last executing test programs: 8.662464582s ago: executing program 3 (id=57): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x31c, 0x0, 0x111, 0x4b4, 0x148, 0x700, 0x254, 0x278, 0x278, 0x254, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0x0, 0xff], 'vlan0\x00', 'vlan1\x00', {}, {}, 0x88}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x2000], [0x0, 0x1]}}, @common=@unspec=@connlabel={{0x24}, {0x5, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x1, 0x3}, {0x0, 0x4}, 0xf}}}, {{@uncond, 0x0, 0xdc, 0x10c, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x8}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x1, 0x4}, {0x4, 0x1, 0x4}, 0x3, 0x5}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x378) r2 = fanotify_init(0x200, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x10201, 0x567ddb472eedec53, 0xeeef0000, 0x1000, &(0x7f000012d000/0x1000)=nil}) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) fanotify_mark(r2, 0x1, 0x1015, r0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = eventfd2(0x8, 0x801) read$eventfd(r6, &(0x7f0000000200), 0x8) close(0xffffffffffffffff) socket$inet(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) read$FUSE(r5, &(0x7f00000022c0)={0x2020}, 0x2020) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b685fc0657f5a18a5202beb92193b4e8b4824bff2a0759fd4d81"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) read(r2, &(0x7f0000000580)=""/190, 0xbe) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="87", 0x1}], 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) r10 = fcntl$dupfd(r8, 0x0, r9) ioctl$TCFLSH(r10, 0x400455c8, 0x1) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000480)=0x7d) 8.38238824s ago: executing program 2 (id=59): mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf\"\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`\x1e\x91<~\xd8\xabs\xbd*e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2\x04\x00\x00\x00\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\x1e\xfc/fm\xa9`)\xfc7\x84\f+\xf7\x95\xab[J\xe7\x9d\xd8\xe3\x86\xdb\xfe|\xe91\n\xa0\xdf\v\\\xe4\x00'/941, 0x40, 0x170, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$user(&(0x7f00000000c0), 0x0, &(0x7f0000000380)="7ccd08", 0x3, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x10, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x85, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044565d, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x100, 0x8d47, {}, {0x1, 0x2, 0x5, 0x48, 0x0, 0xe, "a757879d"}, 0x5, 0x1, {}, 0x3}) sendmsg$nl_route(r4, 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x8000000, r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x100013, 0xa4a82) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) 6.548824412s ago: executing program 0 (id=61): mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf\"\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`\x1e\x91<~\xd8\xabs\xbd*e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2\x04\x00\x00\x00\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\x1e\xfc/fm\xa9`)\xfc7\x84\f+\xf7\x95\xab[J\xe7\x9d\xd8\xe3\x86\xdb\xfe|\xe91\n\xa0\xdf\v\\\xe4\x00'/941, 0x40, 0x170, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$user(&(0x7f00000000c0), 0x0, &(0x7f0000000380)="7ccd08", 0x3, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x10, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x85, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044565d, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x100, 0x8d47, {}, {0x1, 0x2, 0x5, 0x48, 0x0, 0xe, "a757879d"}, 0x5, 0x1, {}, 0x3}) sendmsg$nl_route(r4, 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x8000000, r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x100013, 0xa4a82) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) 5.587304561s ago: executing program 3 (id=63): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000c4000/0xc000)=nil, 0x2000, 0x2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xa7ba) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r9) 4.602133874s ago: executing program 0 (id=65): mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf\"\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`\x1e\x91<~\xd8\xabs\xbd*e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2\x04\x00\x00\x00\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\x1e\xfc/fm\xa9`)\xfc7\x84\f+\xf7\x95\xab[J\xe7\x9d\xd8\xe3\x86\xdb\xfe|\xe91\n\xa0\xdf\v\\\xe4\x00'/941, 0x40, 0x170, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$user(&(0x7f00000000c0), 0x0, &(0x7f0000000380)="7ccd08", 0x3, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000300), 0x10, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x85, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc044565d, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x100, 0x8d47, {}, {0x1, 0x2, 0x5, 0x48, 0x0, 0xe, "a757879d"}, 0x5, 0x1, {}, 0x3}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x8000000, r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x100013, 0xa4a82) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) 4.509066033s ago: executing program 3 (id=66): io_setup(0x9, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x22d00, 0x0) sync() ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffe6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) 4.158363426s ago: executing program 2 (id=67): mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf\"\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`\x1e\x91<~\xd8\xabs\xbd*e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2\x04\x00\x00\x00\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\x1e\xfc/fm\xa9`)\xfc7\x84\f+\xf7\x95\xab[J\xe7\x9d\xd8\xe3\x86\xdb\xfe|\xe91\n\xa0\xdf\v\\\xe4\x00'/941, 0x40, 0x170, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$user(&(0x7f00000000c0), 0x0, &(0x7f0000000380)="7ccd08", 0x3, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000300), 0x10, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x85, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc044565d, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x100, 0x8d47, {}, {0x1, 0x2, 0x5, 0x48, 0x0, 0xe, "a757879d"}, 0x5, 0x1, {}, 0x3}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x8000000, r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x100013, 0xa4a82) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) 3.848931964s ago: executing program 1 (id=68): socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x2278, &(0x7f0000000180)=0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000340)={0x94d0, 0x2, [{0x1, 0x1}, {0xd, 0x1}]}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1, 0xff, 0x20000000, 0x9, 0x4}, 0x7, 0x4}, [{0x7, 0x3, 0x4, 0x0, 0x4a3, 0x2}, {0x1, 0x6, 0x4, 0x0, 0x1, 0x3}, {0xd, 0x0, 0x9, 0x101, 0x41, 0x6}, {0x7f, 0x4, 0x7, 0x2, 0x4, 0x4}, {0x200, 0x1000, 0x1, 0xfff, 0x8}, {0xffffffad, 0x6, 0x6, 0x2, 0x101, 0x8}, {0x7, 0x3, 0x0, 0x0, 0x3, 0x8}, {0x2, 0x5, 0xc3b, 0x2, 0x1, 0x8001}, {0x97b, 0x9, 0x3, 0x1, 0xd, 0xcf5}, {0x7f, 0x8001, 0x10001, 0x7, 0x101, 0x6eb865f7}, {0x7a, 0x80, 0x2, 0x1ff, 0x8d, 0x4}, {0x9, 0x9, 0x0, 0x179, 0x8, 0x7}, {0x8, 0x8, 0x7, 0x9, 0x97b5, 0x5}, {0x5, 0x7, 0x6, 0x1, 0xc000, 0x7f}, {0xa, 0xffffffff, 0x3ff, 0x7, 0x8, 0x6}, {0x401, 0xf97, 0xd, 0x691a, 0x6}, {0x0, 0x2, 0x8001, 0x6, 0xeb3, 0x8}, {0x2, 0x1ff, 0xa5, 0x36d6, 0x91}, {0x0, 0x0, 0x8, 0x10001, 0x9, 0x40}, {0x6f, 0x6, 0xff86, 0x5, 0x1, 0x88}, {0x7ff, 0x5, 0x81, 0x2, 0x80, 0xfffffff9}, {0x976b, 0x763, 0x2, 0x0, 0x6, 0x40000}, {0xa, 0x2, 0x9, 0x2, 0x6, 0x6}, {0xffffffff, 0x6215, 0x81, 0xf6cf, 0x1000, 0x8}, {0x0, 0xe7b, 0x6, 0x5, 0x4, 0x10}, {0x59, 0x4, 0x5, 0x8, 0x8001, 0x5e25abe6}, {0x7fffffff, 0x5, 0x13b9, 0x2}, {0x1, 0xaf14, 0x2, 0x3, 0x9, 0x5cf1}, {0xffff, 0x8000, 0x3ff, 0xffff, 0x6, 0x1}, {0x9, 0x0, 0x5, 0xa0a, 0x4, 0xfffffff9}, {0x10000, 0xee1, 0x400, 0x3ff, 0xffff}, {0x2, 0x4, 0x0, 0x3, 0x8, 0xfff}, {0xfffffff7, 0x9, 0x6, 0x8, 0x9, 0x80000}, {0x9, 0x2, 0x10, 0x1ff, 0xc, 0x8}, {0x100, 0x6, 0x800, 0x3, 0x0, 0x6}, {0x5804, 0x6, 0x0, 0x10, 0x9, 0x5}, {0x8, 0xfffffffe, 0x6, 0x6, 0x0, 0x1}, {0x9, 0x57b2f255, 0xd, 0x9f, 0x40, 0x6}, {0x1, 0x4903, 0x6, 0x1, 0x3, 0x8}, {0x9, 0x6, 0x40000, 0x1, 0xc, 0x1}, {0x2, 0xfffff001, 0x2, 0x5, 0xfffffff9, 0x9}, {0x6, 0xe8, 0xf, 0x8, 0x1, 0x7}, {0x8, 0x8, 0xfffe0000, 0x9, 0x3}, {0x101, 0x2, 0x5b, 0x7, 0x7f, 0x2}, {0xe5ca, 0xffffff01, 0x7000, 0x730, 0xd, 0xc}, {0x8, 0xff, 0x0, 0x59, 0x0, 0x3ff}, {0x1, 0x9, 0x80000001, 0x2, 0xfffffffe, 0xfffffffc}, {0x3, 0xd, 0x50000000, 0x400, 0x5, 0x1}, {0x8, 0x9, 0xeea, 0x1, 0x3, 0x8001}, {0x0, 0x9, 0x3, 0x498, 0x8, 0x40000000}, {0x10001, 0xffffff7f, 0x9, 0x8, 0x7, 0xc}, {0x54fd3e6b, 0x8, 0x5, 0x1, 0x7, 0x8}, {0x4, 0x8, 0x4, 0x6, 0x6, 0x2964}, {0x5, 0x8, 0x0, 0x82, 0x2, 0x7}, {0x3, 0xffffffd6, 0x93, 0xeaf, 0x5, 0x6}, {0x1, 0x9, 0x0, 0xea3, 0x16}, {0x3, 0x9, 0x65d, 0x8, 0x5, 0x1}, {0x5, 0x6, 0x80000001, 0x2, 0x1, 0x2693d155}, {0x6, 0x7, 0x35e, 0x66c, 0x9, 0x6}, {0xcf, 0x8, 0xa, 0x6, 0x0, 0x5}, {0x5, 0xbe, 0x0, 0x3, 0x7, 0x4}, {0x7, 0x4c2600, 0x0, 0x7ee, 0x1, 0x10001}, {0x3, 0xbbf, 0x8, 0x8, 0x6, 0xb06e}, {0x9, 0xc2f, 0x3, 0x6, 0x4, 0x2}, {0x7, 0x81, 0xf, 0xf0, 0x5, 0xf779}, {0x8001, 0x7, 0x10, 0x0, 0x8, 0x7c81}, {0x1, 0x7f, 0xbe, 0x2, 0x4, 0x6}, {0x10000007, 0x2, 0x1, 0x0, 0x8, 0x6}, {0x3fb, 0x2, 0x8, 0x5d06, 0x4, 0x7fff}, {0x9, 0x6cf, 0x1, 0x81, 0xe56b, 0xfffffff8}, {0x74d, 0x2, 0x8, 0x7, 0x8, 0x2}, {0x401, 0x6, 0x2, 0x80000000, 0xccb9, 0x13f}, {0x5, 0x1ff, 0xed2, 0x9, 0x1658, 0x6}, {0x0, 0x1, 0x5, 0x1ff, 0x7, 0x7}, {0x10, 0x400, 0x7, 0x1, 0x8, 0x3}, {0xf, 0x0, 0xee68, 0x7ff, 0xbb, 0x8}, {0x590, 0x0, 0x64, 0x10, 0x8, 0x2}, {0x4, 0xd, 0x659, 0x6e, 0x2f193dcb, 0x7}, {0xffff, 0x9, 0x800, 0xf, 0x1, 0x3}, {0x5, 0x1, 0xff, 0x8001, 0x7, 0xfffffeff}, {0x6, 0x3, 0x7f, 0xc98b, 0x401, 0x3}, {0xd, 0x7a04, 0x2, 0x1, 0x7, 0xa}, {0x2, 0x100, 0x7fffffff, 0x5, 0x1a5, 0x5}, {0x1000, 0x5, 0x7, 0x80000000, 0x1, 0x8}, {0x7, 0x80000000, 0x800, 0xfb, 0x187, 0xffff}, {0xd0e, 0xb, 0x1ff, 0x5, 0x401, 0x3ff}, {0x99dea97, 0xfffffffd, 0x7, 0x0, 0x0, 0x6}, {0x7c937224, 0xa6dd, 0x10001, 0x9, 0x7fffffff, 0x6}, {0x2, 0xd11, 0x6, 0x3a, 0x3, 0xa}, {0x0, 0x9, 0x6, 0x18c0, 0x0, 0x3}, {0xfffffffb, 0x1, 0x1, 0x5, 0x0, 0x34}, {0x7fff, 0x10, 0x6, 0x6, 0xffffffff, 0x582}, {0xc3, 0x8, 0xd, 0xc87, 0x41, 0x2}, {0x0, 0x4, 0x0, 0xffff8001, 0x0, 0x4}, {0x6, 0x8, 0xe, 0xe2c1, 0x9, 0x8}, {0x6, 0x1, 0x5, 0x80000001, 0x4, 0x9}, {0x1a0, 0x5, 0xa16, 0xffffff2a, 0x9, 0x10001}, {0x4, 0xe, 0x6, 0xf, 0x8, 0x4}, {0x6, 0x4, 0xa, 0xffffffff, 0xc, 0x4}, {0x545, 0x3, 0xe62, 0x9a9d, 0x7, 0xf}, {0x6, 0x5, 0x2, 0x2, 0x6, 0x1c}, {0x8718, 0x9, 0xc, 0x672e, 0x9, 0x81}, {0xc, 0x0, 0x1, 0xa6, 0x5, 0xffffff4a}, {0x1, 0x2c9, 0x0, 0x26, 0x6, 0x10}, {0x4, 0x9, 0x0, 0x5, 0x8}, {0xfffffffb, 0xffff, 0x4, 0xc1, 0xd, 0x6}, {0xd, 0x6, 0xa78e, 0x8, 0x6, 0x3}, {0x40400, 0x7, 0x9, 0x66, 0x1, 0xc4e}, {0x8, 0x10, 0x0, 0x5, 0x9, 0x7}, {0xfffffff7, 0x5, 0x1ff, 0x8, 0x8001}, {0x37, 0x3, 0xeafa, 0x3, 0x9, 0xf8ed}, {0xffffffff, 0x6, 0xfffffffe, 0x8, 0xfffffffa, 0x7}, {0x8, 0x10, 0x3ff, 0x9, 0xe}, {0x5, 0x101, 0x9, 0x3ff, 0x80, 0x8}, {0x5, 0x6f9a, 0x3, 0x1, 0x3, 0xd}, {0x5, 0x3, 0x7ff, 0xa, 0x80000000, 0x9}, {0xac0, 0x3, 0x0, 0x1, 0x4, 0xe}, {0x9, 0x3ff, 0x5, 0x9, 0xfff, 0x7}, {0x42b, 0x5, 0x1, 0x8, 0xc896, 0x80}, {0x4, 0x6, 0x9, 0x8, 0x8031, 0xa471}, {0x8df8a4f0, 0x5, 0x10000, 0xfffffffd, 0x10, 0x7}, {0xff1, 0x4, 0xe53f, 0xa9dd, 0xfffffffd, 0xa}, {0x6, 0x6, 0x85cc, 0x8, 0xb, 0x2}, {0xf86f, 0x5, 0x6, 0x80000001, 0x2, 0x2}, {0xe, 0x8, 0x9, 0x5, 0x10001, 0x1}, {0x7, 0x2, 0x4, 0x8001, 0x5, 0x1}, {0x9, 0x5, 0x400, 0x6, 0x2f12, 0x401}, {0x3, 0xed, 0x1, 0x0, 0x8, 0x9}], [{0x2, 0x1}, {0x2}, {}, {0x1}, {0x2}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0xa}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x48133f6b97655fe4}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x5}, {}, {0x3}, {}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0xd1ff0590c25ec697}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0xb}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x20040804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0xff, 0x1, 0x100}, 0x49) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x2, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xce}}}, &(0x7f0000001540)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xfffffee2) r7 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000480)=0x0) timer_settime(r8, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r4, 0x40046f01, &(0x7f0000000000)=0x5ad5) io_pgetevents(r0, 0x4, 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000003400)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x40000, 0x0, 0x2}]) 3.589714672s ago: executing program 3 (id=69): mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf\"\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`\x1e\x91<~\xd8\xabs\xbd*e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2\x04\x00\x00\x00\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\x1e\xfc/fm\xa9`)\xfc7\x84\f+\xf7\x95\xab[J\xe7\x9d\xd8\xe3\x86\xdb\xfe|\xe91\n\xa0\xdf\v\\\xe4\x00'/941, 0x40, 0x170, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$user(&(0x7f00000000c0), 0x0, &(0x7f0000000380)="7ccd08", 0x3, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x10, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc044565d, &(0x7f0000000100)=@mmap={0x8, 0x1, 0x4, 0x100, 0x8d47, {}, {0x1, 0x2, 0x5, 0x48, 0x0, 0xe, "a757879d"}, 0x5, 0x1, {}, 0x3}) sendmsg$nl_route(r4, 0x0, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x8000000, r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000040), 0x100013, 0xa4a82) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) 3.259451972s ago: executing program 1 (id=70): unshare(0x64000600) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x4e20, 0xfffe, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) write(r2, 0x0, 0x0) 2.848630508s ago: executing program 0 (id=71): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) 2.774788204s ago: executing program 1 (id=72): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req={0x7, 0xf2, 0x400, 0xfffffffa}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, 0x0, 0x8814) mkdir(0x0, 0x8) mount(0x0, 0x0, 0x0, 0x8, 0x0) sendmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}}], 0x1, 0x4001) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 2.601512663s ago: executing program 0 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x14) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80000) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x143182) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x20}, {0x6, 0xfd, 0x3, 0x7ffffcb9}]}) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd0000050005"], 0x70}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[], 0x20000}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x20000, 0xcbfb, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x400000000000007, 0xd, 0xfff7ffff, 0x6, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) 1.504715154s ago: executing program 1 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, 0x4f, 0x1, 0x4, 0x0, {0x1c}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}]}, 0x28}}, 0x0) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='bfq', 0x3) pread64(r1, &(0x7f0000000000)=""/2, 0x2, 0x1000) 1.163914475s ago: executing program 2 (id=75): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) getrlimit(0x8, &(0x7f0000000140)) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xec}}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 1.093821147s ago: executing program 0 (id=76): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f00000000c0)='GPL\x00') r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r5, &(0x7f0000003380)={0x2020}, 0x2020) 1.076646845s ago: executing program 3 (id=77): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x70bd25, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) io_uring_setup(0x4662, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$bsg(0xffffff9c, &(0x7f00000001c0)='/dev/bsg/2:0:0:0\x00', 0x480, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r4, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x0) 1.075888382s ago: executing program 2 (id=78): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r4, &(0x7f0000001e80)=@generic={0xa, "cadbd822128b61d73766f6481b3e4cecfb22a58fb6654b1c399a6438c3f7460f450f6a72eca72b8e6c4d9758607e4084a5485833ebe9297c45059480f5855fa6ae5243de8e4d940e6fbd7e6c3efd332bf880a461b822bf20e623b82678796663722eb97caa575dbdfa3a27d11382e546fef19b8afae7d5446b6310ca5202"}, 0x80) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c010000140001002dbd7000fcdbdf2509014e800c000200080000000000000014000100000000020000000000000000000000002a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff732144f7ad7c1b9da6e48e2063d3730400e900000000"], 0x11c}], 0x1, 0x0, 0x0, 0x40004}, 0x0) get_robust_list(r0, &(0x7f0000000280)=&(0x7f0000000100), &(0x7f0000000380)=0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="180000001200050100000002000000e304001900ff0000"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) open_tree(0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) 1.075271899s ago: executing program 1 (id=79): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dbg/failslab/times\x00', 0x1, 0x0) write(r0, &(0x7f0000000140), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dbg/failslab/probability\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\x00', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xa13edebd6eef6c4e}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 512.603282ms ago: executing program 1 (id=80): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0xb011, 0x0, 0x0}], 0x1}) (fail_nth: 1) 102.544243ms ago: executing program 2 (id=81): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, 0x0, 0x80) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x5, 0x2, 0x0, "5f3111213289f32e354eef11747ea3833d161c96f678d5f067daed979b6f6e0b", 0xb5315258}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x200007) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r6, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x200, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, &(0x7f00000000c0)=0x8e, 0x180000504) 32.37893ms ago: executing program 0 (id=82): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0xc000, 0xffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x7) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000040)='./file0/file2\x00', &(0x7f0000000500), 0x1204a1, &(0x7f0000000680)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0/file2'}}, {@index_off}, {@xino_auto}, {@xino_on}], [{@fowner_lt}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4e, @private2, @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000580)={'ip6tnl0\x00', r2, 0x29, 0x84, 0x4, 0x7ff, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x10, 0x0, 0x0, 0x1000004}}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) syz_clone(0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) 1.383076ms ago: executing program 3 (id=83): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0xc, 0x88000) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000001800)={0x0, 0x4, 0x3, &(0x7f00000017c0)={0x11, "4ec0191e5bb41b08c198884329f6dd0711762717c44bc7c9b1cc22a10010115d6d"}}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x2, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r2, 0x800) accept4(r2, 0x0, 0x0, 0x80000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x75, &(0x7f00000002c0)="1a00000002000000", 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180)) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat(r7, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) 0s ago: executing program 2 (id=84): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, 0x0, 0x80) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x5, 0x2, 0x0, "5f3111213289f32e354eef11747ea3833d161c96f678d5f067daed979b6f6e0b", 0xb5315258}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x200007) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r8, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x200, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r9, &(0x7f00000000c0)=0x8e, 0x180000504) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:58344' (ED25519) to the list of known hosts. [ 42.459099][ T5679] cgroup: Unknown subsys name 'net' [ 42.571271][ T5679] cgroup: Unknown subsys name 'cpuset' [ 42.575435][ T5679] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.506565][ T5679] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.117184][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.123166][ T5759] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.127121][ T5759] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.128238][ T5751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.129919][ T5759] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.132271][ T5758] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.136170][ T5761] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.136525][ T5759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.137385][ T5758] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.138147][ T5751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.138718][ T5751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.139144][ T5758] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.139417][ T5751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.140872][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.142071][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.142577][ T5759] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.143053][ T5759] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.143362][ T5759] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.146124][ T5751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.146991][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.797195][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.800084][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.802450][ T5742] bridge_slave_0: entered allmulticast mode [ 48.805192][ T5742] bridge_slave_0: entered promiscuous mode [ 48.820596][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.823319][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.825654][ T5744] bridge_slave_0: entered allmulticast mode [ 48.829596][ T5744] bridge_slave_0: entered promiscuous mode [ 48.834209][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.837116][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.840258][ T5744] bridge_slave_1: entered allmulticast mode [ 48.843879][ T5744] bridge_slave_1: entered promiscuous mode [ 48.847282][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.850034][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.852312][ T5742] bridge_slave_1: entered allmulticast mode [ 48.855765][ T5742] bridge_slave_1: entered promiscuous mode [ 48.920051][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.940970][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.945184][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.953581][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.956469][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.962672][ T5745] bridge_slave_0: entered allmulticast mode [ 48.965505][ T5745] bridge_slave_0: entered promiscuous mode [ 48.999662][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.011188][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.014299][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.017314][ T5745] bridge_slave_1: entered allmulticast mode [ 49.021234][ T5745] bridge_slave_1: entered promiscuous mode [ 49.058048][ T5742] team0: Port device team_slave_0 added [ 49.067810][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.083008][ T5742] team0: Port device team_slave_1 added [ 49.097304][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.100344][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.103289][ T5743] bridge_slave_0: entered allmulticast mode [ 49.106994][ T5743] bridge_slave_0: entered promiscuous mode [ 49.114156][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.119225][ T5744] team0: Port device team_slave_0 added [ 49.122677][ T5744] team0: Port device team_slave_1 added [ 49.133203][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.135374][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.137567][ T5743] bridge_slave_1: entered allmulticast mode [ 49.141213][ T5743] bridge_slave_1: entered promiscuous mode [ 49.166097][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.169160][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.178526][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.197221][ T5745] team0: Port device team_slave_0 added [ 49.199854][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.202308][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.211516][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.216279][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.218941][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.226746][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.238272][ T5745] team0: Port device team_slave_1 added [ 49.240551][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.242818][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.251158][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.267546][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.284965][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.287253][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.295250][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.301145][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.312902][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.315085][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.322867][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.377988][ T5744] hsr_slave_0: entered promiscuous mode [ 49.381343][ T5744] hsr_slave_1: entered promiscuous mode [ 49.388907][ T5742] hsr_slave_0: entered promiscuous mode [ 49.391688][ T5742] hsr_slave_1: entered promiscuous mode [ 49.394509][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 49.396970][ T5742] Cannot create hsr debugfs directory [ 49.401192][ T5743] team0: Port device team_slave_0 added [ 49.410516][ T5743] team0: Port device team_slave_1 added [ 49.438673][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.441671][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.452618][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.463878][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.466793][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.477403][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.493483][ T5745] hsr_slave_0: entered promiscuous mode [ 49.497380][ T5745] hsr_slave_1: entered promiscuous mode [ 49.500430][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 49.502796][ T5745] Cannot create hsr debugfs directory [ 49.614815][ T5743] hsr_slave_0: entered promiscuous mode [ 49.617117][ T5743] hsr_slave_1: entered promiscuous mode [ 49.619299][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 49.621247][ T5743] Cannot create hsr debugfs directory [ 49.917134][ T5742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.926162][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.929293][ T5742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.935306][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.939428][ T5742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.946606][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.961738][ T5742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.968979][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.016416][ T5744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.021047][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.023836][ T5744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.028984][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.032997][ T5744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.041323][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.045262][ T5744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.052888][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.110073][ T5745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.114610][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.117334][ T5745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.121407][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.125335][ T5745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.129766][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.133161][ T5745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.136947][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.149219][ T5102] Bluetooth: hci1: command tx timeout [ 50.225722][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.229055][ T5102] Bluetooth: hci2: command tx timeout [ 50.229348][ T5750] Bluetooth: hci3: command tx timeout [ 50.229364][ T5751] Bluetooth: hci0: command tx timeout [ 50.231634][ T5743] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.241474][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.244947][ T5743] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.249262][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.256070][ T5743] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.261899][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.266195][ T5743] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.271009][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.297607][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.313215][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.316537][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.332867][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.335243][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.340768][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.381676][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.393082][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.395460][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.405509][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.415700][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.418029][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.452942][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.478989][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.482170][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.502701][ T5744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.513144][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.518296][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.520723][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.552321][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.562083][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.565196][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.581389][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.583741][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.600818][ T5745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.775884][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.788810][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.830189][ T5742] veth0_vlan: entered promiscuous mode [ 50.839724][ T5742] veth1_vlan: entered promiscuous mode [ 50.866779][ T5744] veth0_vlan: entered promiscuous mode [ 50.895210][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.901042][ T5742] veth0_macvtap: entered promiscuous mode [ 50.909240][ T5744] veth1_vlan: entered promiscuous mode [ 50.913317][ T5742] veth1_macvtap: entered promiscuous mode [ 50.925523][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.941656][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.956678][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.991570][ T5613] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.004231][ T5613] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.008928][ T5613] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.016541][ T5744] veth0_macvtap: entered promiscuous mode [ 51.025564][ T5613] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.031736][ T5745] veth0_vlan: entered promiscuous mode [ 51.035928][ T5744] veth1_macvtap: entered promiscuous mode [ 51.082959][ T5745] veth1_vlan: entered promiscuous mode [ 51.088257][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.108993][ T5743] veth0_vlan: entered promiscuous mode [ 51.116960][ T5743] veth1_vlan: entered promiscuous mode [ 51.120527][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.122237][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.123383][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.144180][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.153208][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.156051][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.162966][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.163098][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.169075][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.170976][ T5745] veth0_macvtap: entered promiscuous mode [ 51.180275][ T5745] veth1_macvtap: entered promiscuous mode [ 51.188654][ T5743] veth0_macvtap: entered promiscuous mode [ 51.194347][ T5743] veth1_macvtap: entered promiscuous mode [ 51.211762][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.225052][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.230722][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.240124][ T5742] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 51.249234][ T5742] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.252725][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.256444][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.258453][ T5742] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.265092][ T5742] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.266530][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.272732][ T5822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.276514][ T5742] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 51.277049][ T5822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.288273][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.294625][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.325021][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.332701][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.336454][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.372895][ T5822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.392888][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.395763][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.441609][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.446554][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.466824][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.471923][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.513669][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.519485][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.556264][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.560335][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.227791][ T5750] Bluetooth: hci1: command tx timeout [ 52.307995][ T5750] Bluetooth: hci0: command tx timeout [ 52.308127][ T5102] Bluetooth: hci2: command tx timeout [ 52.311677][ T5750] Bluetooth: hci3: command tx timeout [ 53.781599][ T5923] bridge1: entered promiscuous mode [ 53.794469][ T5923] bridge1: entered allmulticast mode [ 54.105949][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 54.318081][ T5102] Bluetooth: hci1: command tx timeout [ 54.388758][ T5750] Bluetooth: hci0: command tx timeout [ 54.388825][ T5751] Bluetooth: hci2: command tx timeout [ 54.392814][ T5102] Bluetooth: hci3: command tx timeout [ 54.538727][ T5928] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 54.545154][ T5928] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 54.555774][ T5928] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 54.589823][ T5928] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 54.827082][ T5928] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 55.334091][ T5937] fuse: Unknown parameter '0x0000000000000003' [ 55.344276][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 55.354460][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.360434][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.394828][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.396152][ T5940] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12'. [ 55.411982][ T5939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.159752][ T5941] loop6: detected capacity change from 0 to 2640 [ 56.165095][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.168236][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.172156][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.177906][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.180974][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.183810][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.187434][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.196318][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.200787][ T5941] ldm_validate_partition_table(): Disk read failed. [ 56.203870][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.213840][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 56.218133][ T5941] Dev loop6: unable to read RDB block 0 [ 56.225655][ T5941] loop6: unable to read partition table [ 56.231134][ T5941] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 56.405551][ T5102] Bluetooth: hci1: command tx timeout [ 56.469660][ T5102] Bluetooth: hci2: command tx timeout [ 56.472332][ T5102] Bluetooth: hci3: command tx timeout [ 56.474799][ T5102] Bluetooth: hci0: command tx timeout [ 56.644892][ T5947] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 57.420722][ T5947] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 57.430431][ T5947] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 57.438213][ T5947] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 57.446493][ T5947] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 57.456814][ T5947] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 10266 usecs [ 57.489593][ T5947] pci 0000:00:01.0: Adding to iommu group 1 [ 57.517433][ T5947] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 57.520256][ T5947] pci 0000:00:01.0: vgaarb: bridge control possible [ 57.523050][ T5947] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 57.611558][ T5947] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 57.632799][ T5947] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 57.644048][ T5947] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 57.662901][ T5947] [drm] Found bochs VGA, ID 0xb0c5. [ 57.698362][ T5947] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 57.745539][ T5947] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 57.843764][ T5947] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 60.250795][ T5993] mmap: syz.3.22 (5993) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.965978][ T6008] netlink: 'syz.3.25': attribute type 1 has an invalid length. [ 60.988144][ T6008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.445093][ T6051] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 64.447710][ T6051] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 64.453386][ T6051] vhci_hcd vhci_hcd.0: Device attached [ 64.778861][ T57] usb 42-1: SetAddress Request (2) to port 0 [ 64.784100][ T57] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 64.840396][ T6051] wg2 speed is unknown, defaulting to 1000 [ 64.844900][ T6051] wg2 speed is unknown, defaulting to 1000 [ 64.848873][ T6051] wg2 speed is unknown, defaulting to 1000 [ 65.158325][ T5824] wg2 speed is unknown, defaulting to 1000 [ 65.160914][ T6051] infiniband syz2: set active [ 65.162863][ T6051] infiniband syz2: added wg2 [ 65.196296][ T6051] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 65.203243][ T6051] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 65.210770][ T6051] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 65.240342][ T6051] RDS/IB: syz2: added [ 65.242491][ T6051] smc: adding ib device syz2 with port count 1 [ 65.245191][ T6051] smc: ib device syz2 port 1 has no pnetid [ 65.249480][ T41] wg2 speed is unknown, defaulting to 1000 [ 65.255912][ T6051] wg2 speed is unknown, defaulting to 1000 [ 65.407475][ T6051] wg2 speed is unknown, defaulting to 1000 [ 65.463597][ T6059] Zero length message leads to an empty skb [ 65.577609][ T6051] wg2 speed is unknown, defaulting to 1000 [ 65.588277][ T6060] netlink: 44 bytes leftover after parsing attributes in process `syz.1.37'. [ 65.685933][ T6054] vhci_hcd: connection reset by peer [ 65.702732][ T5822] vhci_hcd vhci_hcd.2: stop threads [ 65.711177][ T5822] vhci_hcd vhci_hcd.2: release socket [ 65.714596][ T5822] vhci_hcd vhci_hcd.2: disconnect device [ 66.040064][ T6051] wg2 speed is unknown, defaulting to 1000 [ 66.410376][ T6071] ======================================================= [ 66.410376][ T6071] WARNING: The mand mount option has been deprecated and [ 66.410376][ T6071] and is ignored by this kernel. Remove the mand [ 66.410376][ T6071] option from the mount to silence this warning. [ 66.410376][ T6071] ======================================================= qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 67.137608][ T6082] option changes via remount are deprecated (pid=6081 comm=syz.3.44) [ 68.026014][ T6078] [U]  [ 68.069894][ T6092] fuse: Bad value for 'user_id' [ 68.072595][ T6092] fuse: Bad value for 'user_id' [ 68.151319][ T6095] Trying to write to read-only block-device nullb0 [ 68.252999][ T6097] input: syz1 as /devices/virtual/input/input5 [ 68.327837][ T34] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 68.477048][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 68.487837][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 68.501392][ T34] usb 6-1: config 1 has an invalid interface descriptor of length 8, skipping [ 68.508492][ T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.516273][ T34] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 68.529670][ T34] usb 6-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.40 [ 68.537019][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.542451][ T34] usb 6-1: Product: 戻涎닋밮╗李銉⷗ç–娨려黺肂朡礶蚣ä¹î’œä’ˆïš¾ä¬©ä¸³ï¾‰ [ 68.548637][ T34] usb 6-1: Manufacturer: Т [ 68.550913][ T34] usb 6-1: SerialNumber: Щ [ 68.897128][ T34] usb 6-1: USB disconnect, device number 2 [ 69.401190][ T6113] netlink: 'syz.2.52': attribute type 1 has an invalid length. [ 69.616439][ T6118] 9p: Bad value for 'rfdno' [ 69.619936][ T6118] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.54' resets device [ 69.669711][ T5750] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 69.674845][ T5750] Bluetooth: hci2: Injecting HCI hardware error event [ 69.678295][ T5102] Bluetooth: hci2: hardware error 0x00 [ 69.817764][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.827832][ T57] usb 42-1: device descriptor read/8, error -110 [ 70.137820][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 70.144543][ T34] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 70.150029][ T34] usb 5-1: config 0 has no interface number 0 [ 70.154699][ T34] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 70.159086][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.162519][ T34] usb 5-1: Product: syz [ 70.164300][ T34] usb 5-1: Manufacturer: syz [ 70.169058][ T34] usb 5-1: SerialNumber: syz [ 70.176587][ T34] usb 5-1: config 0 descriptor?? [ 70.184967][ T34] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 70.189366][ T34] usb 5-1: selecting invalid altsetting 1 [ 70.192294][ T34] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 70.208538][ T34] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 70.212199][ T6125] wg2 speed is unknown, defaulting to 1000 [ 70.213028][ T34] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 70.218640][ T34] usb 5-1: media controller created [ 70.231185][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 70.254590][ T6126] No such timeout policy "syz1" [ 70.277851][ T57] usb usb42-port1: attempt power cycle [ 70.362775][ T6126] syz.2.56 uses obsolete (PF_INET,SOCK_PACKET) [ 70.498152][ T6114] kvm: apic: phys broadcast and lowest prio [ 70.602825][ T6129] Cannot find add_set index 0 as target [ 70.740215][ T6132] netlink: 'syz.3.57': attribute type 49 has an invalid length. [ 70.870505][ T57] usb usb42-port1: unable to enumerate USB device [ 70.871924][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.876103][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.217348][ T6143] siw: device registration error -23 [ 71.353302][ T34] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 71.359610][ T34] zl10353_read_register: readreg error (reg=127, ret==-110) [ 71.518838][ T37] Bluetooth: Error in BCSP hdr checksum [ 71.558234][ T1011] Bluetooth: Error in BCSP hdr checksum [ 71.749315][ T5102] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 72.220887][ T6132] ip6gretap0: entered promiscuous mode [ 72.229784][ T6132] ip6gretap0: entered allmulticast mode [ 72.322782][ T34] usb 5-1: USB disconnect, device number 2 [ 73.108951][ T5750] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 73.109021][ T5102] Bluetooth: hci4: command 0x1003 tx timeout [ 74.813755][ T6184] netlink: 'syz.3.66': attribute type 1 has an invalid length. [ 76.001886][ T6202] wg2 speed is unknown, defaulting to 1000 [ 76.325824][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 78.186140][ T6234] netlink: 40 bytes leftover after parsing attributes in process `syz.1.79'. [ 78.385134][ T6238] Invalid ELF header magic: != ELF [ 78.477388][ T6238] netlink: 'syz.2.78': attribute type 2 has an invalid length. [ 78.480377][ T6238] netlink: 232 bytes leftover after parsing attributes in process `syz.2.78'. [ 78.549937][ T6239] Invalid ELF header magic: != ELF [ 78.551047][ T6236] netlink: 'syz.2.78': attribute type 25 has an invalid length. [ 78.867839][ T5823] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 79.057552][ T5823] usb 6-1: Using ep0 maxpacket: 16 [ 79.061149][ T5823] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 79.066131][ T5823] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 79.070397][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.074462][ T5823] usb 6-1: Product: syz [ 79.076256][ T5823] usb 6-1: Manufacturer: syz [ 79.078993][ T5823] usb 6-1: SerialNumber: syz [ 79.108919][ T5823] usb 6-1: config 0 descriptor?? [ 79.117517][ T5823] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 79.121988][ T5823] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 79.438179][ T2319] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 79.587813][ T2319] usb 8-1: Using ep0 maxpacket: 16 [ 79.593849][ T2319] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 79.597546][ T2319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.601032][ T2319] usb 8-1: Product: syz [ 79.602726][ T2319] usb 8-1: Manufacturer: syz [ 79.604962][ T2319] usb 8-1: SerialNumber: syz [ 79.729021][ T5823] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 79.924880][ T2319] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 79.928983][ T2319] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 79.932937][ T2319] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 79.936583][ T2319] usb 8-1: media controller created [ 79.944897][ T2319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.171395][ T5823] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 80.172525][ T6241] FAULT_INJECTION: forcing a failure. [ 80.172525][ T6241] name failslab, interval 1, probability 1, space 0, times 0 [ 80.177525][ T5823] em28xx 6-1:0.0: board has no eeprom [ 80.180314][ T6241] CPU: 2 UID: 0 PID: 6241 Comm: syz.1.80 Not tainted syzkaller #0 PREEMPT(full) [ 80.180337][ T6241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.180356][ T6241] Call Trace: [ 80.180382][ T6241] [ 80.180389][ T6241] dump_stack_lvl+0x100/0x190 [ 80.180426][ T6241] should_fail_ex.cold+0x5/0xa [ 80.180452][ T6241] should_failslab+0xc2/0x120 [ 80.180487][ T6241] __kmalloc_noprof+0xfc/0x820 [ 80.180523][ T6241] ? rcu_is_watching+0x12/0xc0 [ 80.180553][ T6241] ? tomoyo_realpath_from_path+0xb6/0x690 [ 80.180585][ T6241] tomoyo_realpath_from_path+0xb6/0x690 [ 80.180616][ T6241] tomoyo_path_number_perm+0x23c/0x580 [ 80.180636][ T6241] ? tomoyo_path_number_perm+0x22e/0x580 [ 80.180658][ T6241] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 80.180677][ T6241] ? get_pid_task+0x106/0x250 [ 80.180726][ T6241] ? find_held_lock+0x2b/0x80 [ 80.180749][ T6241] ? __fget_files+0x215/0x3d0 [ 80.180772][ T6241] ? hook_file_ioctl_common+0x140/0x440 [ 80.180793][ T6241] ? __fget_files+0x215/0x3d0 [ 80.180812][ T6241] ? __fget_files+0x21f/0x3d0 [ 80.180831][ T6241] security_file_ioctl_compat+0xd3/0x230 [ 80.180857][ T6241] __ia32_compat_sys_ioctl+0xc2/0x360 [ 80.180888][ T6241] __do_fast_syscall_32+0xe7/0x970 [ 80.180945][ T6241] ? lockdep_hardirqs_on+0x78/0x100 [ 80.180968][ T6241] do_fast_syscall_32+0x32/0x70 [ 80.180988][ T6241] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.181021][ T6241] RIP: 0023:0xf709efec [ 80.181044][ T6241] Code: Unable to access opcode bytes at 0xf709efc2. [ 80.181061][ T6241] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 80.181079][ T6241] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 80.181091][ T6241] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.181100][ T6241] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.181110][ T6241] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.181120][ T6241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.181143][ T6241] [ 80.181153][ T6241] ERROR: Out of memory at tomoyo_realpath_from_path. [ 80.267940][ T2319] zl10353_read_register: readreg error (reg=127, ret==-110) [ 80.292679][ T6241] ------------[ cut here ]------------ [ 80.296385][ T6241] usb 8-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 80.299597][ T6241] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#3: syz.1.80/6241 [ 80.303451][ T6241] Modules linked in: [ 80.304886][ T6241] CPU: 3 UID: 0 PID: 6241 Comm: syz.1.80 Not tainted syzkaller #0 PREEMPT(full) [ 80.309300][ T6241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.312945][ T6241] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 80.314805][ T6241] Code: 48 89 54 24 40 e8 b3 31 8b fa 4c 89 e7 e8 5b f8 db fe 48 89 c6 48 8d 3d 61 a7 b1 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 84 31 8b fa 89 ee bf ff 00 00 00 [ 80.321755][ T6241] RSP: 0000:ffffc9000445f8c8 EFLAGS: 00010293 [ 80.324242][ T6241] RAX: ffffffff8ca5e340 RBX: ffff88806b4cd900 RCX: 0000000080000280 [ 80.327552][ T6241] RDX: ffff888054c69600 RSI: ffffffff8ca5e340 RDI: ffffffff91302220 [ 80.330842][ T6241] RBP: ffff888014042058 R08: 00000000000000c0 R09: 0000000000000000 [ 80.334071][ T6241] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880140420b0 [ 80.337304][ T6241] R13: ffff88805f53eb00 R14: ffff88805f53eb06 R15: ffff88805f53eb07 [ 80.340887][ T6241] FS: 0000000000000000(0000) GS:ffff888096ee3000(0063) knlGS:00000000f548db40 [ 80.345127][ T6241] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 80.347928][ T6241] CR2: 0000000057a6f21c CR3: 0000000054d83000 CR4: 0000000000352ef0 [ 80.351156][ T6241] Call Trace: [ 80.353164][ T6241] [ 80.354393][ T6241] ? __init_swait_queue_head+0xca/0x150 [ 80.356834][ T6241] usb_start_wait_urb+0x10e/0x580 [ 80.359026][ T6241] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 80.361323][ T6241] ? trace_kmalloc+0xeb/0x110 [ 80.363287][ T6241] ? __asan_memset+0x23/0x50 [ 80.365191][ T6241] usb_control_msg+0x328/0x4b0 [ 80.367220][ T6241] ? __pfx_usb_control_msg+0x10/0x10 [ 80.369781][ T6241] ? __kmalloc_noprof+0x322/0x820 [ 80.371866][ T6241] ? compat_i2cdev_ioctl+0x469/0x540 [ 80.374058][ T6241] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 80.376402][ T6241] ? __do_fast_syscall_32+0xe7/0x970 [ 80.378946][ T6241] ? do_fast_syscall_32+0x32/0x70 [ 80.381268][ T6241] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.383977][ T6241] gl861_ctrl_msg+0x1a5/0x4a0 [ 80.385990][ T6241] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 80.388228][ T6241] ? __lock_acquire+0x49f/0x1a40 [ 80.390685][ T6241] ? __lock_acquire+0x49f/0x1a40 [ 80.392762][ T6241] gl861_i2c_master_xfer+0x545/0x690 [ 80.394953][ T6241] __i2c_transfer+0x5d9/0x1740 [ 80.396972][ T6241] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 80.399517][ T6241] ? __pfx___i2c_transfer+0x10/0x10 [ 80.401253][ T42] audit: type=1804 audit(1785279606.214:2): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.83" name="bus" dev="ramfs" ino=10907 res=1 errno=0 [ 80.401500][ T6241] ? rt_mutex_slowtrylock+0x93/0x100 [ 80.401542][ T6241] i2c_transfer+0x15f/0x380 [ 80.408988][ T42] audit: type=1804 audit(1785279606.224:3): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.83" name="bus" dev="ramfs" ino=10907 res=1 errno=0 [ 80.410180][ T6241] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 80.410224][ T6241] compat_i2cdev_ioctl+0x469/0x540 [ 80.423597][ T6241] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 80.425830][ T6241] ? __fget_files+0x21f/0x3d0 [ 80.427751][ T6241] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 80.430065][ T6241] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 80.432327][ T6241] __do_fast_syscall_32+0xe7/0x970 [ 80.434462][ T6241] ? lockdep_hardirqs_on+0x78/0x100 [ 80.436631][ T6241] do_fast_syscall_32+0x32/0x70 [ 80.438753][ T6241] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.441360][ T6241] RIP: 0023:0xf709efec [ 80.443048][ T6241] Code: Unable to access opcode bytes at 0xf709efc2. [ 80.445702][ T6241] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 80.449111][ T6241] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 80.452227][ T6241] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.455436][ T6241] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.458741][ T6241] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.462004][ T6241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.465172][ T6241] [ 80.466493][ T6241] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 80.469536][ T6241] CPU: 3 UID: 0 PID: 6241 Comm: syz.1.80 Not tainted syzkaller #0 PREEMPT(full) [ 80.473272][ T6241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.477303][ T6241] Call Trace: [ 80.478646][ T6241] [ 80.479891][ T6241] dump_stack_lvl+0x100/0x190 [ 80.481835][ T6241] vpanic+0x552/0x970 [ 80.483457][ T6241] ? __pfx_vpanic+0x10/0x10 [ 80.485299][ T6241] panic+0xd1/0xe0 [ 80.486868][ T6241] ? __pfx_panic+0x10/0x10 [ 80.488683][ T6241] ? check_panic_on_warn+0x1f/0x90 [ 80.490767][ T6241] check_panic_on_warn.cold+0x19/0x34 [ 80.492960][ T6241] ? usb_submit_urb+0x15ff/0x19b0 [ 80.494981][ T6241] __warn.cold+0x191/0x318 [ 80.496860][ T6241] __report_bug+0x30f/0x440 [ 80.498670][ T6241] ? usb_submit_urb+0x15ff/0x19b0 [ 80.500745][ T6241] ? __pfx___report_bug+0x10/0x10 [ 80.502820][ T6241] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 80.505253][ T6241] ? lockdep_hardirqs_on+0x78/0x100 [ 80.507462][ T6241] ? kasan_save_stack+0x3f/0x50 [ 80.509501][ T6241] report_bug_entry+0xe1/0x290 [ 80.511552][ T6241] ? usb_submit_urb+0x160d/0x19b0 [ 80.513569][ T6241] handle_bug+0x1cd/0x2a0 [ 80.515335][ T6241] exc_invalid_op+0x17/0x50 [ 80.517186][ T6241] asm_exc_invalid_op+0x1a/0x20 [ 80.519234][ T6241] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 80.521475][ T6241] Code: 48 89 54 24 40 e8 b3 31 8b fa 4c 89 e7 e8 5b f8 db fe 48 89 c6 48 8d 3d 61 a7 b1 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 84 31 8b fa 89 ee bf ff 00 00 00 [ 80.529269][ T6241] RSP: 0000:ffffc9000445f8c8 EFLAGS: 00010293 [ 80.531703][ T6241] RAX: ffffffff8ca5e340 RBX: ffff88806b4cd900 RCX: 0000000080000280 [ 80.534879][ T6241] RDX: ffff888054c69600 RSI: ffffffff8ca5e340 RDI: ffffffff91302220 [ 80.538027][ T6241] RBP: ffff888014042058 R08: 00000000000000c0 R09: 0000000000000000 [ 80.541212][ T6241] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880140420b0 [ 80.544417][ T6241] R13: ffff88805f53eb00 R14: ffff88805f53eb06 R15: ffff88805f53eb07 [ 80.547520][ T6241] ? usb_submit_urb+0x15f5/0x19b0 [ 80.549573][ T6241] ? __init_swait_queue_head+0xca/0x150 [ 80.551732][ T6241] usb_start_wait_urb+0x10e/0x580 [ 80.553757][ T6241] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 80.555983][ T6241] ? trace_kmalloc+0xeb/0x110 [ 80.557880][ T6241] ? __asan_memset+0x23/0x50 [ 80.559741][ T6241] usb_control_msg+0x328/0x4b0 [ 80.561656][ T6241] ? __pfx_usb_control_msg+0x10/0x10 [ 80.563777][ T6241] ? __kmalloc_noprof+0x322/0x820 [ 80.565893][ T6241] ? compat_i2cdev_ioctl+0x469/0x540 [ 80.568039][ T6241] ? __ia32_compat_sys_ioctl+0x2cf/0x360 [ 80.570282][ T6241] ? __do_fast_syscall_32+0xe7/0x970 [ 80.572428][ T6241] ? do_fast_syscall_32+0x32/0x70 [ 80.574476][ T6241] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.577109][ T6241] gl861_ctrl_msg+0x1a5/0x4a0 [ 80.579032][ T6241] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 80.581150][ T6241] ? __lock_acquire+0x49f/0x1a40 [ 80.583179][ T6241] ? __lock_acquire+0x49f/0x1a40 [ 80.585214][ T6241] gl861_i2c_master_xfer+0x545/0x690 [ 80.587379][ T6241] __i2c_transfer+0x5d9/0x1740 [ 80.589335][ T6241] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 80.591724][ T6241] ? __pfx___i2c_transfer+0x10/0x10 [ 80.593802][ T6241] ? rt_mutex_slowtrylock+0x93/0x100 [ 80.595923][ T6241] i2c_transfer+0x15f/0x380 [ 80.597719][ T6241] i2cdev_ioctl_rdwr+0x3ec/0x700 [ 80.599734][ T6241] compat_i2cdev_ioctl+0x469/0x540 [ 80.601793][ T6241] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 80.604024][ T6241] ? __fget_files+0x21f/0x3d0 [ 80.605982][ T6241] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 80.608292][ T6241] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 80.610539][ T6241] __do_fast_syscall_32+0xe7/0x970 [ 80.612662][ T6241] ? lockdep_hardirqs_on+0x78/0x100 [ 80.614815][ T6241] do_fast_syscall_32+0x32/0x70 [ 80.616786][ T6241] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 80.619362][ T6241] RIP: 0023:0xf709efec [ 80.621059][ T6241] Code: Unable to access opcode bytes at 0xf709efc2. [ 80.623781][ T6241] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 80.627116][ T6241] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 80.630336][ T6241] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.633508][ T6241] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.636672][ T6241] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.639841][ T6241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.643116][ T6241] [ 80.645102][ T6241] Kernel Offset: disabled [ 80.647064][ T6241] Rebooting in 86400 seconds..