhci_hcd vhci_hcd.4: release socket [ 357.304190][ T8000] vhci_hcd vhci_hcd.4: disconnect device [ 357.433487][T12030] macvlan2: entered promiscuous mode [ 357.792687][T12040] usb usb1: usbfs: process 12040 (syz.2.1395) did not claim interface 0 before use [ 357.954975][T12044] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 358.087102][T12051] netlink: 'syz.2.1399': attribute type 10 has an invalid length. [ 358.090264][T12051] bond0: (slave ªªªªª»): The slave device specified does not support setting the MAC address [ 358.093966][T12051] ªªªªª»: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 358.101522][T12051] bond0: (slave ªªªªª»): Error -22 calling dev_set_mtu [ 358.338402][T12000] [U] è [ 358.438524][ T1021] usbhid 11-1:0.0: can't add hid device: -71 [ 358.441091][ T1021] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 358.447256][ T1021] usb 11-1: USB disconnect, device number 6 [ 358.806274][ T5947] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 358.810151][ T5947] Bluetooth: hci5: Injecting HCI hardware error event [ 358.814472][ T5947] Bluetooth: hci5: hardware error 0x00 [ 360.196598][T12094] lo speed is unknown, defaulting to 1000 [ 361.014074][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 361.017540][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 361.044880][ T5947] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 361.093369][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 361.093386][ T40] audit: type=1326 audit(1766741826.813:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.6.1413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 361.113063][ T40] audit: type=1326 audit(1766741826.833:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.6.1413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 361.125768][ T40] audit: type=1326 audit(1766741826.833:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.6.1413" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 361.157739][ T40] audit: type=1326 audit(1766741826.833:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.6.1413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 361.224790][ T40] audit: type=1326 audit(1766741826.833:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.6.1413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 361.294691][ T40] audit: type=1326 audit(1766741826.833:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.6.1413" exe="/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 361.314646][ T40] audit: type=1326 audit(1766741826.833:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.6.1413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 361.344828][ T40] audit: type=1326 audit(1766741826.833:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.6.1413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 361.398731][ T40] audit: type=1326 audit(1766741826.833:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.6.1413" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 361.435604][ T40] audit: type=1326 audit(1766741826.833:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.6.1413" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 361.724667][ T1021] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 361.864679][ T1021] usb 9-1: device descriptor read/64, error -71 [ 361.997455][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1418'. [ 362.114639][ T1021] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 362.244790][ T1021] usb 9-1: device descriptor read/64, error -71 [ 362.277410][T12133] FAULT_INJECTION: forcing a failure. [ 362.277410][T12133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.283211][T12133] CPU: 3 UID: 0 PID: 12133 Comm: syz.6.1420 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.283240][T12133] Tainted: [L]=SOFTLOCKUP [ 362.283247][T12133] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 362.283258][T12133] Call Trace: [ 362.283268][T12133] [ 362.283276][T12133] dump_stack_lvl+0x16c/0x1f0 [ 362.283308][T12133] should_fail_ex+0x512/0x640 [ 362.283332][T12133] _copy_from_user+0x2e/0xd0 [ 362.283352][T12133] get_compat_msghdr+0xa7/0x170 [ 362.283375][T12133] ? __pfx_get_compat_msghdr+0x10/0x10 [ 362.283406][T12133] ___sys_sendmsg+0x1ae/0x1d0 [ 362.283430][T12133] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.283464][T12133] ? find_held_lock+0x2b/0x80 [ 362.283503][T12133] __sys_sendmsg+0x16d/0x220 [ 362.283526][T12133] ? __pfx___sys_sendmsg+0x10/0x10 [ 362.283563][T12133] ? do_user_addr_fault+0x843/0x1370 [ 362.283588][T12133] __do_fast_syscall_32+0xe8/0x680 [ 362.283617][T12133] do_fast_syscall_32+0x32/0x80 [ 362.283632][T12133] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 362.283651][T12133] RIP: 0023:0xf7f51579 [ 362.283665][T12133] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 362.283679][T12133] RSP: 002b:00000000f542555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 362.283696][T12133] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 362.283705][T12133] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 362.283714][T12133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 362.283722][T12133] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 362.283731][T12133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 362.283749][T12133] [ 362.362107][ T1021] usb usb9-port1: attempt power cycle [ 362.590613][T12138] Invalid source name [ 362.592449][T12138] UBIFS error (pid: 12138): cannot open "./file0", error -22 [ 362.678839][T12144] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.683702][T12144] bridge0: port 2(bridge_slave_1) entered listening state [ 362.686234][T12144] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.688599][T12144] bridge0: port 1(bridge_slave_0) entered listening state [ 362.695083][T12144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 362.784984][T12145] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 362.787932][T12145] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 362.804914][ T1021] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 362.825612][ T1021] usb 9-1: device descriptor read/8, error -71 [ 362.838904][T12145] vhci_hcd vhci_hcd.0: Device attached [ 362.919773][T12145] random: crng reseeded on system resumption [ 362.999353][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.001979][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.071008][ T1021] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 363.080273][T12140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.095443][ T1021] usb 9-1: device descriptor read/8, error -71 [ 363.115096][ T60] usb 42-1: SetAddress Request (31) to port 0 [ 363.117815][ T60] usb 42-1: new SuperSpeed USB device number 31 using vhci_hcd [ 363.214833][ T1021] usb usb9-port1: unable to enumerate USB device [ 363.855165][T12148] vhci_hcd: connection reset by peer [ 363.857633][ T8023] vhci_hcd vhci_hcd.2: stop threads [ 363.864530][ T8035] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.884771][ T8023] vhci_hcd vhci_hcd.2: release socket [ 363.887574][ T8023] vhci_hcd vhci_hcd.2: disconnect device [ 363.970080][ T8035] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.091596][ T8035] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.115436][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 364.120844][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 364.124198][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 364.128065][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 364.130990][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.154056][T12166] lo speed is unknown, defaulting to 1000 [ 364.215742][ T8035] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.565450][T12172] lo speed is unknown, defaulting to 1000 [ 365.128762][T12174] lo speed is unknown, defaulting to 1000 [ 365.390688][T12166] chnl_net:caif_netlink_parms(): no params data found [ 365.466407][T12166] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.469220][T12166] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.472350][T12166] bridge_slave_0: entered allmulticast mode [ 365.475985][T12166] bridge_slave_0: entered promiscuous mode [ 365.481111][T12166] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.484861][T12166] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.488212][T12166] bridge_slave_1: entered allmulticast mode [ 365.492974][T12166] bridge_slave_1: entered promiscuous mode [ 365.512793][T12166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.518823][T12166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.539242][T12166] team0: Port device team_slave_0 added [ 365.542744][T12166] team0: Port device team_slave_1 added [ 365.557250][T12166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.559669][T12166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.568179][T12166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.572783][T12166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.575809][T12166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.584357][T12166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.607671][T12166] hsr_slave_0: entered promiscuous mode [ 365.610023][T12166] hsr_slave_1: entered promiscuous mode [ 365.612208][T12166] debugfs: 'hsr0' already exists in 'hsr' [ 365.614070][T12166] Cannot create hsr debugfs directory [ 365.719578][T12166] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 365.758797][T12166] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 365.767352][T12166] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 365.772005][T12166] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 365.795429][T12166] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.797898][T12166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.800781][T12166] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.803609][T12166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.877464][T12166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.897660][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.154718][ T5947] Bluetooth: hci0: command tx timeout [ 366.480339][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.512263][T12166] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.529208][ T7986] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.532451][ T7986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.548798][ T7986] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.551201][ T7986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.611109][ T8035] bridge_slave_1: left allmulticast mode [ 366.613016][ T8035] bridge_slave_1: left promiscuous mode [ 366.615330][ T8035] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.641739][ T8035] bridge_slave_0: left allmulticast mode [ 366.646094][ T8035] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.942472][ T8035] bond3 (unregistering): (slave gre1): Releasing backup interface [ 366.949404][ T8035] gre1 (unregistering): left promiscuous mode [ 366.991474][ T8035] bond2 (unregistering): (slave geneve2): Releasing active interface [ 367.295933][ T8035] bond1 (unregistering): Released all slaves [ 367.434392][ T8035] bond2 (unregistering): Released all slaves [ 367.526624][ T8035] bond3 (unregistering): Released all slaves [ 367.611460][ T8035] bond4 (unregistering): Released all slaves [ 367.694538][ T8035] bond5 (unregistering): Released all slaves [ 367.777104][ T8035] bond6 (unregistering): Released all slaves [ 367.870835][ T8035] bond7 (unregistering): Released all slaves [ 367.916690][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 367.916929][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 368.021157][ T8035] bond8 (unregistering): Released all slaves [ 368.154856][ T60] usb 42-1: device descriptor read/8, error -110 [ 368.155740][ T8035] bond0 (unregistering): Released all slaves [ 368.235641][ T5943] Bluetooth: hci0: command tx timeout [ 368.248712][ T8035] bond9 (unregistering): Released all slaves [ 368.402189][ T6004] IPVS: starting estimator thread 0... [ 368.432235][T12166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.505121][T12215] IPVS: using max 28 ests per chain, 67200 per kthread [ 368.567576][ T60] usb usb42-port1: attempt power cycle [ 368.621856][ T8035] hsr_slave_0: left promiscuous mode [ 368.628372][ T8035] hsr_slave_1: left promiscuous mode [ 368.631585][ T8035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.633982][ T8035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.639445][ T8035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.642032][ T8035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.644961][ T5947] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 368.644988][ T5943] Bluetooth: hci6: command 0x1003 tx timeout [ 368.645324][ T8035] batman_adv: batadv0: Removing interface: vlan2 [ 368.709419][ T8035] veth1_vlan: left promiscuous mode [ 368.711958][ T8035] veth0_vlan: left promiscuous mode [ 368.784253][ T8035] team0 (unregistering): Port device batadv1 removed [ 369.043785][T12233] FAULT_INJECTION: forcing a failure. [ 369.043785][T12233] name failslab, interval 1, probability 0, space 0, times 0 [ 369.049821][T12233] CPU: 3 UID: 0 PID: 12233 Comm: syz.4.1442 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.049840][T12233] Tainted: [L]=SOFTLOCKUP [ 369.049844][T12233] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 369.049851][T12233] Call Trace: [ 369.049854][T12233] [ 369.049859][T12233] dump_stack_lvl+0x16c/0x1f0 [ 369.049881][T12233] should_fail_ex+0x512/0x640 [ 369.049895][T12233] ? __kmalloc_noprof+0xca/0x910 [ 369.049909][T12233] should_failslab+0xc2/0x120 [ 369.049926][T12233] __kmalloc_noprof+0xeb/0x910 [ 369.049938][T12233] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 369.049960][T12233] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 369.049979][T12233] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 369.050001][T12233] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 369.050020][T12233] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 369.050038][T12233] ? genl_get_cmd+0x194/0x580 [ 369.050057][T12233] ? bpf_lsm_capable+0x9/0x10 [ 369.050072][T12233] ? security_capable+0x7e/0x260 [ 369.050092][T12233] genl_rcv_msg+0x55c/0x800 [ 369.050104][T12233] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.050114][T12233] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 369.050129][T12233] ? __pfx_nl802154_set_llsec_params+0x10/0x10 [ 369.050142][T12233] ? __pfx_nl802154_post_doit+0x10/0x10 [ 369.050155][T12233] ? __lock_acquire+0x436/0x2890 [ 369.050170][T12233] netlink_rcv_skb+0x158/0x420 [ 369.050185][T12233] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.050229][T12233] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.050261][T12233] ? netlink_deliver_tap+0x1ae/0xd30 [ 369.050279][T12233] genl_rcv+0x28/0x40 [ 369.050295][T12233] netlink_unicast+0x5aa/0x870 [ 369.050313][T12233] ? __pfx_netlink_unicast+0x10/0x10 [ 369.050334][T12233] netlink_sendmsg+0x8c8/0xdd0 [ 369.050352][T12233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.050369][T12233] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 369.050390][T12233] ____sys_sendmsg+0xa5d/0xc30 [ 369.050408][T12233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.050425][T12233] ? get_compat_msghdr+0x11a/0x170 [ 369.050445][T12233] ___sys_sendmsg+0x134/0x1d0 [ 369.050464][T12233] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.050484][T12233] ? find_held_lock+0x2b/0x80 [ 369.050507][T12233] __sys_sendmsg+0x16d/0x220 [ 369.050521][T12233] ? __pfx___sys_sendmsg+0x10/0x10 [ 369.050544][T12233] __do_fast_syscall_32+0xe8/0x680 [ 369.050563][T12233] do_fast_syscall_32+0x32/0x80 [ 369.050573][T12233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 369.050586][T12233] RIP: 0023:0xf70ad579 [ 369.050596][T12233] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 369.050606][T12233] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 369.050617][T12233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 369.050624][T12233] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 369.050630][T12233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 369.050636][T12233] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 369.050642][T12233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 369.050656][T12233] [ 369.162429][ T60] usb usb42-port1: unable to enumerate USB device [ 369.220066][ T8035] team0 (unregistering): Port device team_slave_1 removed [ 369.271094][ T8035] team0 (unregistering): Port device team_slave_0 removed [ 369.367611][ T10] ================================================================== [ 369.370627][ T10] BUG: KASAN: slab-use-after-free in hci_uart_write_work+0x82d/0x960 [ 369.373422][ T10] Read of size 4 at addr ffff88801216a930 by task kworker/0:1/10 [ 369.377301][ T10] [ 369.378658][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.378676][ T10] Tainted: [L]=SOFTLOCKUP [ 369.378680][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 369.378688][ T10] Workqueue: events hci_uart_write_work [ 369.378705][ T10] Call Trace: [ 369.378710][ T10] [ 369.378714][ T10] dump_stack_lvl+0x116/0x1f0 [ 369.378734][ T10] print_report+0xcd/0x630 [ 369.378751][ T10] ? __virt_addr_valid+0x81/0x610 [ 369.378767][ T10] ? __phys_addr+0xe8/0x180 [ 369.378784][ T10] ? hci_uart_write_work+0x82d/0x960 [ 369.378793][ T10] kasan_report+0xe0/0x110 [ 369.378809][ T10] ? hci_uart_write_work+0x82d/0x960 [ 369.378821][ T10] hci_uart_write_work+0x82d/0x960 [ 369.378831][ T10] ? __pfx_pty_write+0x10/0x10 [ 369.378846][ T10] process_one_work+0x9ba/0x1b20 [ 369.378860][ T10] ? __pfx_defense_work_handler+0x10/0x10 [ 369.378878][ T10] ? __pfx_process_one_work+0x10/0x10 [ 369.378891][ T10] ? assign_work+0x1a0/0x250 [ 369.378903][ T10] worker_thread+0x6c8/0xf10 [ 369.378916][ T10] ? __pfx_worker_thread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 369.378928][ T10] kthread+0x3c5/0x780 [ 369.378939][ T10] ? __pfx_kthread+0x10/0x10 [ 369.378950][ T10] ? rcu_is_watching+0x12/0xc0 [ 369.378966][ T10] ? __pfx_kthread+0x10/0x10 [ 369.378976][ T10] ret_from_fork+0x983/0xb10 [ 369.378987][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 369.378999][ T10] ? __switch_to+0x7af/0x10d0 [ 369.379013][ T10] ? __pfx_kthread+0x10/0x10 [ 369.379023][ T10] ret_from_fork_asm+0x1a/0x30 [ 369.379043][ T10] [ 369.379047][ T10] [ 369.443310][ T10] Allocated by task 6004: [ 369.445164][ T10] kasan_save_stack+0x33/0x60 [ 369.447284][ T10] kasan_save_track+0x14/0x30 [ 369.449279][ T10] __kasan_slab_alloc+0x89/0x90 [ 369.451230][ T10] kmem_cache_alloc_node_noprof+0x298/0x800 [ 369.453795][ T10] __alloc_skb+0x156/0x410 [ 369.455977][ T10] bcsp_prepare_pkt+0xe0/0xae0 [ 369.458123][ T10] bcsp_dequeue+0x237/0x4b0 [ 369.460200][ T10] hci_uart_write_work+0x4e3/0x960 [ 369.462408][ T10] process_one_work+0x9ba/0x1b20 [ 369.464331][ T10] worker_thread+0x6c8/0xf10 [ 369.466236][ T10] kthread+0x3c5/0x780 [ 369.467590][ T10] ret_from_fork+0x983/0xb10 [ 369.469113][ T10] ret_from_fork_asm+0x1a/0x30 [ 369.470694][ T10] [ 369.471488][ T10] The buggy address belongs to the object at ffff88801216a8c0 [ 369.471488][ T10] which belongs to the cache skbuff_head_cache of size 240 [ 369.477546][ T10] The buggy address is located 112 bytes inside of [ 369.477546][ T10] freed 240-byte region [ffff88801216a8c0, ffff88801216a9b0) [ 369.483399][ T10] [ 369.484198][ T10] The buggy address belongs to the physical page: [ 369.486665][ T10] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1216a [ 369.489487][ T10] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 369.492870][ T10] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 369.496159][ T10] page_type: f5(slab) [ 369.497946][ T10] raw: 00fff00000000040 ffff88801c32c8c0 ffffea0000956680 dead000000000003 [ 369.501684][ T10] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 369.505364][ T10] head: 00fff00000000040 ffff88801c32c8c0 ffffea0000956680 dead000000000003 [ 369.509080][ T10] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 369.512847][ T10] head: 00fff00000000001 ffffea0000485a81 00000000ffffffff 00000000ffffffff [ 369.516322][ T10] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 369.519793][ T10] page dumped because: kasan: bad access detected [ 369.521869][ T10] page_owner tracks the page as allocated [ 369.523999][ T10] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8016, tgid 8016 (kworker/u32:46), ts 326323281246, free_ts 253086368769 [ 369.531683][ T10] post_alloc_hook+0x1af/0x220 [ 369.533739][ T10] get_page_from_freelist+0xd0b/0x31a0 [ 369.536284][ T10] __alloc_frozen_pages_noprof+0x6d7/0x2430 [ 369.538954][ T10] alloc_pages_mpol+0x1fb/0x550 [ 369.540937][ T10] new_slab+0x2c3/0x430 [ 369.542577][ T10] ___slab_alloc+0xe18/0x1c90 [ 369.544529][ T10] __slab_alloc.constprop.0+0x63/0x110 [ 369.546821][ T10] kmem_cache_alloc_node_noprof+0x44a/0x800 [ 369.549226][ T10] __alloc_skb+0x156/0x410 [ 369.551054][ T10] skb_copy+0x1c9/0x3a0 [ 369.552880][ T10] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb6e/0x13c0 [ 369.555783][ T10] mac80211_hwsim_tx_frame+0x1f1/0x2a0 [ 369.558011][ T10] mac80211_hwsim_beacon_tx+0x595/0xa40 [ 369.560399][ T10] __iterate_interfaces+0x2e5/0x650 [ 369.562357][ T10] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 369.565011][ T10] mac80211_hwsim_beacon+0x105/0x1b0 [ 369.567285][ T10] page last free pid 9900 tgid 9900 stack trace: [ 369.569721][ T10] __free_pages_ok+0x725/0xf80 [ 369.571767][ T10] p9_fid_destroy+0x9a/0xd0 [ 369.573818][ T10] p9_client_clunk+0x12a/0x170 [ 369.575868][ T10] v9fs_dir_release+0x43c/0x590 [ 369.578056][ T10] __fput+0x402/0xb70 [ 369.579643][ T10] task_work_run+0x150/0x240 [ 369.581186][ T10] exit_to_user_mode_loop+0xfb/0x540 [ 369.582953][ T10] __do_fast_syscall_32+0x4a4/0x680 [ 369.584693][ T10] do_fast_syscall_32+0x32/0x80 [ 369.586359][ T10] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 369.589077][ T10] [ 369.590102][ T10] Memory state around the buggy address: [ 369.592921][ T10] ffff88801216a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 369.596499][ T10] ffff88801216a880: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 369.600010][ T10] >ffff88801216a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 369.603294][ T10] ^ [ 369.605584][ T10] ffff88801216a980: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 369.608913][ T10] ffff88801216aa00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 369.612251][ T10] ================================================================== [ 369.785291][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 369.787680][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 369.791566][ T10] Tainted: [L]=SOFTLOCKUP [ 369.793517][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 369.797854][ T10] Workqueue: events hci_uart_write_work [ 369.800343][ T10] Call Trace: [ 369.801727][ T10] [ 369.802910][ T10] dump_stack_lvl+0x3d/0x1f0 [ 369.804902][ T10] vpanic+0x640/0x6f0 [ 369.806684][ T10] panic+0xca/0xd0 [ 369.808297][ T10] ? __pfx_panic+0x10/0x10 [ 369.810247][ T10] ? hci_uart_write_work+0x82d/0x960 [ 369.812422][ T10] ? preempt_schedule_common+0x44/0xc0 [ 369.814702][ T10] ? preempt_schedule_thunk+0x16/0x30 [ 369.816434][ T10] ? check_panic_on_warn+0x1f/0xb0 [ 369.818618][ T10] check_panic_on_warn+0xab/0xb0 [ 369.820816][ T10] end_report+0x107/0x160 [ 369.822706][ T10] kasan_report+0xee/0x110 [ 369.824669][ T10] ? hci_uart_write_work+0x82d/0x960 [ 369.826917][ T10] hci_uart_write_work+0x82d/0x960 [ 369.829116][ T10] ? __pfx_pty_write+0x10/0x10 [ 369.831387][ T10] process_one_work+0x9ba/0x1b20 [ 369.833577][ T10] ? __pfx_defense_work_handler+0x10/0x10 [ 369.836057][ T10] ? __pfx_process_one_work+0x10/0x10 [ 369.837900][ T10] ? assign_work+0x1a0/0x250 [ 369.839528][ T10] worker_thread+0x6c8/0xf10 [ 369.841236][ T10] ? __pfx_worker_thread+0x10/0x10 [ 369.843071][ T10] kthread+0x3c5/0x780 [ 369.844794][ T10] ? __pfx_kthread+0x10/0x10 [ 369.846824][ T10] ? rcu_is_watching+0x12/0xc0 [ 369.848863][ T10] ? __pfx_kthread+0x10/0x10 [ 369.850838][ T10] ret_from_fork+0x983/0xb10 [ 369.852748][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 369.854977][ T10] ? __switch_to+0x7af/0x10d0 [ 369.856980][ T10] ? __pfx_kthread+0x10/0x10 [ 369.859005][ T10] ret_from_fork_asm+0x1a/0x30 [ 369.860997][ T10] [ 369.862974][ T10] Kernel Offset: disabled [ 369.864772][ T10] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:29:10 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85301125 RDI=ffffffff9aed9260 RBP=ffffffff9aed9220 RSP=ffffc900001c75a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9aed9220 R15=ffffffff853010c0 RIP=ffffffff8530114f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7476288 CR3=000000006161f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000012ac3c9 RBX=0000000000000001 RCX=ffffffff8b7576d9 RDX=0000000000000000 RSI=ffffffff8daca977 RDI=ffffffff8bf2b580 RBP=ffffed1003ade498 RSP=ffffc9000046fde8 R8 =0000000000000001 R9 =ffffed100566673d R10=ffff88802b3339eb R11=ffff88801d6f2ff0 R12=0000000000000001 R13=ffff88801d6f24c0 R14=ffffffff9088e8d0 R15=0000000000000000 RIP=ffffffff8b755dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f723a920 CR3=000000006161f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000413a1 RBX=ffffffff93bb8160 RCX=00000000000413a5 RDX=0000000000000027 RSI=00000000000413a4 RDI=ffffffff95c23bf0 RBP=0000000000000010 RSP=ffffc90007fa76e0 R8 =00000000000413a5 R9 =ffffffff95da422a R10=0000000000000002 R11=ffff8880539e54b0 R12=ffffffff9700a6c0 R13=0000000000000bb0 R14=ffffffff97371b38 R15=dead000000000122 RIP=ffffffff81990d7f RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057e3f4c0 CR3=00000000233f8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 274dde19a6a9571c e1d3398892e63088 f3f335cf3b2d587a 6e22a72782b6f0bf ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c009af2c2904986 2cda7eea77c3fbac bf752c1f01661b8c 5e07afa06de7af08 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d46d5424534c1cea dbd626b4bc3b34cd eac676dce356d32e 8457261c07a5a76f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0208000598034808 007f880300080029 fa031875e3007a93 342886aa27ebed03 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000001000400 0185800800068002 01c70800080149c6 006d766b2f766564 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f01ffffffffffff ffffed0806800302 80a48008000fffff ffff020100000e08 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 060100000e080608 0158da02c0800800 0580020108000601 5c9004c080818a08 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005b00300080005 a80300080005a003 0208000598034808 007f880300080029 ZMM25=9981364c9981364c 9981364c9981364c 9981364c9981364c 9981364c9981364c 9981364c9981364c 9981364c9981364c 9981364c9981364c 9981364c9981364c ZMM26=c44581f4c44581f4 c44581f4c44581f4 c44581f4c44581f4 c44581f4c44581f4 c44581f4c44581f4 c44581f4c44581f4 c44581f4c44581f4 c44581f4c44581f4 ZMM27=e54bfc2ae54bfc2a e54bfc2ae54bfc2a e54bfc2ae54bfc2a e54bfc2ae54bfc2a e54bfc2ae54bfc2a e54bfc2ae54bfc2a e54bfc2ae54bfc2a e54bfc2ae54bfc2a ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=260a0000260a0000 260a0000260a0000 260a0000260a0000 260a0000260a0000 260a0000260a0000 260a0000260a0000 260a0000260a0000 260a0000260a0000 info registers vcpu 3 CPU#3 RAX=00000000006a8389 RBX=0000000000000003 RCX=ffffffff8b7576d9 RDX=0000000000000000 RSI=ffffffff8daca977 RDI=ffffffff8bf2b580 RBP=ffffed1003b5a000 RSP=ffffc9000048fde8 R8 =0000000000000001 R9 =ffffed10056a673d R10=ffff88802b5339eb R11=ffff88801dad0b30 R12=0000000000000003 R13=ffff88801dad0000 R14=ffffffff9088e8d0 R15=0000000000000000 RIP=ffffffff8b755dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979fc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f222ff8 CR3=000000005021b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000