last executing test programs: 44m18.500755356s ago: executing program 32 (id=2046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000000000fff50000000aac000000060a0b0400000000000000000200000080000480240001800b000100736f636b657400001400028008000240000000030800014000000009240001800b0001007470726f787900001400028008000140000000020800024000000003340001800a00010071756f74610000002400028008000240000000000c00044000000000000000020c00014000000000000000090900010073797a30000000000900020073797a32"], 0xd4}}, 0x40880) 42m52.318637604s ago: executing program 33 (id=2440): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff024}, {0xb1}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) write$dsp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x801) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x500000000000000, 0x4000004}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2840) ioctl$EVIOCSFF(r7, 0x40304580, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r3, 0x0, 0x0, 0x0, 0x5, 0x2b, @local, @private2={0xfc, 0x2, '\x00', 0x4}, 0x15, 0x20, 0xfffffffc, 0xdc64}}) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 39m49.338803492s ago: executing program 34 (id=3082): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x4, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xc7, &(0x7f00000004c0)=""/199, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611570000000000061136c0000000000bfa000000000000014000000ee0016055e03010000000000160500000001000069163e0000000000bf07000000000000260507000fff07206706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x20, 0xfffff5bd, 0x94, 0x80, 0x1050, 0xffffffffffffffff, 0x6, '\x00', r4, r0, 0x0, 0x0, 0x4}, 0x50) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x6a040000) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) openat$zero(0xffffff9c, &(0x7f0000000040), 0x24380, 0x0) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r6, 0x1, {0x0, 0xff, 0x4}}, 0x18, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8021}, 0x20048805) 32m52.705249686s ago: executing program 35 (id=4840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x8001) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000340)) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x5, {0x4, 0x0, 0x0, 0x800, 0x2}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000080000180001801400020073797a5f74756e0000000000000000000c000280040001000400038000"], 0x38}, 0x1, 0x0, 0x0, 0x200c4011}, 0x0) 32m48.534340689s ago: executing program 36 (id=4856): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) r1 = socket$kcm(0x2, 0x3, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d4, 0x110, 0x940c, 0x3002, 0x110, 0x2c0, 0x20c, 0x3d8, 0x3d8, 0x20c, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0xffffffff, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffff00], 'wlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x3c, 0x1, 0x0, 0x2}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@inet=@set2={{0x24}, {{0x0, 0x6, 0x1}}}, @inet=@rpfilter={{0x24}, {0x9}}]}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0xab0e}}}, {{@uncond, 0x0, 0xc8, 0xfc, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0x3}, {0x2, 0x3, 0x1}, {0xfffe, 0x4, 0x7}, 0x0, 0x1000}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x330) ioctl$FIONCLEX(r0, 0x5450) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400047366000c000280080001400000000428000180800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/152], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0x4e9f, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="b9ed02d814a1fbf4e8f747cc8c30bd0840608b59f9cafaf65de9f19f55d0e5ad", 0xffeb}], 0x1}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000140)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x4, 0x5}, {}, {0xf, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 31m50.958232673s ago: executing program 37 (id=4949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x8, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000607f8f", 0x300}], 0x2}, 0x5) 25m16.590195129s ago: executing program 38 (id=6592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) 25m10.260469393s ago: executing program 39 (id=6604): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000580)=""/102364, 0x18fdc}], 0x1, 0x5, 0x400006) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000000)={0x4, 0x1, 0x4, 0x39ecb7d23fc3a174, 0x1ff, {}, {0x5, 0x1, 0x9, 0x45, 0xfb, 0x6, "1614ce59"}, 0x85, 0x4, {0xffffffffffffffff}, 0x7}) clock_gettime(0x4, &(0x7f0000000380)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, &(0x7f00000001c0)={0x7fff, 0x6, 0x4, 0x80, 0x6, {r5, r6/1000+10000}, {0x1, 0x1, 0x8, 0x5, 0x2, 0x3b, "c668d738"}, 0xe, 0x4, {0xffffffffffffffff}, 0x6, 0x0, r0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000002c0)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc04c565d, &(0x7f0000000300)=@multiplanar_fd={0xf, 0x2, 0x4, 0x800, 0x8, {0x0, 0xea60}, {0x3, 0x0, 0xc3, 0x6, 0x30, 0xd, "5c1b9742"}, 0x9, 0x4, {&(0x7f0000000240)=[{0x9, 0x3, {r4}, 0x9}, {0x6, 0x71c, {r7}, 0x4}]}, 0x80000001, 0x0, r8}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 24m29.615449712s ago: executing program 2 (id=6763): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x34, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 24m29.547093218s ago: executing program 2 (id=6764): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) (async) r3 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000001180)={'syz', 0x3}, &(0x7f0000001240)="2538a314", 0x4, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000001340)={r2, r3, r4}, &(0x7f0000000180)=""/4093, 0xffd, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}]}, 0x1c}}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r6, r7, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='gadgetfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000002580)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) (async) r9 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f, 0x0, r8}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8905, &(0x7f0000000040)={'syzkaller0\x00'}) (async) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r9, 0x8047bc, 0xcc2b, 0x20, 0x0, 0x0) 24m29.546935845s ago: executing program 2 (id=6765): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) close(r0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {0x1}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0xe4ff, 0x4008854}, 0x4010) 24m29.315538845s ago: executing program 2 (id=6766): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r1 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) open_by_handle_at(r1, &(0x7f0000000280)=@OVL_FILEID_V1={0x18, 0xf8, {'\x00', {0x0, 0xfb, 0x15, 0x5, 0x40, "f44cc4bd5f346fcf545844e18c122c50"}}}, 0x5cb802) utimensat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x0, 0x100) r2 = io_uring_setup(0x721b, &(0x7f00000000c0)={0x0, 0x1a8f, 0x4, 0x0, 0x12e}) io_uring_setup(0x36cb, &(0x7f0000000140)={0x0, 0xf455, 0x2, 0x1, 0x241, 0x0, r2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r3 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$null(r0, &(0x7f0000000240)='./file0\x00', 0x50a2, 0x103) migrate_pages(r3, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) 24m29.167091238s ago: executing program 2 (id=6767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') (async) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x4008f, 0x0, r1}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) (async) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) io_uring_enter(r5, 0x7277, 0x0, 0x0, 0x0, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async, rerun: 32) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, r9, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0x80abe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) (async) creat(&(0x7f0000000140)='./file0\x00', 0x34) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x6d1c8b79a9711461, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x40000c0) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0x5}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @empty}}}]}]}, 0x50}}, 0x0) (rerun: 64) 24m28.42638665s ago: executing program 2 (id=6773): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006080000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x6f6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000700000003000180050002000100"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 24m28.29347814s ago: executing program 40 (id=6773): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006080000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x6f6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000700000003000180050002000100"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 21m33.573476792s ago: executing program 8 (id=7694): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r3, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000040)="732fbfdb019d7da37edad2e06a44164ecdaa2c0071e55d0f2412f7561e683df8bf8bec", 0x23) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22ffe6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=@gettaction={0xb4, 0x32, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000001300)={'nr0\x00'}) 21m32.613711561s ago: executing program 8 (id=7698): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000000000000000000010000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 21m32.391469804s ago: executing program 8 (id=7701): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "001004", 0x8, 0x2b, 0x1, @remote, @mcast2, {[@routing={0x2f, 0x0, 0x1}]}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf2502000000140001800800030004000000080003000000000004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x400c095}, 0x44) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c617374"], 0x290}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x700, 0x8, 0x3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x11, 0x0}, @private=0xa010101}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x68}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x144}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x68, r8, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff2547}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x4}, {0x4}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r10 = socket$inet_udplite(0x2, 0x2, 0x88) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r12, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x800) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r14, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) listen(r9, 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 21m32.09398284s ago: executing program 8 (id=7707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/550, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32=0x0], 0x232) r2 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0), &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1800}, @TCA_CT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x3f) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x64, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') pread64(r4, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) ioctl$SG_BLKSECTGET(r4, 0x1267, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24010, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000380)=0xffffffff) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000340)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) 21m31.84374753s ago: executing program 8 (id=7711): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket(0x1a, 0x4, 0xfffffffd) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x20}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x4, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x3, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x8, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x1, 0x2, 0x6f, 0x8, 0x9, 0xfffffffc, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x2, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c30, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x2000003, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x2, 0x7, 0x6, 0xffffffff, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xa, 0x7, 0x1f, 0x404, 0x4, 0x4028, 0x200, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x3, 0x3f92, 0x1002, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200006, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x0, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x10, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x8, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0xf80, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x6, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup2(r3, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000040)={'vlan0\x00', {0x2, 0x0, @broadcast}}) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 21m31.243979101s ago: executing program 8 (id=7719): socket$inet6_tcp(0xa, 0x1, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x450881, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x2, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80004000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010300000000ffffffff1100000008000300", @ANYRES32=r8, @ANYBLOB="29e57e89470d1a3a0bfc5c5c3697b310fcc0a06e514776b425854ab030e14785eabd4a35d11066ccf2947342f22c0d0368a039ce357748d1c3625cdb993efaa3e319cafd52fa057aa1e2eaa44e0c00000000000000a39a8fd325ef455576471ac835dd16d200708580480fbd465e392567ed46c6d54f50bf531b48d0fff8c12495d358298ab21cfac79a08793443b36d843fb0a9e26fd6173bb8"], 0x1c}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000200)=0xdc) shutdown(r10, 0x0) 21m31.105456382s ago: executing program 41 (id=7719): socket$inet6_tcp(0xa, 0x1, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x450881, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c40)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x2, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80004000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010300000000ffffffff1100000008000300", @ANYRES32=r8, @ANYBLOB="29e57e89470d1a3a0bfc5c5c3697b310fcc0a06e514776b425854ab030e14785eabd4a35d11066ccf2947342f22c0d0368a039ce357748d1c3625cdb993efaa3e319cafd52fa057aa1e2eaa44e0c00000000000000a39a8fd325ef455576471ac835dd16d200708580480fbd465e392567ed46c6d54f50bf531b48d0fff8c12495d358298ab21cfac79a08793443b36d843fb0a9e26fd6173bb8"], 0x1c}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000200)=0xdc) shutdown(r10, 0x0) 20m35.841285441s ago: executing program 3 (id=8077): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd2000100000001400000060ec97000fc83a00fe8000000000000000000000002000aaff020000000000000000000000000001"], 0xffe) 20m35.340483408s ago: executing program 3 (id=8080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x1}, 0x14000012) recvmsg$can_raw(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002880)=""/4112, 0x1010}], 0x1}, 0x10000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) munlockall() 20m35.181205396s ago: executing program 3 (id=8082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8}]}, 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x181800, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x28081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd", 0x1}], 0x1, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10, 0x20000041}}], 0x1, 0xc004) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e20, 0x6, @mcast2, 0x446f}, @in6={0xa, 0x4e21, 0x0, @private2, 0x6}], 0x64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r5, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r6, r5, 0x4, r4}, 0x10) r7 = fsmount(r1, 0x0, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000080)={'full', 0x20, 0x8, 0x20, 0x7}, 0x2f) fremovexattr(r4, &(0x7f0000000180)=@random={'osx.', '{(*]\x00'}) 20m33.942028075s ago: executing program 3 (id=8084): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = socket(0x40000000015, 0x5, 0x0) accept4$ax25(r1, 0x0, 0x0, 0x80000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001e40), 0x0, 0x100, 0x0) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r4 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000010c0)='#(O@a\xe3v\xfa\x19\x9b\xb7\n\x1d\xf4\x87') r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r7, &(0x7f0000002180)={0x2020}, 0x2020) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r8 = socket$inet(0x2b, 0x801, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0xffff000000000000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0x6e, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x48f, &(0x7f0000000000)={0x2b, @remote, 0x4e60, 0x0, 'lblcr\x00', 0x4, 0x6, 0x47}, 0x2c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0a1fb0699d46dac48f29d158dbe8cfb1979e12979688dc039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c7667ce67af25166c2f0f85f36aa8867406119c2a6f1f892e31dea982c5ab0348d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459af0ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1"}, @TCA_RED_PARMS={0x14, 0x1, {0x2, 0x100000, 0x5, 0x19, 0x17, 0x4, 0x8}}]}}]}, 0x148}}, 0x4000010) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r11, r11, 0x0, 0x2000fb) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='source', &(0x7f0000000500)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xc1\t\xb7b\x12A\x1d`\x16\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\xb7\x8a\":\xc1I;\x03\xe2<\xdf;\xce\x93\xd3\xd2\x19\x964\xeb\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1H\x9a_\xe3*\xc6\xca>\xe0\xb9\x1e\xe1\xf4\x90\xe2\x12]\x01v\xbd\x0e\x0f J\x1d\xcb\xd9:\xa6U\f|\xce\b\x00\x00\x00$\xa5&\x1fu\x1b\x15v\xd0\xd8\x9fH54\xaa\xf2t.I\x96\x1c\t\xe42\x02\x85\xa0\xc2T\x02\x99\"K\f\x03i\xba', 0x0) 20m33.03311221s ago: executing program 3 (id=8087): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x11c) landlock_restrict_self(r0, 0x8) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000d0080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000120000008500000082000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000000)=0x4, 0x4) bind$can_raw(r3, &(0x7f00000000c0), 0x8) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0\x00') r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRES16=r5], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8}]}, 0x6c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r8, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)=0x20) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)="3751f02b82f73c", 0x7}], 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 20m32.483168965s ago: executing program 3 (id=8090): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x10000, 0x10003, 0x65, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trzns=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x103041, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="11000000100003052bbd70000000020000000000", @ANYRES32=0x0, @ANYBLOB="000004000000000000000d000002001608001f0007000000"], 0x40}}, 0x8080) 20m17.439105987s ago: executing program 42 (id=8090): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = syz_io_uring_setup(0x112, &(0x7f00000002c0)={0x0, 0xf59b, 0x10000, 0x10003, 0x65, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trzns=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x103041, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="11000000100003052bbd70000000020000000000", @ANYRES32=0x0, @ANYBLOB="000004000000000000000d000002001608001f0007000000"], 0x40}}, 0x8080) 10m7.340703922s ago: executing program 0 (id=10617): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4104aec6, &(0x7f0000002480)={0x1, [{0x3, 0x228, 0xffffff0e, &(0x7f00000009c0)="c5a52ae0edc83252b8e3fe1588c31b0660bbaff7543923a3488ff236ede85a8ad9a616a2a99d3cce00ba2541d8ea70f2df43217408076545caa72afb265c8065cc999f4fff"}, {0x1, 0x720, 0x1fc0, &(0x7f0000000a40)="87ae48843eec597c6bea3893adcd7489eddb657e4cfd00831e0c204e64ab6fcfa406434461406852388d4b1cb7d29cddf4810a4643d880807ea3e70875ab2f4b4794075ceb31e0b7160dd2230ee9f6c59d74edc8bc9abc96406ffc3b57a8e071c6c00b60375c2f81ce33f88a3b6ed538888c5ccf81eb9066d3dad53c02be22ad6091c97e23e71917323ca8ce8afd9cf7c382c8339ab9ccf8db4a300f2884617c5c067563856e302b7a64b482f45c4367b9f7b7f15aaaa24f4e80e31adf1f506fdea3d00ccec289fc94d568799b2ba4782ea0f0c7885ce41fb947973ce55401ab13dc41b3"}, {0x0, 0x490, 0x7fffffff, &(0x7f0000000b40)="a83db75d0af71f1b56c976b2685ae8e6ebd9246baa5a776b8320e3a44dd44025e3323fee88141b3d838f5983ca1f375e0bee64f0a741f6b746115b6eb4f5b1648b0f835765f9bc3043a7e2752539b2ff81e8ac1dd55b48715132a37cd5e8a8fb406e2c9a20b61f7901997ea6c455a0c7f4ff6808ab5032b45dca491ccc8017a4398d7c7a6bd93768e176811d9e493f6bb73e"}, {0x3, 0xfffffffffffffdf0, 0x6, &(0x7f0000000c00)="7c71ae97311cd94f32f7bdf331cf2731333b700955204372f76a121d0c6c9d3e2566b67a1f1128834db9a792beb17583623119f0a531442ec9168e6897edc15f8a221ea4b799c9ee221a154b6fbd71ca1c2f054f7f6078418290af936eb8a81d7f439d8e1cff69c38c80cc5c144dea989fdbbcb5611b6ea19356221b38a4bd2381331e9271e3dc929ba10e64c82bc13225"}, {0x2, 0x3f8, 0x5bd91179, &(0x7f0000000cc0)="2c66a926557ce2bcfc16a956b7ae538c563d950f4182c4244b1d538c444015d69cac9eb44a2f98f6cc30a989f36b8779338a63392d2c7439df8da25a7db406abd451c17d18aec73c4fbcaa7dd1debad42c6ff52c9239f03a2734ecc184a2464f3857d7b99879039dd80d80191d1bc25c29c4a5043fe83929bc5b681f98e4cc"}, {0x0, 0x6f0, 0xf, &(0x7f0000000d40)="17ccd59b54e884ae179c64f223f2301e1a80f66ef397edcb7a6d46ecebc4eef9606be547a43950e0606753ecbe12d9ce37f00c84e928e099af70a1c5e40c0b99e31b2d8baf6f17f3d0825d20d0e78653cb3f4543422a0b3644364ec0e3c600be09b08be50b2fb268da5d77be401a3c04b9f2498e0995b6bc5f991bc4271fd1506ebff16f12ae7b3fa3fd549f5c4fa45461b3c1a572a7ac060cc1aadcad0b37f778f8ee9b8c411fcd81599803d81baf63e9787b80a2b7b61abdbcf74cac98ea7b074a25f6fc621a631ceccda378a0dbcc2dd437d877046f16d8a2b773a239"}, {0x2, 0x568, 0x4, &(0x7f0000000e40)="b33dd2e2d62a5d24ab043dd9f0b15ad0274334ffa42f7bc36e291b337c15655b9138afd2bdc9fa2f353aad328eaa6e7d884faf4727687cced2dbd2b1d7d5af29f2e857f63c6b6cbab0994ba9b244a8f5692347f4f37d01dc22680bd701187737214194412a8e291c54d017c862a537c84ea2765c32cf3c7a7200654e4c5dee80693aae03afe74c31c87f92d38c89fa75840f799358141734a01cac73bb8d89f98b3e350da0ca7ba86789d46bb8"}, {0x3, 0xa0, 0x6, &(0x7f0000000f00)="f539113ce4da251b9df17d177e13502de26b0a20"}, {0x2, 0x678, 0x9, &(0x7f0000000f40)="8aa08f4a3183dc28c32eb49a7f585a67dcbfc08d3561daf431993c5f3fd5aace632ddc41a16e183ab6056c39648b511f3e1c66920bd8852def085065ad947135656bef269237394c0cdb41b3f68d692575d4677b6bf31fce9fe79fff211447d578abbf57eecd45b44480bae170aca2e9c207051b6341da35131aa56ccf5d763d40e7b0df30440cbc967cc6d8a6c58047f30af880c0b7bfbd950d49fd4aaac05eeb293d45be5965b0dee7539047b385b43ea5ac5ac0ea8208f8a274f1c488d66600b87f5571a52716eda524949bfd06"}, {0x0, 0x4a8, 0x3, &(0x7f0000001040)="c76e5e4dffc46e38c600874d8c408084516c878d6021d236534e419ecd6faaa78634d3dead6cf1098bdb7133b515008f539ea2af3e0d382cda45e3abe545829b6bdbbba641023714e8f6b7052e4f758072b909e0986dada77fdd3f2a1aea98dc6ebc87f621829ecbd606e29a56fd7c295223b4829a6115ae0646bc54676e12c3114b588b9845dcc7ae7d84144a4d1d5e5f712a7a57"}, {0x3, 0x420, 0x8001, &(0x7f0000001100)="0e34b749202f3d869171bcfc153bc27cbc8f5446c108db002e7981b467fd48076e05bd76c5cc1c859310c2ffed6fb041bca61a53074bf74dd05ef0ea5550290ec9fdec1f75cee7f0e13d02d1f68c93e6bc5817334eb0f0ce1e4fbb6228d57ed4fa9ac897aad8bfff29bd8424ee08b6c6ee833438b8b956dfb4a6c2dd48b722dde93dff9b"}, {0x4, 0x8000, 0x3, &(0x7f00000011c0)="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"}, {0x3, 0x6a8, 0x2044, &(0x7f00000021c0)="15fef7d7384eb759da3880f9fb28374164e959351c71259df52d7284b0b372b96793dc79abe44f626ec1a3ba22a81a86f2ae52c4f01924d1b0e6e7a7bb6da38c57e27da59b9c042754549f1aa1221ecede8dd39082c44c64af32c5cd297c9011b23c2cbd42b393fafe3eaaa01f176d9a9fcac2616c437ebafc5e09cbb860e14969795d9f1d1edd688862227e05937867de17c1889331241aac5e591bc8695c2d3dfb49bb535018dd38a9c189921645dabac71af7c93a77d342336f01af137b850324f6264536be7ee1e3bf33085bc95df5193fdbae"}, {0x3, 0x118, 0xfffffffb, &(0x7f00000022c0)="7f505fa46a9fbe2640169f17352dc28ee15efb355ac4e08ba21b6e2ccb6816fdb68ac9"}, {0x3, 0x3a8, 0x0, &(0x7f0000002300)="164fd66104c813c06fe1a47494d599621f6a22015355c68bf536faf60f0bb753c49a21c0702af98c5e91808e8994196a3a9cbbfab183e70c6f072071a36f06ff1ada28384731b27df829ecc1592668e372d1eb2991c8ef4d014c84f76f2058ff0e9adc97b50bc78a96e03f20258b6af35aec69e706"}, {0x0, 0x7e0, 0x5, &(0x7f0000002380)="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"}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000300), &(0x7f00000003c0)=r3}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 10m4.530958384s ago: executing program 0 (id=10621): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) unlink(&(0x7f00000002c0)='./file0\x00') timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x2) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000280)="99", 0x1}], 0x1}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r3, 0x1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[], 0x50}}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f00000001c0)='./file0\x00', 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=[0x6], 0x0, 0x4, 0x1}}, 0x3c) 10m2.306115772s ago: executing program 0 (id=10629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0xffff, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'batadv_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 10m1.271088854s ago: executing program 0 (id=10632): r0 = syz_open_dev$mouse(&(0x7f00000001c0), 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x4) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8925, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 10m0.930932665s ago: executing program 0 (id=10633): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x1c, 0x18, 0x9, 0xfffffffc, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x20000084) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0xba01}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$FUSE(r6, &(0x7f0000000680)={0x2020}, 0x2020) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r7, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x1c, 0x18, 0x9, 0xfffffffc, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x20000084) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0xba01}, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') (async) read$FUSE(r6, &(0x7f0000000680)={0x2020}, 0x2020) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r7, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) (async) 10m0.404301465s ago: executing program 0 (id=10635): mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) (async) r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000193000/0x1000)=nil, &(0x7f00002da000/0x3000)=nil, 0x1000}) mq_notify(r0, &(0x7f00000003c0)={0x0, 0xd, 0x1, @thr={0x0, 0x0}}) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14}}, 0x64}}, 0x80) 10m0.259960625s ago: executing program 43 (id=10635): mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) (async) r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000193000/0x1000)=nil, &(0x7f00002da000/0x3000)=nil, 0x1000}) mq_notify(r0, &(0x7f00000003c0)={0x0, 0xd, 0x1, @thr={0x0, 0x0}}) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14}}, 0x64}}, 0x80) 6m54.091821405s ago: executing program 4 (id=11087): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket(0x1a, 0x4, 0xfffffffd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x5, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6m53.072575718s ago: executing program 4 (id=11091): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (fail_nth: 8) 6m52.928941397s ago: executing program 4 (id=11094): ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000140)="a0418e006d042609d248acf161e85bccbf1273938efa7abe64128d1a0e3b10011d946cca32893bc73f54e8df5edb4c2d24261091b6ad379d609601faaed4252cdf68200a791d75044675103b4311f4770fe1c5815f4f414614e4132dd700322b4b810fe891") openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)={0x60000, 0x0, 0x1f}, 0x18) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioperm(0x0, 0xd, 0x4000000000000020) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r4 = syz_io_uring_setup(0x105, &(0x7f0000000540)={0x0, 0x84d9, 0x0, 0x0, 0x2d4}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r4, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000000c0)=0x1200000000000000, 0x8) 6m51.665684414s ago: executing program 4 (id=11097): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x87, 0x7ffc0001}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0) set_tid_address(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x5) copy_file_range(r2, &(0x7f0000000000)=0x7, r2, 0x0, 0x7, 0x0) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000040)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x5, [@struct={0xc, 0x8, 0x0, 0x4, 0x1, 0xfffffff9, [{0x5, 0x4, 0xb}, {0xc, 0x2, 0x9}, {0xd, 0x1, 0xfffffffa}, {0x3, 0x0, 0x9}, {0xf, 0x2, 0x7}, {0xe, 0x2, 0x1f5}, {0xd, 0x0, 0x3}, {0x1, 0x1, 0x1ff}]}, @ptr={0x3, 0x0, 0x0, 0x2, 0x2}, @fwd={0xd}, @float={0x10, 0x0, 0x0, 0x10, 0x4}, @volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x5f, 0x5f, 0x2e]}}, &(0x7f0000000240)=""/79, 0xb9, 0x4f, 0x0, 0xffff}, 0x28) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000540)) 6m50.20233472s ago: executing program 4 (id=11100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000480)=@gcm_256={{0x303}, "124e358d298a6b43", "46e3c9fc1f6ad43d27ae3a5381a9bf54ae72a9eda17e31810fc95dd6c13b8b00", "d7e38a95", "b6298385879a6a11"}, 0x38) 6m48.472704279s ago: executing program 4 (id=11105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x77, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) syz_usbip_server_init(0x6) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x188}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe5e) 6m48.472462987s ago: executing program 44 (id=11105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x77, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) syz_usbip_server_init(0x6) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="020f000031000000000000000000000005000500000000000a004e2100000044fe8800000000000000000000000000010400000000000000080012000000010000000000000000000600000000000000feffffff0000000000000000000000000000000000000000ffffffff00000000000000000000000002000100000004d50635c404000000202000080088070000e274c97264abe21d6d81b800a8c5a66ffa8747732bb9687f15ac19d5b220cd6f8de859322f0a8b7627c23f3bd15ca0a652fe6938e5e5abd5e597f8035f5fb0468602a03b9ef4a0feb716a120c61825717914af19543612d572f20f09445108f7e536068f92ad5238767ed6e88570a5f0900c88464724c953a9361ed6c6575569acf689132b00fe7abe33e341611038d863d4b350de74bff120bdaf27b3cb8b5a94389861e50698556b28b2a681fa439367eece71345862a56db3565bcc305e65bebcca42001d6f6e6f4969bfd3bb6ab2619f780acca1189f80759199966263070722a416b6049ffdab642f366c5b0c3d2b00000000000000b24298ad7d4843883a193afcdfd1487d3a1f3b2b44d9fddad4780227e453275e359e5b0fb8cc5e58351f8ba792bc7609d7450a"], 0x188}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe5e) 5m5.324130258s ago: executing program 1 (id=11410): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000280)) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount(0x0, &(0x7f0000000500)='./cgroup\x00', 0x0, 0x208000, 0x0) close(0x3) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000200)={0x2d, 0x0}) 5m4.444280962s ago: executing program 1 (id=11412): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xa) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x4000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001200970228", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\f'], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001200970228", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\f'], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_delneigh={0x2c, 0x1c, 0x10, 0x4, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xf2, 0xa}, [@NDA_SRC_VNI={0x8, 0xb, 0x6}, @NDA_SRC_VNI={0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x1000000}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_delneigh={0x2c, 0x1c, 0x10, 0x4, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xf2, 0xa}, [@NDA_SRC_VNI={0x8, 0xb, 0x6}, @NDA_SRC_VNI={0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x1000000}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x5000000) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x5000000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) openat$comedi(0xffffff9c, &(0x7f0000000180)='/dev/comedi2\x00', 0x515001, 0x0) openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x124c0, 0x0) (async) r4 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x124c0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000882000/0x4000)=nil, 0x4000, 0xe, 0x13, r4, 0x10000000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x7, &(0x7f0000983000/0x2000)=nil, 0x5) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000280)=0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1ab8ff00000000bfa100000000000007010000f0ffffffb702000002000000b70300000000000085000000c700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r6}, 0x38) ioctl$TIOCSSOFTCAR(r5, 0xc0384707, &(0x7f0000000040)=0xfffffff7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 5m3.935625929s ago: executing program 1 (id=11416): r0 = socket$igmp(0x2, 0x3, 0x2) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioperm(0x0, 0xd, 0x4000000000000020) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = syz_io_uring_setup(0x105, &(0x7f0000000540)={0x0, 0x84d9, 0x0, 0x0, 0x2d4}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r5, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000000c0)=0x1200000000000000, 0x8) 5m2.914856085s ago: executing program 1 (id=11419): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x87, 0x7ffc0001}]}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) 5m2.805209774s ago: executing program 1 (id=11420): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000008000000d40a000020000000950000000000f000b5128c99768677173d9b3c3df2b9c70394b6daa9c9538891c0d001612f03a9c0f5e702cf37ec20e0eef19fd0b12e85933dd2b504"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 5m2.255305923s ago: executing program 1 (id=11422): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0xa4, 0x25, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {0x10, 0xfff2}, {0xd4a0edaa0b5c122, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1100000}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10001}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x5}}}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x2, [@TCA_FQ_PIE_QUANTUM={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000240)={'syztnl0\x00', r5, 0x40, 0x7800, 0x3, 0x9, {{0x1f, 0x4, 0x3, 0x7, 0x7c, 0x65, 0x0, 0x8, 0x2f, 0x0, @local, @broadcast, {[@timestamp_addr={0x44, 0xc, 0xb5, 0x1, 0x7, [{@multicast1, 0x401}]}, @generic={0x82, 0xf, "c7e8014449c60cdd434e78359a"}, @cipso={0x86, 0x4d, 0x1, [{0x0, 0x12, "27f667d795af6558fbad150fa5d551c0"}, {0x0, 0xe, "b634c9672342af3cad15b1f3"}, {0x5, 0xc, "5aa85962d0a2e5abc754"}, {0x7, 0xc, "4e27fd4f9cd7f18ca6c1"}, {0x0, 0xf, "310329bbb784d7aee336b7ff02"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 5m2.13726283s ago: executing program 45 (id=11422): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0xa4, 0x25, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {0x10, 0xfff2}, {0xd4a0edaa0b5c122, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1100000}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10001}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x5}}}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x2, [@TCA_FQ_PIE_QUANTUM={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000240)={'syztnl0\x00', r5, 0x40, 0x7800, 0x3, 0x9, {{0x1f, 0x4, 0x3, 0x7, 0x7c, 0x65, 0x0, 0x8, 0x2f, 0x0, @local, @broadcast, {[@timestamp_addr={0x44, 0xc, 0xb5, 0x1, 0x7, [{@multicast1, 0x401}]}, @generic={0x82, 0xf, "c7e8014449c60cdd434e78359a"}, @cipso={0x86, 0x4d, 0x1, [{0x0, 0x12, "27f667d795af6558fbad150fa5d551c0"}, {0x0, 0xe, "b634c9672342af3cad15b1f3"}, {0x5, 0xc, "5aa85962d0a2e5abc754"}, {0x7, 0xc, "4e27fd4f9cd7f18ca6c1"}, {0x0, 0xf, "310329bbb784d7aee336b7ff02"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 8.145639077s ago: executing program 6 (id=12342): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000040)={0xea, &(0x7f00000002c0)=""/234}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="40000000100039042abd7000eaffff000003e400", @ANYRES32=r4, @ANYBLOB="03000000c31006002000128008000100736974001400028008000300ac"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r5, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 7.943864433s ago: executing program 6 (id=12347): r0 = socket$igmp(0x2, 0x3, 0x2) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioperm(0x0, 0xd, 0x4000000000000020) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = syz_io_uring_setup(0x105, &(0x7f0000000540)={0x0, 0x84d9, 0x0, 0x0, 0x2d4}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r5, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000000c0)=0x1200000000000000, 0x8) mq_open(&(0x7f0000000040)='\x00', 0x80, 0x100, &(0x7f0000000280)={0xdb1, 0x7ff, 0x2, 0x6}) 6.82386932s ago: executing program 6 (id=12353): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0}) 6.644722741s ago: executing program 6 (id=12356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x1, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x40}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9, 0xe4}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0xc00000, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x2}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x9, 0x1000, 0x9, 0x9}, {0xe, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0xdd, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x3, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x2, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 6.293839446s ago: executing program 6 (id=12361): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x8200, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r6, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x0, 0x8, r5, 0x0, 0x0, 0x1}]) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) pread64(r1, &(0x7f0000033240)=""/102395, 0x18ffb, 0xffffffff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.912672007s ago: executing program 7 (id=12371): socket$inet6(0xa, 0x3, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10002}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpgid(0x0) syz_pidfd_open(r1, 0x0) socket$rds(0x15, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x2, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd000000080002d6", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 4.613820496s ago: executing program 7 (id=12372): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_emit_ethernet(0xcd, &(0x7f00000008c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x97, 0x3a, 0x1, @private1, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x3, 0x4, "a55f8aefe906ccb4ec384a2c895d4de819f1c19cad87f6af0cf2f68e56553e506d6dd7d570bda91308150375131a26b838831414b56a041a3fcc1b99a9ab51d7a0ed144fac64e9d1ab7d4aedb4cc6f7c23413db605086bf14c6130730e5593066d6c5a44c3ef2a9935798d813dd601a65052816d2c9425e837c1f5c51037ce90da28384347607ba824cdb4b0734ab2"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b674) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x2, 0xf, 0x10, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7820, 0x20, 0x27, 0x4}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb1, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000714f2400000000008510000002000000850000000e00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 4.113169897s ago: executing program 9 (id=12373): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x77, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_usbip_server_init(0x6) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000300), 0x5005) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e000000100000000000000000100"], 0x88}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x188}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe5e) 3.554122934s ago: executing program 5 (id=12374): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000007340)=[{{&(0x7f0000000a40)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8014) (fail_nth: 5) 3.281473567s ago: executing program 5 (id=12375): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x102, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000400)=""/186, 0xba}, {&(0x7f00000004c0)=""/218, 0xda}, {&(0x7f0000000300)=""/97, 0x61}, {&(0x7f00000005c0)=""/13, 0xd}], 0x4, 0x81, 0x1d1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}, 0x1, 0x3f}, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') writev(r6, &(0x7f0000000140)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f0000000080)="d2", 0x1}], 0x2) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) (async) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) 3.063992267s ago: executing program 5 (id=12376): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket(0x1a, 0x4, 0xfffffffd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x5, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x1d, 0xfffffffffffffffd) r1 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x1a0}) r2 = gettid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)={0x1c, 0x33, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r2}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000300)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x10000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x46}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.322573067s ago: executing program 6 (id=12377): socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$pagemap(r0, &(0x7f0000000180)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x1) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000280)={0x2d, 0x0, 0x1f}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000840}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) dup3(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100004000000ffffff9e00000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2.084341932s ago: executing program 9 (id=12378): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'ovf\x00', 0x21, 0x4000ffc, 0x6f}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000150200000000000004000d0001007564703a73"], 0x54}}, 0x0) 2.083926844s ago: executing program 5 (id=12379): fsopen(&(0x7f0000000040)='bdev\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000400007012bbd7000fadbdf25037c0000c29a02b0900dac152924fa25bb6799accb6295780a3b6b439d84a1b894003f"], 0x14}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, &(0x7f0000000080)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x7c, 0x30, 0xb, 0x5, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x40}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000080)=""/78, &(0x7f0000000100)=0x4e) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x4, 0x24000000, 0x77, @private0, @private2, 0x80, 0x0, 0x800, 0x40}}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d80000001200080028bd7000ffdbdf252909092100014e218000000009000000fbffffff08000000020000000800000001040000ffffffff", @ANYRES32=r8, @ANYBLOB="040000000300000008000000060000004200010060b141ee84dd51a0121d2d945fce327275574e909185fad33afcc1da4e4785dc3a020b0b8960f3bef7c8d914c1aeeb4389e32668852f2710830e27b2df0ca60925c9ba36000047000100ea1f97528f261b34065b062b5b76ceb8ca83ba7d8d7a29b4b98dd1e2d9f0bab285b4245153e897967fa826a8944146820ae7f9017d88b0986801df8f25c9fd982c393c00"], 0xd8}, 0x1, 0x0, 0x0, 0x10015}, 0x20004800) 1.975886706s ago: executing program 7 (id=12380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$bsg(0xffffff9c, &(0x7f0000000180)='/dev/bsg/2:0:0:0\x00', 0x0, 0x0) ioctl$BSG_IO(r1, 0x2285, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xd, 0x2ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"/424], 0xd8}}, 0x0) 1.967857662s ago: executing program 5 (id=12381): capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000340)={0x0, 0x0, 0x7, 0x0, 0x4}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x2}, {0x7, 0xc1}]}, 0x18, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0xa, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4400, &(0x7f0000000380)={[{}, {@release_agent={'release_agent', 0x3d, './file0/file0'}}, {@favordynmods}, {@subsystem='blkio'}, {@cpuset_v2_mode}, {@noprefix}], [{@uid_lt={'uid<', r0}}, {@obj_role={'obj_role', 0x3d, '^:.@&+'}}, {@measure}, {@audit}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, 'security.capability\x00'}}]}) 1.892516807s ago: executing program 9 (id=12382): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) 1.892264664s ago: executing program 7 (id=12383): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x2}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) 1.833699747s ago: executing program 9 (id=12384): syz_emit_vhci(&(0x7f0000000380)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xef8}, "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"}, 0xefc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = socket(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8927, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x3, {0x0, 0xf1, 0x3}, 0x2}, 0x18) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000500bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507faff15300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.743706379s ago: executing program 7 (id=12385): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000840)={0x0, 0x0, r1, r2, 0x10, 0x4, 0x3219, 0x3ff, {0x1606, 0x30, 0x6cdc, 0xfffe, 0x2, 0x7, 0xd, 0xfb62, 0xfb62, 0xfb62, 0x5, 0x80100002, 0x1, 0xfffffe01, "e10a2bfb7a666d3d42404ecfe5569fdc470ca9bd6cf42e33e5df01a3841470bb"}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e"], 0x3c}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r3, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xfd, 0x12fa80) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000280)={r7, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x16]}}) 1.74332548s ago: executing program 5 (id=12386): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000002340)='~', 0x1, 0xffffffffffffffff) keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r2, &(0x7f00000010c0)=""/4096, 0x1000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 671.777621ms ago: executing program 7 (id=12387): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x8200, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r6, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x0, 0x8, r5, 0x0, 0x0, 0x1}]) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) pread64(r1, &(0x7f0000033240)=""/102395, 0x18ffb, 0xffffffff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 224.067127ms ago: executing program 9 (id=12388): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000008000000d40a0000200000009500000000000000b5128c99768677173d9b3c3df2b9c70394b6daa9c9538891c0d020612f03a9c0f5e702cf37ec20e0eef19fd0b12e85933dd2b504"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 0s ago: executing program 9 (id=12389): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@delqdisc={0xa4, 0x25, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {0x10, 0xfff2}, {0xd4a0edaa0b5c122, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1100000}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10001}, @qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x5}}}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x2, [@TCA_FQ_PIE_QUANTUM={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000240)={'syztnl0\x00', r5, 0x40, 0x7800, 0x3, 0x9, {{0x1f, 0x4, 0x3, 0x7, 0x7c, 0x65, 0x0, 0x8, 0x2f, 0x0, @local, @broadcast, {[@timestamp_addr={0x44, 0xc, 0xb5, 0x1, 0x7, [{@multicast1, 0x401}]}, @generic={0x82, 0xf, "c7e8014449c60cdd434e78359a"}, @cipso={0x86, 0x4d, 0x1, [{0x0, 0x12, "27f667d795af6558fbad150fa5d551c0"}, {0x0, 0xe, "b634c9672342af3cad15b1f3"}, {0x5, 0xc, "5aa85962d0a2e5abc754"}, {0x7, 0xc, "4e27fd4f9cd7f18ca6c1"}, {0x0, 0xf, "310329bbb784d7aee336b7ff02"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000001", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) kernel console output (not intermixed with test programs): ci_hcd vhci_hcd.7: stop threads [ 2894.635832][T12153] vhci_hcd vhci_hcd.7: release socket [ 2894.637636][T12153] vhci_hcd vhci_hcd.7: disconnect device [ 2894.662918][T30365] usb 50-1: SetAddress Request (90) to port 0 [ 2894.665584][T30365] usb 50-1: new SuperSpeed USB device number 90 using vhci_hcd [ 2894.775044][T18832] vhci_hcd: connection reset by peer [ 2894.782717][T12153] vhci_hcd vhci_hcd.6: stop threads [ 2894.785220][T12153] vhci_hcd vhci_hcd.6: release socket [ 2894.787575][T12153] vhci_hcd vhci_hcd.6: disconnect device [ 2895.131878][ C3] net_ratelimit: 10 callbacks suppressed [ 2895.131897][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2895.181989][T18841] vhci_hcd vhci_hcd.0: port 0 already used [ 2895.292023][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2895.441832][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2895.441996][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2895.661689][T18847] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2895.664873][T18847] overlayfs: failed to set xattr on upper [ 2895.668218][T18847] overlayfs: ...falling back to redirect_dir=nofollow. [ 2895.671249][T18847] overlayfs: ...falling back to index=off. [ 2895.673943][T18847] overlayfs: ...falling back to uuid=null. [ 2895.922316][T18848] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 2896.062104][T18850] mac80211_hwsim hwsim132 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2896.123757][T18847] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 2896.127161][T18847] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2896.150499][T18847] vhci_hcd vhci_hcd.0: Device attached [ 2896.161841][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2896.252749][ T40] audit: type=1326 audit(2896.799:11915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18844 comm="syz.9.12018" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x0 [ 2896.321857][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2896.386045][T18857] netlink: 48 bytes leftover after parsing attributes in process `syz.7.12019'. [ 2896.481938][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2896.481974][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2896.507843][ T1327] usb 56-1: SetAddress Request (68) to port 0 [ 2896.561901][ T1327] usb 56-1: new SuperSpeed USB device number 68 using vhci_hcd [ 2897.201836][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2897.361843][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2898.564041][T11008] wlan1: Trigger new scan to find an IBSS to join [ 2899.622434][T15144] usb 52-1: device descriptor read/8, error -110 [ 2899.762008][T30365] usb 50-1: device descriptor read/8, error -110 [ 2900.152816][T30365] usb usb50-port1: attempt power cycle [ 2900.321851][ C3] net_ratelimit: 10 callbacks suppressed [ 2900.321872][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2900.481881][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2900.651844][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2900.651905][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2900.713536][T30365] usb usb50-port1: unable to enumerate USB device [ 2901.371860][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2901.522669][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2901.536938][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 2901.548267][T15144] usb usb52-port1: attempt power cycle [ 2901.681928][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2901.681928][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2901.772708][T18853] vhci_hcd: connection reset by peer [ 2901.783361][T30628] vhci_hcd vhci_hcd.9: stop threads [ 2901.788123][T30628] vhci_hcd vhci_hcd.9: release socket [ 2901.790453][ T1327] usb 56-1: device descriptor read/8, error -110 [ 2901.802073][T30628] vhci_hcd vhci_hcd.9: disconnect device [ 2902.137111][T15144] usb usb52-port1: unable to enumerate USB device [ 2902.411846][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2902.571833][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2903.417770][ T1327] usb usb56-port1: attempt power cycle [ 2903.602353][ T13] wlan1: Creating new IBSS network, BSSID fa:62:e6:a0:e6:25 [ 2904.833075][ T1327] usb usb56-port1: unable to enumerate USB device [ 2905.521860][ C3] net_ratelimit: 10 callbacks suppressed [ 2905.521881][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2905.681846][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2905.841912][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2905.852009][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2906.561899][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2906.721885][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2906.881829][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2906.882181][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2907.601906][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2907.761894][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2908.538378][T18926] vhci_hcd vhci_hcd.0: port 0 already used [ 2909.796315][T18936] netlink: 'syz.9.12036': attribute type 1 has an invalid length. [ 2910.419472][T18951] fuse: Bad value for 'rootmode' [ 2910.721923][ C3] net_ratelimit: 10 callbacks suppressed [ 2910.721942][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2910.881828][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2910.981950][T18964] overlayfs: failed to resolve './file1': -2 [ 2911.022641][T18964] overlayfs: failed to resolve './file1': -2 [ 2911.041870][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2911.052069][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2911.095421][T18968] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 2911.098248][T18968] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2911.154346][ T40] audit: type=1326 audit(2911.669:11916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18955 comm="syz.9.12042" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x0 [ 2911.163791][T18964] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 2911.166493][T18964] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2911.170117][T18964] vhci_hcd vhci_hcd.0: Device attached [ 2911.292317][T18968] vhci_hcd vhci_hcd.0: Device attached [ 2911.318745][T18968] fuse: Unknown parameter '' [ 2911.461920][T12892] usb 56-1: SetAddress Request (72) to port 0 [ 2911.464489][T12892] usb 56-1: new SuperSpeed USB device number 72 using vhci_hcd [ 2911.571904][T14184] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 2911.575456][ T1327] usb 52-1: SetAddress Request (74) to port 0 [ 2911.578567][ T1327] usb 52-1: new SuperSpeed USB device number 74 using vhci_hcd [ 2911.733546][T14184] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2911.738463][T14184] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2911.742969][T14184] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2911.746803][T14184] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2911.761947][T18968] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2911.762177][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2911.770748][T14184] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 2911.921855][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2912.081875][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2912.082012][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2912.092142][T18967] vhci_hcd: connection reset by peer [ 2912.094828][ T1139] vhci_hcd vhci_hcd.9: stop threads [ 2912.097154][ T1139] vhci_hcd vhci_hcd.9: release socket [ 2912.099678][ T1139] vhci_hcd vhci_hcd.9: disconnect device [ 2912.709835][T18987] vhci_hcd vhci_hcd.0: port 0 already used [ 2912.758712][T18991] binder: BINDER_SET_CONTEXT_MGR already set [ 2912.764312][T18991] binder: 18990:18991 ioctl 4018620d 80000100 returned -16 [ 2912.774585][T18991] binder: BINDER_SET_CONTEXT_MGR already set [ 2912.777176][T18991] binder: 18990:18991 ioctl 4018620d 800002c0 returned -16 [ 2912.811982][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2912.961946][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2915.921857][ C3] net_ratelimit: 10 callbacks suppressed [ 2915.921883][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2916.081899][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2916.241842][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2916.242216][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2916.961899][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2917.121955][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2917.281865][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2917.285646][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2917.512275][T12892] usb 56-1: device descriptor read/8, error -110 [ 2917.865056][T24204] usb 12-1: USB disconnect, device number 13 [ 2917.912902][T18969] vhci_hcd: connection reset by peer [ 2917.922225][T30628] vhci_hcd vhci_hcd.7: stop threads [ 2917.924485][T30628] vhci_hcd vhci_hcd.7: release socket [ 2917.927009][T30628] vhci_hcd vhci_hcd.7: disconnect device [ 2917.927033][ T1327] usb 52-1: device descriptor read/8, error -110 [ 2917.929835][T12892] usb usb56-port1: attempt power cycle [ 2918.001960][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2918.165511][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2918.180232][T19013] loop9: detected capacity change from 0 to 7 [ 2918.184852][T18979] Dev loop9: unable to read RDB block 7 [ 2918.187114][T18979] loop9: unable to read partition table [ 2918.189512][T18979] loop9: partition table beyond EOD, truncated [ 2918.274753][T19013] Dev loop9: unable to read RDB block 7 [ 2918.277295][T19013] loop9: unable to read partition table [ 2918.279951][T19013] loop9: partition table beyond EOD, truncated [ 2918.292323][T19013] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 2918.345610][T19019] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12055'. [ 2918.349356][ T1327] usb usb52-port1: attempt power cycle [ 2918.349432][T19019] netlink: 'syz.6.12055': attribute type 7 has an invalid length. [ 2918.355058][T19019] netlink: 'syz.6.12055': attribute type 8 has an invalid length. [ 2918.358971][T19019] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12055'. [ 2918.462934][T19019] bond0: entered promiscuous mode [ 2918.465466][T19019] bond_slave_0: entered promiscuous mode [ 2918.481849][T19019] bond_slave_1: entered promiscuous mode [ 2918.493008][T12892] usb usb56-port1: unable to enumerate USB device [ 2918.514443][T19019] bond0: left promiscuous mode [ 2918.516329][T19019] bond_slave_0: left promiscuous mode [ 2918.528504][T19019] bond_slave_1: left promiscuous mode [ 2919.039004][ T1327] usb usb52-port1: unable to enumerate USB device [ 2920.509119][T19045] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12058'. [ 2920.747724][T19049] netlink: 'syz.6.12062': attribute type 1 has an invalid length. [ 2921.121865][ C3] net_ratelimit: 10 callbacks suppressed [ 2921.121887][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2921.166522][T19056] vhci_hcd vhci_hcd.0: port 0 already used [ 2921.281906][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2921.442061][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2921.451895][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2921.949456][T19070] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2921.952789][T19070] overlayfs: failed to set xattr on upper [ 2921.955411][T19070] overlayfs: ...falling back to redirect_dir=nofollow. [ 2921.958604][T19070] overlayfs: ...falling back to index=off. [ 2921.961164][T19070] overlayfs: ...falling back to uuid=null. [ 2922.031260][T19071] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 2922.102309][T19070] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 2922.105131][T19070] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2922.109295][T19070] vhci_hcd vhci_hcd.0: Device attached [ 2922.146764][ T40] audit: type=1326 audit(2922.699:11917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19067 comm="syz.9.12065" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x0 [ 2922.161951][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2922.321913][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2922.392112][T23889] usb 56-1: SetAddress Request (76) to port 0 [ 2922.404342][T23889] usb 56-1: new SuperSpeed USB device number 76 using vhci_hcd [ 2922.481841][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2922.481883][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2922.693776][T19072] vhci_hcd: connection reset by peer [ 2922.696315][ T1139] vhci_hcd vhci_hcd.9: stop threads [ 2922.698562][ T1139] vhci_hcd vhci_hcd.9: release socket [ 2922.700926][ T1139] vhci_hcd vhci_hcd.9: disconnect device [ 2923.201876][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2923.361847][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2924.260929][T19085] program syz.5.12068 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2926.321890][ C3] net_ratelimit: 10 callbacks suppressed [ 2926.321908][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2926.481999][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2926.641912][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2926.641960][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2927.361848][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2927.448658][T23889] usb 56-1: device descriptor read/8, error -110 [ 2927.531859][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2927.682033][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2927.691940][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2927.873925][T23889] usb usb56-port1: attempt power cycle [ 2927.999110][T19109] vhci_hcd vhci_hcd.0: port 0 already used [ 2928.401949][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2928.463111][T23889] usb usb56-port1: unable to enumerate USB device [ 2928.561858][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2930.274588][T19131] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 2930.277446][T19131] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2930.280969][T19131] vhci_hcd vhci_hcd.0: Device attached [ 2930.725271][T19137] binder: BINDER_SET_CONTEXT_MGR already set [ 2930.727892][T19137] binder: 19136:19137 ioctl 4018620d 80004a80 returned -16 [ 2930.741272][ T40] audit: type=1326 audit(2931.289:11918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19136 comm="syz.9.12080" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x0 [ 2930.807420][T19140] FAULT_INJECTION: forcing a failure. [ 2930.807420][T19140] name failslab, interval 1, probability 0, space 0, times 0 [ 2930.816019][T19140] CPU: 2 UID: 0 PID: 19140 Comm: syz.6.12081 Tainted: G L syzkaller #0 PREEMPT(full) [ 2930.816048][T19140] Tainted: [L]=SOFTLOCKUP [ 2930.816054][T19140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2930.816065][T19140] Call Trace: [ 2930.816071][T19140] [ 2930.816093][T19140] dump_stack_lvl+0x100/0x190 [ 2930.816123][T19140] should_fail_ex.cold+0x5/0xa [ 2930.816143][T19140] ? tomoyo_encode2+0xfb/0x3c0 [ 2930.816159][T19140] should_failslab+0xc2/0x120 [ 2930.816181][T19140] __kmalloc_noprof+0xe0/0x850 [ 2930.816199][T19140] ? d_absolute_path+0x136/0x1b0 [ 2930.816221][T19140] tomoyo_encode2+0xfb/0x3c0 [ 2930.816241][T19140] tomoyo_encode+0x29/0x50 [ 2930.816257][T19140] tomoyo_realpath_from_path+0x18c/0x690 [ 2930.816280][T19140] tomoyo_path_perm+0x276/0x460 [ 2930.816303][T19140] ? tomoyo_path_perm+0x262/0x460 [ 2930.816327][T19140] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 2930.816354][T19140] ? register_lock_class+0x40/0x560 [ 2930.816396][T19140] ? __pfx___might_resched+0x10/0x10 [ 2930.816418][T19140] ? rcu_is_watching+0x12/0xc0 [ 2930.816440][T19140] ? trace_contention_end+0xd6/0x110 [ 2930.816462][T19140] security_inode_getattr+0x116/0x280 [ 2930.816487][T19140] vfs_getattr+0x25/0x60 [ 2930.816511][T19140] loop_query_min_dio_size.isra.0+0x117/0x250 [ 2930.816539][T19140] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 2930.816580][T19140] ? filemap_write_and_wait_range+0x7d/0x130 [ 2930.816601][T19140] ? bdev_mark_dead+0xfb/0x1d0 [ 2930.816628][T19140] loop_configure+0x6e4/0x15b0 [ 2930.816670][T19140] ? __lock_acquire+0x4a5/0x2630 [ 2930.816689][T19140] ? __pfx_loop_configure+0x10/0x10 [ 2930.816718][T19140] ? __lock_acquire+0x4a5/0x2630 [ 2930.816761][T19140] lo_ioctl+0xcf3/0x1bc0 [ 2930.816780][T19140] ? __pfx_lo_ioctl+0x10/0x10 [ 2930.816805][T19140] ? tomoyo_path_number_perm+0x46d/0x580 [ 2930.816829][T19140] ? kasan_quarantine_put+0x104/0x240 [ 2930.816846][T19140] ? blk_get_meta_cap+0xd4/0x6c0 [ 2930.816864][T19140] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 2930.816879][T19140] ? find_held_lock+0x2b/0x80 [ 2930.816901][T19140] ? tomoyo_path_number_perm+0x28f/0x580 [ 2930.816961][T19140] lo_compat_ioctl+0xf3/0x160 [ 2930.816980][T19140] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 2930.816995][T19140] compat_blkdev_ioctl+0x682/0x7b0 [ 2930.817016][T19140] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 2930.817040][T19140] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 2930.817058][T19140] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 2930.817081][T19140] __do_fast_syscall_32+0xe3/0x8c0 [ 2930.817109][T19140] do_fast_syscall_32+0x32/0x70 [ 2930.817133][T19140] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2930.817154][T19140] RIP: 0023:0xf7fa3f6c [ 2930.817169][T19140] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2930.817184][T19140] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 2930.817201][T19140] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000004c0a [ 2930.817212][T19140] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 2930.817222][T19140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2930.817232][T19140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2930.817241][T19140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2930.817265][T19140] [ 2930.817561][T19140] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2930.965392][T19140] loop3: detected capacity change from 0 to 7 [ 2931.275531][T13077] usb 52-1: SetAddress Request (78) to port 0 [ 2931.278287][T13077] usb 52-1: new SuperSpeed USB device number 78 using vhci_hcd [ 2931.281842][ C1] blk_print_req_error: 30 callbacks suppressed [ 2931.281862][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2931.288598][ C1] buffer_io_error: 30 callbacks suppressed [ 2931.288614][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 2931.332338][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2931.336351][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 2931.398069][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2931.402265][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 2931.409963][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2931.414512][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 2931.444018][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2931.448056][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 2931.456367][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2931.460414][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 2931.475317][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2931.479470][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 2931.483481][T19140] ldm_validate_partition_table(): Disk read failed. [ 2931.501892][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2931.506099][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 2931.510231][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2931.514281][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 2931.518484][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2931.521824][ C3] net_ratelimit: 10 callbacks suppressed [ 2931.521836][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2931.522632][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 2931.535777][T19140] Dev loop3: unable to read RDB block 0 [ 2931.545980][T19140] loop3: unable to read partition table [ 2931.550208][T19140] loop3: partition table beyond EOD, truncated [ 2931.553229][T19140] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 2931.681847][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2931.808039][T11004] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2931.841849][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2931.841849][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2932.561837][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2932.732216][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2932.881901][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2932.881964][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2933.569286][T19132] vhci_hcd: connection reset by peer [ 2933.601842][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2933.618239][T11004] vhci_hcd vhci_hcd.7: stop threads [ 2933.621053][T11004] vhci_hcd vhci_hcd.7: release socket [ 2933.624355][T11004] vhci_hcd vhci_hcd.7: disconnect device [ 2933.761848][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2935.497320][T19168] vhci_hcd vhci_hcd.0: port 0 already used [ 2936.721811][ C3] net_ratelimit: 10 callbacks suppressed [ 2936.721826][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2936.881892][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2937.041909][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2937.041952][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2937.281974][T13077] usb 52-1: device descriptor read/8, error -110 [ 2937.702570][T13077] usb usb52-port1: attempt power cycle [ 2937.761962][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2937.921854][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2938.081841][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2938.081845][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2938.802547][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2938.971844][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2939.233138][T13077] usb usb52-port1: unable to enumerate USB device [ 2939.765729][ T40] audit: type=1326 audit(2940.319:11919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.9.12094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2939.784335][T19195] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 2939.786982][T19195] audit: out of memory in audit_log_start [ 2939.801885][ T40] audit: type=1326 audit(2940.319:11920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.9.12094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2939.809571][ T40] audit: type=1326 audit(2940.329:11921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.9.12094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2939.838376][ T40] audit: type=1326 audit(2940.329:11922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.9.12094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2939.844375][T19199] tipc: Enabling of bearer rejected, already enabled [ 2939.848365][ T40] audit: type=1326 audit(2940.329:11923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.9.12094" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2939.871451][ T40] audit: type=1326 audit(2940.339:11924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.9.12094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2939.881606][ T40] audit: type=1326 audit(2940.339:11925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.9.12094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2939.891271][ T40] audit: type=1326 audit(2940.339:11926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19194 comm="syz.9.12094" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 2941.288313][T19213] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 2941.291013][T19213] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2941.316732][T19213] vhci_hcd vhci_hcd.0: Device attached [ 2941.607280][T12892] usb 52-1: SetAddress Request (82) to port 0 [ 2941.620689][T12892] usb 52-1: new SuperSpeed USB device number 82 using vhci_hcd [ 2941.921828][ C3] net_ratelimit: 10 callbacks suppressed [ 2941.921848][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2942.091828][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2942.241837][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2942.241949][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2942.474363][T19214] vhci_hcd: connection reset by peer [ 2942.477209][T22508] vhci_hcd vhci_hcd.7: stop threads [ 2942.479593][T22508] vhci_hcd vhci_hcd.7: release socket [ 2942.561274][T22508] vhci_hcd vhci_hcd.7: disconnect device [ 2942.654004][T19234] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2942.656606][T19234] overlayfs: failed to set xattr on upper [ 2942.658781][T19234] overlayfs: ...falling back to redirect_dir=nofollow. [ 2942.661438][T19234] overlayfs: ...falling back to index=off. [ 2942.663922][T19234] overlayfs: ...falling back to uuid=null. [ 2942.719738][T19236] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 2942.765908][T19237] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2942.768896][T19237] overlayfs: failed to set xattr on upper [ 2942.771700][T19237] overlayfs: ...falling back to redirect_dir=nofollow. [ 2942.775163][T19237] overlayfs: ...falling back to index=off. [ 2942.777752][T19237] overlayfs: ...falling back to uuid=null. [ 2942.826704][T19234] vhci_hcd vhci_hcd.0: port 0 already used [ 2942.960524][T19241] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 2942.963962][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2943.049011][T19242] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 2943.051427][T19242] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2943.121929][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2943.125348][T19242] vhci_hcd vhci_hcd.0: Device attached [ 2943.291894][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2943.297606][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2943.552437][T15144] usb 50-1: SetAddress Request (94) to port 0 [ 2943.555041][T15144] usb 50-1: new SuperSpeed USB device number 94 using vhci_hcd [ 2943.625794][T19243] vhci_hcd: connection reset by peer [ 2943.628518][T22508] vhci_hcd vhci_hcd.6: stop threads [ 2943.632305][T22508] vhci_hcd vhci_hcd.6: release socket [ 2943.635304][T22508] vhci_hcd vhci_hcd.6: disconnect device [ 2944.011871][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2944.161840][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2944.481733][T19255] loop9: detected capacity change from 0 to 7 [ 2944.485964][T18979] Dev loop9: unable to read RDB block 7 [ 2944.490203][T18979] loop9: unable to read partition table [ 2944.493165][T18979] loop9: partition table beyond EOD, truncated [ 2944.851925][T19255] Dev loop9: unable to read RDB block 7 [ 2944.855261][T19255] loop9: unable to read partition table [ 2944.858972][T19255] loop9: partition table beyond EOD, truncated [ 2944.863489][T19255] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 2944.915483][T19267] netlink: 'syz.9.12111': attribute type 2 has an invalid length. [ 2946.844433][T12892] usb 52-1: device descriptor read/8, error -110 [ 2946.992149][T19282] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 2946.994602][T19282] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2946.998590][T19282] vhci_hcd vhci_hcd.0: Device attached [ 2947.121820][ C3] net_ratelimit: 10 callbacks suppressed [ 2947.121870][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2947.252999][T12892] usb usb52-port1: attempt power cycle [ 2947.291843][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2947.441916][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2947.451853][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2947.823003][T12892] usb usb52-port1: unable to enumerate USB device [ 2948.161948][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2948.332047][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2948.371620][T19283] vhci_hcd: connection closed [ 2948.372191][T12789] vhci_hcd vhci_hcd.6: stop threads [ 2948.377340][T12789] vhci_hcd vhci_hcd.6: release socket [ 2948.380212][T12789] vhci_hcd vhci_hcd.6: disconnect device [ 2948.481876][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2948.481876][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2948.642035][T15144] usb 50-1: device descriptor read/8, error -110 [ 2949.134545][T19302] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2949.137596][T19302] overlayfs: failed to set xattr on upper [ 2949.140033][T19302] overlayfs: ...falling back to redirect_dir=nofollow. [ 2949.151958][T19302] overlayfs: ...falling back to index=off. [ 2949.155371][T19302] overlayfs: ...falling back to uuid=null. [ 2949.192261][T15144] usb usb50-port1: attempt power cycle [ 2949.201895][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2949.222032][T30365] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 2949.233192][T19303] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 2949.292885][T19305] FAULT_INJECTION: forcing a failure. [ 2949.292885][T19305] name failslab, interval 1, probability 0, space 0, times 0 [ 2949.298278][T19305] CPU: 3 UID: 0 PID: 19305 Comm: syz.6.12120 Tainted: G L syzkaller #0 PREEMPT(full) [ 2949.298307][T19305] Tainted: [L]=SOFTLOCKUP [ 2949.298313][T19305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2949.298324][T19305] Call Trace: [ 2949.298332][T19305] [ 2949.298340][T19305] dump_stack_lvl+0x100/0x190 [ 2949.298369][T19305] should_fail_ex.cold+0x5/0xa [ 2949.298388][T19305] should_failslab+0xc2/0x120 [ 2949.298411][T19305] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 2949.298428][T19305] ? skb_clone+0x190/0x400 [ 2949.298457][T19305] skb_clone+0x190/0x400 [ 2949.298482][T19305] netlink_deliver_tap+0xaed/0xcc0 [ 2949.298513][T19305] netlink_unicast+0x650/0x870 [ 2949.298543][T19305] ? __pfx_netlink_unicast+0x10/0x10 [ 2949.298577][T19305] netlink_sendmsg+0x8b0/0xda0 [ 2949.298605][T19305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2949.298632][T19305] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2949.298658][T19305] ____sys_sendmsg+0xa54/0xc30 [ 2949.298678][T19305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2949.298706][T19305] ___sys_sendmsg+0x190/0x1e0 [ 2949.298726][T19305] ? __pfx____sys_sendmsg+0x10/0x10 [ 2949.298774][T19305] __sys_sendmsg+0x170/0x220 [ 2949.298797][T19305] ? __pfx___sys_sendmsg+0x10/0x10 [ 2949.298828][T19305] ? __pfx_ksys_write+0x10/0x10 [ 2949.298863][T19305] __do_fast_syscall_32+0xe3/0x8c0 [ 2949.298889][T19305] do_fast_syscall_32+0x32/0x70 [ 2949.298914][T19305] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2949.298935][T19305] RIP: 0023:0xf7fa3f6c [ 2949.298950][T19305] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2949.298967][T19305] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2949.298984][T19305] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 2949.298994][T19305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2949.299004][T19305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2949.299014][T19305] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2949.299024][T19305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2949.299047][T19305] [ 2949.299102][T19305] tipc: Enabling of bearer rejected, already enabled [ 2949.311195][T19306] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 2949.373950][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2949.375757][T19306] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2949.452813][T30365] usb 10-1: Using ep0 maxpacket: 8 [ 2949.458089][T30365] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2949.464371][T30365] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2949.470157][T30365] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2949.477159][T19306] vhci_hcd vhci_hcd.0: Device attached [ 2949.502340][T30365] usb 10-1: config 0 descriptor?? [ 2949.755102][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 2949.755118][ T40] audit: type=1326 audit(2950.309:11940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19295 comm="syz.7.12117" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x0 [ 2949.771945][T23889] usb 52-1: SetAddress Request (86) to port 0 [ 2949.774103][T15144] usb usb50-port1: unable to enumerate USB device [ 2950.732242][T23889] usb 52-1: new SuperSpeed USB device number 86 using vhci_hcd [ 2950.744158][T30365] mcp2221 0003:04D8:00DD.000F: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 2951.142811][T19307] vhci_hcd: connection reset by peer [ 2951.372652][T30628] vhci_hcd vhci_hcd.7: stop threads [ 2951.374962][T30628] vhci_hcd vhci_hcd.7: release socket [ 2951.377344][T30628] vhci_hcd vhci_hcd.7: disconnect device [ 2951.739426][T30365] usb 10-1: USB disconnect, device number 22 [ 2952.063793][T19337] netlink: 'syz.9.12129': attribute type 10 has an invalid length. [ 2952.181333][T19343] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 2952.184244][T19343] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2952.189409][T19343] vhci_hcd vhci_hcd.0: Device attached [ 2952.321917][ C3] net_ratelimit: 10 callbacks suppressed [ 2952.321937][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2952.481858][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2952.641870][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2952.651824][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2953.052128][T19359] binder: BINDER_SET_CONTEXT_MGR already set [ 2953.054885][T19359] binder: 19358:19359 ioctl 4018620d 80000100 returned -16 [ 2953.067084][T19359] binder: BINDER_SET_CONTEXT_MGR already set [ 2953.070270][T19359] binder: 19358:19359 ioctl 4018620d 800002c0 returned -16 [ 2953.361928][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2953.462042][T19344] vhci_hcd: connection closed [ 2953.531864][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2953.681844][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2953.683925][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2953.756324][T19348] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12131'. [ 2953.999549][T30628] vhci_hcd vhci_hcd.7: stop threads [ 2954.017347][T30628] vhci_hcd vhci_hcd.7: release socket [ 2954.020240][T30628] vhci_hcd vhci_hcd.7: disconnect device [ 2954.401944][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2954.561939][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2955.206183][T19372] loop9: detected capacity change from 0 to 7 [ 2955.210082][T18980] Dev loop9: unable to read RDB block 7 [ 2955.220578][T18980] loop9: unable to read partition table [ 2955.225739][T18980] loop9: partition table beyond EOD, truncated [ 2955.231669][T19372] Dev loop9: unable to read RDB block 7 [ 2955.236020][T19372] loop9: unable to read partition table [ 2955.238859][T19372] loop9: partition table beyond EOD, truncated [ 2955.242579][T19372] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 2955.309523][T19378] netlink: 'syz.5.12141': attribute type 1 has an invalid length. [ 2955.776166][T23889] usb 52-1: device descriptor read/8, error -110 [ 2956.184982][T23889] usb usb52-port1: attempt power cycle [ 2956.753815][T23889] usb usb52-port1: unable to enumerate USB device [ 2956.930504][T19374] mac80211_hwsim hwsim115 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2956.943237][T19378] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 2957.521863][ C3] net_ratelimit: 10 callbacks suppressed [ 2957.521881][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2957.681935][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2957.842411][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2957.852102][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2958.561872][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2958.721838][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2958.881866][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2958.881980][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2959.522053][ T1139] wlan1: Trigger new scan to find an IBSS to join [ 2959.601988][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2959.761919][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2960.666401][T19426] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2960.669526][T19426] overlayfs: failed to set xattr on upper [ 2960.672433][T19426] overlayfs: ...falling back to redirect_dir=nofollow. [ 2960.675364][T19426] overlayfs: ...falling back to index=off. [ 2960.677876][T19426] overlayfs: ...falling back to uuid=null. [ 2960.701594][T19426] vhci_hcd vhci_hcd.0: port 0 already used [ 2960.707726][ T40] audit: type=1326 audit(2961.259:11941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19422 comm="syz.5.12151" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x0 [ 2962.561982][T22522] wlan1: Trigger new scan to find an IBSS to join [ 2962.722033][ C3] net_ratelimit: 10 callbacks suppressed [ 2962.722052][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2962.881819][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2962.965305][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 2963.041911][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2963.045297][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2963.618689][T19228] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2963.652164][T19436] tipc: Enabling of bearer rejected, already enabled [ 2963.670197][T19444] 9p: Bad value for 'wfdno' [ 2963.742213][T19440] mac80211_hwsim hwsim128 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2963.771902][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2963.788456][T19451] netlink: 'syz.7.12158': attribute type 1 has an invalid length. [ 2963.802303][T19448] netlink: 'syz.9.12157': attribute type 15 has an invalid length. [ 2963.921836][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2964.091846][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2964.091910][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2964.811841][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2964.971835][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2965.722431][ T1139] wlan1: Trigger new scan to find an IBSS to join [ 2965.823594][T19469] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 2965.826333][T19469] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2965.858446][T19469] vhci_hcd vhci_hcd.0: Device attached [ 2966.202597][T15144] usb 52-1: SetAddress Request (90) to port 0 [ 2966.205713][T15144] usb 52-1: new SuperSpeed USB device number 90 using vhci_hcd [ 2966.431226][T19481] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2966.433774][T19481] overlayfs: failed to set xattr on upper [ 2966.435756][T19481] overlayfs: ...falling back to redirect_dir=nofollow. [ 2966.437944][T19481] overlayfs: ...falling back to index=off. [ 2966.440363][T19481] overlayfs: ...falling back to uuid=null. [ 2966.699877][ T40] audit: type=1326 audit(2967.249:11942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19472 comm="syz.5.12162" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x0 [ 2966.719503][T19481] vhci_hcd vhci_hcd.0: port 0 already used [ 2966.856772][T19470] vhci_hcd: connection reset by peer [ 2966.861985][T22508] vhci_hcd vhci_hcd.7: stop threads [ 2966.920515][T22508] vhci_hcd vhci_hcd.7: release socket [ 2966.934386][T22508] vhci_hcd vhci_hcd.7: disconnect device [ 2967.074277][T22522] wlan1: Creating new IBSS network, BSSID be:91:3d:b1:b5:ba [ 2967.522234][T22522] wlan1: Trigger new scan to find an IBSS to join [ 2967.673115][T19491] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 2967.676338][T19491] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2967.679629][T19491] vhci_hcd vhci_hcd.0: Device attached [ 2967.921821][ C3] net_ratelimit: 10 callbacks suppressed [ 2967.921864][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2967.972011][T30365] usb 56-1: SetAddress Request (80) to port 0 [ 2967.974754][T30365] usb 56-1: new SuperSpeed USB device number 80 using vhci_hcd [ 2967.999052][T19495] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2968.001466][T19495] overlayfs: failed to set xattr on upper [ 2968.004015][T19495] overlayfs: ...falling back to redirect_dir=nofollow. [ 2968.006920][T19495] overlayfs: ...falling back to index=off. [ 2968.009383][T19495] overlayfs: ...falling back to uuid=null. [ 2968.045803][T19495] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2968.048576][T19495] overlayfs: failed to set xattr on upper [ 2968.050861][T19495] overlayfs: ...falling back to redirect_dir=nofollow. [ 2968.053685][T19495] overlayfs: ...falling back to index=off. [ 2968.055620][T19495] overlayfs: ...falling back to uuid=null. [ 2968.081936][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2968.091043][T19495] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 2968.094719][T19495] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2968.100466][T19495] vhci_hcd vhci_hcd.0: Device attached [ 2968.130304][ T40] audit: type=1326 audit(2968.679:11943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19489 comm="syz.7.12165" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x0 [ 2968.241927][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2968.241923][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2968.462003][T19499] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12166'. [ 2968.465843][T19499] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12166'. [ 2968.498486][T19492] vhci_hcd: connection reset by peer [ 2968.516206][ T1139] vhci_hcd vhci_hcd.9: stop threads [ 2968.519245][ T1139] vhci_hcd vhci_hcd.9: release socket [ 2968.521880][ T1139] vhci_hcd vhci_hcd.9: disconnect device [ 2968.632241][T19496] vhci_hcd: connection closed [ 2968.632528][T22508] vhci_hcd vhci_hcd.7: stop threads [ 2968.637183][T22508] vhci_hcd vhci_hcd.7: release socket [ 2968.639453][T22508] vhci_hcd vhci_hcd.7: disconnect device [ 2968.961852][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2969.131877][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2969.217484][T19504] FAULT_INJECTION: forcing a failure. [ 2969.217484][T19504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2969.223983][T19504] CPU: 0 UID: 0 PID: 19504 Comm: syz.6.12167 Tainted: G L syzkaller #0 PREEMPT(full) [ 2969.224020][T19504] Tainted: [L]=SOFTLOCKUP [ 2969.224026][T19504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2969.224034][T19504] Call Trace: [ 2969.224040][T19504] [ 2969.224046][T19504] dump_stack_lvl+0x100/0x190 [ 2969.224084][T19504] should_fail_ex.cold+0x5/0xa [ 2969.224100][T19504] _copy_from_user+0x2e/0xd0 [ 2969.224122][T19504] bpf_prog_load+0x139d/0x2c20 [ 2969.224141][T19504] ? _parse_integer_limit+0x17f/0x1d0 [ 2969.224159][T19504] ? __pfx_bpf_prog_load+0x10/0x10 [ 2969.224177][T19504] ? __lock_acquire+0x4a5/0x2630 [ 2969.224217][T19504] __sys_bpf+0x223a/0x4b90 [ 2969.224246][T19504] ? __pfx___sys_bpf+0x10/0x10 [ 2969.224272][T19504] ? proc_fail_nth_write+0x9f/0x220 [ 2969.224294][T19504] ? find_held_lock+0x2b/0x80 [ 2969.224319][T19504] ? find_held_lock+0x2b/0x80 [ 2969.224343][T19504] ? ksys_write+0x190/0x250 [ 2969.224368][T19504] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2969.224411][T19504] ? fput+0x79/0x100 [ 2969.224435][T19504] ? ksys_write+0x1ac/0x250 [ 2969.224460][T19504] __ia32_sys_bpf+0x79/0xf0 [ 2969.224484][T19504] ? lockdep_hardirqs_on+0x78/0x100 [ 2969.224510][T19504] __do_fast_syscall_32+0xe3/0x8c0 [ 2969.224539][T19504] do_fast_syscall_32+0x32/0x70 [ 2969.224563][T19504] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2969.224587][T19504] RIP: 0023:0xf7fa3f6c [ 2969.224603][T19504] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2969.224619][T19504] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 2969.224636][T19504] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000880 [ 2969.224647][T19504] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 2969.224657][T19504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2969.224666][T19504] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2969.224681][T19504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2969.224729][T19504] [ 2969.281871][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2969.283151][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2969.447914][T23889] hid (null): unknown global tag 0xd [ 2969.451386][T23889] hid (null): unknown global tag 0x87 [ 2969.456979][T23889] hid (null): unknown global tag 0xe [ 2969.459291][T23889] hid (null): invalid report_size 348556012 [ 2969.468995][T23889] hid_parser_main: 33 callbacks suppressed [ 2969.469015][T23889] hid-generic 0C52:007E:FFFFF001.0010: unknown main item tag 0x4 [ 2969.481858][T23889] hid-generic 0C52:007E:FFFFF001.0010: collection stack underflow [ 2969.486739][T23889] hid-generic 0C52:007E:FFFFF001.0010: item 0 1 0 12 parsing failed [ 2969.490728][T23889] hid-generic 0C52:007E:FFFFF001.0010: probe with driver hid-generic failed with error -22 [ 2970.001896][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2970.161832][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2970.242569][T19524] vhci_hcd vhci_hcd.0: port 0 already used [ 2970.306343][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12170'. [ 2970.562024][T12157] wlan1: Trigger new scan to find an IBSS to join [ 2971.225572][T19532] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2971.235886][T19532] overlayfs: failed to set xattr on upper [ 2971.238535][T19532] overlayfs: ...falling back to redirect_dir=nofollow. [ 2971.241696][T19532] overlayfs: ...falling back to index=off. [ 2971.245184][T19532] overlayfs: ...falling back to uuid=null. [ 2971.291166][T15144] usb 52-1: device descriptor read/8, error -110 [ 2971.400788][T19533] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 2971.403715][T19533] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2971.441408][T19533] vhci_hcd vhci_hcd.0: Device attached [ 2971.485734][ T40] audit: type=1326 audit(2972.039:11944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19529 comm="syz.9.12174" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x0 [ 2971.572267][T19228] wlan1: Creating new IBSS network, BSSID 82:0e:6d:28:6b:0c [ 2971.799079][T15144] usb usb52-port1: attempt power cycle [ 2972.342405][T19534] vhci_hcd: connection closed [ 2972.342834][T12157] vhci_hcd vhci_hcd.9: stop threads [ 2972.347377][T12157] vhci_hcd vhci_hcd.9: release socket [ 2972.349839][T12157] vhci_hcd vhci_hcd.9: disconnect device [ 2972.392837][T15144] usb usb52-port1: unable to enumerate USB device [ 2973.052072][T30365] usb 56-1: device descriptor read/8, error -110 [ 2973.121903][ C3] net_ratelimit: 10 callbacks suppressed [ 2973.121917][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2973.282235][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2973.296041][T19547] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 2973.298601][T19547] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2973.317384][T19547] vhci_hcd vhci_hcd.0: Device attached [ 2973.441856][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2973.441938][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2973.443246][T30365] usb usb56-port1: attempt power cycle [ 2973.581987][T13175] usb 50-1: SetAddress Request (98) to port 0 [ 2973.584725][T13175] usb 50-1: new SuperSpeed USB device number 98 using vhci_hcd [ 2973.759143][T19548] vhci_hcd: connection reset by peer [ 2973.761785][T12157] vhci_hcd vhci_hcd.6: stop threads [ 2973.764609][T12157] vhci_hcd vhci_hcd.6: release socket [ 2973.767634][T12157] vhci_hcd vhci_hcd.6: disconnect device [ 2974.003277][T30365] usb usb56-port1: unable to enumerate USB device [ 2974.161935][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2974.321892][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2974.481913][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2974.491944][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2974.852142][T19546] tipc: Enabling of bearer rejected, already enabled [ 2974.855438][T19546] FAULT_INJECTION: forcing a failure. [ 2974.855438][T19546] name failslab, interval 1, probability 0, space 0, times 0 [ 2974.860253][T19546] CPU: 2 UID: 0 PID: 19546 Comm: syz.9.12176 Tainted: G L syzkaller #0 PREEMPT(full) [ 2974.860282][T19546] Tainted: [L]=SOFTLOCKUP [ 2974.860289][T19546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2974.860299][T19546] Call Trace: [ 2974.860307][T19546] [ 2974.860315][T19546] dump_stack_lvl+0x100/0x190 [ 2974.860353][T19546] should_fail_ex.cold+0x5/0xa [ 2974.860374][T19546] should_failslab+0xc2/0x120 [ 2974.860397][T19546] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2974.860418][T19546] ? __alloc_skb+0x140/0x710 [ 2974.860444][T19546] __alloc_skb+0x140/0x710 [ 2974.860463][T19546] ? __alloc_skb+0x5b7/0x710 [ 2974.860483][T19546] ? __pfx___alloc_skb+0x10/0x10 [ 2974.860502][T19546] ? genl_rcv_msg+0x4be/0x800 [ 2974.860526][T19546] netlink_ack+0x117/0xb80 [ 2974.860558][T19546] netlink_rcv_skb+0x333/0x420 [ 2974.860581][T19546] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2974.860600][T19546] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2974.860634][T19546] ? netlink_deliver_tap+0x1ae/0xcc0 [ 2974.860660][T19546] genl_rcv+0x28/0x40 [ 2974.860674][T19546] netlink_unicast+0x5aa/0x870 [ 2974.860701][T19546] ? __pfx_netlink_unicast+0x10/0x10 [ 2974.860734][T19546] netlink_sendmsg+0x8b0/0xda0 [ 2974.860763][T19546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2974.860790][T19546] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 2974.860816][T19546] ____sys_sendmsg+0xa54/0xc30 [ 2974.860836][T19546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2974.860865][T19546] ___sys_sendmsg+0x190/0x1e0 [ 2974.860886][T19546] ? __pfx____sys_sendmsg+0x10/0x10 [ 2974.860935][T19546] __sys_sendmsg+0x170/0x220 [ 2974.860959][T19546] ? __pfx___sys_sendmsg+0x10/0x10 [ 2974.860991][T19546] ? __pfx_ksys_write+0x10/0x10 [ 2974.861018][T19546] __do_fast_syscall_32+0xe3/0x8c0 [ 2974.861046][T19546] do_fast_syscall_32+0x32/0x70 [ 2974.861071][T19546] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2974.861091][T19546] RIP: 0023:0xf6fdef6c [ 2974.861107][T19546] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2974.861124][T19546] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 2974.861141][T19546] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 2974.861152][T19546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2974.861162][T19546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2974.861171][T19546] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2974.861182][T19546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2974.861206][T19546] [ 2974.940995][T19553] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12177'. [ 2975.011938][T19553] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12177'. [ 2975.201863][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2975.371855][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2976.068253][T19567] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 2976.071067][T19567] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2976.093299][T19567] vhci_hcd vhci_hcd.0: Device attached [ 2976.372601][T30365] usb 56-1: SetAddress Request (84) to port 0 [ 2976.380434][T30365] usb 56-1: new SuperSpeed USB device number 84 using vhci_hcd [ 2977.571931][T13172] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 2977.711878][T13172] usb 11-1: device descriptor read/64, error -71 [ 2977.951932][T13172] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 2978.092001][T13172] usb 11-1: device descriptor read/64, error -71 [ 2978.194879][T19591] binder: BINDER_SET_CONTEXT_MGR already set [ 2978.197399][T19591] binder: 19590:19591 ioctl 4018620d 80000100 returned -16 [ 2978.212323][T19591] binder: 19590:19591 ioctl 4018620d 0 returned -22 [ 2978.212417][T13172] usb usb11-port1: attempt power cycle [ 2978.268827][T19593] binder: BINDER_SET_CONTEXT_MGR already set [ 2978.271405][T19593] binder: 19592:19593 ioctl 4018620d 80000100 returned -16 [ 2978.277553][T19593] binder: BINDER_SET_CONTEXT_MGR already set [ 2978.280161][T19593] binder: 19592:19593 ioctl 4018620d 800002c0 returned -16 [ 2978.325660][T19577] vhci_hcd: connection reset by peer [ 2978.328500][T12789] vhci_hcd vhci_hcd.9: stop threads [ 2978.330871][T12789] vhci_hcd vhci_hcd.9: release socket [ 2978.331933][ C3] net_ratelimit: 10 callbacks suppressed [ 2978.331946][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2978.338269][T12789] vhci_hcd vhci_hcd.9: disconnect device [ 2978.481980][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2978.561938][T13172] usb 11-1: new high-speed USB device number 29 using dummy_hcd [ 2978.582794][T13172] usb 11-1: device descriptor read/8, error -71 [ 2978.641837][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2978.641874][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2978.645856][T13175] usb 50-1: device descriptor read/8, error -110 [ 2978.853057][T13172] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 2978.896010][T13172] usb 11-1: device descriptor read/8, error -71 [ 2978.901054][T19608] loop9: detected capacity change from 0 to 7 [ 2978.903064][T19606] netlink: 'syz.7.12195': attribute type 3 has an invalid length. [ 2978.909565][T18979] Dev loop9: unable to read RDB block 7 [ 2978.912561][T18979] loop9: unable to read partition table [ 2978.914913][T18979] loop9: partition table beyond EOD, truncated [ 2978.920354][T19608] Dev loop9: unable to read RDB block 7 [ 2978.924424][T19608] loop9: unable to read partition table [ 2978.927097][T19608] loop9: partition table beyond EOD, truncated [ 2978.930414][T19608] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 2979.017415][T13172] usb usb11-port1: unable to enumerate USB device [ 2979.043112][T13175] usb usb50-port1: attempt power cycle [ 2979.086611][T19613] binder: 19612:19613 ioctl 4018620d 0 returned -22 [ 2979.151708][ T40] audit: type=1326 audit(2979.699:11945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19616 comm="syz.9.12200" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x0 [ 2979.371977][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2979.390087][T19623] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12200'. [ 2979.522365][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2979.612883][T13175] usb usb50-port1: unable to enumerate USB device [ 2979.681868][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2979.691845][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2980.401854][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2980.517105][T19645] tipc: Enabling of bearer rejected, already enabled [ 2980.561863][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2981.441959][T30365] usb 56-1: device descriptor read/8, error -110 [ 2981.514252][T19649] binder: BINDER_SET_CONTEXT_MGR already set [ 2981.516922][T19649] binder: 19648:19649 ioctl 4018620d 80000100 returned -16 [ 2981.523051][T19649] binder: 19648:19649 ioctl 4018620d 0 returned -22 [ 2981.842918][T30365] usb usb56-port1: attempt power cycle [ 2981.976389][T19661] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12214'. [ 2982.096887][T19666] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2982.100268][T19666] overlayfs: failed to set xattr on upper [ 2982.102895][T19666] overlayfs: ...falling back to redirect_dir=nofollow. [ 2982.111999][T19666] overlayfs: ...falling back to index=off. [ 2982.117039][T19666] overlayfs: ...falling back to uuid=null. [ 2982.144173][T19667] FAULT_INJECTION: forcing a failure. [ 2982.144173][T19667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2982.149706][T19667] CPU: 2 UID: 0 PID: 19667 Comm: syz.7.12215 Tainted: G L syzkaller #0 PREEMPT(full) [ 2982.149749][T19667] Tainted: [L]=SOFTLOCKUP [ 2982.149757][T19667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2982.149768][T19667] Call Trace: [ 2982.149775][T19667] [ 2982.149785][T19667] dump_stack_lvl+0x100/0x190 [ 2982.149814][T19667] should_fail_ex.cold+0x5/0xa [ 2982.149836][T19667] _copy_from_user+0x2e/0xd0 [ 2982.149864][T19667] bpf_prog_load+0x139d/0x2c20 [ 2982.149890][T19667] ? _parse_integer_limit+0x17f/0x1d0 [ 2982.149916][T19667] ? __pfx_bpf_prog_load+0x10/0x10 [ 2982.149940][T19667] ? __lock_acquire+0x4a5/0x2630 [ 2982.149963][T19667] ? __lock_acquire+0x4a5/0x2630 [ 2982.150017][T19667] __sys_bpf+0x223a/0x4b90 [ 2982.150050][T19667] ? __pfx___sys_bpf+0x10/0x10 [ 2982.150074][T19667] ? find_held_lock+0x2b/0x80 [ 2982.150098][T19667] ? finish_task_switch.isra.0+0x200/0xb80 [ 2982.150126][T19667] ? finish_task_switch.isra.0+0x200/0xb80 [ 2982.150154][T19667] ? rcu_is_watching+0x12/0xc0 [ 2982.150177][T19667] ? finish_task_switch.isra.0+0x205/0xb80 [ 2982.150205][T19667] ? finish_task_switch.isra.0+0x2c6/0xb80 [ 2982.150233][T19667] ? rcu_is_watching+0x12/0xc0 [ 2982.150256][T19667] ? trace_sched_exit_tp+0xcd/0x100 [ 2982.150274][T19667] ? __schedule+0x1000/0x6020 [ 2982.150314][T19667] ? __pfx___schedule+0x10/0x10 [ 2982.150337][T19667] ? fput+0x79/0x100 [ 2982.150363][T19667] ? ksys_write+0x1ac/0x250 [ 2982.150389][T19667] __ia32_sys_bpf+0x79/0xf0 [ 2982.150416][T19667] ? lockdep_hardirqs_on+0x78/0x100 [ 2982.150442][T19667] __do_fast_syscall_32+0xe3/0x8c0 [ 2982.150471][T19667] do_fast_syscall_32+0x32/0x70 [ 2982.150505][T19667] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2982.150525][T19667] RIP: 0023:0xf703ef6c [ 2982.150540][T19667] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2982.150556][T19667] RSP: 002b:00000000f540c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 2982.150572][T19667] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000880 [ 2982.150581][T19667] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 2982.150591][T19667] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2982.150601][T19667] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2982.150611][T19667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2982.150634][T19667] [ 2982.292941][ T40] audit: type=1326 audit(2982.849:11946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19646 comm="syz.5.12207" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x0 [ 2982.303799][T19668] vhci_hcd vhci_hcd.0: port 0 already used [ 2982.489322][T30365] usb usb56-port1: unable to enumerate USB device [ 2982.967538][T19678] binder: 19677:19678 ioctl c0306201 0 returned -14 [ 2983.521943][ C3] net_ratelimit: 10 callbacks suppressed [ 2983.521963][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2983.541859][T30731] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 2983.592298][T19696] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2983.595330][T19696] overlayfs: failed to set xattr on upper [ 2983.597395][T19696] overlayfs: ...falling back to redirect_dir=nofollow. [ 2983.599765][T19696] overlayfs: ...falling back to index=off. [ 2983.602047][T19696] overlayfs: ...falling back to uuid=null. [ 2983.629854][T19696] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 2983.640833][T19694] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 2983.643649][T19694] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2983.681934][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2983.685593][T19700] netlink: 'syz.5.12225': attribute type 10 has an invalid length. [ 2983.693843][T30731] usb 11-1: config index 0 descriptor too short (expected 163, got 20) [ 2983.697703][T30731] usb 11-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 2983.701491][T30731] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 2983.710378][T30731] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2983.714761][T30731] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2983.725639][T30731] usb 11-1: Product: syz [ 2983.728030][T30731] usb 11-1: Manufacturer: syz [ 2983.730767][T30731] usb 11-1: SerialNumber: syz [ 2983.753424][T30731] usb 11-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 2983.770030][T19701] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 2983.773085][T19701] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2983.801224][T19701] vhci_hcd vhci_hcd.0: Device attached [ 2983.813667][T19694] vhci_hcd vhci_hcd.0: Device attached [ 2983.841834][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2983.849127][ T40] audit: type=1326 audit(2984.399:11947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19685 comm="syz.9.12222" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x0 [ 2983.858173][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2984.101904][T30365] usb 52-1: SetAddress Request (94) to port 0 [ 2984.104970][T30365] usb 52-1: new SuperSpeed USB device number 94 using vhci_hcd [ 2984.191923][T14184] usb 56-1: SetAddress Request (88) to port 0 [ 2984.195105][T14184] usb 56-1: new SuperSpeed USB device number 88 using vhci_hcd [ 2984.231435][T19702] vhci_hcd: connection reset by peer [ 2984.252233][T30628] vhci_hcd vhci_hcd.9: stop threads [ 2984.254852][T30628] vhci_hcd vhci_hcd.9: release socket [ 2984.257312][T30628] vhci_hcd vhci_hcd.9: disconnect device [ 2984.284651][T19712] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2984.292170][T19712] overlayfs: failed to set xattr on upper [ 2984.297006][T19712] overlayfs: ...falling back to redirect_dir=nofollow. [ 2984.311988][T19712] overlayfs: ...falling back to index=off. [ 2984.316333][T19712] overlayfs: ...falling back to uuid=null. [ 2984.452021][T19713] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 2984.489508][T19712] vhci_hcd vhci_hcd.0: port 0 already used [ 2984.524361][ T40] audit: type=1326 audit(2985.059:11948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19709 comm="syz.5.12228" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708ef6c code=0x0 [ 2984.571925][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2984.721836][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2984.881841][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2984.881867][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2984.989880][T19717] binder: 19716:19717 ioctl c0306201 0 returned -14 [ 2985.013743][T19695] vhci_hcd: connection reset by peer [ 2985.020029][T12789] vhci_hcd vhci_hcd.7: stop threads [ 2985.022553][T12789] vhci_hcd vhci_hcd.7: release socket [ 2985.042075][T12789] vhci_hcd vhci_hcd.7: disconnect device [ 2985.188291][T19723] 9p: Bad value for 'version' [ 2985.355019][T19729] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12235'. [ 2985.358925][T19729] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12235'. [ 2985.533976][T19734] Invalid logical block size (2304) [ 2985.600068][T19736] binder: BINDER_SET_CONTEXT_MGR already set [ 2985.601828][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2985.602615][T19736] binder: 19735:19736 ioctl 4018620d 80000100 returned -16 [ 2985.626530][T19736] binder: BINDER_SET_CONTEXT_MGR already set [ 2985.628959][T19736] binder: 19735:19736 ioctl 4018620d 800002c0 returned -16 [ 2985.636408][T19736] binder: 19735:19736 ioctl c0306201 0 returned -14 [ 2985.761825][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2986.304792][T19749] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 2986.307655][T19749] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2986.311174][T19749] vhci_hcd vhci_hcd.0: Device attached [ 2986.381818][T19750] vhci_hcd: connection closed [ 2986.404524][T12157] vhci_hcd vhci_hcd.5: stop threads [ 2986.408283][T12157] vhci_hcd vhci_hcd.5: release socket [ 2986.410110][T12157] vhci_hcd vhci_hcd.5: disconnect device [ 2986.444430][T13175] usb 11-1: USB disconnect, device number 31 [ 2987.128694][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12245'. [ 2987.434230][T19769] binder: BINDER_SET_CONTEXT_MGR already set [ 2987.436891][T19769] binder: 19768:19769 ioctl 4018620d 80000100 returned -16 [ 2987.444960][T19769] binder: BINDER_SET_CONTEXT_MGR already set [ 2987.447659][T19769] binder: 19768:19769 ioctl 4018620d 800002c0 returned -16 [ 2987.788783][T19780] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2987.833917][T19781] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2987.847878][T19781] overlayfs: failed to set xattr on upper [ 2987.850497][T19781] overlayfs: ...falling back to redirect_dir=nofollow. [ 2987.882366][T19781] overlayfs: ...falling back to index=off. [ 2987.904373][T19781] overlayfs: ...falling back to uuid=null. [ 2987.962438][T19783] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 2987.965274][T19783] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2987.981165][T19783] vhci_hcd vhci_hcd.0: Device attached [ 2988.010272][ T40] audit: type=1326 audit(2988.559:11949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19770 comm="syz.7.12248" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x0 [ 2988.455089][T19789] FAULT_INJECTION: forcing a failure. [ 2988.455089][T19789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2988.459218][T19789] CPU: 1 UID: 0 PID: 19789 Comm: syz.6.12253 Tainted: G L syzkaller #0 PREEMPT(full) [ 2988.459240][T19789] Tainted: [L]=SOFTLOCKUP [ 2988.459244][T19789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2988.459257][T19789] Call Trace: [ 2988.459261][T19789] [ 2988.459266][T19789] dump_stack_lvl+0x100/0x190 [ 2988.459286][T19789] should_fail_ex.cold+0x5/0xa [ 2988.459298][T19789] _copy_from_user+0x2e/0xd0 [ 2988.459316][T19789] move_addr_to_kernel+0x65/0x170 [ 2988.459329][T19789] get_compat_msghdr+0x3ee/0x4b0 [ 2988.459344][T19789] ? _parse_integer_limit+0x17f/0x1d0 [ 2988.459355][T19789] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2988.459371][T19789] ? _kstrtoull+0x13c/0x1f0 [ 2988.459382][T19789] ? __pfx__kstrtoull+0x10/0x10 [ 2988.459396][T19789] ___sys_sendmsg+0x1b6/0x1e0 [ 2988.459408][T19789] ? __pfx____sys_sendmsg+0x10/0x10 [ 2988.459420][T19789] ? __lock_acquire+0x4a5/0x2630 [ 2988.459437][T19789] ? find_held_lock+0x2b/0x80 [ 2988.459461][T19789] __sys_sendmmsg+0x2ff/0x430 [ 2988.459478][T19789] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2988.459498][T19789] ? __fget_files+0x215/0x3d0 [ 2988.459517][T19789] ? fput+0x79/0x100 [ 2988.459533][T19789] ? ksys_write+0x1ac/0x250 [ 2988.459546][T19789] ? __pfx_ksys_write+0x10/0x10 [ 2988.459560][T19789] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 2988.459575][T19789] ? lockdep_hardirqs_on+0x78/0x100 [ 2988.459591][T19789] __do_fast_syscall_32+0xe3/0x8c0 [ 2988.459609][T19789] do_fast_syscall_32+0x32/0x70 [ 2988.459625][T19789] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2988.459638][T19789] RIP: 0023:0xf7fa3f6c [ 2988.459648][T19789] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2988.459659][T19789] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 2988.459670][T19789] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080007340 [ 2988.459677][T19789] RDX: 0000000000000002 RSI: 0000000000008014 RDI: 0000000000000000 [ 2988.459683][T19789] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2988.459689][T19789] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 2988.459696][T19789] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2988.459710][T19789] [ 2988.540447][T19784] vhci_hcd: connection closed [ 2988.549859][T22522] vhci_hcd vhci_hcd.7: stop threads [ 2988.554876][T22522] vhci_hcd vhci_hcd.7: release socket [ 2988.557568][T22522] vhci_hcd vhci_hcd.7: disconnect device [ 2988.628893][T19794] CIFS mount error: No usable UNC path provided in device string! [ 2988.628893][T19794] [ 2988.633089][T19794] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2988.731837][ C3] net_ratelimit: 10 callbacks suppressed [ 2988.731855][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2988.750543][T19800] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2988.881896][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2989.041802][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2989.041892][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2989.202258][T30365] usb 52-1: device descriptor read/8, error -110 [ 2989.282241][T14184] usb 56-1: device descriptor read/8, error -110 [ 2989.622476][T30365] usb usb52-port1: attempt power cycle [ 2989.672382][T14184] usb usb56-port1: attempt power cycle [ 2989.761976][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2989.921878][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2990.081878][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2990.081876][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2990.182514][T30365] usb usb52-port1: unable to enumerate USB device [ 2990.372476][T14184] usb usb56-port1: unable to enumerate USB device [ 2990.801833][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2991.057397][T19857] netlink: 44 bytes leftover after parsing attributes in process `syz.6.12269'. [ 2991.083875][T19856] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12270'. [ 2991.147782][T19863] overlayfs: failed to resolve './file1/file0': -2 [ 2991.210712][T19858] loop3: detected capacity change from 0 to 7 [ 2991.255768][ C3] blk_print_req_error: 10 callbacks suppressed [ 2991.255786][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2991.262406][ C3] buffer_io_error: 10 callbacks suppressed [ 2991.262421][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 2991.271088][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2991.275294][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 2991.278796][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2991.282981][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 2991.286588][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2991.290673][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 2991.296750][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2991.300884][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 2991.312096][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2991.316177][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 2991.319657][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12271'. [ 2991.319885][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2991.327635][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 2991.331195][T18979] ldm_validate_partition_table(): Disk read failed. [ 2991.334788][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2991.338941][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 2991.343001][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2991.347015][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 2991.350646][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2991.354829][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 2991.359761][T18979] Dev loop3: unable to read RDB block 0 [ 2991.363227][T18979] loop3: unable to read partition table [ 2991.366308][T18979] loop3: partition table beyond EOD, truncated [ 2991.382747][T19858] ldm_validate_partition_table(): Disk read failed. [ 2991.397913][T19858] Dev loop3: unable to read RDB block 0 [ 2991.404285][T19858] loop3: unable to read partition table [ 2991.406211][T19858] loop3: partition table beyond EOD, truncated [ 2991.416993][T19858] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 2991.902023][T23889] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 2992.027972][T19879] FAULT_INJECTION: forcing a failure. [ 2992.027972][T19879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2992.033331][T19879] CPU: 3 UID: 0 PID: 19879 Comm: syz.6.12274 Tainted: G L syzkaller #0 PREEMPT(full) [ 2992.033358][T19879] Tainted: [L]=SOFTLOCKUP [ 2992.033363][T19879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2992.033372][T19879] Call Trace: [ 2992.033380][T19879] [ 2992.033386][T19879] dump_stack_lvl+0x100/0x190 [ 2992.033422][T19879] should_fail_ex.cold+0x5/0xa [ 2992.033442][T19879] _copy_from_user+0x2e/0xd0 [ 2992.033467][T19879] bpf_prog_load+0x139d/0x2c20 [ 2992.033490][T19879] ? _parse_integer_limit+0x17f/0x1d0 [ 2992.033513][T19879] ? __pfx_bpf_prog_load+0x10/0x10 [ 2992.033534][T19879] ? __lock_acquire+0x4a5/0x2630 [ 2992.033577][T19879] __sys_bpf+0x223a/0x4b90 [ 2992.033605][T19879] ? __pfx___sys_bpf+0x10/0x10 [ 2992.033627][T19879] ? proc_fail_nth_write+0x9f/0x220 [ 2992.033649][T19879] ? find_held_lock+0x2b/0x80 [ 2992.033676][T19879] ? find_held_lock+0x2b/0x80 [ 2992.033697][T19879] ? ksys_write+0x190/0x250 [ 2992.033721][T19879] ? __mutex_unlock_slowpath+0x15c/0x790 [ 2992.033758][T19879] ? fput+0x79/0x100 [ 2992.033780][T19879] ? ksys_write+0x1ac/0x250 [ 2992.033803][T19879] __ia32_sys_bpf+0x79/0xf0 [ 2992.033827][T19879] ? lockdep_hardirqs_on+0x78/0x100 [ 2992.033849][T19879] __do_fast_syscall_32+0xe3/0x8c0 [ 2992.033875][T19879] do_fast_syscall_32+0x32/0x70 [ 2992.033899][T19879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2992.033919][T19879] RIP: 0023:0xf7fa3f6c [ 2992.033934][T19879] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 2992.033949][T19879] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 2992.033966][T19879] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000880 [ 2992.033976][T19879] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 2992.033986][T19879] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2992.033995][T19879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2992.034004][T19879] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2992.034026][T19879] [ 2992.129605][T23889] usb 14-1: config index 0 descriptor too short (expected 23569, got 27) [ 2992.792297][T23889] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2992.851191][T23889] usb 14-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2992.855731][T23889] usb 14-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2992.859440][T23889] usb 14-1: Manufacturer: syz [ 2992.872292][T23889] usb 14-1: config 0 descriptor?? [ 2992.941879][T23889] rc_core: IR keymap rc-hauppauge not found [ 2992.944523][T23889] Registered IR keymap rc-empty [ 2992.950506][T23889] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/rc/rc0 [ 2992.966905][T23889] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/rc/rc0/input231 [ 2993.522741][T19892] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2993.551975][T19892] overlayfs: failed to set xattr on upper [ 2993.562095][T19892] overlayfs: ...falling back to redirect_dir=nofollow. [ 2993.565392][T19892] overlayfs: ...falling back to index=off. [ 2993.568137][T19892] overlayfs: ...falling back to uuid=null. [ 2993.653895][T19874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2993.657652][T19874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2993.673963][T19898] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 2993.737311][T19899] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 2993.740433][T19899] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2993.752101][T19899] vhci_hcd vhci_hcd.0: Device attached [ 2993.922124][ C3] net_ratelimit: 11 callbacks suppressed [ 2993.922140][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2994.032734][T24204] usb 50-1: SetAddress Request (102) to port 0 [ 2994.035599][T24204] usb 50-1: new SuperSpeed USB device number 102 using vhci_hcd [ 2994.081862][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2994.161356][T30689] usb 14-1: USB disconnect, device number 12 [ 2994.164524][T19900] vhci_hcd: connection reset by peer [ 2994.167188][T12789] vhci_hcd vhci_hcd.6: stop threads [ 2994.169415][T12789] vhci_hcd vhci_hcd.6: release socket [ 2994.172937][T12789] vhci_hcd vhci_hcd.6: disconnect device [ 2994.241865][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2994.241865][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2994.432276][T19909] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 2994.435169][T19909] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2994.438718][T19909] vhci_hcd vhci_hcd.0: Device attached [ 2994.446287][T19909] random: crng reseeded on system resumption [ 2994.516610][T19914] Bluetooth: MGMT ver 1.23 [ 2994.751969][T30689] usb 52-1: SetAddress Request (98) to port 0 [ 2994.754725][T30689] usb 52-1: new SuperSpeed USB device number 98 using vhci_hcd [ 2994.961970][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2995.022964][T19910] vhci_hcd: connection reset by peer [ 2995.029176][T12789] vhci_hcd vhci_hcd.7: stop threads [ 2995.031579][T12789] vhci_hcd vhci_hcd.7: release socket [ 2995.034098][T12789] vhci_hcd vhci_hcd.7: disconnect device [ 2995.131922][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2995.161889][T30731] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 2995.281995][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2995.291835][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2995.668988][T12789] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2995.855461][T19935] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2995.860462][T19935] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2996.001819][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2996.171885][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2996.233624][T30731] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2996.237441][T30731] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2996.242227][T30731] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2996.246126][T30731] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2996.250320][T30731] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2996.254045][T30731] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2996.259456][T30731] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2996.263233][T30731] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2996.266019][T30731] usb 10-1: Product: syz [ 2996.267898][T30731] usb 10-1: Manufacturer: syz [ 2996.274817][T19929] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2996.279088][T30731] cdc_wdm 10-1:1.0: skipping garbage [ 2996.280691][T30731] cdc_wdm 10-1:1.0: skipping garbage [ 2996.285688][T30731] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 2996.287703][T30731] cdc_wdm 10-1:1.0: Unknown control protocol [ 2996.494980][T19929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2996.499149][T19929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2996.505540][T19929] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2996.514617][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 2996.517076][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 2996.519461][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 2996.521878][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 2996.524342][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 2996.526814][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 2996.529056][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 2996.531232][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 2996.533856][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 2996.536246][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 2996.538620][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 2996.541188][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 2996.543550][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 2996.545783][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 2996.548120][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 2996.550393][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 2996.552674][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 2996.555445][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 2996.558221][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 2996.561097][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 2997.078647][T19939] netlink: 'syz.9.12288': attribute type 10 has an invalid length. [ 2997.083663][T19939] team0: Device vxcan1 is of different type [ 2997.101408][T22508] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2997.204259][T30731] usb 10-1: USB disconnect, device number 23 [ 2997.423574][T19935] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2997.427967][T19935] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2997.456318][T19946] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2997.459387][T19946] overlayfs: failed to set xattr on upper [ 2997.469942][T19946] overlayfs: ...falling back to redirect_dir=nofollow. [ 2997.478074][T19946] overlayfs: ...falling back to index=off. [ 2997.480622][T19946] overlayfs: ...falling back to uuid=null. [ 2997.549058][T19949] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 2997.551861][T19949] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2997.563186][T19949] vhci_hcd vhci_hcd.0: Device attached [ 2997.586728][ T40] audit: type=1326 audit(2998.139:11950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19940 comm="syz.7.12289" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x0 [ 2997.633052][T19935] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2997.637446][T19935] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2997.896121][T19935] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2997.896176][T19935] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 2998.066628][T19228] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 2998.073892][T19228] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 2998.096479][T19228] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 2998.100655][T19228] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 2998.152144][T11008] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 2998.156555][T11008] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 2998.187157][T11008] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 2998.243254][T11008] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 2998.333352][T19951] vhci_hcd: connection closed [ 2998.333966][T22508] vhci_hcd vhci_hcd.7: stop threads [ 2998.338871][T22508] vhci_hcd vhci_hcd.7: release socket [ 2998.341671][T22508] vhci_hcd vhci_hcd.7: disconnect device [ 2998.998582][T19965] overlayfs: failed to resolve './bus': -2 [ 2999.121927][ C3] net_ratelimit: 10 callbacks suppressed [ 2999.121947][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2999.142069][T19968] Invalid logical block size (3328) [ 2999.154366][T24204] usb 50-1: device descriptor read/8, error -110 [ 2999.213141][T19965] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 2999.215982][T19965] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2999.223939][T19973] netlink: 'syz.7.12298': attribute type 1 has an invalid length. [ 2999.224599][T19971] 9p: Bad value for 'wfdno' [ 2999.240679][T19965] vhci_hcd vhci_hcd.0: Device attached [ 2999.257390][T19971] netlink: 'syz.5.12297': attribute type 32 has an invalid length. [ 2999.260886][T19971] netlink: 'syz.5.12297': attribute type 32 has an invalid length. [ 2999.281808][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2999.356106][T19965] devpts: Unknown parameter 'maxile0' [ 2999.412151][T24204] usb 50-1: SetAddress Request (103) to port 0 [ 2999.414850][T24204] usb 50-1: new SuperSpeed USB device number 103 using vhci_hcd [ 2999.418339][ T40] audit: type=1326 audit(2999.959:11951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19962 comm="syz.6.12295" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3f6c code=0x0 [ 2999.441844][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 2999.441933][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3000.161951][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3000.202638][T19988] loop3: detected capacity change from 0 to 7 [ 3000.210186][ C2] blk_print_req_error: 25 callbacks suppressed [ 3000.210228][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3000.218008][ C2] buffer_io_error: 25 callbacks suppressed [ 3000.218026][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 3000.230933][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3000.235137][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 3000.244310][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3000.248130][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 3000.257598][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3000.262063][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 3000.272690][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3000.276787][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 3000.283644][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3000.287452][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 3000.291901][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3000.296039][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 3000.299397][T19988] ldm_validate_partition_table(): Disk read failed. [ 3000.313325][T30689] usb 52-1: device descriptor read/8, error -110 [ 3000.318180][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3000.322473][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 3000.327675][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3000.331788][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 3000.331873][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3000.339715][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3000.343919][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 3000.357731][T19988] Dev loop3: unable to read RDB block 0 [ 3000.385241][T19988] loop3: unable to read partition table [ 3000.388086][T19988] loop3: partition table beyond EOD, truncated [ 3000.390895][T19988] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 3000.428959][T19990] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 3000.481914][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3000.491911][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3000.551700][T19993] FAULT_INJECTION: forcing a failure. [ 3000.551700][T19993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3000.557565][T19993] CPU: 0 UID: 0 PID: 19993 Comm: syz.7.12302 Tainted: G L syzkaller #0 PREEMPT(full) [ 3000.557595][T19993] Tainted: [L]=SOFTLOCKUP [ 3000.557601][T19993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 3000.557613][T19993] Call Trace: [ 3000.557620][T19993] [ 3000.557626][T19993] dump_stack_lvl+0x100/0x190 [ 3000.557657][T19993] should_fail_ex.cold+0x5/0xa [ 3000.557678][T19993] _copy_from_user+0x2e/0xd0 [ 3000.557704][T19993] ucma_write+0x128/0x330 [ 3000.557729][T19993] ? __pfx_ucma_write+0x10/0x10 [ 3000.557748][T19993] ? bpf_lsm_file_permission+0x9/0x10 [ 3000.557768][T19993] ? security_file_permission+0x76/0x210 [ 3000.557796][T19993] ? rw_verify_area+0xce/0x6d0 [ 3000.557817][T19993] vfs_write+0x2aa/0x1070 [ 3000.557838][T19993] ? __pfx_ucma_write+0x10/0x10 [ 3000.557862][T19993] ? __pfx_vfs_write+0x10/0x10 [ 3000.557878][T19993] ? find_held_lock+0x2b/0x80 [ 3000.557901][T19993] ? __fget_files+0x215/0x3d0 [ 3000.557922][T19993] ? __fget_files+0x215/0x3d0 [ 3000.557946][T19993] ? __fget_files+0x21f/0x3d0 [ 3000.557974][T19993] ksys_write+0x1f8/0x250 [ 3000.557991][T19993] ? __pfx_ksys_write+0x10/0x10 [ 3000.558011][T19993] ? __pfx_ksys_write+0x10/0x10 [ 3000.558037][T19993] __do_fast_syscall_32+0xe3/0x8c0 [ 3000.558066][T19993] do_fast_syscall_32+0x32/0x70 [ 3000.558097][T19993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3000.558115][T19993] RIP: 0023:0xf703ef6c [ 3000.558129][T19993] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 3000.558146][T19993] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 3000.558164][T19993] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 3000.558175][T19993] RDX: 0000000000000118 RSI: 0000000000000000 RDI: 0000000000000000 [ 3000.558185][T19993] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3000.558196][T19993] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 3000.558206][T19993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3000.558227][T19993] [ 3000.656928][T19974] vhci_hcd: connection reset by peer [ 3000.659412][T12157] vhci_hcd vhci_hcd.6: stop threads [ 3000.661600][T12157] vhci_hcd vhci_hcd.6: release socket [ 3000.664415][T12157] vhci_hcd vhci_hcd.6: disconnect device [ 3000.708541][T20000] tipc: Enabling of bearer rejected, already enabled [ 3000.712938][T30689] usb usb52-port1: attempt power cycle [ 3000.952593][T20005] binder: 20004:20005 ioctl c0306201 0 returned -14 [ 3001.202080][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3001.336655][T30689] usb usb52-port1: unable to enumerate USB device [ 3001.445603][T20023] netlink: 'syz.5.12310': attribute type 1 has an invalid length. [ 3001.493601][T20024] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 3001.496726][T20024] overlayfs: failed to set xattr on upper [ 3001.499039][T20024] overlayfs: ...falling back to redirect_dir=nofollow. [ 3001.501624][T20024] overlayfs: ...falling back to index=off. [ 3001.512427][T20024] overlayfs: ...falling back to uuid=null. [ 3001.554145][T20026] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 3001.557019][T20026] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3001.563672][T20026] vhci_hcd vhci_hcd.0: Device attached [ 3001.579495][ T40] audit: type=1326 audit(3002.129:11952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20010 comm="syz.7.12312" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x0 [ 3001.592274][T20022] tipc: Enabling of bearer rejected, already enabled [ 3001.607333][T22522] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3001.614941][T20023] 8021q: adding VLAN 0 to HW filter on device bond2 [ 3001.805403][T20037] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12319'. [ 3001.820049][T20037] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12319'. [ 3001.831881][T20158] usb 52-1: SetAddress Request (102) to port 0 [ 3001.834590][T20158] usb 52-1: new SuperSpeed USB device number 102 using vhci_hcd [ 3002.096975][T20027] vhci_hcd: connection reset by peer [ 3002.099189][T19228] vhci_hcd vhci_hcd.7: stop threads [ 3002.104392][T19228] vhci_hcd vhci_hcd.7: release socket [ 3002.106949][T19228] vhci_hcd vhci_hcd.7: disconnect device [ 3002.231418][ T40] audit: type=1326 audit(3002.779:11953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20042 comm="syz.9.12322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3002.232554][T20045] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 3002.239295][ T40] audit: type=1326 audit(3002.779:11954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20042 comm="syz.9.12322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3002.243297][T20045] overlayfs: failed to set xattr on upper [ 3002.250072][ T40] audit: type=1326 audit(3002.789:11955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20042 comm="syz.9.12322" exe="/syz-executor" sig=0 arch=40000003 syscall=293 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3002.262699][ T40] audit: type=1326 audit(3002.789:11956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20042 comm="syz.9.12322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3002.264474][T20045] overlayfs: ...falling back to redirect_dir=nofollow. [ 3002.274829][ T40] audit: type=1326 audit(3002.789:11957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20042 comm="syz.9.12322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3002.285711][ T40] audit: type=1326 audit(3002.799:11958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20042 comm="syz.9.12322" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3002.294849][ T40] audit: type=1326 audit(3002.799:11959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20042 comm="syz.9.12322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x7ffc0000 [ 3002.294957][T20045] overlayfs: ...falling back to index=off. [ 3002.311641][T20045] overlayfs: ...falling back to uuid=null. [ 3002.360526][T20050] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 3002.398127][T20052] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12323'. [ 3002.523456][T20045] vhci_hcd vhci_hcd.0: port 0 already used [ 3002.891622][T20058] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12325'. [ 3002.897787][T20058] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12325'. [ 3002.983202][T20060] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12326'. [ 3002.986247][T20060] netlink: 'syz.7.12326': attribute type 7 has an invalid length. [ 3002.991376][T20060] netlink: 'syz.7.12326': attribute type 8 has an invalid length. [ 3002.995397][T20060] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12326'. [ 3003.006376][T20060] bond0: entered promiscuous mode [ 3003.008347][T20060] bond_slave_0: entered promiscuous mode [ 3003.010893][T20060] bond_slave_1: entered promiscuous mode [ 3003.013390][T20060] syz_tun: entered promiscuous mode [ 3003.017458][T20060] bond0: left promiscuous mode [ 3003.056243][T20060] bond_slave_0: left promiscuous mode [ 3003.057923][T20060] bond_slave_1: left promiscuous mode [ 3003.059607][T20060] syz_tun: left promiscuous mode [ 3003.457619][T20064] loop3: detected capacity change from 0 to 7 [ 3003.499337][T20064] ldm_validate_partition_table(): Disk read failed. [ 3003.526479][T20064] Dev loop3: unable to read RDB block 0 [ 3003.538287][T20064] loop3: unable to read partition table [ 3003.541828][T20064] loop3: partition table beyond EOD, truncated [ 3003.544558][T20064] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 3004.321836][ C3] net_ratelimit: 11 callbacks suppressed [ 3004.321855][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3004.481839][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3004.534244][T24204] usb 50-1: device descriptor read/8, error -110 [ 3004.598387][T20089] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12337'. [ 3004.641820][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3004.643859][T24204] usb usb50-port1: attempt power cycle [ 3004.651851][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3004.685108][T20091] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 3004.687466][T20091] overlayfs: failed to set xattr on upper [ 3004.689403][T20091] overlayfs: ...falling back to redirect_dir=nofollow. [ 3004.691687][T20091] overlayfs: ...falling back to index=off. [ 3004.693685][T20091] overlayfs: ...falling back to uuid=null. [ 3004.746764][T20093] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3004.752469][T20091] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 3004.755185][T20091] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3004.758696][T20091] vhci_hcd vhci_hcd.0: Device attached [ 3004.780840][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 3004.780857][ T40] audit: type=1326 audit(3005.329:11992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20084 comm="syz.7.12336" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x0 [ 3005.006906][T20100] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12341'. [ 3005.033340][T20102] tipc: Enabled bearer , priority 10 [ 3005.208195][T20110] netlink: 'syz.9.12345': attribute type 1 has an invalid length. [ 3005.222835][T24204] usb usb50-port1: unable to enumerate USB device [ 3005.337723][T20117] bond3: (slave geneve0): making interface the new active one [ 3005.341632][T20117] bond3: (slave geneve0): Enslaving as an active interface with an up link [ 3005.361925][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3005.373025][T20095] vhci_hcd: connection closed [ 3005.373366][T19228] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 3005.381940][T19228] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 3005.382294][T11008] vhci_hcd vhci_hcd.7: stop threads [ 3005.385760][T19228] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 3005.388195][T11008] vhci_hcd vhci_hcd.7: release socket [ 3005.388244][T11008] vhci_hcd vhci_hcd.7: disconnect device [ 3005.410561][T19228] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 3005.531915][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3005.681863][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3005.681931][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3006.210791][T20138] FAULT_INJECTION: forcing a failure. [ 3006.210791][T20138] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3006.216421][T20138] CPU: 3 UID: 0 PID: 20138 Comm: syz.5.12352 Tainted: G L syzkaller #0 PREEMPT(full) [ 3006.216447][T20138] Tainted: [L]=SOFTLOCKUP [ 3006.216453][T20138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 3006.216463][T20138] Call Trace: [ 3006.216469][T20138] [ 3006.216476][T20138] dump_stack_lvl+0x100/0x190 [ 3006.216504][T20138] should_fail_ex.cold+0x5/0xa [ 3006.216520][T20138] ? prepare_alloc_pages+0x16d/0x5f0 [ 3006.216544][T20138] should_fail_alloc_page+0xeb/0x140 [ 3006.216566][T20138] prepare_alloc_pages+0x1f0/0x5f0 [ 3006.216609][T20138] __alloc_frozen_pages_noprof+0x19a/0x2ae0 [ 3006.216632][T20138] ? rcu_is_watching+0x12/0xc0 [ 3006.216656][T20138] ? trace_mm_page_alloc+0x10e/0x160 [ 3006.216680][T20138] ? __alloc_frozen_pages_noprof+0x2b3/0x2ae0 [ 3006.216702][T20138] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 3006.216724][T20138] ? find_held_lock+0x2b/0x80 [ 3006.216745][T20138] ? is_bpf_text_address+0x8a/0x1a0 [ 3006.216765][T20138] ? is_bpf_text_address+0x8a/0x1a0 [ 3006.216785][T20138] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3006.216808][T20138] ? is_bpf_text_address+0x94/0x1a0 [ 3006.216827][T20138] ? kernel_text_address+0x8d/0x100 [ 3006.216848][T20138] ? __kernel_text_address+0xd/0x30 [ 3006.216867][T20138] ? unwind_get_return_address+0x59/0xa0 [ 3006.216901][T20138] alloc_pages_bulk_noprof+0x782/0x1490 [ 3006.216929][T20138] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 3006.216949][T20138] ? kasan_save_stack+0x30/0x50 [ 3006.216974][T20138] ? alloc_pages_noprof+0x233/0x390 [ 3006.216998][T20138] __kasan_populate_vmalloc+0xf0/0x210 [ 3006.217021][T20138] alloc_vmap_area+0x986/0x2b80 [ 3006.217058][T20138] ? __pfx_alloc_vmap_area+0x10/0x10 [ 3006.217085][T20138] __get_vm_area_node+0x1ca/0x330 [ 3006.217111][T20138] __vmalloc_node_range_noprof+0x213/0x1530 [ 3006.217135][T20138] ? bpf_check+0x1c5/0xcc80 [ 3006.217154][T20138] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3006.217181][T20138] ? bpf_check+0x1c5/0xcc80 [ 3006.217202][T20138] ? find_held_lock+0x2b/0x80 [ 3006.217222][T20138] ? rcu_read_unlock+0x17/0x60 [ 3006.217246][T20138] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 3006.217277][T20138] ? rcu_is_watching+0x12/0xc0 [ 3006.217298][T20138] ? bpf_check+0x1c5/0xcc80 [ 3006.217316][T20138] __vmalloc_node_noprof+0xad/0xf0 [ 3006.217339][T20138] ? bpf_check+0x1c5/0xcc80 [ 3006.217360][T20138] bpf_check+0x1c5/0xcc80 [ 3006.217380][T20138] ? __lock_acquire+0x4a5/0x2630 [ 3006.217399][T20138] ? css_rstat_updated+0x1ce/0x5a0 [ 3006.217430][T20138] ? __lock_acquire+0x4a5/0x2630 [ 3006.217453][T20138] ? __pfx_bpf_check+0x10/0x10 [ 3006.217476][T20138] ? find_held_lock+0x2b/0x80 [ 3006.217496][T20138] ? bpf_prog_load+0x1b83/0x2c20 [ 3006.217517][T20138] ? bpf_prog_load+0x1b83/0x2c20 [ 3006.217538][T20138] ? rcu_is_watching+0x12/0xc0 [ 3006.217559][T20138] ? __asan_memset+0x23/0x50 [ 3006.217574][T20138] ? lsm_blob_alloc+0x2b/0x90 [ 3006.217596][T20138] ? bpf_prog_load+0x1c86/0x2c20 [ 3006.217618][T20138] bpf_prog_load+0x1c86/0x2c20 [ 3006.217640][T20138] ? _parse_integer_limit+0x17f/0x1d0 [ 3006.217665][T20138] ? __pfx_bpf_prog_load+0x10/0x10 [ 3006.217686][T20138] ? __lock_acquire+0x4a5/0x2630 [ 3006.217726][T20138] __sys_bpf+0x223a/0x4b90 [ 3006.217753][T20138] ? __pfx___sys_bpf+0x10/0x10 [ 3006.217775][T20138] ? proc_fail_nth_write+0x9f/0x220 [ 3006.217796][T20138] ? find_held_lock+0x2b/0x80 [ 3006.217822][T20138] ? find_held_lock+0x2b/0x80 [ 3006.217843][T20138] ? ksys_write+0x190/0x250 [ 3006.217867][T20138] ? __mutex_unlock_slowpath+0x15c/0x790 [ 3006.217905][T20138] ? fput+0x79/0x100 [ 3006.217927][T20138] ? ksys_write+0x1ac/0x250 [ 3006.217952][T20138] __ia32_sys_bpf+0x79/0xf0 [ 3006.217978][T20138] ? lockdep_hardirqs_on+0x78/0x100 [ 3006.217999][T20138] __do_fast_syscall_32+0xe3/0x8c0 [ 3006.218024][T20138] do_fast_syscall_32+0x32/0x70 [ 3006.218050][T20138] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3006.218070][T20138] RIP: 0023:0xf708ef6c [ 3006.218084][T20138] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 3006.218099][T20138] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 3006.218115][T20138] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000880 [ 3006.218125][T20138] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 3006.218134][T20138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3006.218144][T20138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3006.218153][T20138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3006.218174][T20138] [ 3006.218234][T20138] syz.5.12352: vmalloc error: size 864, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 3006.402061][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3006.421412][T20138] CPU: 0 UID: 0 PID: 20138 Comm: syz.5.12352 Tainted: G L syzkaller #0 PREEMPT(full) [ 3006.421454][T20138] Tainted: [L]=SOFTLOCKUP [ 3006.421460][T20138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 3006.421471][T20138] Call Trace: [ 3006.421477][T20138] [ 3006.421485][T20138] dump_stack_lvl+0x100/0x190 [ 3006.421513][T20138] warn_alloc.cold+0x95/0x1c1 [ 3006.421541][T20138] ? __pfx_warn_alloc+0x10/0x10 [ 3006.421558][T20138] ? lockdep_hardirqs_on+0x78/0x100 [ 3006.421592][T20138] ? __get_vm_area_node+0x2c5/0x330 [ 3006.421611][T20138] ? __get_vm_area_node+0x208/0x330 [ 3006.421629][T20138] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 3006.421645][T20138] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3006.421663][T20138] ? bpf_check+0x1c5/0xcc80 [ 3006.421678][T20138] ? find_held_lock+0x2b/0x80 [ 3006.421693][T20138] ? rcu_read_unlock+0x17/0x60 [ 3006.421709][T20138] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 3006.421731][T20138] ? rcu_is_watching+0x12/0xc0 [ 3006.421746][T20138] ? bpf_check+0x1c5/0xcc80 [ 3006.421758][T20138] __vmalloc_node_noprof+0xad/0xf0 [ 3006.421774][T20138] ? bpf_check+0x1c5/0xcc80 [ 3006.421788][T20138] bpf_check+0x1c5/0xcc80 [ 3006.421802][T20138] ? __lock_acquire+0x4a5/0x2630 [ 3006.421813][T20138] ? css_rstat_updated+0x1ce/0x5a0 [ 3006.421832][T20138] ? __lock_acquire+0x4a5/0x2630 [ 3006.421846][T20138] ? __pfx_bpf_check+0x10/0x10 [ 3006.421862][T20138] ? find_held_lock+0x2b/0x80 [ 3006.421876][T20138] ? bpf_prog_load+0x1b83/0x2c20 [ 3006.421891][T20138] ? bpf_prog_load+0x1b83/0x2c20 [ 3006.421906][T20138] ? rcu_is_watching+0x12/0xc0 [ 3006.421920][T20138] ? __asan_memset+0x23/0x50 [ 3006.421931][T20138] ? lsm_blob_alloc+0x2b/0x90 [ 3006.421944][T20138] ? bpf_prog_load+0x1c86/0x2c20 [ 3006.421959][T20138] bpf_prog_load+0x1c86/0x2c20 [ 3006.421973][T20138] ? _parse_integer_limit+0x17f/0x1d0 [ 3006.421988][T20138] ? __pfx_bpf_prog_load+0x10/0x10 [ 3006.422006][T20138] ? __lock_acquire+0x4a5/0x2630 [ 3006.422033][T20138] __sys_bpf+0x223a/0x4b90 [ 3006.422050][T20138] ? __pfx___sys_bpf+0x10/0x10 [ 3006.422066][T20138] ? proc_fail_nth_write+0x9f/0x220 [ 3006.422081][T20138] ? find_held_lock+0x2b/0x80 [ 3006.422098][T20138] ? find_held_lock+0x2b/0x80 [ 3006.422113][T20138] ? ksys_write+0x190/0x250 [ 3006.422129][T20138] ? __mutex_unlock_slowpath+0x15c/0x790 [ 3006.422161][T20138] ? fput+0x79/0x100 [ 3006.422182][T20138] ? ksys_write+0x1ac/0x250 [ 3006.422203][T20138] __ia32_sys_bpf+0x79/0xf0 [ 3006.422219][T20138] ? lockdep_hardirqs_on+0x78/0x100 [ 3006.422234][T20138] __do_fast_syscall_32+0xe3/0x8c0 [ 3006.422254][T20138] do_fast_syscall_32+0x32/0x70 [ 3006.422270][T20138] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3006.422284][T20138] RIP: 0023:0xf708ef6c [ 3006.422293][T20138] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 3006.422304][T20138] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 3006.422316][T20138] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000880 [ 3006.422323][T20138] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 3006.422329][T20138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3006.422335][T20138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3006.422342][T20138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3006.422355][T20138] [ 3006.474382][T20141] binder: BINDER_SET_CONTEXT_MGR already set [ 3006.475634][T20138] Mem-Info: [ 3006.482526][T20141] binder: 20140:20141 ioctl 4018620d 80000100 returned -16 [ 3006.483270][T20138] active_anon:216 inactive_anon:2187 isolated_anon:0 [ 3006.483270][T20138] active_file:1615 inactive_file:3568 isolated_file:0 [ 3006.483270][T20138] unevictable:1743 dirty:70 writeback:0 [ 3006.483270][T20138] slab_reclaimable:9023 slab_unreclaimable:76721 [ 3006.483270][T20138] mapped:22095 shmem:1790 pagetables:2099 [ 3006.483270][T20138] sec_pagetables:348 bounce:0 [ 3006.483270][T20138] kernel_misc_reclaimable:0 [ 3006.483270][T20138] free:63525 free_pcp:7066 free_cma:0 [ 3006.498822][T20141] binder: BINDER_SET_CONTEXT_MGR already set [ 3006.500168][T20138] Node 0 active_anon:0kB inactive_anon:84kB active_file:100kB inactive_file:1044kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:348kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6980kB pagetables:1132kB sec_pagetables:1176kB all_unreclaimable? yes Balloon:0kB [ 3006.510976][T20141] binder: 20140:20141 ioctl 4018620d 800002c0 returned -16 [ 3006.513560][T20138] Node 1 active_anon:864kB inactive_anon:8664kB active_file:6360kB inactive_file:13328kB unevictable:3436kB isolated(anon):0kB isolated(file):0kB mapped:88232kB dirty:280kB writeback:0kB shmem:3624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9644kB pagetables:7164kB sec_pagetables:216kB all_unreclaimable? no Balloon:0kB [ 3006.625389][T20138] Node 0 DMA free:2636kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3006.638162][T20138] lowmem_reserve[]: 0 286 286 286 286 [ 3006.640658][T20138] Node 0 DMA32 free:43200kB boost:29448kB min:42536kB low:45808kB high:49080kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:0kB inactive_anon:84kB active_file:100kB inactive_file:1044kB unevictable:3536kB writepending:0kB zspages:404kB present:1032196kB managed:293804kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 3006.655109][T20138] lowmem_reserve[]: 0 0 0 0 0 [ 3006.657296][T20138] Node 1 DMA32 free:203920kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1184kB inactive_anon:8420kB active_file:6292kB inactive_file:13232kB unevictable:3536kB writepending:284kB zspages:6920kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:33612kB local_pcp:1076kB free_cma:0kB [ 3006.670191][T20138] lowmem_reserve[]: 0 0 0 0 0 [ 3006.672323][T20138] Node 0 DMA: 33*4kB (U) 25*8kB (UM) 10*16kB (UM) 13*32kB (UM) 1*64kB (M) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2636kB [ 3006.678224][T20138] Node 0 DMA32: 1226*4kB (UME) 631*8kB (UME) 246*16kB (UM) 286*32kB (UME) 109*64kB (UME) 45*128kB (UME) 15*256kB (UM) 5*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 43200kB [ 3006.685636][T20138] Node 1 DMA32: 4750*4kB (UME) 5778*8kB (UME) 5522*16kB (UME) 389*32kB (UME) 177*64kB (UME) 183*128kB (UME) 10*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 203336kB [ 3006.692807][T20138] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3006.696899][T20138] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3006.701142][T20138] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3006.705493][T20138] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 3006.709403][T20138] 8974 total pagecache pages [ 3006.711249][T20138] 1973 pages in swap cache [ 3006.713666][T20138] Free swap = 86968kB [ 3006.715471][T20138] Total swap = 124996kB [ 3006.717242][T20138] 524155 pages RAM [ 3006.718852][T20138] 0 pages HighMem/MovableOnly [ 3006.720984][T20138] 209811 pages reserved [ 3006.723687][T20138] 0 pages cma reserved [ 3006.882410][T20156] tipc: Enabling of bearer rejected, already enabled [ 3006.885945][T20158] usb 52-1: device descriptor read/8, error -110 [ 3007.000609][T20165] netlink: 'syz.7.12362': attribute type 10 has an invalid length. [ 3007.007076][T20165] team0: Device vxcan1 is of different type [ 3007.180362][T20160] netlink: 'syz.5.12360': attribute type 4 has an invalid length. [ 3007.184878][T20160] netlink: 'syz.5.12360': attribute type 4 has an invalid length. [ 3007.226872][T20160] syz.5.12360 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 3007.273212][T20158] usb usb52-port1: attempt power cycle [ 3007.722763][T20187] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 3007.726184][T20187] overlayfs: failed to set xattr on upper [ 3007.749544][T20187] overlayfs: ...falling back to redirect_dir=nofollow. [ 3007.760418][T20187] overlayfs: ...falling back to index=off. [ 3007.811250][T20187] overlayfs: ...falling back to uuid=null. [ 3007.842765][T20158] usb usb52-port1: unable to enumerate USB device [ 3007.882646][T20188] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 3007.885421][T20188] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3007.903124][T20188] vhci_hcd vhci_hcd.0: Device attached [ 3008.064034][ T40] audit: type=1326 audit(3008.619:11993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20183 comm="syz.9.12368" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x0 [ 3008.181896][T11221] usb 56-1: SetAddress Request (92) to port 0 [ 3008.184593][T11221] usb 56-1: new SuperSpeed USB device number 92 using vhci_hcd [ 3008.428560][T20189] vhci_hcd: connection reset by peer [ 3008.477604][T20199] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12371'. [ 3008.481822][T20199] netlink: 'syz.7.12371': attribute type 7 has an invalid length. [ 3008.487579][T20199] netlink: 'syz.7.12371': attribute type 8 has an invalid length. [ 3008.490880][T20199] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12371'. [ 3008.570181][T12789] vhci_hcd vhci_hcd.9: stop threads [ 3008.575758][T12789] vhci_hcd vhci_hcd.9: release socket [ 3008.581711][T12789] vhci_hcd vhci_hcd.9: disconnect device [ 3009.092365][T20208] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 3009.095496][T20208] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3009.107833][T20208] vhci_hcd vhci_hcd.0: Device attached [ 3009.308005][T20208] random: crng reseeded on system resumption [ 3009.381928][T12892] usb 52-1: SetAddress Request (106) to port 0 [ 3009.384690][T12892] usb 52-1: new SuperSpeed USB device number 106 using vhci_hcd [ 3009.453243][T20215] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 3009.456747][T20215] overlayfs: failed to set xattr on upper [ 3009.459223][T20215] overlayfs: ...falling back to redirect_dir=nofollow. [ 3009.462448][T20215] overlayfs: ...falling back to index=off. [ 3009.465233][T20215] overlayfs: ...falling back to uuid=null. [ 3009.531886][ C3] net_ratelimit: 11 callbacks suppressed [ 3009.531905][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3009.541898][T20216] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 3009.593622][T20215] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 3009.595923][T20215] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 3009.613010][T20215] vhci_hcd vhci_hcd.0: Device attached [ 3009.641880][ T40] audit: type=1326 audit(3010.179:11994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20211 comm="syz.9.12373" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdef6c code=0x0 [ 3009.691854][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3009.775671][T20208] EXT4-fs (sr0): unable to read superblock [ 3009.851842][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3009.852052][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3010.182341][T20217] vhci_hcd: connection closed [ 3010.189067][T12789] vhci_hcd vhci_hcd.9: stop threads [ 3010.199926][T12789] vhci_hcd vhci_hcd.9: release socket [ 3010.202740][T12789] vhci_hcd vhci_hcd.9: disconnect device [ 3010.537405][T20209] vhci_hcd: connection reset by peer [ 3010.542648][T19228] vhci_hcd vhci_hcd.7: stop threads [ 3010.544669][T19228] vhci_hcd vhci_hcd.7: release socket [ 3010.546749][T19228] vhci_hcd vhci_hcd.7: disconnect device [ 3010.561865][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3010.721832][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3010.881813][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3010.882018][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3011.251025][T20234] tipc: Enabling of bearer rejected, already enabled [ 3011.251289][T20235] netlink: 'syz.5.12379': attribute type 3 has an invalid length. [ 3011.474370][T20240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12377'. [ 3011.601993][ C3] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3011.605854][T20251] loop3: detected capacity change from 0 to 7 [ 3011.615298][ C2] blk_print_req_error: 30 callbacks suppressed [ 3011.615315][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3011.621378][ C2] buffer_io_error: 30 callbacks suppressed [ 3011.621395][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 3011.627489][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3011.631415][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 3011.636204][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3011.640257][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 3011.644242][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3011.647974][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 3011.651838][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3011.655107][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 3011.658666][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3011.661784][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 3011.664907][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3011.668895][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 3011.672447][T20251] ldm_validate_partition_table(): Disk read failed. [ 3011.676636][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3011.680834][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 3011.723171][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3011.726302][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 3011.730054][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 3011.733517][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 3011.738378][T20251] Dev loop3: unable to read RDB block 0 [ 3011.742117][T20251] loop3: unable to read partition table [ 3011.745613][T20251] loop3: partition table beyond EOD, truncated [ 3011.748507][T20251] loop_reread_partitions: partition scan of loop3 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 3011.761822][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 3011.822762][T17219] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 3012.731826][T17219] usb 10-1: Using ep0 maxpacket: 16 [ 3012.742940][T17219] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3012.747593][T17219] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3012.751371][T17219] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3012.756733][T17219] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 3012.760488][T17219] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3012.777042][T17219] usb 10-1: config 0 descriptor?? [ 3013.197991][T17219] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 3013.201682][T17219] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 3013.204819][T17219] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 3013.207766][T17219] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 3013.210712][T17219] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 3013.220781][T17219] input: HID 0955:7214 Haptics as /devices/virtual/input/input233 [ 3013.249958][T17219] shield 0003:0955:7214.0011: Registered Thunderstrike controller [ 3013.257607][T17219] shield 0003:0955:7214.0011: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 3013.292423][T11221] usb 56-1: device descriptor read/8, error -110 [ 3013.309879][T20262] netlink: 'syz.9.12389': attribute type 1 has an invalid length. [ 3013.402926][T20250] random: crng reseeded on system resumption [ 3013.413207][T15144] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 3013.413553][T13077] usb 10-1: USB disconnect, device number 24 [ 3013.417268][T15144] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 3013.435375][T15144] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 3013.450105][T15144] shield 0003:0955:7214.0011: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 3013.452740][T13077] ------------[ cut here ]------------ [ 3013.457052][T13077] workqueue: work disable count underflowed [ 3013.460037][T13077] WARNING: kernel/workqueue.c:4409 at enable_work+0x2d1/0x320, CPU#1: kworker/1:4/13077 [ 3013.463777][T13077] Modules linked in: [ 3013.466495][T13077] CPU: 1 UID: 0 PID: 13077 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 3013.470717][T13077] Tainted: [L]=SOFTLOCKUP [ 3013.472352][T13077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 3013.476104][T13077] Workqueue: usb_hub_wq hub_event [ 3013.478024][T13077] RIP: 0010:enable_work+0x2d1/0x320 [ 3013.479865][T13077] Code: ff e8 43 16 38 00 e8 de 7d af 09 e9 61 ff ff ff e8 34 16 38 00 90 0f 0b 90 e9 17 fe ff ff e8 26 16 38 00 48 8d 3d ff 95 0d 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 ba c5 a2 00 e9 [ 3013.486632][T13077] RSP: 0018:ffffc90003ebf3b8 EFLAGS: 00010087 [ 3013.488391][T13077] RAX: 000000000002cd03 RBX: 0000000000000000 RCX: ffffc90030841000 [ 3013.490808][T13077] RDX: 0000000000100000 RSI: ffffffff81ce5c3a RDI: ffffffff90dbf240 [ 3013.493437][T13077] RBP: ffff88806f793738 R08: 0000000000000007 R09: 0000000000000000 [ 3013.495946][T13077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3013.498933][T13077] R13: 1ffff920007d7e78 R14: ffff88806f793698 R15: 000000007fffffff [ 3013.501970][T13077] FS: 0000000000000000(0000) GS:ffff888097292000(0000) knlGS:0000000000000000 [ 3013.505390][T13077] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3013.507939][T13077] CR2: 0000000032006ff8 CR3: 00000000289cc000 CR4: 0000000000352ef0 SYZFAIL: failed to recv rpc [ 3013.510876][T13077] Call Trace: fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3013.512345][T13077] [ 3013.513535][T13077] ? __pfx_enable_work+0x10/0x10 [ 3013.515248][T13077] ? __pfx___might_resched+0x10/0x10 [ 3013.517002][T13077] cancel_delayed_work_sync+0x96/0xf0 [ 3013.518804][T13077] thermal_zone_device_unregister+0x28e/0x4e0 [ 3013.520839][T13077] ? __pfx_shield_remove+0x10/0x10 [ 3013.522556][T13077] power_supply_unregister+0x10a/0x150 [ 3013.524408][T13077] shield_remove+0x75/0x130 [ 3013.525967][T13077] ? __pfx_shield_remove+0x10/0x10 [ 3013.528103][T13077] hid_device_remove+0xd1/0x270 [ 3013.530273][T13077] ? __pfx_hid_device_remove+0x10/0x10 [ 3013.532282][T13077] device_remove+0xcb/0x180 [ 3013.534021][T13077] device_release_driver_internal+0x42e/0x600 [ 3013.536226][T13077] bus_remove_device+0x22f/0x440 [ 3013.538009][T13077] device_del+0x376/0x9b0 [ 3013.539683][T13077] ? __pfx_device_del+0x10/0x10 [ 3013.541588][T13077] ? do_raw_spin_lock+0x128/0x260 [ 3013.543555][T13077] hid_destroy_device+0x19c/0x240 [ 3013.545554][T13077] usbhid_disconnect+0xa0/0xe0 [ 3013.547432][T13077] usb_unbind_interface+0x1dd/0x9e0 [ 3013.549483][T13077] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 3013.551536][T13077] ? __pfx_usb_unbind_interface+0x10/0x10 [ 3013.554016][T13077] device_remove+0x12a/0x180 [ 3013.556281][T13077] device_release_driver_internal+0x42e/0x600 [ 3013.559241][T13077] bus_remove_device+0x22f/0x440 [ 3013.561661][T13077] device_del+0x376/0x9b0 [ 3013.563758][T13077] ? __pfx_device_del+0x10/0x10 [ 3013.565977][T13077] ? kobject_put+0xb9/0x640 [ 3013.567752][T13077] usb_disable_device+0x367/0x810 [ 3013.569679][T13077] usb_disconnect+0x2e2/0x9a0 [ 3013.571553][T13077] hub_event+0x1d0c/0x4af0 [ 3013.573289][T13077] ? __lock_acquire+0x4a5/0x2630 [ 3013.575209][T13077] ? do_raw_spin_unlock+0x145/0x1e0 [ 3013.577218][T13077] ? __pfx_hub_event+0x10/0x10 [ 3013.579085][T13077] ? assoc_array_insert+0xfb0/0x32c0 [ 3013.581184][T13077] ? finish_task_switch.isra.0+0x200/0xb80 [ 3013.583650][T13077] ? process_one_work+0x80b/0x1840 [ 3013.592303][T13077] ? rcu_is_watching+0x12/0xc0 [ 3013.594350][T13077] process_one_work+0x9c2/0x1840 [ 3013.596490][T13077] ? __pfx_process_one_work+0x10/0x10 [ 3013.598814][T13077] ? __pfx_hub_event+0x10/0x10 [ 3013.600922][T13077] worker_thread+0x5da/0xe40 [ 3013.602993][T13077] ? kthread+0x13a/0x450 [ 3013.604895][T13077] ? __pfx_worker_thread+0x10/0x10 [ 3013.607123][T13077] kthread+0x370/0x450 [ 3013.608907][T13077] ? __pfx_kthread+0x10/0x10 [ 3013.610979][T13077] ret_from_fork+0x754/0xd80 [ 3013.613043][T13077] ? __pfx_ret_from_fork+0x10/0x10 [ 3013.615322][T13077] ? rcu_is_watching+0x12/0xc0 [ 3013.617412][T13077] ? __switch_to+0x7b4/0x10c0 [ 3013.619470][T13077] ? __pfx_kthread+0x10/0x10 [ 3013.621549][T13077] ret_from_fork_asm+0x1a/0x30 [ 3013.623548][T13077] [ 3013.624836][T13077] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 3013.627899][T13077] CPU: 1 UID: 0 PID: 13077 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 3013.631978][T13077] Tainted: [L]=SOFTLOCKUP [ 3013.633830][T13077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 3013.638110][T13077] Workqueue: usb_hub_wq hub_event [ 3013.640316][T13077] Call Trace: [ 3013.641763][T13077] [ 3013.643015][T13077] dump_stack_lvl+0x100/0x190 [ 3013.644932][T13077] vpanic+0x552/0x970 [ 3013.646538][T13077] ? __pfx_vpanic+0x10/0x10 [ 3013.648087][T13077] panic+0xd1/0xe0 [ 3013.649529][T13077] ? __pfx_panic+0x10/0x10 [ 3013.651324][T13077] check_panic_on_warn.cold+0x19/0x34 [ 3013.653440][T13077] ? enable_work+0x2d1/0x320 [ 3013.655451][T13077] __warn.cold+0x191/0x2f8 [ 3013.657291][T13077] __report_bug+0x296/0x3d0 [ 3013.659298][T13077] ? enable_work+0x2d1/0x320 [ 3013.661325][T13077] ? __pfx___report_bug+0x10/0x10 [ 3013.663471][T13077] ? enable_work+0x2ca/0x320 [ 3013.665217][T13077] ? find_held_lock+0x2b/0x80 [ 3013.666830][T13077] ? __flush_work+0x928/0xcb0 [ 3013.668448][T13077] ? __flush_work+0x928/0xcb0 [ 3013.670022][T13077] report_bug_entry+0xe1/0x290 [ 3013.671714][T13077] ? enable_work+0x2d1/0x320 [ 3013.673579][T13077] handle_bug+0x1c9/0x2a0 [ 3013.675415][T13077] exc_invalid_op+0x17/0x50 [ 3013.677309][T13077] asm_exc_invalid_op+0x1a/0x20 [ 3013.679355][T13077] RIP: 0010:enable_work+0x2d1/0x320 [ 3013.681533][T13077] Code: ff e8 43 16 38 00 e8 de 7d af 09 e9 61 ff ff ff e8 34 16 38 00 90 0f 0b 90 e9 17 fe ff ff e8 26 16 38 00 48 8d 3d ff 95 0d 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 ba c5 a2 00 e9 [ 3013.689814][T13077] RSP: 0018:ffffc90003ebf3b8 EFLAGS: 00010087 [ 3013.692466][T13077] RAX: 000000000002cd03 RBX: 0000000000000000 RCX: ffffc90030841000 [ 3013.695435][T13077] RDX: 0000000000100000 RSI: ffffffff81ce5c3a RDI: ffffffff90dbf240 [ 3013.698319][T13077] RBP: ffff88806f793738 R08: 0000000000000007 R09: 0000000000000000 [ 3013.701467][T13077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3013.704493][T13077] R13: 1ffff920007d7e78 R14: ffff88806f793698 R15: 000000007fffffff [ 3013.707113][T13077] ? enable_work+0x2ca/0x320 [ 3013.708689][T13077] ? enable_work+0x2ca/0x320 [ 3013.710254][T13077] ? __pfx_enable_work+0x10/0x10 [ 3013.712046][T13077] ? __pfx___might_resched+0x10/0x10 [ 3013.713640][T13077] cancel_delayed_work_sync+0x96/0xf0 [ 3013.715440][T13077] thermal_zone_device_unregister+0x28e/0x4e0 [ 3013.717438][T13077] ? __pfx_shield_remove+0x10/0x10 [ 3013.719464][T13077] power_supply_unregister+0x10a/0x150 [ 3013.721643][T13077] shield_remove+0x75/0x130 [ 3013.723027][T13077] ? __pfx_shield_remove+0x10/0x10 [ 3013.724720][T13077] hid_device_remove+0xd1/0x270 [ 3013.726320][T13077] ? __pfx_hid_device_remove+0x10/0x10 [ 3013.728092][T13077] device_remove+0xcb/0x180 [ 3013.729674][T13077] device_release_driver_internal+0x42e/0x600 [ 3013.731723][T13077] bus_remove_device+0x22f/0x440 [ 3013.733445][T13077] device_del+0x376/0x9b0 [ 3013.734868][T13077] ? __pfx_device_del+0x10/0x10 [ 3013.736423][T13077] ? do_raw_spin_lock+0x128/0x260 [ 3013.738431][T13077] hid_destroy_device+0x19c/0x240 [ 3013.740097][T13077] usbhid_disconnect+0xa0/0xe0 [ 3013.741667][T13077] usb_unbind_interface+0x1dd/0x9e0 [ 3013.743449][T13077] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 3013.745326][T13077] ? __pfx_usb_unbind_interface+0x10/0x10 [ 3013.747147][T13077] device_remove+0x12a/0x180 [ 3013.748672][T13077] device_release_driver_internal+0x42e/0x600 [ 3013.750712][T13077] bus_remove_device+0x22f/0x440 [ 3013.752846][T13077] device_del+0x376/0x9b0 [ 3013.754736][T13077] ? __pfx_device_del+0x10/0x10 [ 3013.756868][T13077] ? kobject_put+0xb9/0x640 [ 3013.758877][T13077] usb_disable_device+0x367/0x810 [ 3013.761133][T13077] usb_disconnect+0x2e2/0x9a0 [ 3013.763211][T13077] hub_event+0x1d0c/0x4af0 [ 3013.765140][T13077] ? __lock_acquire+0x4a5/0x2630 [ 3013.767276][T13077] ? do_raw_spin_unlock+0x145/0x1e0 [ 3013.769442][T13077] ? __pfx_hub_event+0x10/0x10 [ 3013.771519][T13077] ? assoc_array_insert+0xfb0/0x32c0 [ 3013.773767][T13077] ? finish_task_switch.isra.0+0x200/0xb80 [ 3013.776197][T13077] ? process_one_work+0x80b/0x1840 [ 3013.778079][T13077] ? rcu_is_watching+0x12/0xc0 [ 3013.780173][T13077] process_one_work+0x9c2/0x1840 [ 3013.782358][T13077] ? __pfx_process_one_work+0x10/0x10 [ 3013.784387][T13077] ? __pfx_hub_event+0x10/0x10 [ 3013.786372][T13077] worker_thread+0x5da/0xe40 [ 3013.788333][T13077] ? kthread+0x13a/0x450 [ 3013.790007][T13077] ? __pfx_worker_thread+0x10/0x10 [ 3013.792104][T13077] kthread+0x370/0x450 [ 3013.793868][T13077] ? __pfx_kthread+0x10/0x10 [ 3013.795781][T13077] ret_from_fork+0x754/0xd80 [ 3013.797546][T13077] ? __pfx_ret_from_fork+0x10/0x10 [ 3013.799612][T13077] ? rcu_is_watching+0x12/0xc0 [ 3013.801662][T13077] ? __switch_to+0x7b4/0x10c0 [ 3013.803514][T13077] ? __pfx_kthread+0x10/0x10 [ 3013.805274][T13077] ret_from_fork_asm+0x1a/0x30 [ 3013.807131][T13077] [ 3013.809142][T13077] Kernel Offset: disabled [ 3013.810973][T13077] Rebooting in 86400 seconds..